Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File:                     926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier:          DoNwMufqJggM2mAD222yIQCpYP95v3E+DCatTxe3gJM=
Subject key identifier:   19:49:0F:61:FF:B8:B4:F3:BC:96:E4:FC:05:EB:29:1E:5C:66:23:71
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       7F5CB42D2F89D557B4BBF01C18F82F1E418B25C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number:          070A
Signing time:             Fri 28 Aug 2026 17:07:02 +0000
Manifest this update:     Fri 28 Aug 2026 17:02:02 +0000
Manifest next update:     Sat 29 Aug 2026 17:24:02 +0000
Files and hashes:         1: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: PQRxaEWq+f2VPTUiojThEz+0pEmh01ZHfE1SHpGe1VQ=)
                          2: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: /6JYnu74FnlMKLeMyxGRy9zINdjsl5pRxawy91gInjc=)
                          3: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: wZK8GKavAyHxdXi2NXubIUtrqAxE1wgx7MB4jomVNVo=)
                          4: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: uK0Qd/USy59AqNTwWN3wPV3irBo5HSGqpruSyYVoTWs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Aug 2026 17:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5c:b4:2d:2f:89:d5:57:b4:bb:f0:1c:18:f8:2f:1e:41:8b:25:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: Aug 28 17:02:02 2026 GMT
            Not After : Aug 29 17:24:02 2026 GMT
        Subject: CN=19490F61FFB8B4F3BC96E4FC05EB291E5C662371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:99:cf:d1:2e:4f:85:82:1a:16:65:98:dd:
                    08:3c:54:4a:93:2c:2a:eb:7b:84:12:d5:f8:3c:f1:
                    29:9e:51:70:db:fe:ea:7d:a9:fd:2b:79:8a:97:b1:
                    fd:f5:f2:24:16:6f:ef:1e:ef:1d:8c:0d:5c:0c:32:
                    03:40:34:15:cb:18:4f:e5:29:a2:97:f2:be:d0:30:
                    8d:92:b6:3f:04:d4:4e:70:ba:9c:24:65:df:25:10:
                    0d:76:ae:21:0d:d0:bc:bc:e3:57:13:b3:fb:f8:32:
                    4b:63:98:36:bc:99:c2:50:1a:29:36:f3:de:47:eb:
                    bc:db:7a:71:f9:fd:de:f2:e4:05:7b:4e:2c:03:c2:
                    d8:b2:2d:f7:56:a7:b2:28:cd:3e:8a:77:fd:2c:ba:
                    b3:00:f4:f6:a9:41:23:2e:81:64:08:92:fb:52:4f:
                    4b:9a:ae:9e:cb:69:36:08:ba:c7:61:09:09:68:3d:
                    fd:64:f2:d4:16:5d:57:e7:bc:a0:85:cb:95:c3:5e:
                    fe:90:79:b7:23:5a:d1:33:02:02:2e:b9:e6:c3:17:
                    0a:88:68:d5:d3:6f:67:e3:7a:83:22:50:50:d3:fe:
                    61:79:ab:55:db:9e:e1:5c:05:6a:8d:d3:1c:10:6d:
                    70:2e:ef:7f:02:09:20:5f:07:79:2f:99:3f:37:e1:
                    6c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:49:0F:61:FF:B8:B4:F3:BC:96:E4:FC:05:EB:29:1E:5C:66:23:71
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:6c:29:35:89:04:a5:0e:e1:2f:57:f9:fa:f4:05:e5:95:e8:
         51:04:95:1f:49:f7:1e:22:a8:2b:94:18:40:b8:81:2a:16:8b:
         af:d1:a6:22:c0:9a:4f:1b:7f:42:ae:48:0f:82:3b:20:57:22:
         58:6a:56:f4:ef:a7:37:38:63:6b:e2:da:e8:7b:6c:41:74:6d:
         a8:75:35:b6:69:54:8f:f6:6b:cb:70:4b:83:13:03:e9:c3:fd:
         4c:e1:61:4b:24:06:22:8c:b7:6d:c0:ad:93:ae:b1:45:bd:66:
         2c:c4:9e:26:51:aa:e6:8f:41:8e:2c:9e:34:a8:9b:37:f9:ec:
         27:49:ae:04:20:59:7a:6b:3f:40:2c:14:ae:a1:52:57:b3:80:
         92:02:ce:89:85:76:89:ae:d2:fa:af:12:2d:57:b9:0a:7c:2f:
         88:f7:c0:6e:86:c0:87:cf:a1:0e:da:12:cb:4e:a6:99:a4:32:
         cd:ac:c3:25:e7:a4:62:fa:cd:69:ca:26:c4:19:18:d1:e0:f3:
         68:4f:08:a0:13:15:8e:99:56:82:3f:a0:d3:8b:76:fa:63:10:
         48:ea:74:ff:0e:4c:ad:97:1d:cb:24:4c:a1:8a:9c:0e:da:fa:
         9f:4b:7e:e4:53:df:15:de:07:ce:05:eb:02:01:d7:e1:2d:05:
         ef:f1:d7:fe
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUf1y0LS+J1Ve0u/AcGPgvHkGLJccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk
NTg4NzRmMjAeFw0yNjA4MjgxNzAyMDJaFw0yNjA4MjkxNzI0MDJaMDMxMTAvBgNV
BAMTKDE5NDkwRjYxRkZCOEI0RjNCQzk2RTRGQzA1RUIyOTFFNUM2NjIzNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8cZnP0S5PhYIaFmWY3Qg8VEqT
LCrre4QS1fg88SmeUXDb/up9qf0reYqXsf318iQWb+8e7x2MDVwMMgNANBXLGE/l
KaKX8r7QMI2Stj8E1E5wupwkZd8lEA12riEN0Ly841cTs/v4MktjmDa8mcJQGik2
895H67zbenH5/d7y5AV7TiwDwtiyLfdWp7IozT6Kd/0surMA9PapQSMugWQIkvtS
T0uarp7LaTYIusdhCQloPf1k8tQWXVfnvKCFy5XDXv6QebcjWtEzAgIuuebDFwqI
aNXTb2fjeoMiUFDT/mF5q1XbnuFcBWqN0xwQbXAu738CCSBfB3kvmT834Wy5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUGUkPYf+4tPO8luT8BespHlxmI3EwHwYDVR0j
BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4
ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX
SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w
NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy
ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGwpNYkEpQ7hL1f5+vQF
5ZXoUQSVH0n3HiKoK5QYQLiBKhaLr9GmIsCaTxt/Qq5ID4I7IFciWGpW9O+nNzhj
a+La6HtsQXRtqHU1tmlUj/Zry3BLgxMD6cP9TOFhSyQGIoy3bcCtk66xRb1mLMSe
JlGq5o9BjiyeNKibN/nsJ0muBCBZems/QCwUrqFSV7OAkgLOiYV2ia7S+q8SLVe5
CnwviPfAbobAh8+hDtoSy06mmaQyzazDJeekYvrNacomxBkY0eDzaE8IoBMVjplW
gj+g04t2+mMQSOp0/w5MrZcdyyRMoYqcDtr6n0t+5FPfFd4HzgXrAgHX4S0F7/HX
/g==
-----END CERTIFICATE-----
Generated at Fri Aug 28 22:08:36 2026 by rpki-client