Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File:                     926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier:          y6oJOK5fFZvvX5d9/yvmFQUGXkkcllt91fzw/fLAvm4=
Subject key identifier:   47:49:6C:FA:DA:B3:37:E7:EF:15:95:21:56:8C:EB:67:7A:8C:8C:BD
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       3305D1D060D00151714C24A325BE39B4A0AA4A20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number:          06CD
Signing time:             Tue 14 Jul 2026 02:23:34 +0000
Manifest this update:     Tue 14 Jul 2026 02:18:34 +0000
Manifest next update:     Wed 15 Jul 2026 04:58:34 +0000
Files and hashes:         1: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: m4JDjuZJDmmChmmlFAMJ8Bw8b2ZsdAh0iDbkWo79PPM=)
                          2: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: Pxf4B7ZT6gV1TWVd3qoH34uVviW8HXPSyFTn+jTKS9w=)
                          3: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: wZK8GKavAyHxdXi2NXubIUtrqAxE1wgx7MB4jomVNVo=)
                          4: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: YkTXwpu39kqHyA7SBeLDZaExjv33uC2QlsfiX7WINs4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 Jul 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:05:d1:d0:60:d0:01:51:71:4c:24:a3:25:be:39:b4:a0:aa:4a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: Jul 14 02:18:34 2026 GMT
            Not After : Jul 15 04:58:34 2026 GMT
        Subject: CN=47496CFADAB337E7EF159521568CEB677A8C8CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8d:2d:0b:03:0c:03:7c:2e:b5:f3:1a:19:49:
                    a3:47:88:0d:b7:06:6c:49:f2:c6:eb:b8:67:78:bd:
                    ce:20:9d:22:50:96:ed:00:55:90:b7:23:3d:18:65:
                    a7:94:56:5e:a8:6e:58:d0:ca:91:1a:cb:a6:9e:c0:
                    0f:fe:02:ec:6b:ce:a2:27:26:d4:d4:8d:a1:47:a8:
                    8d:9a:7e:df:28:b1:e3:13:f3:38:f0:d5:73:c5:94:
                    29:99:98:ea:68:2d:11:e6:85:e6:0d:d4:7b:22:41:
                    34:bb:a8:84:12:75:29:da:8a:63:21:af:f7:2b:c8:
                    5e:74:08:c4:d7:6b:c8:51:56:1e:0a:8e:f2:a9:e4:
                    c9:a2:ee:62:ae:0e:6a:9e:ef:7c:3f:c9:62:42:ac:
                    b0:18:1f:f0:91:03:ae:40:ba:f0:e4:1d:23:05:3d:
                    16:cb:9e:e5:06:4d:d5:c8:7b:dc:24:a9:43:ab:bc:
                    3e:ce:82:d2:ce:a7:50:27:df:2e:f3:61:49:38:a4:
                    6f:0a:7c:8a:73:6a:b0:1f:80:02:52:d6:c0:b6:29:
                    07:65:9b:82:7c:94:e9:09:fa:d2:1a:40:16:c0:5f:
                    e5:4c:84:97:c4:8c:cb:fd:c4:3d:d8:40:19:3d:d8:
                    86:3e:09:c4:9b:b4:2b:a4:02:f3:98:23:2a:8f:a3:
                    7b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:49:6C:FA:DA:B3:37:E7:EF:15:95:21:56:8C:EB:67:7A:8C:8C:BD
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:62:73:d0:cc:5a:ce:2b:e2:42:95:de:f1:bf:18:b3:b0:1a:
         d2:f2:b9:42:23:71:12:92:db:c4:ce:5c:14:3b:ad:77:83:3a:
         93:d6:15:8a:be:c6:9f:39:fb:34:50:db:1e:76:72:99:4f:79:
         e5:4b:39:a9:cc:1c:57:9e:4c:7d:82:6f:8b:2b:ae:8e:db:17:
         18:a2:33:69:f6:37:4a:b2:4e:f0:05:dc:01:ef:db:6f:d0:8e:
         ca:c5:d9:32:18:a9:a7:2b:d8:b5:3e:8a:04:42:a1:d2:ee:fb:
         c8:b5:98:a5:24:21:e5:46:05:26:3d:ec:07:b1:41:e8:29:b6:
         08:b2:07:f1:6d:00:2e:c1:02:b9:20:a5:24:4d:8e:c7:39:93:
         fe:17:44:d6:cf:cb:49:41:14:5a:ba:a8:27:8d:3c:cb:96:38:
         44:89:d8:02:79:ce:f6:61:f2:82:d4:70:7b:c6:8e:58:db:33:
         94:3c:3a:b2:fa:ba:11:37:40:b1:0e:a9:83:f0:83:ef:01:1e:
         c3:d3:83:6a:cc:c8:77:06:6d:a6:ea:2e:3e:30:60:69:65:05:
         79:48:d7:e0:9a:da:b7:e1:86:1e:9c:f7:2b:78:b9:64:df:56:
         04:4a:dc:14:e0:bb:65:d3:64:b5:a6:f5:18:4d:e5:49:e3:24:
         46:48:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 08:24:58 2026 by rpki-client