Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File:                     926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier:          ue9eZOjogBvIoj2rKdehS8UgGXcsLiqsJcnIzFBqvrc=
Subject key identifier:   5B:B9:1E:2A:77:E7:E0:DC:9A:48:D4:46:49:58:23:CB:5A:59:7A:00
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       3B9F27C426C078AAF4085211F3F40F4BD307A580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number:          0691
Signing time:             Fri 29 May 2026 14:30:31 +0000
Manifest this update:     Fri 29 May 2026 14:25:31 +0000
Manifest next update:     Sat 30 May 2026 18:17:31 +0000
Files and hashes:         1: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: Pxf4B7ZT6gV1TWVd3qoH34uVviW8HXPSyFTn+jTKS9w=)
                          2: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: oY88urEDbnLiVdO2MdzHXzb1ZWHioEtqvv+R3wk3rqs=)
                          3: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: wZK8GKavAyHxdXi2NXubIUtrqAxE1wgx7MB4jomVNVo=)
                          4: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: m4JDjuZJDmmChmmlFAMJ8Bw8b2ZsdAh0iDbkWo79PPM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 May 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9f:27:c4:26:c0:78:aa:f4:08:52:11:f3:f4:0f:4b:d3:07:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: May 29 14:25:31 2026 GMT
            Not After : May 30 18:17:31 2026 GMT
        Subject: CN=5BB91E2A77E7E0DC9A48D446495823CB5A597A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:9b:d0:55:47:2f:79:bb:b6:e1:2e:d0:ae:
                    f3:60:7b:4a:20:74:4e:96:67:93:15:20:35:a2:01:
                    01:47:83:74:d3:89:a3:5a:15:6f:47:9b:d3:eb:48:
                    64:b4:06:71:ea:8d:59:ef:95:3c:2a:1f:ea:7c:c0:
                    52:a7:ad:bf:5f:68:98:d6:f4:16:17:33:e2:26:5c:
                    d5:c6:ec:15:9d:36:91:ff:73:b7:ab:ef:0c:67:68:
                    6b:cf:c5:c8:7c:06:85:e6:41:b2:ec:0c:eb:38:22:
                    b6:d5:36:45:9a:84:ab:4d:f8:a8:14:72:e8:ad:a0:
                    f6:8a:9b:ec:af:eb:4b:88:4c:a3:3d:6c:2b:57:b7:
                    ea:ad:66:b8:f5:1c:75:b3:be:dc:01:f2:c1:d1:dc:
                    cb:09:70:66:7b:8e:75:41:d3:9a:aa:cf:c8:5a:a3:
                    93:05:02:0d:88:fc:c5:78:42:fd:c6:d8:ff:5e:79:
                    ce:51:69:09:dd:55:76:56:3e:45:57:d5:bf:a1:d5:
                    62:50:ac:71:ab:0e:09:cb:c3:87:15:10:fc:52:7d:
                    79:65:e6:a6:05:e2:f5:3b:db:74:e1:71:8a:70:e6:
                    40:42:99:ca:71:35:67:5a:67:2f:91:ad:12:09:2d:
                    25:ea:4a:dc:d7:7c:e4:5c:8b:65:19:5a:78:1a:04:
                    e4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B9:1E:2A:77:E7:E0:DC:9A:48:D4:46:49:58:23:CB:5A:59:7A:00
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f8:47:22:ae:87:d0:b1:7a:1a:cd:17:7b:d0:a0:be:24:51:
         84:ba:82:98:1b:1e:16:91:a0:61:00:c2:aa:e1:8a:66:90:98:
         f4:e1:88:c2:e5:ff:e1:07:89:2b:d9:ed:bb:c5:f0:a7:04:53:
         10:cf:51:b4:6f:c9:a0:69:2f:c1:d7:9f:ab:c0:35:b1:08:a1:
         1a:36:bd:d2:59:3c:07:42:c5:aa:f8:81:68:79:66:90:6c:1e:
         94:be:1c:91:34:e5:db:28:73:a5:2d:54:f5:9c:eb:74:c2:cb:
         54:95:c7:78:81:ce:b4:ab:13:8d:02:f3:b4:96:7c:17:84:1f:
         ab:2f:5d:c6:8a:98:4d:ee:55:e1:be:ad:af:3e:59:12:e6:a3:
         8b:db:d2:17:77:f7:61:40:9f:c6:87:7c:69:f8:52:84:27:79:
         ce:2f:76:69:ad:81:20:92:e9:92:e1:f5:24:87:59:e1:39:6e:
         c7:06:cf:73:75:4c:d6:3a:28:cd:4a:22:b8:6c:40:85:4b:b8:
         12:7f:c7:f2:39:cc:8e:2c:ff:ec:87:c6:14:d2:fe:e3:04:21:
         85:82:41:df:32:7d:72:7f:63:3d:c4:7c:47:83:e3:b2:75:e6:
         80:d2:e1:95:fc:81:dd:61:7f:43:36:bd:6a:d5:90:c5:23:a5:
         90:bf:ad:3b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUO58nxCbAeKr0CFIR8/QPS9MHpYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk
NTg4NzRmMjAeFw0yNjA1MjkxNDI1MzFaFw0yNjA1MzAxODE3MzFaMDMxMTAvBgNV
BAMTKDVCQjkxRTJBNzdFN0UwREM5QTQ4RDQ0NjQ5NTgyM0NCNUE1OTdBMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh0ZvQVUcvebu24S7QrvNge0og
dE6WZ5MVIDWiAQFHg3TTiaNaFW9Hm9PrSGS0BnHqjVnvlTwqH+p8wFKnrb9faJjW
9BYXM+ImXNXG7BWdNpH/c7er7wxnaGvPxch8BoXmQbLsDOs4IrbVNkWahKtN+KgU
cuitoPaKm+yv60uITKM9bCtXt+qtZrj1HHWzvtwB8sHR3MsJcGZ7jnVB05qqz8ha
o5MFAg2I/MV4Qv3G2P9eec5RaQndVXZWPkVX1b+h1WJQrHGrDgnLw4cVEPxSfXll
5qYF4vU723ThcYpw5kBCmcpxNWdaZy+RrRIJLSXqStzXfORci2UZWngaBOR7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUW7keKnfn4NyaSNRGSVgjy1pZegAwHwYDVR0j
BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4
ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX
SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w
NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy
ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvhHIq6H0LF6Gs0Xe9Cg
viRRhLqCmBseFpGgYQDCquGKZpCY9OGIwuX/4QeJK9ntu8XwpwRTEM9RtG/JoGkv
wdefq8A1sQihGja90lk8B0LFqviBaHlmkGwelL4ckTTl2yhzpS1U9ZzrdMLLVJXH
eIHOtKsTjQLztJZ8F4Qfqy9dxoqYTe5V4b6trz5ZEuaji9vSF3f3YUCfxod8afhS
hCd5zi92aa2BIJLpkuH1JIdZ4TluxwbPc3VM1joozUoiuGxAhUu4En/H8jnMjiz/
7IfGFNL+4wQhhYJB3zJ9cn9jPcR8R4PjsnXmgNLhlfyB3WF/Qza9atWQxSOlkL+t
Ow==
-----END CERTIFICATE-----
Generated at Fri May 29 18:59:52 2026 by rpki-client