Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
File:                     8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json)
Hash identifier:          XTkx4k97GkMCQAMfWwer4yx0Z5aUIexsbpqATQNjLCE=
Subject key identifier:   AD:7D:8F:B8:1C:D5:02:5F:DB:2B:33:59:FE:08:8D:1E:40:48:D1:10
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       29FDE41064F445FA06BF5FF58AAF0E0A01EC37E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
Manifest number:          0768
Signing time:             Tue 27 Oct 2026 16:52:34 +0000
Manifest this update:     Tue 27 Oct 2026 16:47:34 +0000
Manifest next update:     Wed 28 Oct 2026 17:06:34 +0000
Files and hashes:         1: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: +/mIlEx3xxWoZl+krpHUaeIjRRfIayd7cektA0/iFpI=)
                          2: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: /DmT9jDgPBJnORjXPqoO2OikZb1TZUdRaJAnGGErjQc=)
                          3: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: /WG/eu5zm010ZFRNRx/rK/4GPeq26Ac+2T2P/2v4HLU=)
                          4: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: yLC1oKoMdjJrSS42z4vH04rNWh8jStXc4dl58WWWeFU=)
                          5: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: kL/USbewZ5F9rgl6OrE+AodqJSBjzH+0rgbH/DsidT0=)
                          6: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: MXRlv5xAo/BF9Pc+8yjAPEOfs4iVkOfxpIdVxrgD3OQ=)
                          7: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: q68rGtvPxTIjEDPvv2TVoJliNz54C+gDFrWRdJOsUl4=)
                          8: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: 0CLZULPRiooqjqfk64uubyCNdstUfsqHsT0xhS/Q15A=)
                          9: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: KdtoWFKZmupxeYv8ZtH2UnlJsLJFh2Np3sbeCuilvNs=)
                          10: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: AcCeRuWXsZAydYYXd9AyWbET07pTASLPo8gST4E0/Ik=)
                          11: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: XgDvqjA1DUwIeQGus4KqsR+dQUTBQ2aN4efEM7LhMpY=)
                          12: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: CE9hWXGWiDqK5X5bUXx/dqTabhUB/7ogzo6chIHvh68=)
                          13: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: l2moL/0n3AUQ5cZa8s9n/aY4gBFkHmTPj+K3TgDTaaI=)
                          14: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: k9/Ch376K2xC47DoFkOrbQT45cHpJzonkazNFrVSeRg=)
                          15: 36322e3139322e3137352e302f32342d3234203d3e2039303039.roa (hash: tnNyChr4oxUcnojqJuMajG3DuagFZQP9gO2VaWpCSS0=)
                          16: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: JpeDtHMcVyRt7wSevEegZIXGiDHI/xp5ouHedcx7mT4=)
                          17: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: FvvfrZU7Zk5wRW7V0nJVCDjddc7RhJHDxzG+f+tC0NU=)
                          18: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: 5YJLPDaGqAiDF0G+tUXhPNg3tA1r1b/VO1ZV0rM38dQ=)
                          19: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: WTJQYj4kO8Tl738Oa1dFz0b2fCNqs4KUQg06eTa2Ut4=)
                          20: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: SlO9GlcvT7Yo+eC6PysK9Rigqz2h2W2yGk/p5q0Rstw=)
                          21: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: P57/fYjckH7KO6Bmf2RAAe9o4ZEd5zcCF66fMAqMs84=)
                          22: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: VegTYwpyqBI8NVsfiZGa7nbuIizSi0tQDSuMW1lp9V8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:fd:e4:10:64:f4:45:fa:06:bf:5f:f5:8a:af:0e:0a:01:ec:37:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Oct 27 16:47:34 2026 GMT
            Not After : Oct 28 17:06:34 2026 GMT
        Subject: CN=AD7D8FB81CD5025FDB2B3359FE088D1E4048D110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b4:4a:38:b7:e3:b9:ec:a8:3b:07:f2:0a:af:
                    4a:83:0d:2b:dc:fb:20:39:84:07:7a:4f:f6:f2:6e:
                    f3:a1:49:60:c6:35:f9:b3:86:7d:a9:2a:96:72:ba:
                    24:09:87:4c:d0:b1:89:37:85:82:c7:38:11:f9:81:
                    43:b9:5d:f0:db:10:42:4d:f9:02:e3:87:a0:75:b0:
                    83:54:24:81:ec:69:69:9d:d9:35:fa:f9:30:18:bf:
                    7f:6e:48:93:46:81:0d:03:69:00:f7:bc:da:81:61:
                    64:1b:ba:92:7f:d0:cd:27:73:73:98:ac:31:09:35:
                    57:77:01:1a:48:48:10:78:22:e1:5a:60:8b:cc:e3:
                    71:69:be:3e:62:e6:19:3d:b1:d8:94:09:5c:bb:37:
                    30:b5:22:5c:b8:ee:14:42:f7:1f:96:86:16:d2:3d:
                    6e:93:e5:d9:02:59:f9:7d:1f:bd:c6:e3:c8:d3:6f:
                    3d:af:dc:69:5e:c0:e3:01:8c:e4:83:30:cd:85:6e:
                    45:f1:57:cc:3f:0b:87:9b:34:8f:9a:c2:be:82:8f:
                    ef:fd:09:40:8c:de:a1:fb:48:e2:84:ef:e4:68:9d:
                    48:89:48:46:ac:b9:e6:61:8d:c8:97:7f:b0:67:5b:
                    0f:a7:16:14:dd:77:dc:c9:e1:2b:ba:c5:3a:14:cc:
                    31:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7D:8F:B8:1C:D5:02:5F:DB:2B:33:59:FE:08:8D:1E:40:48:D1:10
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:83:56:66:dd:4f:21:04:55:45:35:9c:97:42:0c:3c:f6:d4:
         d1:e8:f2:a7:71:7a:cb:72:1b:ab:11:e5:99:cd:30:57:29:d8:
         4d:35:40:46:e9:10:0e:76:27:ed:59:8b:c8:04:b7:ab:fd:cd:
         cb:6d:01:65:3b:dd:82:68:d5:e1:e6:42:db:e3:07:68:7a:b1:
         4e:e4:0a:c8:d6:50:4e:df:1b:38:95:61:b9:dc:e5:d6:d7:4b:
         ac:44:7d:5f:ce:7e:8a:ca:b5:f6:56:cf:17:a4:36:18:0b:d0:
         ae:1f:28:3c:98:e9:bd:06:f9:85:5f:9f:36:78:76:dc:fe:fa:
         f1:00:d5:d3:13:c8:5f:3a:6b:8a:be:46:2c:08:a0:d7:7c:94:
         74:5b:07:c5:6e:64:12:da:4c:4c:30:9a:f0:57:eb:f5:83:5c:
         82:f7:d7:2e:c2:f3:e1:27:18:23:49:0d:1d:a7:1a:79:b9:7a:
         e9:9e:23:39:81:2b:c5:f1:82:eb:65:5a:62:13:a6:e0:96:44:
         42:fb:4e:58:0b:43:a4:b3:2a:65:31:c8:98:c7:22:73:b6:d9:
         8d:7a:17:de:90:df:5f:d1:11:b5:cc:f3:b9:a4:ac:b8:f4:65:
         fa:4b:55:bd:7d:2f:97:41:ae:c1:34:c1:1e:08:01:6a:44:fc:
         3b:df:08:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:51:01 2026 by rpki-client