Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
File:                     E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json)
Hash identifier:          W7PrAEpUUNVyFKPtsjpgQJWxLfVVZ5FcpwHwsbDZ7jY=
Subject key identifier:   06:03:82:35:A5:19:6D:A7:02:FB:70:35:28:10:AE:BD:1A:C6:74:39
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Certificate issuer:       /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial:       71AB87E81EE1CFE782680EE8C0B6C4045402EF89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
Manifest number:          0254
Signing time:             Wed 06 May 2026 01:01:17 +0000
Manifest this update:     Wed 06 May 2026 00:56:17 +0000
Manifest next update:     Thu 07 May 2026 01:14:17 +0000
Files and hashes:         1: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tvkflaFeVW3sd8cXnqPd3goXjSItIqLYbambS6E6g9M=)
                          2: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: Vn0tNJq84yvhpEx3djvegd0qElXvUXIj3d10CpoBDS8=)
                          3: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: Z7YS72AkRUhmGE/8eVCwX/QArQ7kzj3DMVCvF8nhupE=)
                          4: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: 0Zf21/vuBOrDLlrDcwWAE2WOlYjpY5aJh8FXyWP79u4=)
                          5: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: LfqYMzkh476Ki7VQsqODx8QNPNDEFujJRyehaY4kEpM=)
                          6: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 6WyHSY5Xp60q1IE95V4h6lwOICpnxsevWtnXKH+E1RA=)
                          7: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: xpwIwfTkmJ6MVFD7/8ThvhoBcV+rx30IkMkw3EnowGM=)
                          8: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: N543k0DcGiJuxubeGma9GZg+VhMwbPVS9ShNVwfZl30=)
                          9: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: BEzvo1oTT3h/yITGofAX+DfQt9t+mraGyg3xFdVKM2I=)
                          10: 39312e3230392e35382e302f32342d3234203d3e20323032373035.roa (hash: PK2aFR1vuXxLprCpeWciXwI6HhgJ2xTabit5aAcYEng=)
                          11: 39312e3230392e34302e302f32342d3234203d3e203436383434.roa (hash: lOyC9nhHln4w/6aFWRWEGti2qbnJIh38POtRvVGBI4s=)
                          12: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: nBnCDOBWFR9glmAsUSRrLmDkLZa6Zi7bYUkIoT7Lpvs=)
                          13: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: FjMn5kgc0Y1vdPNQCAd4cKVxUcNaP4msdjwOhjOI4iE=)
                          14: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: kdDGBWrURu4f0ClnA4SfgsI29M2UtK1sJ9ldbUvOvNc=)
                          15: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: s62/iVKVlW2KdVyTR+Xnv457Z0j5+aZNRyV7RtkAKNQ=)
                          16: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=)
                          17: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: SIzDkF7YYsoaU9vFR/am7daSl1S+0BBZdMp9c5ogCY8=)
                          18: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HGgyYO79YRPv5eTIvRCSkvT+uzFYIDLIXRArnhiRVzA=)
                          19: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: dtubQqytFEqkt8TqTYJ+KlZgpXqOEEfNHG9KMyAKroE=)
                          20: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: vwuw8BagjBJB+QjPivE2w5i9soU6pwd3DUm4jYukQKs=)
                          21: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: Xgs2aXZ2twwalLnMnwHKHrLdiNgmex+4PLid272RcXc=)
                          22: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: sgKb1dwb+yOP2QySpduAJeLZbiJJdLEfbfVpO0+8Lgg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 18:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ab:87:e8:1e:e1:cf:e7:82:68:0e:e8:c0:b6:c4:04:54:02:ef:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
        Validity
            Not Before: May  6 00:56:17 2026 GMT
            Not After : May  7 01:14:17 2026 GMT
        Subject: CN=06038235A5196DA702FB70352810AEBD1AC67439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:ae:6a:5c:21:c5:d0:5b:78:a5:b9:79:b0:
                    44:0d:20:75:a1:13:cf:7a:d1:d7:29:6e:1a:0d:d4:
                    15:f0:82:ad:3f:ef:db:3a:18:4b:e8:67:3e:7a:48:
                    5e:77:78:b9:a3:ea:15:a4:4c:eb:13:68:0f:c4:6e:
                    7f:4f:93:22:1e:7e:95:6f:7e:ee:1f:a8:5f:d5:a8:
                    0e:c4:ec:48:76:e4:c0:d2:0a:23:46:1a:d2:25:89:
                    c5:cd:37:1c:0e:68:d7:7a:9c:01:00:7c:d1:62:87:
                    d5:b4:9a:b0:85:e8:50:1b:6b:95:9a:d5:78:86:85:
                    f9:cb:9c:ab:22:b9:55:c4:18:ac:24:a5:cb:c9:f3:
                    32:e8:ba:19:17:fd:07:bb:e2:fa:ea:c4:e7:7d:af:
                    91:6f:c5:60:5d:7f:c4:66:63:81:5b:fe:6d:d8:92:
                    51:22:83:be:53:f8:e3:cd:33:d6:9e:a0:e6:0e:8d:
                    5a:c5:a5:63:a8:fe:c5:5f:fe:61:d4:4c:a4:97:a1:
                    31:83:d9:1f:af:09:1d:8d:cf:27:4d:85:f0:18:a0:
                    ac:8b:6d:3f:ea:66:d9:95:5d:0b:c3:c2:40:d7:9c:
                    09:91:35:07:f6:3a:36:a6:cc:e5:08:0d:f6:6b:df:
                    cc:84:1f:84:f4:01:a0:1a:d4:6f:5c:1c:0d:49:d5:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:03:82:35:A5:19:6D:A7:02:FB:70:35:28:10:AE:BD:1A:C6:74:39
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:11:5b:e2:9c:f3:37:f0:7a:94:b2:a8:89:72:2f:26:f1:3f:
         ab:89:d9:8c:f5:25:16:ea:fe:2a:a5:5d:03:ec:d1:40:c9:23:
         bf:ef:df:15:9e:da:cf:96:56:3e:67:27:4a:a5:78:48:e4:38:
         63:42:ad:b1:2a:f6:df:6f:51:97:41:35:92:20:9c:4d:f0:8f:
         b7:a1:47:9e:84:51:54:80:7e:fc:34:e8:f3:a0:14:b5:0a:13:
         e5:28:b8:96:e2:70:0a:b7:db:e7:b0:42:e2:c7:b0:c4:cb:d1:
         23:d3:3d:d5:e6:a8:92:59:2e:51:cb:31:b3:e4:f0:d4:66:22:
         36:0e:bc:d9:da:1e:75:a9:cf:ae:64:2f:07:61:ab:55:d4:0a:
         6f:8f:05:04:6c:4f:80:0f:95:6c:88:a8:b6:05:e9:3e:48:b8:
         48:f1:c9:ac:68:b4:c6:78:d5:4e:1d:90:c3:76:b0:ab:f0:49:
         71:8e:75:4b:c6:99:c1:20:8c:42:87:2f:ed:68:8d:25:d4:98:
         e8:83:fb:69:9b:26:b1:0b:0e:7c:54:10:02:87:8d:78:f4:e0:
         69:fc:57:1b:55:c8:f0:87:24:13:11:06:b5:45:59:10:8d:38:
         fb:a2:f7:bc:ca:f6:d5:fe:ed:23:58:c7:b3:37:e7:4b:b9:b5:
         dd:d0:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:27:55 2026 by rpki-client