Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
File:                     B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json)
Hash identifier:          xP05pgW872snI9e8cZm+Tmh3xbUcgFS2wNAHvWh5Ee4=
Subject key identifier:   93:57:54:68:BD:B4:86:04:01:3C:AA:A0:66:0B:47:E3:45:1F:4F:E8
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Certificate issuer:       /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial:       136696FCA20F838C1F1A56BBB411E627227AAFC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
Manifest number:          04B7
Signing time:             Fri 13 Mar 2026 14:22:40 +0000
Manifest this update:     Fri 13 Mar 2026 14:17:40 +0000
Manifest next update:     Sat 14 Mar 2026 17:59:40 +0000
Files and hashes:         1: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=)
                          2: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=)
                          3: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=)
                          4: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: 4Wx4y9L2jgHRh52ywYh2pT7ff5F5vkKW/DEn33FwVfE=)
                          5: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=)
                          6: 39332e39352e3131322e302f32342d3234203d3e20333937393233.roa (hash: xW60VF00UJ78V2ZgHJcPViZgzWFpqx2V/5GdcswFg/k=)
                          7: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=)
                          8: 39332e39352e3131372e302f32342d3234203d3e20313534343032.roa (hash: 1o9u3wNFNEpcO6mQb06aCfzikqFltLXXW8AwfLeTIXI=)
                          9: 39332e39352e3131332e302f32342d3234203d3e20343032303434.roa (hash: AtOuXGHz2DTlb1k/SfCWhLHsL8OPE1HWzZC1wZunOVo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 17:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:66:96:fc:a2:0f:83:8c:1f:1a:56:bb:b4:11:e6:27:22:7a:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
        Validity
            Not Before: Mar 13 14:17:40 2026 GMT
            Not After : Mar 14 17:59:40 2026 GMT
        Subject: CN=93575468BDB48604013CAAA0660B47E3451F4FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c3:ce:1a:c7:d9:db:d4:2f:8e:6c:6b:7a:4d:
                    ac:c5:fd:c0:21:0a:60:93:58:bc:38:e1:df:b5:56:
                    67:ae:9b:1c:71:9d:15:2b:7c:e6:73:ca:f4:57:91:
                    3b:0e:ca:7e:ce:5d:8b:64:e7:35:ff:54:5d:c3:c8:
                    1e:27:e3:09:bc:3b:68:4c:c6:e2:7c:84:0a:90:da:
                    e9:5a:44:45:26:6d:27:fa:5e:ba:88:f8:d3:1a:fe:
                    88:85:72:1b:13:16:07:2c:cd:2a:fb:bf:c5:37:fc:
                    65:c9:27:c8:5f:83:51:ff:45:f7:da:b7:6d:bb:68:
                    a7:0a:39:bb:ee:e2:bc:fe:f6:29:7c:6e:12:50:6b:
                    a7:a8:86:c7:7f:07:3b:3c:3d:0b:a5:31:43:7e:58:
                    ff:71:c1:f1:42:d1:75:28:19:6a:82:08:80:0c:a6:
                    8e:29:2b:d4:4b:65:d0:da:96:a2:29:af:c4:df:22:
                    8c:88:11:b7:8e:b5:67:0c:4b:8d:08:f7:fd:2d:a5:
                    58:27:ee:29:5a:61:e7:82:65:eb:39:3a:9f:6f:c5:
                    fa:fd:02:de:44:0e:88:b8:64:3f:23:48:82:9a:71:
                    c8:8a:de:a9:be:ef:3a:92:4c:ba:cb:0e:cf:89:bb:
                    a4:81:a1:5a:de:be:a8:25:8c:51:96:d1:75:7e:4b:
                    ee:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:57:54:68:BD:B4:86:04:01:3C:AA:A0:66:0B:47:E3:45:1F:4F:E8
            X509v3 Authority Key Identifier:
                keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:69:c8:b8:8f:bf:17:81:da:0a:31:f5:e9:88:18:68:4e:a9:
         67:68:12:21:d3:84:3f:da:40:5e:11:51:a0:1e:20:5f:a2:5d:
         87:70:9a:34:1c:e3:c9:e8:75:94:33:60:da:82:55:48:81:d0:
         73:99:3d:fa:1e:dc:7e:53:16:6a:fb:c4:04:c8:63:a1:74:dc:
         65:5e:87:fb:89:57:e6:fd:d4:e7:57:6a:64:de:6d:89:8a:43:
         c7:80:89:b5:9a:f5:f3:52:7f:8a:b0:32:24:50:00:a2:56:c9:
         e2:b8:39:e5:63:8d:3d:71:06:3c:73:19:54:30:29:ac:b6:e9:
         93:1e:97:06:3d:5a:a3:ab:30:78:9e:ca:fb:ab:5c:99:12:d1:
         c9:19:b0:7e:90:12:0e:6c:0a:65:59:99:fc:07:4c:b6:c8:1c:
         54:ca:35:32:4e:d5:d2:0c:a4:1f:9b:fe:c9:65:f7:f2:c3:a4:
         14:6e:ee:0c:34:4f:74:19:04:ce:f1:d9:ee:9c:1c:eb:5f:7a:
         c3:1e:82:a7:2a:dd:f4:ff:07:3e:3c:31:fe:68:00:74:99:5e:
         fc:10:2f:01:5f:ed:64:ff:b3:1f:00:40:dd:c4:75:e9:58:60:
         cf:84:f0:a4:35:76:95:86:bc:a9:8b:bb:4e:8f:9d:e2:39:d5:
         86:9a:56:d4
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUE2aW/KIPg4wfGla7tBHmJyJ6r8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh
NmM3MTMyZTAeFw0yNjAzMTMxNDE3NDBaFw0yNjAzMTQxNzU5NDBaMDMxMTAvBgNV
BAMTKDkzNTc1NDY4QkRCNDg2MDQwMTNDQUFBMDY2MEI0N0UzNDUxRjRGRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLw84ax9nb1C+ObGt6TazF/cAh
CmCTWLw44d+1VmeumxxxnRUrfOZzyvRXkTsOyn7OXYtk5zX/VF3DyB4n4wm8O2hM
xuJ8hAqQ2ulaREUmbSf6XrqI+NMa/oiFchsTFgcszSr7v8U3/GXJJ8hfg1H/Rffa
t227aKcKObvu4rz+9il8bhJQa6eohsd/Bzs8PQulMUN+WP9xwfFC0XUoGWqCCIAM
po4pK9RLZdDalqIpr8TfIoyIEbeOtWcMS40I9/0tpVgn7ilaYeeCZes5Op9vxfr9
At5EDoi4ZD8jSIKacciK3qm+7zqSTLrLDs+Ju6SBoVrevqgljFGW0XV+S+5ZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUk1dUaL20hgQBPKqgZgtH40UfT+gwHwYDVR0j
BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk
MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti
SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k
YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC
NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWnIuI+/F4HaCjH16YgY
aE6pZ2gSIdOEP9pAXhFRoB4gX6Jdh3CaNBzjyeh1lDNg2oJVSIHQc5k9+h7cflMW
avvEBMhjoXTcZV6H+4lX5v3U51dqZN5tiYpDx4CJtZr181J/irAyJFAAolbJ4rg5
5WONPXEGPHMZVDAprLbpkx6XBj1ao6sweJ7K+6tcmRLRyRmwfpASDmwKZVmZ/AdM
tsgcVMo1Mk7V0gykH5v+yWX38sOkFG7uDDRPdBkEzvHZ7pwc6196wx6Cpyrd9P8H
Pjwx/mgAdJle/BAvAV/tZP+zHwBA3cR16Vhgz4TwpDV2lYa8qYu7To+d4jnVhppW
1A==
-----END CERTIFICATE-----
Generated at Sat Mar 14 06:46:00 2026 by rpki-client