Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File:                     B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier:          FYArDtHSxjY31/ZQGjyH81Q7iuDVFk6YRramwgfZqGo=
Subject key identifier:   72:80:1D:ED:DF:7A:58:7C:70:A2:4D:24:31:BB:9B:25:89:2D:90:AE
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       0796296D06D3230FE8502C32A8492E456FDC56EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number:          0768
Signing time:             Sat 06 Jun 2026 04:05:00 +0000
Manifest this update:     Sat 06 Jun 2026 04:00:00 +0000
Manifest next update:     Sun 07 Jun 2026 07:12:00 +0000
Files and hashes:         1: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: +9ZlUjFGDijH8b5+yzD1PMjjZdY4zblyEeoJ6+Yq2Hw=)
                          2: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: jYd4q98qoULIjdslO4Xk9d5wPUuNksXv3RR74JoHySc=)
                          3: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: CxXf2MZIKaUycFVCcvqJ0pu6d/h/wQOBy3gRZyXomCo=)
                          4: 3231332e3133392e37392e302f32342d3234203d3e20383334.roa (hash: AEIp6S70Gj6QR1Z2+hxR6CJde/WoBwWvkBWWBSrENhA=)
                          5: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: ddkCuB2C0zIUJCsHJnqd7PIRz+kBJmKHlIRYHjQdbXM=)
                          6: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: BWn7Fyc71HS3Qx09imcUTYAlGWvzW8ei/YZ4vwsjDbQ=)
                          7: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 0cchwdJLnMGDMK7R7/iy+DuTxrLqECv6lMhtpTOQuYc=)
                          8: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: CavYIrZSFhZfgGj2RhsuO+5dyTDRj7K4lMIF+18l9zg=)
                          9: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: imvON1NIsf5RjQ1xycG0mxKjYBudQ7J1/WlKrbcZWA4=)
                          10: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: OH/dvNiYWhw/SVHGvLSGkBdK+Kv4T+yJzETwI0tfRWM=)
                          11: 3231332e3133392e36352e302f32342d3234203d3e203331373135.roa (hash: DLaV1sFNoIrmOFdG/w3fReS7aY1M4x1P7DARyXDc6LA=)
                          12: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: JEuERYX+zmY14zA8MGqIEE+WMqqmJly2u5v4u9LNrmQ=)
                          13: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: iBZrpirngtNdiGfgs1e/5egkTxly/jS9DyH9F0hqP68=)
                          14: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: Dtv0Rk3S6CYGgeyc9Utp8OCStFSnf/fyoGbb6uGogTI=)
                          15: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: YdmUivZOiB+z6zp254vUpjVQR2cGS4KwZb90oR6ZVsM=)
                          16: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: r1pjD687zCx4FmCuXlGB5h73ScKoFYopGKhXlE6KUfY=)
                          17: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: DZpFNtIJlcLHmoaMDeodOmCa2IVlyKcWWOjWi093JRY=)
                          18: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: hksR2RFjNh00D4GQuid5Bvdsyv72DQ8eShLKWLWJ500=)
                          19: 3231332e3133392e36362e302f32332d3234203d3e20383334.roa (hash: gmWH6xBqv6iHkSUEaOI6mVn4z54Nuz/S3PczBQJukcU=)
                          20: 3231332e3133392e37352e302f32342d3234203d3e203231383430.roa (hash: v250iXtra+Z/KKJJC+rUD3hpGZMyGlwjTm5LLjqKRQ4=)
                          21: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: NJOowo5VUyyKfXn6pnDF/Tz4fWJEVeCOza5neOzvfGM=)
                          22: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: mu6JkT3fZoMbVctkEBjnrLNPWmpvwLKVK+IulCwBuzU=)
                          23: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: LCM/dunTFfsiENo1u3oy0PNFVtxRWwm9bEHFaBempdc=)
                          24: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: MNLBCqMmK/mGKn+arx3sMtp4e+thFoWGhi8ivlTfj0U=)
                          25: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (hash: 4avklCjVMylCEeeI60KDAm2gKF0wrDefWHJR4YHtwEk=)
                          26: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: AAU8mMA/8qMP5OVFvU4ND40XGDRIHcFw5zTvG37HSds=)
                          27: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: UJuRx/b7ZuN3xXtU9UGl0rZYUByVV4xgOSCJ1FXm9MY=)
                          28: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: e2HbFyb9jJVCReOUGrS06701Hln0j7R9pUtzgWwuBh4=)
                          29: 3231332e3133392e38302e302f32342d3234203d3e20383334.roa (hash: iLbvpS3GBJ9IZHCthfOkqaBx3pQEVB7YYvlDaNi6mwI=)
                          30: 3231332e3133392e38312e302f32342d3234203d3e203232343237.roa (hash: 5OXqLHfaMz4oBWakF90MFYsUXM1IOnkArdNd9qqILtU=)
                          31: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: ZNpXP0V7X1SLVOWk1qf9gaielEOXyCXpXadwIPelQAs=)
                          32: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: q68NFUI7+K9IVdqva472gOmrm41PWt/7B8GjMmAndrw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:96:29:6d:06:d3:23:0f:e8:50:2c:32:a8:49:2e:45:6f:dc:56:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Jun  6 04:00:00 2026 GMT
            Not After : Jun  7 07:12:00 2026 GMT
        Subject: CN=72801DEDDF7A587C70A24D2431BB9B25892D90AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:27:5a:2b:5a:04:17:a0:89:55:fc:ee:22:
                    ee:5a:b1:30:9f:0c:1a:87:df:c9:13:aa:8f:bf:90:
                    19:8c:a5:26:c0:86:47:2a:e0:03:61:bc:c6:09:df:
                    35:1e:0e:c5:53:83:3d:17:ca:0e:30:98:ee:a5:e9:
                    5d:36:00:e5:04:fd:c7:84:21:d4:0d:19:6d:32:af:
                    59:79:79:53:c3:b2:61:68:dc:a7:e0:88:9a:b7:ba:
                    c6:73:d8:57:1c:ba:8c:ce:3e:0c:12:71:f3:80:c6:
                    8c:e3:eb:0e:79:a6:45:4d:97:88:d7:7e:10:2a:08:
                    0c:44:f6:6a:45:c2:42:9d:ad:ec:c1:14:fa:40:5d:
                    24:81:1b:8e:0a:c8:8f:ac:cc:c6:b6:e6:0f:29:ef:
                    13:a4:26:67:a0:ec:4a:68:88:8a:6e:c6:e0:66:f5:
                    8f:e8:4a:fc:dd:4d:08:bc:f5:2c:93:3a:8e:5f:c1:
                    6f:21:c3:a8:d6:18:80:66:bf:03:bd:3a:15:4b:95:
                    f3:08:c2:fb:cd:a4:b7:33:90:9c:b4:28:3c:88:1f:
                    89:62:08:41:33:ca:3a:eb:e9:57:aa:5e:e3:fc:0a:
                    8b:d2:46:ee:7b:99:57:14:a0:b9:15:aa:83:66:5b:
                    9d:d0:66:df:db:11:66:11:e3:ff:8e:7c:b7:4d:0c:
                    b4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:80:1D:ED:DF:7A:58:7C:70:A2:4D:24:31:BB:9B:25:89:2D:90:AE
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b1:99:aa:ce:37:75:a4:ad:2e:93:aa:74:11:20:31:c8:d3:
         59:b2:c3:2d:83:41:b2:40:af:c7:d1:b8:fc:7f:4c:f8:04:14:
         4f:6f:4a:8b:30:6f:88:5b:cf:de:71:0c:94:d9:c2:ea:03:da:
         1c:22:6d:f5:08:59:6d:6a:a3:1a:84:ec:62:ba:45:ef:03:1d:
         32:f8:ac:54:32:20:fa:43:d4:4d:0e:53:5d:be:e7:a4:00:b8:
         94:ad:57:51:44:6a:37:01:17:02:57:03:db:00:c4:fe:08:aa:
         85:7f:d8:3c:40:df:d8:33:2e:93:5a:da:a5:d9:86:5f:8e:ab:
         94:ec:83:55:b3:e8:71:3a:6c:67:76:d6:75:41:85:23:45:a8:
         99:f4:b8:14:84:42:90:f2:40:76:dc:db:d6:53:49:a1:72:b3:
         b0:9d:a7:d7:47:25:2e:9a:40:61:1c:1d:fc:71:24:9e:31:0c:
         dc:35:37:8d:50:60:9c:bc:c5:00:d9:71:3b:d4:10:a5:1a:bc:
         45:5c:36:20:a8:dc:ef:fd:73:99:30:d8:a1:8d:90:2d:66:19:
         9b:a9:e4:f4:a8:9f:fd:b7:06:83:a1:eb:6c:b8:06:1c:b1:c8:
         13:5c:ca:a3:3a:4b:7a:e0:c2:bf:13:1a:e2:8d:09:1c:e5:ea:
         8a:56:92:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:11:29 2026 by rpki-client