Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft
File:                     83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft (raw, json)
Hash identifier:          TaCRHKJBIqOVaB2mSxtM2NOheQQDvayutGm1f+t8pMs=
Subject key identifier:   06:0D:4B:05:A6:16:6E:45:AB:81:4B:18:81:60:54:A6:6A:86:21:CA
Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E
Certificate issuer:       /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E
Certificate serial:       19636233379C2150573E17A2A016C879A04083F7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft
Manifest number:          5A
Signing time:             Thu 29 Oct 2026 20:24:09 +0000
Manifest this update:     Thu 29 Oct 2026 20:19:09 +0000
Manifest next update:     Fri 30 Oct 2026 21:31:09 +0000
Files and hashes:         1: 326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa (hash: lMmihb/04tHKQfah94vqyGtRBoUBSLViWROoIfWb+R0=)
                          2: 326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa (hash: PRwacz5vYeETLuuqiKn4eg+u9MO1E7cOtPxt6n2Kwa4=)
                          3: 83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl (hash: cf6Yym0DrzTHqNItdOf9/gCRu5cNbYQtH6zxd/CfvbA=)
                          4: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: GiVhe5wCSmxcIMA/bvZQYg7bw4oKTm6bJhvYg/eFDeY=)
                          5: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: tM02Frjt9GqAYw9AMT9AJQYlUSur+I4aPvxlBdDO/ZE=)
                          6: 326131343a373538363a363530303a3a2f34302d3438203d3e20323032333936.roa (hash: kdcm2E2yjrBce2LkLk9pfeJaQAKXQlbcSuNncUIilzU=)
                          7: 326131343a373538363a363131353a3a2f34382d3438203d3e20323034323131.roa (hash: +RG7e4Mpaw7aAtFGJRkNP32SqsoyKJ3HXkxQmF48EME=)
                          8: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: AXSbGIUNn4IvcJ8FCvZh2aj1rjw4XLS45akYolms3s0=)
                          9: 326131343a373538363a363131363a3a2f34382d3438203d3e203131343231.roa (hash: MrwHj6gR6bkUOd/04peI6c/Ue0oDIdpPIQRV4p5/RNQ=)
                          10: 326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa (hash: nQYOSOAU88ZOUN4XRe2kH036UdabGxGwJVqLchFMc84=)
                          11: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: pg01dmJKb4i6N1OISbtyGBdxn2HbVOxCfGKdfLBgGBU=)
                          12: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: EdwXjb+WYDK6QiRhUSjJHcf+DUC+lEkWQDa3ePFThcg=)
                          13: 326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa (hash: Xss1rIY1/9LH0JkCd4kH4TTvOENF78QImpavOtUADkw=)
                          14: 326131343a373538363a363131313a3a2f34382d3438203d3e20323036303639.roa (hash: I/2PHJxZeyEqiNbxH92CNv0UFHW8YzcvKl6PJAgo1vY=)
                          15: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: IposJX1/dkIc9KCM9TFTNcoPJOct8JFXE8VYQyXCQGI=)
                          16: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: OYC7HLv+BuvqzRe89yDGqiEIKOoLGwOVCrrcTvt7S0I=)
                          17: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: IlRx4OBitw3wFaQW1PrD42/DA4szNKP16B3GuMogB1E=)
                          18: 326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa (hash: kvgThrWNimya9GZ+Hb1hmWRsjnt4ZTY4cOtVrvum5N4=)
                          19: 326131343a373538363a363131373a3a2f34382d3438203d3e20323138373333.roa (hash: nHvsLzwaRNR/OXVuEDeDiUgod7ha2jToueX2diLPdZY=)
                          20: 9868B8A018D41E9D418D93B52C0A31174F40F11E.cer (hash: ecR9YPXpVatnT2bJtFakhZQGLxlWO1YUgJOCM1h60rc=)
                          21: 326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa (hash: McsutBYilHSf+D+zQp4WS0ZrKs44K8YIfKiqGRIwOWI=)
                          22: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: hh9Rd6v92uybHSKZay0GAXY+0l2OkBQ3MefYFze7J1I=)
                          23: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer (hash: J/NXoqSNBar5f3P2XQDX/ArWGpydgBQJacXUbW8Kctg=)
                          24: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: OMQ39sE0xuD98pyJIF5ctj0i+Akl1K8L7lf+usOHEvQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 21:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:63:62:33:37:9c:21:50:57:3e:17:a2:a0:16:c8:79:a0:40:83:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E
        Validity
            Not Before: Oct 29 20:19:09 2026 GMT
            Not After : Oct 30 21:31:09 2026 GMT
        Subject: CN=060D4B05A6166E45AB814B18816054A66A8621CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:46:d3:66:4e:49:b5:a2:47:0e:9c:60:ef:
                    c5:39:bb:8a:23:1a:03:55:94:fc:ac:68:fc:b5:38:
                    eb:94:03:09:ff:c8:69:f8:6b:ba:2c:57:6c:73:2d:
                    27:71:31:95:c8:44:a9:66:8f:18:be:9f:b5:28:23:
                    fe:1a:e1:5b:b8:42:e2:3e:f1:6f:dd:8e:4f:f2:4d:
                    ab:a2:5d:23:87:be:e6:38:e6:39:e0:bd:cb:67:25:
                    4e:1b:63:f8:92:b9:b2:0b:c8:1b:b9:3f:23:78:3b:
                    6f:30:f8:71:74:ae:c7:fa:45:64:00:8e:76:c4:a3:
                    7c:de:52:be:a0:52:5c:e4:a6:23:e1:52:4b:6a:95:
                    f0:33:38:e3:83:72:eb:a3:a7:1a:45:0d:a7:1c:fc:
                    fc:05:a9:57:ab:4f:2a:10:39:bc:d6:69:69:dc:d3:
                    ed:a6:d7:97:ea:17:b6:88:54:83:13:df:35:9a:30:
                    06:70:ae:c5:e7:a1:3d:9d:b5:98:5c:73:ec:46:26:
                    a0:25:34:d8:5d:6a:f2:15:c7:7d:c7:64:e4:c4:e0:
                    48:ff:b5:29:a4:53:19:3a:12:bc:53:c9:c6:e1:45:
                    b4:af:29:f2:5e:d6:95:a1:99:98:52:93:f3:fb:06:
                    fb:f1:c6:b1:be:be:8d:0a:03:7e:76:6d:16:03:c3:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0D:4B:05:A6:16:6E:45:AB:81:4B:18:81:60:54:A6:6A:86:21:CA
            X509v3 Authority Key Identifier:
                keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f7:9e:a7:9a:12:52:a4:f8:a3:c9:cb:4c:a9:e9:a2:d3:70:
         06:93:4d:c5:db:96:e5:96:da:ae:fd:6c:2c:64:19:32:26:76:
         a7:0a:7c:4b:93:9f:ad:e4:5f:df:13:58:03:74:0a:51:88:4a:
         2d:83:43:58:c3:64:58:59:d7:a4:9b:40:70:f7:56:84:9e:40:
         d6:19:4e:75:5c:18:3a:33:c7:1e:4f:94:b3:a5:52:81:e1:82:
         41:89:3c:8c:99:b9:5f:b2:c1:42:50:c7:01:bf:df:fb:df:ce:
         a6:0e:1c:8c:90:12:43:e7:2b:64:bf:31:10:95:43:39:e1:d0:
         17:47:50:9d:82:8c:3c:40:64:83:2d:7d:30:b4:85:57:ef:bb:
         e2:13:95:12:2c:13:d3:30:13:2e:f9:3e:a4:0c:7a:67:b1:a6:
         c7:7c:e9:f3:95:ed:bd:88:05:5f:dc:8b:15:c4:98:4e:b7:bb:
         f9:a6:8a:cc:8c:c1:b1:6f:79:24:aa:a3:1f:47:d8:ab:75:f4:
         ca:68:32:97:eb:b5:85:d6:e0:b5:9a:2b:fb:3a:51:99:f7:d4:
         af:39:a4:60:95:2e:70:5e:27:aa:a8:24:2a:e9:fb:1b:c5:41:
         c7:2f:aa:b6:5e:6f:cb:90:4a:2d:f0:49:9b:ec:f6:41:58:05:
         76:db:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:08:09 2026 by rpki-client