Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
File:                     8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json)
Hash identifier:          +7WLS4eY6WxCZBJam+IniTKyE2xqWazzKEDJqv4SYII=
Subject key identifier:   48:79:47:34:1E:78:BD:56:C9:41:09:0D:D1:11:68:AB:4B:A6:54:6E
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       4AF8CFBB0FC8D5D0B835A8DA4425005EF622D77A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
Manifest number:          0729
Signing time:             Fri 11 Sep 2026 01:55:00 +0000
Manifest this update:     Fri 11 Sep 2026 01:50:00 +0000
Manifest next update:     Sat 12 Sep 2026 02:02:00 +0000
Files and hashes:         1: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: yLC1oKoMdjJrSS42z4vH04rNWh8jStXc4dl58WWWeFU=)
                          2: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: ruAvpkjZTu5wjoA5iYh+3xHi6kxJ59gvY2kNroCTqZI=)
                          3: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: JpeDtHMcVyRt7wSevEegZIXGiDHI/xp5ouHedcx7mT4=)
                          4: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: 5YJLPDaGqAiDF0G+tUXhPNg3tA1r1b/VO1ZV0rM38dQ=)
                          5: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: l2moL/0n3AUQ5cZa8s9n/aY4gBFkHmTPj+K3TgDTaaI=)
                          6: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: k9/Ch376K2xC47DoFkOrbQT45cHpJzonkazNFrVSeRg=)
                          7: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: KdtoWFKZmupxeYv8ZtH2UnlJsLJFh2Np3sbeCuilvNs=)
                          8: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: kL/USbewZ5F9rgl6OrE+AodqJSBjzH+0rgbH/DsidT0=)
                          9: 36322e3139322e3137352e302f32342d3234203d3e2039303039.roa (hash: tnNyChr4oxUcnojqJuMajG3DuagFZQP9gO2VaWpCSS0=)
                          10: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: /DmT9jDgPBJnORjXPqoO2OikZb1TZUdRaJAnGGErjQc=)
                          11: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: MXRlv5xAo/BF9Pc+8yjAPEOfs4iVkOfxpIdVxrgD3OQ=)
                          12: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: XgDvqjA1DUwIeQGus4KqsR+dQUTBQ2aN4efEM7LhMpY=)
                          13: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: SlO9GlcvT7Yo+eC6PysK9Rigqz2h2W2yGk/p5q0Rstw=)
                          14: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: AcCeRuWXsZAydYYXd9AyWbET07pTASLPo8gST4E0/Ik=)
                          15: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=)
                          16: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: VegTYwpyqBI8NVsfiZGa7nbuIizSi0tQDSuMW1lp9V8=)
                          17: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: CE9hWXGWiDqK5X5bUXx/dqTabhUB/7ogzo6chIHvh68=)
                          18: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: +/mIlEx3xxWoZl+krpHUaeIjRRfIayd7cektA0/iFpI=)
                          19: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: P57/fYjckH7KO6Bmf2RAAe9o4ZEd5zcCF66fMAqMs84=)
                          20: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: WTJQYj4kO8Tl738Oa1dFz0b2fCNqs4KUQg06eTa2Ut4=)
                          21: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: FvvfrZU7Zk5wRW7V0nJVCDjddc7RhJHDxzG+f+tC0NU=)
                          22: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: q68rGtvPxTIjEDPvv2TVoJliNz54C+gDFrWRdJOsUl4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f8:cf:bb:0f:c8:d5:d0:b8:35:a8:da:44:25:00:5e:f6:22:d7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Sep 11 01:50:00 2026 GMT
            Not After : Sep 12 02:02:00 2026 GMT
        Subject: CN=487947341E78BD56C941090DD11168AB4BA6546E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d0:2a:c1:ea:68:fb:a0:f8:5c:97:1f:88:17:
                    1a:4b:2e:bf:ac:23:dc:e7:9f:c4:de:c9:cd:ae:70:
                    91:ae:b4:08:a6:e4:6d:3f:7c:3a:a6:39:a2:26:bd:
                    93:a8:8c:c7:a4:29:c2:e3:20:89:e1:a5:61:74:a4:
                    27:f5:a6:f6:dc:48:fb:b5:16:c1:8f:32:df:d2:95:
                    fa:6b:23:05:08:25:e1:4e:ae:73:10:6c:e2:dd:bd:
                    d0:f9:61:5f:10:2b:dc:73:90:4b:7a:79:51:50:83:
                    c5:53:48:c5:0a:a3:eb:42:85:50:1e:9c:04:fa:30:
                    49:42:7a:b1:7c:aa:c5:c3:8f:ca:ca:0b:11:3b:61:
                    32:a9:05:47:f7:5a:01:77:07:47:e1:82:da:97:67:
                    77:20:fb:29:91:b4:41:e2:56:40:b6:24:75:7f:32:
                    2d:62:a7:e0:25:8c:b4:e1:06:2f:2c:f9:d0:0c:44:
                    09:1e:0f:46:20:2d:12:7d:6a:50:42:bb:6e:a3:3e:
                    cf:41:81:56:2f:79:34:a7:ed:93:cf:00:19:63:5a:
                    26:ee:6c:48:e0:2d:33:29:ba:c3:71:67:31:82:9e:
                    c1:9e:a4:2e:89:99:93:8b:c4:39:10:9a:2f:c4:76:
                    81:0d:22:0e:b3:e4:b4:3a:9e:9b:0d:40:9d:18:7c:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:79:47:34:1E:78:BD:56:C9:41:09:0D:D1:11:68:AB:4B:A6:54:6E
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:20:f8:ce:ab:df:ab:79:ae:b8:7c:f2:46:66:a4:8c:d7:01:
         7c:b8:80:e5:2e:4f:bd:d8:0f:68:14:42:60:53:32:e2:53:57:
         5a:e9:7e:50:77:44:f0:e2:0c:2b:34:8d:98:fc:42:25:0a:0c:
         2c:9e:4a:f3:78:de:f4:38:d5:2a:ec:a7:c0:b1:25:f2:44:ff:
         7d:c3:c2:ab:ac:97:05:c8:90:8d:6f:cb:2b:ad:39:a7:01:c7:
         c4:08:31:af:9b:9c:33:e0:5e:d1:1f:22:cf:6f:be:65:69:aa:
         ea:15:6b:ad:2d:c6:7b:49:10:d1:9d:14:f5:6a:69:91:67:ec:
         bc:d2:b7:c1:8d:64:00:63:db:57:b0:da:42:d0:bb:11:a1:fb:
         71:8b:fc:3b:c6:16:e0:e9:c0:dc:df:75:51:96:dc:08:dd:6d:
         8e:ff:ab:e0:50:10:6b:61:a7:76:74:b9:9d:fe:1b:b7:c6:61:
         43:8f:2c:7a:3a:67:9c:8f:84:8d:4a:51:be:ee:e5:ed:31:16:
         57:f0:ee:44:be:d0:8c:ec:65:d3:c1:32:3e:33:52:d2:72:f9:
         b8:fa:cd:04:08:b0:8d:28:9b:06:0d:be:21:b9:21:72:b4:60:
         fc:1f:5a:a2:f7:11:c1:83:1a:b4:22:26:5a:59:3f:c1:7e:98:
         0a:12:27:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:59:24 2026 by rpki-client