Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
File:                     0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft (raw, json)
Hash identifier:          KJZhzDkiUtLeJ/9qYVRyyK4ESbTCLlfULgipdNIa2T4=
Subject key identifier:   C3:D1:2D:E0:ED:E2:BC:0F:82:70:12:78:44:E9:C6:FE:CF:4B:E3:84
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       209A34347D8667E2E6D447E065F4E43A088750CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
Manifest number:          0113
Signing time:             Sun 19 Apr 2026 00:48:40 +0000
Manifest this update:     Sun 19 Apr 2026 00:43:40 +0000
Manifest next update:     Mon 20 Apr 2026 02:04:40 +0000
Files and hashes:         1: AS5511.roa (hash: 9Lpz3vWambDfir2U9nMHvILjWJfJ4pN38Uiol2iAa8c=)
                          2: AS215152.roa (hash: 6LScDx7kF3NGnXxTdZzKdup6DYJqX3CdCSHZzimuZsM=)
                          3: AS215294.roa (hash: VvAiV+abd+ReUgjBjgGnGfiRXW5nZvS6P/Ha8hlUR5w=)
                          4: AS6762.roa (hash: Vu+D6JbdLJtN4Ee+MwonYxkQCs/xr0NFEVCWKd40/a0=)
                          5: AS834.roa (hash: oCaX0dDOLUA9ULlNqdcbFY4PQ53vajSg8KKJ8xRarT0=)
                          6: AS8881.roa (hash: HPSWUYcly9koQ7aezylK6IEGQ3lumWJSmByAjilqIic=)
                          7: AS5650.roa (hash: bxbjLrBijnytMR4nVGQbScnmEV/ZJIktD51pSUBSvA4=)
                          8: AS22773.roa (hash: xKAnLfNKj4WvvERZEeSL1oPfLB5T+WeGICCaK3DJS4I=)
                          9: AS397373.roa (hash: r+qw0cVYugjHnw1tgvUhWJcPsIoXy8bAD7TEtQYDIsQ=)
                          10: AS203054.roa (hash: Fd/rHYEseOg5059B+hSx9oFHFGdIatiS9Rb1gDDe62s=)
                          11: AS49915.roa (hash: SujYnOIzovlNLxuZUPyjczGbrROeJTekzPrbFZqzxwA=)
                          12: AS6079.roa (hash: DGJHW90tEq7dZlZkHKoW+evT+/RQ3D7/+5qY6j4P0LQ=)
                          13: AS812.roa (hash: zA57qcCPz1Pt09TdlnMO+GKenNotdwFnSlnVFuU1Vz8=)
                          14: AS214025.roa (hash: izGyAX9SrpYP8l1LF/aXpFD+jrfGA595favEyW04Mho=)
                          15: AS2856.roa (hash: bzi4fBIiC8oZyaFV/XK2JSHPRUDV8oR1+3ILhGGgfDA=)
                          16: AS18046.roa (hash: VpmANte7Bi37Q5riEMTy8brveOi7EUtQsEx5DJuASGM=)
                          17: AS213607.roa (hash: BBZmTHkX/TuFdr29cTFthZmS2BW/5qZeQ1xKol6JrsA=)
                          18: AS42689.roa (hash: kwlmfcXyVOBI1+ZcCrXoz2SHftfQVRDllPtBRfMglyY=)
                          19: 0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl (hash: pBuX8ZQA5etljXHSM2hiY0gTSBw0X1v8BP4Fmu0oiTI=)
                          20: AS11426.roa (hash: QoJp39oD8IlrC+55sf9pU7tKSUjmscFCpWvJTqGfbAM=)
                          21: AS7029.roa (hash: wkUsCOPjvO7McHsjxBjs++SB/soSU85PnQmns6pZ5cA=)
                          22: AS215935.roa (hash: J/OeWUFsvxXv8FLznTTFyQA0niwajEGqY9IDDNzOUaQ=)
                          23: AS203048.roa (hash: pv20YSx0OQKQ7on/PjHcdXKoHwnP3bi6U88RooKn4VU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9a:34:34:7d:86:67:e2:e6:d4:47:e0:65:f4:e4:3a:08:87:50:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Apr 19 00:43:40 2026 GMT
            Not After : Apr 20 02:04:40 2026 GMT
        Subject: CN=C3D12DE0EDE2BC0F8270127844E9C6FECF4BE384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:89:ce:67:0e:04:97:7e:0a:b6:bd:b4:da:
                    c6:40:55:ad:f8:8d:cb:90:e0:ff:09:9a:06:56:99:
                    b7:f3:00:3c:77:8e:77:3f:88:51:ef:c7:b0:15:62:
                    05:c8:56:35:f4:56:0b:3f:43:fb:6b:41:63:0d:6c:
                    f3:aa:99:f4:4a:de:a8:72:d1:d5:5e:b0:fd:38:93:
                    63:66:d1:24:1d:fe:c5:79:29:1a:00:a3:3e:ac:81:
                    82:3e:9e:d8:75:ef:7b:d5:97:27:eb:4c:54:dc:6e:
                    3e:14:81:a8:74:7e:06:c5:57:a5:5a:d5:ad:fa:d0:
                    6c:c9:52:c0:b5:66:2d:29:23:97:52:a9:6e:81:4e:
                    b9:ec:cc:45:c5:44:2e:7d:a1:02:25:b1:cc:2a:05:
                    bb:ab:c0:0e:85:6e:49:ad:c0:60:cc:63:ea:ac:e5:
                    7e:c0:f4:f2:ef:9a:1e:fa:1e:b7:ac:c3:fe:64:a0:
                    d1:8c:90:25:4f:91:84:9b:99:e6:10:f8:6f:ff:84:
                    fa:09:b5:4a:75:ce:64:3d:41:f8:6d:c2:e4:c5:d2:
                    26:d4:bf:b6:4a:93:ef:03:52:93:07:22:30:d8:5b:
                    4d:5d:f6:57:78:9a:23:b1:93:5c:69:61:99:f4:88:
                    a9:8a:72:8e:34:4a:92:35:49:7f:92:fc:f2:27:13:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D1:2D:E0:ED:E2:BC:0F:82:70:12:78:44:E9:C6:FE:CF:4B:E3:84
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ba:47:cc:cd:d6:f3:af:25:ac:61:32:01:44:ea:36:de:d5:
         6e:b0:c8:37:18:87:56:92:fd:74:ed:5e:7f:92:2e:28:7c:81:
         82:54:6b:39:69:f5:d7:4f:63:75:db:a3:84:15:ef:5d:7b:98:
         b9:ed:d7:06:4d:4e:8b:1c:05:a3:00:7b:d9:8b:20:3a:36:a4:
         24:97:8f:b2:a7:54:07:4c:9f:c6:f4:db:90:a3:bb:6d:57:bb:
         eb:7b:ed:f5:07:4a:ad:3a:35:e0:cb:22:5b:49:45:7a:7a:82:
         4a:60:51:88:b0:60:da:01:c5:60:95:bf:9d:ce:e2:c5:3b:c1:
         88:c2:68:e5:18:ff:57:10:88:39:04:c8:70:56:47:b8:09:72:
         6e:ba:ba:a4:57:35:c6:b5:55:45:3f:f5:91:48:a2:1d:35:f1:
         15:8e:ce:c9:f9:02:4b:f0:60:f2:cc:00:c0:8a:07:4e:74:61:
         c3:82:3c:06:c0:8a:b3:94:15:56:b1:e9:95:0a:c3:ba:18:e7:
         e8:3b:6a:50:e1:12:f0:d2:00:01:b8:d6:e8:ad:c1:72:bb:81:
         c9:98:a0:0a:c8:d5:f6:32:2e:35:85:1c:1c:6a:4d:76:3b:23:
         be:9a:de:ae:39:82:69:bf:45:53:c6:50:d8:fe:b2:aa:99:47:
         fd:9a:c0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 03:21:32 2026 by rpki-client