Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File:                     1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier:          acqiQyZEl/Wg9xjD29oGA1HgRpSgVeI09hcbO43PuBo=
Subject key identifier:   87:61:D5:A5:97:C3:AA:E4:BF:0B:75:7A:88:8D:49:CA:31:29:2E:D8
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer:       /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial:       330FF69282B66703CB42A6D17BD397592E16202C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number:          044D
Signing time:             Thu 10 Sep 2026 05:30:30 +0000
Manifest this update:     Thu 10 Sep 2026 05:25:30 +0000
Manifest next update:     Fri 11 Sep 2026 08:18:30 +0000
Files and hashes:         1: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: sGk7ACRgj2xUOc33oWusMkib/NoqUeSQmBUzgrM/Pzk=)
                          2: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: uQ6YdX5/WUQ6EE4b+PyH9fVZLMZegSMvb7FY+FXaqfI=)
                          3: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: AlY5Z1AihWSFAtcBObR2iby3i12VIhHyXxVUpZHdoc0=)
                          4: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: 8MoYL/dCbo6NYCzCa70zhAMqC8Td9hN9QuTr1/49Ea8=)
                          5: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KwLIWCSeFKTrv4VaOW0JjqLpPgihB6aRK4CEWI2xsJA=)
                          6: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: wItkpJymrUCqPyPQxmidR50wXi9vPRRLUnb7cZMe6Lc=)
                          7: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: Kd+QOrRraURrnm7DiXTAoMIjS5JdQwzRrqoABDmfXRA=)
                          8: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: w6hSAZV2VtLUk8Lcxp15MhyaA5GCxf2u983hjysiB3o=)
                          9: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: OGxdAIpLbxggO6Ngm3TxHfaeYweXUpjjQfRDcPlgUXQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0f:f6:92:82:b6:67:03:cb:42:a6:d1:7b:d3:97:59:2e:16:20:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
        Validity
            Not Before: Sep 10 05:25:30 2026 GMT
            Not After : Sep 11 08:18:30 2026 GMT
        Subject: CN=8761D5A597C3AAE4BF0B757A888D49CA31292ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:b4:ca:93:64:2e:3f:7a:10:ed:ca:05:25:
                    a3:8a:c0:79:98:a5:15:d1:aa:54:a3:9b:05:ff:4e:
                    7e:11:80:ad:9e:01:93:c0:c7:8c:77:4b:55:83:6e:
                    2f:44:70:c6:8e:5c:0c:7f:b6:b1:6a:60:9a:8e:e4:
                    52:ff:33:45:92:4a:0f:64:06:46:ef:78:ce:be:e3:
                    38:5f:fb:25:7d:39:6f:35:fa:44:62:44:08:4a:fc:
                    24:2a:e4:2f:cf:d5:5a:be:2a:5d:7e:80:03:2f:5f:
                    fc:00:44:b2:03:e4:57:eb:2e:bb:60:58:16:e7:b6:
                    7f:24:5a:c7:43:ed:8b:b3:39:a6:2c:cb:bb:e2:55:
                    ba:b0:7b:46:48:21:17:4f:97:18:aa:76:31:35:f3:
                    f2:b5:bd:86:3c:bc:d9:db:b7:64:90:c0:65:ab:92:
                    09:06:14:b4:f8:ea:61:33:4e:82:53:27:ce:61:8e:
                    94:90:a1:0c:ab:53:c1:f9:cf:b3:53:e4:70:37:98:
                    f0:3c:0a:04:30:a8:e6:f8:36:24:d4:ee:4a:fd:6a:
                    a0:b1:5e:99:cd:2a:04:e5:4c:2d:8e:d7:53:71:5e:
                    34:ad:3e:3f:60:d5:b6:3c:bb:3c:db:09:79:53:c5:
                    b5:36:25:8f:65:b5:61:60:3b:bb:74:a1:df:9d:f9:
                    7e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:61:D5:A5:97:C3:AA:E4:BF:0B:75:7A:88:8D:49:CA:31:29:2E:D8
            X509v3 Authority Key Identifier:
                keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4e:25:ce:67:c4:df:84:0a:71:fe:79:d2:20:ba:37:67:b5:
         17:a8:4a:46:8e:7c:bd:60:89:46:37:0a:32:15:03:0c:6a:f2:
         87:af:66:8a:91:cb:96:0f:31:c6:97:ab:93:d1:54:75:bd:7a:
         ea:e9:b9:54:d4:13:d5:e8:cb:4c:ac:b2:39:00:10:e3:ca:9c:
         08:ea:9c:4e:d9:14:57:40:47:18:4b:2b:55:e6:89:8e:ff:e1:
         18:1c:97:df:4b:c2:36:8d:3d:2d:d2:ba:d0:dd:46:c4:1a:a3:
         82:ec:87:8b:5f:94:89:0c:e8:fd:15:78:36:53:8d:52:1e:94:
         35:ca:31:17:6f:f5:cf:31:9a:20:54:6a:c4:fd:66:cf:b3:be:
         c1:e5:25:17:33:3c:36:33:de:8e:28:82:13:0a:5b:d9:cc:bf:
         61:5e:5d:5b:6a:1f:9a:ba:52:56:ad:01:4d:b3:d9:dd:f3:12:
         fd:d4:2a:2f:03:2b:b2:55:c8:6f:a2:85:05:cd:e2:33:97:ac:
         84:9a:b3:a6:72:ca:89:40:16:1e:b5:b4:d2:f7:94:80:d3:8d:
         b2:28:b1:05:b1:33:75:b3:42:af:72:3f:37:97:a8:1a:49:76:
         6f:60:cd:f3:ec:83:7b:9d:c8:b8:68:c2:87:47:bf:37:f6:84:
         6e:d4:bb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:27 2026 by rpki-client