Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
File:                     8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json)
Hash identifier:          fRdyMdOTDDP8f7f4umMlUQvn0473RD5XYG7G7bPiUPw=
Subject key identifier:   8A:36:55:BB:76:37:AF:D9:33:14:96:FF:13:99:93:57:6A:A4:EF:28
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       57E6B043F0F07ECACE23E2C06D0BF9E9A2835A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
Manifest number:          0634
Signing time:             Fri 13 Mar 2026 00:47:23 +0000
Manifest this update:     Fri 13 Mar 2026 00:42:23 +0000
Manifest next update:     Sat 14 Mar 2026 01:39:23 +0000
Files and hashes:         1: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: 7SPDhEMWd1gl2XtQJzxrngcOVdYu9T7eD0t4enh6w+8=)
                          2: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: FvvfrZU7Zk5wRW7V0nJVCDjddc7RhJHDxzG+f+tC0NU=)
                          3: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=)
                          4: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=)
                          5: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=)
                          6: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: bBFSI0E8fUOxr7upAdTSdl9FMOs47r2QBuv0FIBtZjA=)
                          7: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=)
                          8: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: 3Dh0+QL4Ca7K3/8ZGEgIxNy6qmtIRAGaEkPcZns1GuY=)
                          9: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: l2moL/0n3AUQ5cZa8s9n/aY4gBFkHmTPj+K3TgDTaaI=)
                          10: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=)
                          11: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: VegTYwpyqBI8NVsfiZGa7nbuIizSi0tQDSuMW1lp9V8=)
                          12: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: JpeDtHMcVyRt7wSevEegZIXGiDHI/xp5ouHedcx7mT4=)
                          13: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: 5YJLPDaGqAiDF0G+tUXhPNg3tA1r1b/VO1ZV0rM38dQ=)
                          14: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=)
                          15: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: CE9hWXGWiDqK5X5bUXx/dqTabhUB/7ogzo6chIHvh68=)
                          16: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: MXRlv5xAo/BF9Pc+8yjAPEOfs4iVkOfxpIdVxrgD3OQ=)
                          17: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=)
                          18: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=)
                          19: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: /WAm5dy4jlcwivOnkIFnMuEvBCc6QOLwRlkX4YTGCBc=)
                          20: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: XgDvqjA1DUwIeQGus4KqsR+dQUTBQ2aN4efEM7LhMpY=)
                          21: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: P57/fYjckH7KO6Bmf2RAAe9o4ZEd5zcCF66fMAqMs84=)
                          22: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: kL/USbewZ5F9rgl6OrE+AodqJSBjzH+0rgbH/DsidT0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e6:b0:43:f0:f0:7e:ca:ce:23:e2:c0:6d:0b:f9:e9:a2:83:5a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Mar 13 00:42:23 2026 GMT
            Not After : Mar 14 01:39:23 2026 GMT
        Subject: CN=8A3655BB7637AFD9331496FF139993576AA4EF28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:eb:da:20:a1:bb:1f:bf:da:77:8b:54:9b:57:
                    f6:54:fc:61:35:1f:05:58:86:14:4f:e0:81:e3:d1:
                    a8:95:5d:b1:ec:f3:3f:7f:d5:44:40:7a:0c:1b:81:
                    c2:5c:a2:5b:c7:04:a2:49:f2:a7:f9:98:20:8d:4e:
                    06:de:1e:31:2b:ab:64:50:7e:99:d1:d9:d9:18:dc:
                    65:17:fa:8f:78:50:62:15:de:67:8a:04:28:97:a1:
                    28:e9:19:f2:f0:d6:70:d8:d6:1b:91:ac:35:4b:34:
                    05:3b:b6:c4:5d:14:dd:76:59:09:a0:73:0c:89:2e:
                    ba:7a:3b:d9:b3:9b:94:59:2b:08:38:48:66:fb:b1:
                    58:a2:e7:b4:3f:08:e6:53:7e:1f:a9:7d:4d:f0:e9:
                    92:0b:63:32:ba:9b:ba:0f:b4:38:1e:62:4d:b4:c2:
                    0e:94:d3:d4:b2:e1:75:f8:c0:0a:a8:16:ba:fd:01:
                    67:f1:65:18:92:3a:59:e8:77:ae:35:bd:35:e1:54:
                    62:e5:5a:0a:9e:31:18:1c:89:12:e5:8a:77:1a:96:
                    dd:40:ca:4c:19:26:3d:1f:e9:c6:31:68:cc:41:e8:
                    e2:87:dd:dc:96:f7:2e:fd:5a:b3:df:90:dd:65:01:
                    83:4f:05:23:be:1e:32:ed:94:72:8c:69:56:da:89:
                    4b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:36:55:BB:76:37:AF:D9:33:14:96:FF:13:99:93:57:6A:A4:EF:28
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f3:4d:af:e2:40:19:de:53:ae:8a:44:82:2b:4a:ba:04:ba:
         46:b1:86:2d:8d:13:0f:57:3a:77:a0:05:bf:9a:fa:9d:39:ce:
         84:33:60:6d:91:ca:29:ca:e2:16:ef:f3:dd:e4:e4:f7:5f:89:
         a0:4b:78:92:3a:75:87:40:01:36:5c:27:93:fa:44:1c:34:9b:
         d8:8b:3e:6e:dc:cc:78:ef:ac:e4:3a:35:cd:ba:f2:fd:ba:29:
         de:a3:84:40:7e:87:cc:52:ac:1f:cd:d9:1b:74:70:56:33:00:
         ed:da:38:55:e0:1e:1d:23:55:d2:d7:5c:eb:06:0b:a6:83:88:
         5c:e7:69:c4:65:d3:00:57:c3:ee:42:09:04:83:65:e8:85:15:
         70:e2:8a:ef:88:26:b0:c4:c1:dc:1e:33:fe:c7:7c:96:7e:76:
         3c:68:df:80:d0:b2:5b:72:22:16:03:a9:9b:de:66:26:47:9b:
         6d:93:1e:7a:9a:de:5a:6a:2c:dd:28:89:96:1f:7c:07:34:2f:
         eb:3c:c4:15:70:d2:ce:1d:65:b0:c2:0d:cb:21:77:33:af:45:
         56:87:59:87:b5:f6:f6:9f:1c:53:fb:80:b0:88:79:f9:e7:f2:
         f0:d4:e9:a5:a2:a2:ca:c2:8e:67:58:da:8d:90:6d:47:87:de:
         23:d0:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:51:07 2026 by rpki-client