Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
File:                     CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json)
Hash identifier:          0hjtW2hnSyQ0ZyPcac21HHHBK80JZhQnRRZbPFAMpJQ=
Subject key identifier:   65:1F:10:32:48:4C:63:1C:CD:53:9E:0B:9C:07:4C:19:47:58:D3:85
Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F
Certificate issuer:       /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F
Certificate serial:       3D1A5D6FAD528B025D3B8E3AFFB42FDA06C11B89
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
Manifest number:          01FD
Signing time:             Fri 14 Aug 2026 18:59:13 +0000
Manifest this update:     Fri 14 Aug 2026 18:54:13 +0000
Manifest next update:     Sat 15 Aug 2026 19:40:13 +0000
Files and hashes:         1: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: eyQ+EXgpe7ogjkdUwWOMZF84NoStyr6kSLUk4hmsjiU=)
                          2: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: PWE5971C7QuLNwwp3st4YltR0tvfMKcd2CD25VQDDXc=)
                          3: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: gsIwpY245j8fIC94LqkPJHGZjyAqBYlxII7NePgbZ4Y=)
                          4: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: pYAR74KeV/ydFt3H/yMvWyWHHe92bO+vR47SO89EW90=)
                          5: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: +fGGZrWlnfQQmOHh82cPjXI/AqO47/pYdQ2wNZ+KDek=)
                          6: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: 7OcMgtiJjOUp4vbH335wtUn8wWl9Q5s9aOGp4rOAn9U=)
                          7: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: Fqd3S2MbsOHclWEZXlewpnT8bnKZVvDGIgL3ze+YoHU=)
                          8: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: edWg8eVKPrPOKjy0IkXAinCPcIVKlmM6kiuxaUVH3dI=)
                          9: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: ffoJ00d741VFdzhKQ9XRRB9xb5RtRSBR4A2nvM5ih/I=)
                          10: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: cLUSerzV/UxTz2t/TpAz/cwOxeJF4/5nsCmTzKx4J7I=)
                          11: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: +raeShoeu82SK61p+CeGEiQBGb2nYgWjmH84XKpFNFY=)
                          12: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: pc5v6qtoIv5YaFeB01kPphqJyZS0iflHilTdG3JkLMM=)
                          13: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: ZdaCYsoHSSWR/I5PfpXTEC74LAUCu/IQxWtNDjeYaUc=)
                          14: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: 8og23EO/3Ia44WrUwjHaKKbFmQpT/jNLPSJPJq4zzQo=)
                          15: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: oYu59g7cKHhApVpkgqRTnw9jfrdNbp5kP9+u0to/GDc=)
                          16: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: 6+PbaU8J60OL7OlHqP0ZbtwAw8SVxx8dyJJBJqDbxFc=)
                          17: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: /TSCFxq1k6Mu748jZoN0Eo5Sjpn+cziXXXUhsucoLNg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1a:5d:6f:ad:52:8b:02:5d:3b:8e:3a:ff:b4:2f:da:06:c1:1b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F
        Validity
            Not Before: Aug 14 18:54:13 2026 GMT
            Not After : Aug 15 19:40:13 2026 GMT
        Subject: CN=651F1032484C631CCD539E0B9C074C194758D385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:86:7a:e3:01:68:88:4c:31:69:76:03:09:
                    c0:93:1b:85:79:2e:22:0c:1e:a7:c7:e1:6a:31:b6:
                    38:e2:72:01:a0:9f:8a:a0:aa:53:6b:ef:15:58:51:
                    e9:8e:11:c5:4a:fd:57:40:0a:4b:d0:fd:65:59:b0:
                    e4:3e:02:1f:fd:b7:2c:fe:8e:1a:91:53:9c:2c:ea:
                    e8:e4:cc:32:54:16:a8:99:49:b6:3f:bf:df:1b:aa:
                    39:62:12:83:3b:92:75:25:fe:ad:2f:1d:c8:4e:c6:
                    2c:c0:b6:08:82:0a:2f:5b:a7:93:f5:d5:ef:ac:d1:
                    43:f0:ce:76:02:67:6c:14:ee:c5:a4:b3:80:a3:af:
                    24:e3:af:da:6c:f6:ed:26:05:c8:29:df:42:cc:73:
                    da:25:ed:42:56:36:9a:50:56:dc:47:bd:35:55:f5:
                    4e:aa:e7:1e:9f:e6:1b:07:14:9c:58:07:22:eb:77:
                    62:42:99:44:bc:47:86:31:dd:98:e9:1c:33:00:e5:
                    0d:8e:6c:1b:cc:9b:15:cd:bf:73:73:35:22:2e:06:
                    ca:13:6d:20:5d:24:61:28:7b:f5:c0:86:d0:9f:66:
                    6c:74:33:f2:f7:5e:f0:93:c2:0e:21:e1:a2:5a:61:
                    4a:d5:22:13:a0:cd:5a:9c:e3:37:fc:d2:ab:0b:71:
                    37:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1F:10:32:48:4C:63:1C:CD:53:9E:0B:9C:07:4C:19:47:58:D3:85
            X509v3 Authority Key Identifier:
                keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:94:0f:60:91:7f:33:5c:e0:d9:ab:41:f6:ee:7c:10:32:1b:
         c4:07:36:7c:0e:9f:d2:a9:f7:f9:d4:f4:2e:b7:dc:ff:e5:b5:
         ed:2d:25:3f:20:36:9b:63:77:06:89:d6:b7:c1:aa:e7:8d:7d:
         bc:9f:8d:8b:51:37:69:cd:26:55:19:2d:ab:7f:e5:4e:14:68:
         30:58:1d:91:10:b6:5a:97:00:6c:b6:57:c9:8b:99:2d:d9:21:
         4b:e7:bf:44:5f:ea:cf:91:06:96:7c:e5:fd:79:0d:41:a5:ab:
         4f:c4:d7:b8:a2:53:5c:9f:53:7a:2d:84:9e:b9:9f:82:83:8f:
         e3:bb:db:b5:34:ce:d0:bc:b9:b1:fa:4f:0f:6b:72:0f:66:fe:
         db:63:a7:0e:fb:6a:f6:b1:26:7c:3e:98:e5:77:c9:47:b9:76:
         7b:91:15:01:a7:34:3d:9c:aa:8f:16:22:83:9d:be:98:9b:8a:
         ae:57:38:d0:29:1c:85:45:fe:7c:0c:4d:cf:6d:c7:4f:a5:b4:
         61:ce:c8:91:61:a7:3c:32:4b:1a:af:18:c7:5e:6e:6e:d0:f4:
         9f:07:a1:9c:1f:94:37:9a:a2:bb:0d:80:c1:18:f0:fc:5f:4f:
         6c:22:be:6f:3a:6f:0f:5e:de:a3:20:85:8b:51:88:c8:09:5e:
         13:f9:7d:60
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUPRpdb61SiwJdO446/7Qv2gbBG4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC
RjFEMEYyRjAeFw0yNjA4MTQxODU0MTNaFw0yNjA4MTUxOTQwMTNaMDMxMTAvBgNV
BAMTKDY1MUYxMDMyNDg0QzYzMUNDRDUzOUUwQjlDMDc0QzE5NDc1OEQzODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrqoZ64wFoiEwxaXYDCcCTG4V5
LiIMHqfH4WoxtjjicgGgn4qgqlNr7xVYUemOEcVK/VdACkvQ/WVZsOQ+Ah/9tyz+
jhqRU5ws6ujkzDJUFqiZSbY/v98bqjliEoM7knUl/q0vHchOxizAtgiCCi9bp5P1
1e+s0UPwznYCZ2wU7sWks4CjryTjr9ps9u0mBcgp30LMc9ol7UJWNppQVtxHvTVV
9U6q5x6f5hsHFJxYByLrd2JCmUS8R4Yx3ZjpHDMA5Q2ObBvMmxXNv3NzNSIuBsoT
bSBdJGEoe/XAhtCfZmx0M/L3XvCTwg4h4aJaYUrVIhOgzVqc4zf80qsLcTc/AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUZR8QMkhMYxzNU54LnAdMGUdY04UwHwYDVR0j
BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz
N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy
MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG
NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLlA9g
kX8zXODZq0H27nwQMhvEBzZ8Dp/Sqff51PQut9z/5bXtLSU/IDabY3cGida3warn
jX28n42LUTdpzSZVGS2rf+VOFGgwWB2RELZalwBstlfJi5kt2SFL579EX+rPkQaW
fOX9eQ1BpatPxNe4olNcn1N6LYSeuZ+Cg4/ju9u1NM7QvLmx+k8Pa3IPZv7bY6cO
+2r2sSZ8Ppjld8lHuXZ7kRUBpzQ9nKqPFiKDnb6Ym4quVzjQKRyFRf58DE3PbcdP
pbRhzsiRYac8MksarxjHXm5u0PSfB6GcH5Q3mqK7DYDBGPD8X09sIr5vOm8PXt6j
IIWLUYjICV4T+X1g
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:38 2026 by rpki-client