Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File:                     926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier:          NLFNA3vK1B0U/g94tibz8O1/ifOjwmjPL8uIqwr7XGI=
Subject key identifier:   30:C5:F3:41:49:73:CD:E1:28:90:25:68:3F:6C:FD:49:57:93:0B:D5
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       7302419DF156E67145CA12A735A9D5DC338873E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number:          074D
Signing time:             Sat 17 Oct 2026 11:05:23 +0000
Manifest this update:     Sat 17 Oct 2026 11:00:23 +0000
Manifest next update:     Sun 18 Oct 2026 13:08:23 +0000
Files and hashes:         1: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: z4CYYBX+RDCnZOxFCrZIAk9xz6mMznVijtYSLKYIwUA=)
                          2: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: uK0Qd/USy59AqNTwWN3wPV3irBo5HSGqpruSyYVoTWs=)
                          3: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: /6JYnu74FnlMKLeMyxGRy9zINdjsl5pRxawy91gInjc=)
                          4: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: wZK8GKavAyHxdXi2NXubIUtrqAxE1wgx7MB4jomVNVo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 13:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:02:41:9d:f1:56:e6:71:45:ca:12:a7:35:a9:d5:dc:33:88:73:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: Oct 17 11:00:23 2026 GMT
            Not After : Oct 18 13:08:23 2026 GMT
        Subject: CN=30C5F3414973CDE1289025683F6CFD4957930BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ba:ad:fd:e8:f1:a3:0d:9d:cc:a1:66:2f:4f:
                    5c:ee:5a:8d:1f:4c:3b:84:f3:eb:ee:ad:9b:b8:14:
                    10:0b:b2:97:e1:6b:a5:db:99:ed:ee:52:a2:28:d3:
                    99:1b:c7:36:a0:d3:cc:e4:9f:1d:0d:6e:f6:bc:cc:
                    e3:ef:22:d3:c0:d9:d2:9a:36:59:1d:18:e5:04:3f:
                    99:64:cf:e7:67:fd:28:05:97:8c:dd:ed:9d:65:89:
                    50:2b:12:1c:71:44:af:8f:97:1c:69:5e:68:e9:10:
                    45:10:ce:5a:be:b4:14:67:26:f8:69:00:b6:20:93:
                    e1:29:04:10:3b:a3:0b:fa:2f:76:fd:0c:97:ca:8e:
                    ec:5c:64:5d:3e:e5:9a:fa:10:18:55:76:80:d3:dd:
                    e3:69:37:6e:97:02:05:cf:1a:03:44:5d:91:e7:46:
                    93:12:8b:cb:27:eb:c5:f0:ec:9b:d1:a3:d1:f9:68:
                    c0:67:61:f6:1e:5f:a5:fe:ff:82:74:48:de:81:3d:
                    a5:02:01:6d:1d:dd:a5:8e:55:62:01:7c:07:13:cd:
                    7f:49:20:5b:37:e8:61:9b:14:5c:18:10:8e:28:d5:
                    09:7a:14:04:a8:4e:e0:f7:01:2c:2f:ed:4f:22:d0:
                    aa:77:40:9c:9c:bc:2d:e7:3a:52:a3:24:af:a7:99:
                    ea:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C5:F3:41:49:73:CD:E1:28:90:25:68:3F:6C:FD:49:57:93:0B:D5
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1b:a4:6c:d4:1f:77:2f:58:67:dc:65:7b:e2:04:3b:a9:80:
         10:7f:e8:bf:d6:4d:a6:ba:b8:11:e8:6d:99:1a:0c:28:79:48:
         20:8f:6b:82:34:2d:dd:51:c2:ca:5f:3f:56:8b:83:4d:cd:53:
         d7:81:4b:fc:a4:3c:3e:d0:b5:54:03:fb:1d:da:32:b6:e1:4d:
         d8:4b:e4:74:02:4b:94:e8:67:63:7a:95:22:f8:54:98:f9:44:
         70:f8:8d:93:5a:b6:d5:45:86:b1:91:24:82:7f:04:57:78:49:
         02:66:25:b0:e6:a5:8b:59:b0:11:ee:0b:5e:27:4a:5d:c2:df:
         81:12:6d:bb:f7:66:d3:12:dc:fc:40:1c:42:80:dd:b3:7d:6c:
         05:04:29:41:a3:d0:36:0c:52:54:dd:a2:85:4f:99:b1:84:86:
         4d:53:18:bc:13:39:83:4b:e0:2a:99:15:91:7c:5b:8a:5f:a5:
         8e:03:10:32:43:ca:40:0e:89:6c:44:f5:ba:66:ad:80:f6:a5:
         bd:1c:0f:54:55:84:1e:98:6a:d4:ff:41:c8:0a:31:42:ec:fc:
         6f:78:c9:de:6c:26:73:11:fe:44:b4:7e:67:42:b1:0e:91:56:
         25:2f:4c:9f:51:c1:65:1b:5d:8b:28:a3:59:d5:50:5d:60:c2:
         49:5f:d6:82
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUcwJBnfFW5nFFyhKnNanV3DOIc+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk
NTg4NzRmMjAeFw0yNjEwMTcxMTAwMjNaFw0yNjEwMTgxMzA4MjNaMDMxMTAvBgNV
BAMTKDMwQzVGMzQxNDk3M0NERTEyODkwMjU2ODNGNkNGRDQ5NTc5MzBCRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDauq396PGjDZ3MoWYvT1zuWo0f
TDuE8+vurZu4FBALspfha6Xbme3uUqIo05kbxzag08zknx0Nbva8zOPvItPA2dKa
NlkdGOUEP5lkz+dn/SgFl4zd7Z1liVArEhxxRK+PlxxpXmjpEEUQzlq+tBRnJvhp
ALYgk+EpBBA7owv6L3b9DJfKjuxcZF0+5Zr6EBhVdoDT3eNpN26XAgXPGgNEXZHn
RpMSi8sn68Xw7JvRo9H5aMBnYfYeX6X+/4J0SN6BPaUCAW0d3aWOVWIBfAcTzX9J
IFs36GGbFFwYEI4o1Ql6FASoTuD3ASwv7U8i0Kp3QJycvC3nOlKjJK+nmeoLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUMMXzQUlzzeEokCVoP2z9SVeTC9UwHwYDVR0j
BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4
ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX
SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w
NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy
ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRukbNQfdy9YZ9xle+IE
O6mAEH/ov9ZNprq4EehtmRoMKHlIII9rgjQt3VHCyl8/VouDTc1T14FL/KQ8PtC1
VAP7HdoytuFN2EvkdAJLlOhnY3qVIvhUmPlEcPiNk1q21UWGsZEkgn8EV3hJAmYl
sOali1mwEe4LXidKXcLfgRJtu/dm0xLc/EAcQoDds31sBQQpQaPQNgxSVN2ihU+Z
sYSGTVMYvBM5g0vgKpkVkXxbil+ljgMQMkPKQA6JbET1umatgPalvRwPVFWEHphq
1P9ByAoxQuz8b3jJ3mwmcxH+RLR+Z0KxDpFWJS9Mn1HBZRtdiyijWdVQXWDCSV/W
gg==
-----END CERTIFICATE-----