Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File:                     B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier:          1XXM4y3RE6EPCedPenaIksDPzZ7AQn42+0yUvEsavLs=
Subject key identifier:   15:06:F8:52:BC:09:CC:DD:7B:CA:50:E9:E0:69:52:89:EA:ED:BB:58
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       1D92BE7BC0838D21F4DE5761AE1B24E140CE09D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number:          07EA
Signing time:             Fri 04 Sep 2026 03:10:25 +0000
Manifest this update:     Fri 04 Sep 2026 03:05:25 +0000
Manifest next update:     Sat 05 Sep 2026 04:16:25 +0000
Files and hashes:         1: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: JEuERYX+zmY14zA8MGqIEE+WMqqmJly2u5v4u9LNrmQ=)
                          2: 3231332e3133392e37392e302f32342d3234203d3e20323139333934.roa (hash: cZZDfh4b1GtBTnTClSPcJjjghjB2nMfOyud4qBtt4PQ=)
                          3: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: MNLBCqMmK/mGKn+arx3sMtp4e+thFoWGhi8ivlTfj0U=)
                          4: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: UJuRx/b7ZuN3xXtU9UGl0rZYUByVV4xgOSCJ1FXm9MY=)
                          5: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: imvON1NIsf5RjQ1xycG0mxKjYBudQ7J1/WlKrbcZWA4=)
                          6: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: mu6JkT3fZoMbVctkEBjnrLNPWmpvwLKVK+IulCwBuzU=)
                          7: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: CxXf2MZIKaUycFVCcvqJ0pu6d/h/wQOBy3gRZyXomCo=)
                          8: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: VYzgKLK7MXduLD/erKCxZ+qm7C6qg55UqcvJdRa76GA=)
                          9: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: +9ZlUjFGDijH8b5+yzD1PMjjZdY4zblyEeoJ6+Yq2Hw=)
                          10: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: YdmUivZOiB+z6zp254vUpjVQR2cGS4KwZb90oR6ZVsM=)
                          11: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: 7Oj+hP0YV7LQnpCPJh2SU1zRRPNxpiFixVYZv1ihuBc=)
                          12: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: iBZrpirngtNdiGfgs1e/5egkTxly/jS9DyH9F0hqP68=)
                          13: 3231332e3133392e36362e302f32342d3234203d3e20313432323430.roa (hash: 5t9JgBLfbSHlr0AtP6HJsmpn/znBmM3oZbMVnSup99Y=)
                          14: 3231332e3133392e37392e302f32342d3234203d3e20323139333933.roa (hash: WQjC8RWC2PKreXWfRiyeO0KVcM/bEXAR59hsyPiTN1k=)
                          15: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: CavYIrZSFhZfgGj2RhsuO+5dyTDRj7K4lMIF+18l9zg=)
                          16: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: YJQzrkCNdtcHF03SEJIbUA14cqWLzrSdWGFwfzoZWw8=)
                          17: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 0cchwdJLnMGDMK7R7/iy+DuTxrLqECv6lMhtpTOQuYc=)
                          18: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: lCZOT7CUw//G2wSUIRSPoEnVhHBxs955MQWzeQPvQMk=)
                          19: 3231332e3133392e36352e302f32342d3234203d3e20383334.roa (hash: aBJ7OoaXb6rDbnpVY6odGndz/aaVwq/3W9uHVst1MOE=)
                          20: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: DZpFNtIJlcLHmoaMDeodOmCa2IVlyKcWWOjWi093JRY=)
                          21: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: ZNpXP0V7X1SLVOWk1qf9gaielEOXyCXpXadwIPelQAs=)
                          22: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (hash: 4avklCjVMylCEeeI60KDAm2gKF0wrDefWHJR4YHtwEk=)
                          23: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: e2HbFyb9jJVCReOUGrS06701Hln0j7R9pUtzgWwuBh4=)
                          24: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: BWn7Fyc71HS3Qx09imcUTYAlGWvzW8ei/YZ4vwsjDbQ=)
                          25: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: ddkCuB2C0zIUJCsHJnqd7PIRz+kBJmKHlIRYHjQdbXM=)
                          26: 3231332e3133392e37352e302f32342d3234203d3e20383334.roa (hash: qufxABzYtPVqJhKbvB3PBmop5jMgkyRVa/W0Bx1F4s4=)
                          27: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: hksR2RFjNh00D4GQuid5Bvdsyv72DQ8eShLKWLWJ500=)
                          28: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: jYd4q98qoULIjdslO4Xk9d5wPUuNksXv3RR74JoHySc=)
                          29: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: 2qZQfOcJdShx8dQdW3jSDzAf+zGAwRn+nvT7o3J4pwE=)
                          30: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: xh9MbcQaOVI91ITKhlmBWnlkj2aoxPKUoH1PWhneuhw=)
                          31: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: OH/dvNiYWhw/SVHGvLSGkBdK+Kv4T+yJzETwI0tfRWM=)
                          32: 3231332e3133392e36372e302f32342d3234203d3e20313437323831.roa (hash: vwViVlFTDiI0dOCPl+PDo5ipN2yW3G8ItQyNk/w7+dI=)
                          33: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: NJOowo5VUyyKfXn6pnDF/Tz4fWJEVeCOza5neOzvfGM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 04:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:92:be:7b:c0:83:8d:21:f4:de:57:61:ae:1b:24:e1:40:ce:09:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Sep  4 03:05:25 2026 GMT
            Not After : Sep  5 04:16:25 2026 GMT
        Subject: CN=1506F852BC09CCDD7BCA50E9E0695289EAEDBB58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cc:f1:1e:b6:24:9f:62:d3:14:b6:70:b4:8f:
                    b0:19:c7:20:69:71:f4:c7:d9:14:0d:99:cc:2f:61:
                    83:91:04:92:e6:e1:02:01:1b:d8:c1:a7:d0:1d:36:
                    53:29:9d:ab:c5:8e:38:97:58:14:fd:f9:86:72:bb:
                    7a:ab:0e:c1:14:8a:54:e4:99:fc:72:b5:1b:3f:bb:
                    62:fb:96:28:d4:57:4e:7d:2a:12:9f:e3:e9:1a:0d:
                    0f:57:21:b0:38:cd:44:02:f9:4a:34:ed:65:80:70:
                    67:04:6b:9b:68:cb:ac:87:b8:a8:6d:0a:f4:e5:65:
                    60:ae:06:c5:66:6b:26:fb:86:1b:e7:2a:86:2f:38:
                    be:27:0b:3c:10:49:ce:d8:6f:ec:51:b1:bd:56:d2:
                    26:ff:58:72:7c:a9:a8:9a:6f:d6:d2:5d:c1:6a:a6:
                    96:75:65:e5:c5:a4:37:c9:20:82:1f:a0:4e:88:69:
                    b9:1f:c5:85:c0:ad:61:89:4f:0c:5d:2c:39:90:62:
                    72:25:19:e5:94:f5:d9:86:60:e2:eb:5a:89:2b:d7:
                    aa:03:0a:35:17:bc:f9:dd:c0:4b:a1:1f:21:70:fd:
                    5c:5a:e8:74:1a:6a:a6:17:7c:5b:95:1d:d7:6d:86:
                    c6:cb:48:89:e6:fd:24:1e:17:1e:fa:15:dd:bd:06:
                    23:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:06:F8:52:BC:09:CC:DD:7B:CA:50:E9:E0:69:52:89:EA:ED:BB:58
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b0:11:21:72:45:c0:ad:80:9e:e4:06:b1:9b:2b:d4:4f:87:
         04:27:01:dc:0d:a7:11:9d:5b:64:ad:b0:77:b5:72:06:b5:80:
         e3:27:8c:50:e0:35:4b:3c:e0:7d:eb:e4:46:81:b5:8b:3b:96:
         89:ab:7c:fd:4c:99:26:a5:12:59:e7:a2:10:16:6e:15:c8:9b:
         bf:54:de:0b:a2:e0:7e:c3:a9:1c:63:35:b7:9b:fd:24:ba:4f:
         3c:22:f8:b9:b1:fd:9f:fc:1b:70:de:55:fb:c5:06:8b:8d:67:
         1e:97:46:28:b4:9d:1e:33:9f:2d:61:dd:c8:61:25:54:9c:5f:
         73:c6:06:6c:3c:29:5a:9c:26:d2:4a:24:b9:88:70:3d:cc:6c:
         da:22:d5:98:20:85:6f:ea:56:75:73:9a:28:e4:a6:6e:bb:a7:
         32:e6:fb:b8:ae:57:35:72:5a:17:b7:c9:af:ca:61:50:b8:bd:
         44:25:0b:01:ef:ad:55:da:0a:e0:23:3c:99:90:0e:b8:ac:fd:
         9e:3f:62:21:fb:e5:37:7e:1f:80:1a:a0:42:63:2a:6e:b2:36:
         bc:fb:cc:18:00:c3:ea:74:76:7c:cb:8a:e3:f1:bd:24:8b:81:
         21:a7:0c:aa:bb:8d:60:58:62:97:3f:70:af:90:ab:fc:ce:78:
         f9:54:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:56:46 2026 by rpki-client