Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File:                     1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier:          NpAHdJjtEKEabUKh9NlI90HVZzxYALbzjIkwJY1qJvQ=
Subject key identifier:   55:0B:48:27:D6:47:E3:D7:60:25:EB:2C:6D:75:57:A4:25:C4:C1:17
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer:       /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial:       5E355A12FA04A6AA0004A9518A37211C570376D2
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number:          03D5
Signing time:             Thu 11 Jun 2026 09:37:03 +0000
Manifest this update:     Thu 11 Jun 2026 09:32:03 +0000
Manifest next update:     Fri 12 Jun 2026 11:07:03 +0000
Files and hashes:         1: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: Kd+QOrRraURrnm7DiXTAoMIjS5JdQwzRrqoABDmfXRA=)
                          2: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: sGk7ACRgj2xUOc33oWusMkib/NoqUeSQmBUzgrM/Pzk=)
                          3: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: w6hSAZV2VtLUk8Lcxp15MhyaA5GCxf2u983hjysiB3o=)
                          4: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: 8MoYL/dCbo6NYCzCa70zhAMqC8Td9hN9QuTr1/49Ea8=)
                          5: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: jTP8umdkRgXoEyvxYRWR9Cif78DuIywYlbF55pS8H/4=)
                          6: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: uQ6YdX5/WUQ6EE4b+PyH9fVZLMZegSMvb7FY+FXaqfI=)
                          7: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: wItkpJymrUCqPyPQxmidR50wXi9vPRRLUnb7cZMe6Lc=)
                          8: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KwLIWCSeFKTrv4VaOW0JjqLpPgihB6aRK4CEWI2xsJA=)
                          9: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: AlY5Z1AihWSFAtcBObR2iby3i12VIhHyXxVUpZHdoc0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 11:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:35:5a:12:fa:04:a6:aa:00:04:a9:51:8a:37:21:1c:57:03:76:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
        Validity
            Not Before: Jun 11 09:32:03 2026 GMT
            Not After : Jun 12 11:07:03 2026 GMT
        Subject: CN=550B4827D647E3D76025EB2C6D7557A425C4C117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8e:4d:94:29:a3:28:b8:ac:ab:c4:d4:c7:c0:
                    94:fe:5e:bb:1a:f8:c7:84:66:da:7a:1b:66:97:c3:
                    2f:ac:ed:91:4d:c4:a9:5f:0b:52:48:81:bb:97:c5:
                    b0:a8:f9:75:be:55:b1:c5:dc:ac:74:46:e1:7b:95:
                    7a:9d:66:f9:8f:f7:17:fb:e7:41:14:cc:da:a5:01:
                    d2:29:8f:5c:4b:43:46:78:1c:71:11:17:a3:d0:fe:
                    c3:21:66:53:36:7f:dd:bf:a5:b5:01:ae:80:96:9d:
                    78:ec:ca:ac:16:e8:a5:9b:39:cd:d1:2c:37:d0:21:
                    67:0f:4e:16:52:b5:e8:c5:2d:79:a9:31:33:7f:ba:
                    86:e4:54:27:de:92:44:ba:91:0d:da:60:25:76:ea:
                    12:07:2b:58:93:b2:33:9f:ad:d7:d9:8a:11:cd:e4:
                    59:4d:64:b8:aa:13:41:6f:d9:4f:2e:03:d7:fb:5c:
                    50:22:64:74:50:df:80:0d:21:3f:10:6f:00:5f:12:
                    ae:ff:4e:1c:d8:d7:13:a6:c9:fc:5d:91:28:8a:4e:
                    cc:d5:a5:6e:0d:30:dc:a0:03:ab:fa:c7:82:46:38:
                    c0:ad:ae:ad:29:19:37:ed:8d:d1:db:a5:73:f3:c5:
                    a9:32:b2:06:99:3a:de:20:2d:d3:99:88:3b:e8:62:
                    87:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0B:48:27:D6:47:E3:D7:60:25:EB:2C:6D:75:57:A4:25:C4:C1:17
            X509v3 Authority Key Identifier:
                keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d8:f2:59:ef:cf:1b:9a:46:fa:ba:f8:d0:1e:ea:73:b0:bd:
         e3:a0:f2:31:b4:e3:29:3d:ab:67:66:97:a0:30:9a:34:0b:1c:
         db:f1:e3:5d:ea:ad:53:02:3e:dc:5e:3e:98:a4:72:da:2f:4b:
         43:59:fc:82:02:8e:fe:17:21:0b:4c:97:c5:8b:0f:8a:72:1b:
         c8:63:bf:1b:e5:db:b4:e8:fc:2a:0f:b1:b1:87:49:d2:01:df:
         df:c6:48:c8:1c:37:2b:29:32:bc:6c:b3:45:81:47:00:11:eb:
         e3:05:61:c9:b0:05:3a:73:2f:84:9c:4f:25:55:34:66:ae:83:
         fa:43:ec:56:dc:d9:9f:7e:f7:2a:78:85:8e:6c:03:b9:92:a7:
         7f:ba:be:93:3c:11:c0:68:59:3e:f8:3e:14:21:44:82:22:cd:
         c0:6a:07:74:aa:88:6f:8d:6a:39:67:bb:07:14:95:55:88:42:
         82:8b:51:96:b9:cc:71:4c:ce:25:98:32:8b:dc:e9:f8:9c:c4:
         0d:f8:59:3d:b0:48:7d:18:d3:15:bf:71:03:a6:ac:85:ba:31:
         6f:4e:f8:84:e1:ce:32:8e:56:5f:fd:38:bf:7f:b2:09:f2:e6:
         f5:33:65:c6:b7:14:b2:99:1f:76:df:6c:22:eb:b5:fa:b9:dc:
         2b:20:25:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:15 2026 by rpki-client