Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
File:                     47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json)
Hash identifier:          N4r0wvnB9lXMUPfUMDB3Lsd63GSNmIKYF4ujOQGEp4c=
Subject key identifier:   B6:82:34:B2:84:9C:3B:96:5B:D7:B0:E4:BD:67:66:93:33:13:78:40
Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
Certificate issuer:       /CN=47E9555355C6B007AACD5D45BF41E3383E991641
Certificate serial:       79A37A4DFCA8F56C323EAF942069B30697B2B708
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
Manifest number:          0627
Signing time:             Thu 20 Aug 2026 00:03:05 +0000
Manifest this update:     Wed 19 Aug 2026 23:58:05 +0000
Manifest next update:     Fri 21 Aug 2026 02:29:05 +0000
Files and hashes:         1: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: joAEPn9ggJnOJibwtnJz8w4Tu9b024lTJQ13MXp3eQ4=)
                          2: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: YitpjwsMpuWQlkg1SB1Et7APDFx4r19TTOuIq3cJAj0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
                          rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Aug 2026 15:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a3:7a:4d:fc:a8:f5:6c:32:3e:af:94:20:69:b3:06:97:b2:b7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641
        Validity
            Not Before: Aug 19 23:58:05 2026 GMT
            Not After : Aug 21 02:29:05 2026 GMT
        Subject: CN=B68234B2849C3B965BD7B0E4BD67669333137840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:43:47:76:43:64:d9:7d:e8:38:a8:18:f9:15:
                    1c:89:0d:e1:5b:65:87:bc:e7:95:b9:18:f7:60:07:
                    67:33:8e:15:97:9b:0a:39:64:3c:ff:91:b0:83:a9:
                    66:45:e4:00:33:7d:a2:f5:2e:3e:ac:73:1c:8c:12:
                    64:73:65:2e:d9:de:d0:fc:68:59:dd:4c:24:e2:ce:
                    e7:ae:26:62:ec:22:08:02:b0:01:d2:f4:6e:db:8b:
                    69:6c:e2:b2:c2:3b:36:4f:81:aa:7b:30:30:f5:24:
                    75:10:b7:2f:c9:87:95:71:12:6c:d8:f9:2c:9c:6c:
                    e5:69:1d:65:ef:b4:92:59:df:3a:1d:69:bb:9b:7e:
                    cb:d4:95:6f:05:f2:a1:7d:5d:3d:5c:1a:a0:d6:ea:
                    bb:ba:90:4f:ef:67:7e:66:99:b8:71:8e:ac:de:5b:
                    05:c5:b4:cd:68:0d:b0:f4:03:2d:c8:4c:67:87:09:
                    e9:69:40:55:a6:6d:87:b7:7b:b3:a6:5a:26:af:9a:
                    8b:0c:2d:cd:e3:62:d7:55:f1:42:88:cd:8d:a2:5d:
                    83:0d:86:05:dc:57:cd:c4:e6:0e:0b:18:5a:8a:72:
                    90:c3:2a:c1:ed:63:8f:5f:6d:88:e2:46:5a:14:00:
                    53:b2:e0:d7:36:cc:dc:0b:c5:91:9d:26:b3:7b:7c:
                    7b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:82:34:B2:84:9C:3B:96:5B:D7:B0:E4:BD:67:66:93:33:13:78:40
            X509v3 Authority Key Identifier:
                keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d5:a0:2f:c1:c9:44:25:44:46:be:54:94:59:45:dd:f4:37:
         63:31:ed:1b:01:49:2a:21:56:22:06:bc:80:c4:b9:98:fb:77:
         52:e2:5a:40:d2:92:28:ef:c6:e7:ac:16:e5:81:68:29:bf:20:
         13:66:ca:4c:2d:3b:6b:c1:0f:f6:0a:82:5e:8d:19:97:f7:6a:
         08:4a:bf:be:8d:07:b0:82:94:e2:3d:4b:21:63:78:2b:ab:2d:
         95:b7:db:ca:0a:78:c7:2b:ea:57:6a:79:87:82:67:2d:2a:db:
         8d:38:9c:13:fd:3a:b8:71:8e:18:c1:c9:0d:f1:7f:fa:6e:ca:
         6d:5f:5c:2c:1a:57:17:30:34:e8:4e:5b:18:b5:6c:66:ba:e4:
         47:62:95:e9:1a:39:92:ac:e7:42:da:dc:e5:fd:ee:27:63:51:
         05:be:af:7c:1d:52:c2:c4:82:6e:92:d1:53:74:02:f7:5f:72:
         6f:be:e3:52:61:a4:98:af:90:36:73:bd:d0:d1:15:72:cf:f2:
         09:5a:a2:98:9f:a0:fc:3b:48:1d:ad:ea:b9:42:b0:70:9e:34:
         63:ce:4f:a7:7c:2b:27:a2:1c:93:98:22:23:ee:98:5a:aa:da:
         0e:58:c9:16:89:2e:d7:91:57:77:60:5b:a5:a8:07:52:6b:9a:
         ff:12:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 10:51:01 2026 by rpki-client