Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft
File:                     5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft (raw, json)
Hash identifier:          CsNzHyBABLP1U/rYFgjc99EYM6T4NHkvX0Lgl3La24M=
Subject key identifier:   F5:77:3E:89:09:F1:16:B4:CF:DA:84:C8:55:E4:0F:96:19:75:3C:B0
Authority key identifier: 5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE
Certificate issuer:       /CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE
Certificate serial:       06CDB280002D1478C2B13E2681189B5C97726E0C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft
Manifest number:          29
Signing time:             Mon 17 Aug 2026 09:15:57 +0000
Manifest this update:     Mon 17 Aug 2026 09:10:57 +0000
Manifest next update:     Tue 18 Aug 2026 12:24:57 +0000
Files and hashes:         1: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl (hash: zHso4bgOF1tLh0eYGrf5mZhaNsfF8zGpgm/i+XYOTuM=)
                          2: 326131333a633863313a3a2f33322d3332203d3e20323135383238.roa (hash: IlMOSvLFq4VX7HZnUVxC1UdUITR3M7tj8HQPD7Fh/uM=)
                          3: 326131333a633863313a3131313a3a2f34382d3438203d3e20323135383238.roa (hash: 2lS2H8IBJxOyjnm2BZrwuj7Pk6jZjmGW1zgNbopUg+c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 07:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cd:b2:80:00:2d:14:78:c2:b1:3e:26:81:18:9b:5c:97:72:6e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE
        Validity
            Not Before: Aug 17 09:10:57 2026 GMT
            Not After : Aug 18 12:24:57 2026 GMT
        Subject: CN=F5773E8909F116B4CFDA84C855E40F9619753CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c9:be:45:fa:c5:89:90:16:9f:62:bb:ba:b0:
                    bc:c8:06:4f:f5:bb:d9:1a:7a:33:a7:56:bf:b5:f5:
                    fc:97:47:1a:17:c6:8f:4a:70:64:58:7e:0a:71:09:
                    ad:26:b9:cb:f9:b7:f6:f5:36:9e:6c:a5:cb:03:b8:
                    3d:de:ae:cc:83:35:d2:84:72:77:1a:f0:71:37:fe:
                    c0:93:75:14:75:42:73:c7:1b:72:66:40:0a:e5:b8:
                    1e:e4:ab:2a:7b:94:04:bc:9d:4c:fc:69:33:00:36:
                    ec:ce:e0:6a:e4:43:05:fe:8a:cc:eb:06:72:c3:1e:
                    aa:92:f3:84:56:35:ca:d7:dc:39:e8:c7:c5:48:8e:
                    52:1c:fe:21:3c:11:2d:06:35:4a:b9:64:27:d7:1e:
                    e7:f8:97:55:46:4a:30:93:c1:10:a1:38:49:88:41:
                    9f:37:66:46:38:b0:40:da:86:b3:9f:df:df:ec:74:
                    83:05:be:29:54:e4:05:c3:ad:55:40:d1:ec:85:b0:
                    0a:2a:ff:8b:31:5c:1f:80:f9:8b:53:bc:ab:62:e2:
                    96:d6:4e:87:7e:b6:02:e0:5c:04:a2:27:f0:f6:dd:
                    31:d1:73:ab:1e:1a:ac:a8:14:f7:43:51:4a:a9:3e:
                    e9:5d:6e:65:d2:3b:81:9b:cb:f3:e5:b5:1b:91:3c:
                    bd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:77:3E:89:09:F1:16:B4:CF:DA:84:C8:55:E4:0F:96:19:75:3C:B0
            X509v3 Authority Key Identifier:
                keyid:5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8f:0e:e9:ce:70:ec:9b:5c:46:44:63:aa:79:9b:c9:75:eb:
         50:9c:79:21:d2:1e:86:12:88:d7:10:27:cc:3e:22:09:56:cb:
         0c:14:03:b3:e1:68:b4:5c:6c:08:a2:8a:6c:b7:7d:06:7d:47:
         50:ee:c6:2f:bf:7c:86:05:53:97:55:20:49:86:ce:1a:03:51:
         7e:f8:5b:ee:8f:00:dc:e8:6c:91:33:9f:da:78:f7:68:9e:c4:
         0c:dc:95:ec:e3:02:59:7d:a3:82:03:5e:23:ce:88:54:5a:29:
         82:fe:29:8a:22:72:1c:98:30:8d:83:83:41:1c:18:b6:f7:17:
         87:e2:87:b5:0d:f7:ee:56:ee:d6:41:8f:a5:25:cf:cb:00:4d:
         7d:04:b2:d6:43:fa:c7:3f:d8:17:c0:ac:9f:65:c6:9a:76:1f:
         7e:5b:ab:19:f9:aa:5d:b6:3e:e9:25:7d:62:99:18:f7:2a:99:
         0e:7e:e2:6a:e8:dc:a2:79:9a:99:ec:4d:1c:67:f7:b5:12:e5:
         e1:fd:6a:ad:2c:57:2c:d1:29:0b:61:c2:89:c6:9f:4a:e6:0d:
         7e:91:16:17:f1:c6:6c:2a:0c:1b:ba:21:64:18:ca:c7:49:21:
         f6:61:1a:70:23:53:23:07:77:b7:39:01:33:25:f8:f2:d2:b4:
         12:bd:ca:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 01:05:14 2026 by rpki-client