Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
File:                     637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json)
Hash identifier:          fbJV3NxOHRGa1K9ISdG+P+zH4nqbjKQHEmx4nalU/uk=
Subject key identifier:   50:E4:0D:A7:1F:A4:52:8D:1F:1A:79:0B:89:21:EF:BA:A2:52:B6:C6
Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
Certificate issuer:       /CN=637fd1ba3fed44454d6d7030247709d28db3491a
Certificate serial:       275C922EC6249DBC86D3B0B3333887EC322BDC37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
Manifest number:          051A
Signing time:             Tue 30 Jun 2026 14:37:35 +0000
Manifest this update:     Tue 30 Jun 2026 14:32:35 +0000
Manifest next update:     Wed 01 Jul 2026 15:19:35 +0000
Files and hashes:         1: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=)
                          2: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Fol0sGIzThvrZaKMHBeLXFldT8huOSBy9x77N8VFj2U=)
                          3: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=)
                          4: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=)
                          5: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=)
                          6: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: WMZ7MG9ZqwsJalfql9TxbC+4SKvPKZ02fi2O1Vc8m7o=)
                          7: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: CURpEHpklyRg0XCojkpSEwJ8MJR5a06Yz5ri0mTsONk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5c:92:2e:c6:24:9d:bc:86:d3:b0:b3:33:38:87:ec:32:2b:dc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a
        Validity
            Not Before: Jun 30 14:32:35 2026 GMT
            Not After : Jul  1 15:19:35 2026 GMT
        Subject: CN=50E40DA71FA4528D1F1A790B8921EFBAA252B6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:df:71:6f:5a:1a:48:0b:54:e6:6b:51:5f:
                    1e:c6:9f:f1:26:b7:34:b4:ef:89:15:43:6a:85:0a:
                    c0:be:28:c9:04:6b:0c:50:ce:cc:d8:3a:94:32:aa:
                    02:d1:4c:20:88:ae:f7:4d:c0:be:29:a4:41:88:c8:
                    02:c7:a3:cb:7a:90:29:87:ea:f3:ab:9a:0b:50:46:
                    07:55:40:7a:06:11:aa:bf:ac:f9:bc:7b:f0:7c:7b:
                    85:91:56:d9:5f:10:1c:b5:fe:42:45:ee:93:f1:ef:
                    69:fd:9f:4a:f5:fe:ad:4f:74:77:38:fc:25:7f:1b:
                    4a:7f:ed:97:03:b1:2e:d2:1a:f7:b8:ae:7d:dc:18:
                    b3:af:44:08:3d:da:38:4b:e0:f5:12:0a:1d:e7:91:
                    92:8b:6d:99:5b:63:19:19:eb:5b:ae:51:72:1b:70:
                    62:44:a5:e8:3f:2c:b0:91:22:f8:77:1f:37:79:d5:
                    20:a5:52:db:8d:db:4e:82:06:ad:81:c2:f4:01:77:
                    83:af:7b:77:e6:68:1e:c0:20:82:a9:66:ad:0b:58:
                    24:f8:30:bb:93:ee:42:c3:cc:2c:9e:f1:97:b4:ce:
                    c4:e2:20:7f:11:17:b6:37:c4:e9:f0:f7:f1:0b:44:
                    40:56:16:a3:34:44:05:36:05:d0:1a:d7:4e:9c:c4:
                    97:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E4:0D:A7:1F:A4:52:8D:1F:1A:79:0B:89:21:EF:BA:A2:52:B6:C6
            X509v3 Authority Key Identifier:
                keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6d:b8:d7:c5:7b:54:32:5a:8c:7d:c8:06:68:56:1c:23:db:
         6a:87:a1:62:6e:c6:f2:6b:ad:73:aa:48:aa:66:11:9b:4f:a0:
         6e:23:37:53:de:6a:ac:64:18:a2:55:42:98:f4:c1:a2:9c:f3:
         bf:bc:38:88:d8:ec:bb:59:b3:2d:91:6a:f8:6c:53:6e:7d:2f:
         fe:1e:50:16:66:ce:35:26:97:ee:c7:42:3e:80:5c:af:a5:a6:
         c1:61:3b:25:80:9f:17:ad:5c:f1:59:8b:81:2d:1f:ac:5a:f2:
         70:37:e8:51:dd:0c:b9:a8:17:39:1b:17:59:0a:50:86:0b:1e:
         55:c4:e8:d3:a3:16:8b:1d:cd:da:05:38:cc:94:bb:db:4f:81:
         0a:71:a6:9a:db:31:d6:de:9e:e5:d9:85:51:e7:08:7b:1b:a5:
         2f:36:5c:52:c4:b1:49:fd:e5:d4:28:3e:fa:e9:63:18:b7:c2:
         e0:e2:ba:6d:d6:41:84:1b:27:5a:3f:f4:f6:95:d3:dd:27:d5:
         f6:e4:44:ab:53:61:eb:cd:82:bc:92:c4:5a:a1:f4:53:d5:a5:
         2b:ee:8a:47:fe:ff:e5:a5:29:f9:f0:70:aa:a7:b6:ff:5a:ba:
         ff:61:74:be:64:6c:fa:86:81:67:26:39:ad:c9:6a:6d:f6:8e:
         5d:29:dd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:33:59 2026 by rpki-client