Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft
File:                     77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft (raw, json)
Hash identifier:          g/RPF+08h6mWljsUDxuIbwsKFOGLS+u3fRGVDjnnw9o=
Subject key identifier:   66:06:14:18:52:2A:0E:B4:04:27:B7:81:8B:47:54:57:FA:AC:07:77
Authority key identifier: 77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5
Certificate issuer:       /CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5
Certificate serial:       17D2A8CCBAB62B7E30F2076B1F8E25C43266FB96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft
Manifest number:          F6
Signing time:             Mon 24 Aug 2026 20:50:23 +0000
Manifest this update:     Mon 24 Aug 2026 20:45:23 +0000
Manifest next update:     Wed 26 Aug 2026 12:46:23 +0000
Files and hashes:         1: 326131343a373538303a666133303a3a2f34342d3434203d3e20323134333434.roa (hash: BBvLVobm31lHE2YSVEFw7pK4NXtwbn4C2tTQjbanPbk=)
                          2: 77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl (hash: ioplTlldGOG7Ofk7+oWtI5Xx8IbEJ5ggxu5BjffGFAI=)
                          3: 326131343a373538303a666166303a3a2f34382d3438203d3e20323134333434.roa (hash: sJbd3x+685QBuPBnC8OOeqVgs1pJqkXNtOuVKx3me3g=)
                          4: 326131343a373538303a666135303a3a2f34342d3434203d3e20323134333434.roa (hash: 3GsbmrMybNGGMqFWCj6ZzYcMoQXQKmUw/PlMdyaUGls=)
                          5: 326131343a373538303a666166313a3a2f34382d3438203d3e20323134333434.roa (hash: LkT0ENe1YUFRxlS5aUhx4sNAMJ0+5HjZvFiPqwyHP/c=)
                          6: 326131343a373538303a666132303a3a2f34342d3434203d3e20323134333434.roa (hash: F5inQOiSNImj2gBvrsVqMCS17ZhaQcVsyimtR4sjAVw=)
                          7: 326131343a373538303a666134303a3a2f34342d3434203d3e20323134333434.roa (hash: nJnylMUfQzzXqdIVQmBJRIEFv4ZtSZG/B9HDKJTMVmk=)
                          8: 326131343a373538303a666131303a3a2f34342d3434203d3e20323134333434.roa (hash: t+dQbhe0o/A21YGqm9dCw1DWi/aebT8VS3kHcNUIfSg=)
                          9: 326131343a373538303a666166333a3a2f34382d3438203d3e20323134333434.roa (hash: 3+sQOzUmUWDHvt6E9xSpw5rDjmYlCC3fgLz6AZHb7yA=)
                          10: 326131343a373538303a666166323a3a2f34382d3438203d3e20323134333434.roa (hash: 2HKFlGEgh4l30gTTpJSrYvRSVMvgqrDNZ7KrLDKUxyY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 12:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d2:a8:cc:ba:b6:2b:7e:30:f2:07:6b:1f:8e:25:c4:32:66:fb:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5
        Validity
            Not Before: Aug 24 20:45:23 2026 GMT
            Not After : Aug 26 12:46:23 2026 GMT
        Subject: CN=66061418522A0EB40427B7818B475457FAAC0777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:f3:bf:ab:78:41:52:e8:9c:78:74:cc:18:
                    d0:12:3f:bf:b3:b6:40:9d:85:1d:1a:78:82:0b:33:
                    da:c7:0e:be:c1:7d:4e:eb:2c:ae:77:fb:93:45:ed:
                    57:f7:e3:dd:d9:3d:71:90:9e:73:b8:3a:52:cc:59:
                    d9:77:8d:d8:c8:9f:8d:6f:6f:d3:de:29:18:73:e8:
                    ad:83:53:89:73:a1:e7:e7:f7:19:0f:f1:c0:a0:b4:
                    b0:ed:f8:c7:03:e1:28:10:a7:fb:77:25:2c:9e:1c:
                    1f:56:e3:c1:20:55:bf:45:c2:72:f2:10:98:f3:34:
                    b0:6d:80:d3:cf:42:78:71:79:0a:15:b5:57:2b:4c:
                    35:ac:c9:da:9e:3c:d3:5e:b0:49:05:e2:56:b4:46:
                    24:34:43:73:c7:6e:c0:4f:13:6c:0d:6b:e4:11:2f:
                    09:bb:33:61:39:b4:cc:a6:c1:82:33:a1:0e:2c:cd:
                    a5:94:67:cf:de:cc:38:6e:1c:37:23:7e:a1:01:c8:
                    66:3f:71:6c:58:28:ac:1d:8b:d2:f8:bb:68:45:fa:
                    d7:cb:59:e0:f9:70:32:7a:a3:db:b1:f7:41:00:54:
                    65:70:ec:8c:af:fc:d2:62:c0:4f:d0:e5:50:34:9b:
                    5c:a0:c6:d9:3a:9d:02:50:68:5f:0d:55:60:cc:c5:
                    3c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:06:14:18:52:2A:0E:B4:04:27:B7:81:8B:47:54:57:FA:AC:07:77
            X509v3 Authority Key Identifier:
                keyid:77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c1:61:ee:08:22:84:b7:15:2d:c1:10:47:09:5c:d5:97:46:
         75:87:9b:20:50:a9:91:2e:eb:64:b3:8a:26:7e:83:52:57:5f:
         15:b8:73:8f:c2:d2:4b:06:e7:2b:47:2e:d4:7d:b6:b6:8e:57:
         47:28:8b:46:5d:b1:56:5d:99:c2:17:33:00:4f:0a:d6:de:81:
         75:a8:54:5e:c4:7c:bb:11:17:70:54:20:1d:d6:6f:31:88:16:
         4c:e2:53:d4:78:f6:30:97:98:ac:18:31:f2:10:9e:8d:54:ad:
         77:db:81:0a:72:37:78:d8:cf:82:ed:fd:bd:9f:99:a2:ee:d6:
         e9:bc:69:17:e7:f2:2e:65:20:24:a5:56:4c:42:d4:54:c3:fa:
         1c:9c:d7:9c:d8:3d:9d:f5:49:23:1b:7c:a1:cc:65:4a:94:77:
         f3:43:be:06:00:80:6f:5c:76:c8:78:6e:05:11:7c:ed:18:49:
         4e:c8:38:69:05:de:1e:72:47:91:46:a0:13:b4:25:fe:40:5a:
         b9:10:7c:b2:af:b4:f7:b3:64:d5:bb:c6:3c:51:92:c7:e0:17:
         1f:a7:be:a4:cd:df:91:88:cc:d3:f5:36:5d:51:5f:5c:18:3f:
         0a:7f:3d:04:05:7e:bf:15:ec:15:4f:a5:71:13:c6:83:e8:f2:
         a5:fd:94:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:02:33 2026 by rpki-client