Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
File:                     45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json)
Hash identifier:          Jx89aOWOUKL+PxMlsoJhph/0Po+a6qMTfLnlBj2DAxk=
Subject key identifier:   9D:A5:F0:6E:24:34:80:A0:C7:9D:EA:A7:4A:06:F7:12:F5:F1:44:24
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Certificate issuer:       /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial:       6109C7820D039A55762C75DE264A330F4A9D5E82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
Manifest number:          0299
Signing time:             Fri 19 Jun 2026 23:46:04 +0000
Manifest this update:     Fri 19 Jun 2026 23:41:04 +0000
Manifest next update:     Sun 21 Jun 2026 03:12:04 +0000
Files and hashes:         1: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: G3lexskVnEeBYmPPso3iyXi1h6ZYWwRd6C4mpCWn2kU=)
                          2: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: ipi0vAcQv2svi+muK542zHAIeeVH19r0pk+yh9NadUY=)
                          3: 3139342e32362e32312e302f32342d3234203d3e2036303739.roa (hash: C+pqIVBYxtX1Vf4vHbq3YBGNZtxuHmXXj5v6GlxMx88=)
                          4: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: 2GU98PVW8A06wPHFP07dWrMXh03+0FNfaArisd+625g=)
                          5: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: 5R59EysS9tL6UTIvemaJCrtszj6x6/cuKApXJ2KN9Lk=)
                          6: 3139342e32362e32312e302f32342d3234203d3e2035363530.roa (hash: p78KH8kgcBRXXFcw1mzLGQ6wEbtzI8eA56dk/vajAYc=)
                          7: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 5y1BpEcUWIqqauwo2u2KJKPFMCa0JPAhvtiDqGTVDHw=)
                          8: 3139342e32362e322e302f32342d3234203d3e2035363530.roa (hash: ZRXlceutGr+HdF7VzH6TN3nc+64+GLWiw3p0vss7mZQ=)
                          9: 3138382e3231342e3233322e302f32332d3234203d3e2035303635.roa (hash: x3PmGOoet0cDs7+uuyuNJtaOTgdNjDt0p0iGeQg4oNo=)
                          10: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: A3pVDR25ByDI5MeiQGGyctYtEVKjmHED5jwJjMlcbk4=)
                          11: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: ZWyLSTcE9mAQsDVjLP4sbforwwRF0gy7YQkGUCm2B9s=)
                          12: 37372e38312e37392e302f32342d3234203d3e2035363530.roa (hash: chtAnXZi5q6GRUxpR5xO2uIiP96tdCrOBTIeDsoa8hE=)
                          13: 3139332e3234362e3136342e302f32342d3234203d3e20323134343332.roa (hash: dY1TZgYtt2XOIsVBxW8tOuYVl+qsqJFS06ZKgYUYzuc=)
                          14: 3231322e34372e33362e302f32342d3234203d3e2039333138.roa (hash: ZVXQWb7gEfqAkq16Ky0ZSqFCIZ2vC/M8/7YAMrFhXy0=)
                          15: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: MdPKw7OONGYXcOZWO/o2hEi1vtA1V+k+wu8N5c3I5aE=)
                          16: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (hash: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=)
                          17: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: QouC5FWUBHtZ4E7QwYAk/YLY1LKZrC4sUpRgQ8vSbSQ=)
                          18: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: 39u3b1aPs44ID+slKDmXnVmqBOUo9+ShXVBFlRqmNOw=)
                          19: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: wPa88HthyMje0FC4DyK9XcGEOLxJkylfsOcQDqr+i80=)
                          20: 37372e38312e37392e302f32342d3234203d3e2036303739.roa (hash: u0uKpeiU5ZpBWUsg2bqVMuJ+xilyXQyIO7XWxfYa1xw=)
                          21: 3139342e32362e322e302f32342d3234203d3e2036303739.roa (hash: TjtnNTn7FpO9sB3IOcWEqbyB3qNOxAYh9NFcoqi1238=)
                          22: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: Tv5q+rfM3afhLe0aBDFGLWT8PXWC4GLzMQF3H6VLFL8=)
                          23: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: xdM7OBZ/9TbpR6di66FXGgK7azfT3ftRTjEe6Yt/SjQ=)
                          24: 3139342e32362e32312e302f32342d3234203d3e20343031383338.roa (hash: W6OrrdK1OeSj0zhiikePRhbHjS9VOD7qyg5G4TQyO4k=)
                          25: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: kBcBHXRMQfVwN+zg5BZ4LCUyMZ6cS1mQp15ihx19Joc=)
                          26: 3139342e32362e332e302f32342d3234203d3e20343031313930.roa (hash: LIKAmocMMAfJYEkBfDTJGvC18ZVuFHLl0Op0JOVO1hY=)
                          27: 3139342e32362e322e302f32342d3234203d3e20343031383338.roa (hash: hww+5Hf4jmFo7Au813kPo2lBtFDkf7ALOlVDrCFDow8=)
                          28: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: 5I0vOu7kvIMlEY7Sq8XZtvSWHaZxS4B46RvJVyxx8WI=)
                          29: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: d5TxhwAkeXwrF6uRbXxfjKGJfxHDWIa7sLTALcjfvN4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 19:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:09:c7:82:0d:03:9a:55:76:2c:75:de:26:4a:33:0f:4a:9d:5e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
        Validity
            Not Before: Jun 19 23:41:04 2026 GMT
            Not After : Jun 21 03:12:04 2026 GMT
        Subject: CN=9DA5F06E243480A0C79DEAA74A06F712F5F14424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a2:9a:85:23:b8:8e:20:cd:05:c1:49:7f:52:
                    94:a1:fa:2d:0e:27:fc:91:95:ac:a6:20:25:f2:e1:
                    c4:a1:9f:70:61:ed:6b:b3:92:7c:32:f1:41:b6:11:
                    42:1e:fb:af:a5:72:88:47:49:88:f0:d8:83:57:82:
                    d1:42:2b:97:06:23:49:1a:30:2b:8b:2c:6f:69:aa:
                    8b:22:71:a3:db:80:c3:2c:c5:c8:aa:27:66:05:30:
                    0a:44:3f:b7:4e:22:4e:98:13:78:2d:ac:63:8d:b3:
                    d4:04:70:dc:05:78:d9:a0:19:02:6e:e9:d5:3e:e4:
                    12:7b:8d:56:df:5e:86:78:c2:13:27:2b:31:07:95:
                    33:f8:30:6b:b6:94:ce:c2:e5:c1:c9:76:86:eb:95:
                    45:e4:bf:95:fc:d2:4c:8a:35:a5:1a:39:b8:cb:7a:
                    f3:50:49:ec:26:62:93:0f:2f:78:02:b7:fd:10:f3:
                    8a:1b:c9:4b:b4:f0:80:dd:2c:98:17:b0:d9:36:7a:
                    79:47:89:60:87:e9:80:a2:42:55:fa:35:49:ef:f7:
                    9b:61:42:ce:c7:b8:ff:3f:94:35:53:af:64:57:81:
                    7c:da:f9:cb:51:af:8f:8b:b5:d2:67:55:0c:b0:ee:
                    7d:e5:3e:3f:ac:51:bd:a0:7c:79:b1:39:db:2f:33:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A5:F0:6E:24:34:80:A0:C7:9D:EA:A7:4A:06:F7:12:F5:F1:44:24
            X509v3 Authority Key Identifier:
                keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e9:4b:85:54:22:52:af:de:2e:b1:14:98:5b:bd:dd:d5:a1:
         7c:83:ea:34:0f:ba:75:00:13:85:03:d2:cd:92:23:cd:87:20:
         e9:a8:58:a5:44:b4:55:60:d7:b4:7a:17:83:33:34:5c:2d:47:
         ad:1d:79:54:0b:3f:cd:6e:95:3e:09:04:68:a9:0d:94:30:0a:
         03:78:17:ea:0b:8d:fc:4e:1a:71:71:71:5b:65:b4:5e:d9:63:
         fd:07:70:de:bb:ee:d8:9e:cb:e3:a9:a0:06:cc:df:29:48:84:
         5b:02:12:7c:f4:43:88:e8:14:c8:b9:67:38:79:91:d3:0e:19:
         0b:24:e3:07:e4:ec:fb:df:56:d2:17:53:62:03:ea:20:87:0b:
         0d:4c:bb:c4:c6:44:d3:b2:57:6e:ef:60:c0:e7:54:5e:0b:8c:
         eb:ce:82:90:41:82:41:ff:c9:3c:54:1d:dc:19:d9:d8:d9:46:
         51:6d:3b:02:85:30:f4:cf:dc:bb:97:0d:92:53:52:7e:3f:ea:
         5d:20:01:bd:f8:59:fb:c9:7a:6b:a1:aa:94:ff:70:92:36:5e:
         9a:ad:c2:50:81:8c:c1:ef:9e:17:33:db:92:b1:eb:d9:af:6c:
         72:16:a7:56:58:06:39:58:5f:5f:5b:c0:0e:50:d0:2f:32:30:
         d4:98:68:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:14:37 2026 by rpki-client