Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File:                     1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier:          paRFUDEcPo9nH6zUQDyS2Q9Q1TJfQXbFVDy05uMQhNs=
Subject key identifier:   32:DD:93:43:79:62:75:2A:99:BE:0E:C0:42:6F:3C:6B:72:7E:1F:52
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer:       /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial:       28D5DA8374CECCE74D794862F83FBE83D2841229
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number:          0490
Signing time:             Tue 27 Oct 2026 09:00:56 +0000
Manifest this update:     Tue 27 Oct 2026 08:55:56 +0000
Manifest next update:     Wed 28 Oct 2026 11:47:56 +0000
Files and hashes:         1: 326131343a373538313a643630303a3a2f34302d3430203d3e20313531363630.roa (hash: jpXfTb+KklgwI1bE6gc3LhYNvDTBoCVcWcWoyRdLs10=)
                          2: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: AlY5Z1AihWSFAtcBObR2iby3i12VIhHyXxVUpZHdoc0=)
                          3: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: Kd+QOrRraURrnm7DiXTAoMIjS5JdQwzRrqoABDmfXRA=)
                          4: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KwLIWCSeFKTrv4VaOW0JjqLpPgihB6aRK4CEWI2xsJA=)
                          5: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: uQ6YdX5/WUQ6EE4b+PyH9fVZLMZegSMvb7FY+FXaqfI=)
                          6: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: sGk7ACRgj2xUOc33oWusMkib/NoqUeSQmBUzgrM/Pzk=)
                          7: 326131343a373538313a643530303a3a2f34302d3430203d3e20313531363630.roa (hash: SusIlM5PXddnSUL6Cx9YM0CLkPPxyDOatE0KFrN1v5w=)
                          8: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: w6hSAZV2VtLUk8Lcxp15MhyaA5GCxf2u983hjysiB3o=)
                          9: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: YASUyUWqG3DBoMcAep9oiJeoB5L/6emN5tvNxbDS168=)
                          10: 326131343a373538313a643430303a3a2f34302d3430203d3e20313531363630.roa (hash: 0AwAEanklKkVfpMZ0UBVRSpRAdbMemkORRhs15qJVmk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d5:da:83:74:ce:cc:e7:4d:79:48:62:f8:3f:be:83:d2:84:12:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
        Validity
            Not Before: Oct 27 08:55:56 2026 GMT
            Not After : Oct 28 11:47:56 2026 GMT
        Subject: CN=32DD93437962752A99BE0EC0426F3C6B727E1F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:df:53:67:51:57:1d:6f:a6:09:1b:f8:a1:
                    10:be:6d:c2:66:4b:31:9a:86:1a:ee:43:6c:49:c6:
                    de:dd:10:65:1f:f6:09:cc:38:c1:7f:06:ff:d9:88:
                    a8:b3:cd:f4:95:a4:0e:33:60:ec:7b:05:ee:c4:78:
                    1a:30:43:2c:19:ce:3a:31:26:91:e0:5c:5d:b5:8f:
                    d7:05:44:bb:fe:f8:5c:09:06:f0:c0:82:88:d4:c3:
                    4d:97:3c:62:0b:cf:23:9d:b0:03:a8:81:c2:ab:84:
                    96:60:88:d9:48:65:80:97:89:63:81:79:dd:54:9e:
                    0a:04:e6:f0:4e:3a:4f:f7:71:e0:35:39:a9:e0:e9:
                    bd:35:5a:59:d7:23:c7:d2:c7:9b:e0:c3:0c:d3:a0:
                    45:38:49:70:2d:73:96:29:6d:dd:53:41:21:31:29:
                    cd:60:41:f9:f4:2e:48:49:c4:41:ec:bd:a4:cb:6b:
                    e9:47:cf:4d:00:67:e8:cd:2a:9e:5a:38:d3:a4:e0:
                    7a:42:77:92:32:3e:ea:8a:c2:91:af:bd:ed:12:80:
                    60:8b:1d:62:d4:59:68:52:36:81:08:67:d6:7a:ac:
                    91:8c:b5:6f:c7:e8:ef:99:52:2b:c0:04:af:f9:52:
                    25:89:67:e8:3c:ed:48:96:3c:c3:c8:96:c9:76:57:
                    dd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DD:93:43:79:62:75:2A:99:BE:0E:C0:42:6F:3C:6B:72:7E:1F:52
            X509v3 Authority Key Identifier:
                keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3e:70:c9:da:87:a2:61:9a:8b:61:83:54:2b:1b:ac:76:d2:
         c4:61:92:a1:ee:c2:6c:28:76:9d:38:5a:a6:50:7c:e3:fc:12:
         41:4f:38:6c:76:2a:16:11:94:38:7c:99:16:09:70:fb:f6:c0:
         bc:53:d2:6f:a2:79:36:aa:f3:4e:5c:fd:e0:d4:11:2c:2b:be:
         9d:5d:f8:3a:45:86:78:d9:ff:35:ae:52:97:8e:8f:ba:ed:95:
         74:2a:be:93:a6:1d:67:e2:10:5d:bc:26:95:37:b0:3f:79:09:
         f2:e1:a4:4a:f9:4a:34:83:98:9a:ba:35:f0:0c:3b:02:78:7f:
         97:a7:73:f2:8b:52:7c:63:c6:95:46:a5:e2:a9:5c:56:02:37:
         04:35:a6:7d:18:ea:ca:f6:94:25:3a:5d:f4:b4:30:13:92:af:
         35:60:1b:7f:8f:ab:09:35:a9:86:81:c7:15:72:b6:0e:cc:f3:
         c7:43:29:09:bd:70:f0:81:4c:29:f6:36:cc:f2:c6:1a:5c:05:
         06:f4:5b:e9:22:65:89:2c:55:66:32:c8:27:47:f0:da:72:47:
         67:b5:79:9d:c5:e8:fa:c4:ec:bd:e4:59:bd:b7:7a:55:8c:6d:
         0e:4f:21:37:7a:59:93:c9:d3:25:76:0a:9b:f7:87:53:af:07:
         36:10:81:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:40:32 2026 by rpki-client