Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
File:                     ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json)
Hash identifier:          V0jpk0kiHSmwD3xj51ty51jKbctrObOtlX1M/tovvKM=
Subject key identifier:   F1:E3:51:55:7F:1A:9A:1C:33:B4:8C:FB:4A:F9:13:EB:85:6D:73:75
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       5772B6F630C3AE849A98FD5A90455378288B59FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
Manifest number:          0620
Signing time:             Fri 18 Sep 2026 02:00:36 +0000
Manifest this update:     Fri 18 Sep 2026 01:55:36 +0000
Manifest next update:     Sat 19 Sep 2026 05:59:36 +0000
Files and hashes:         1: 38392e34322e3131302e302f32342d3234203d3e20343031333632.roa (hash: oRSIVJbwJnhexnCnyb9LxEnD6ezATcWZP0wEMZEKJtE=)
                          2: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: CUK9BLYWAoY9RH/0vBT8OlenT5Pgl+QBvak8dy0OD58=)
                          3: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: cSfuwk5t8sYaMQRs6xIWOg8/5JnKDK/SFBVUi2XUWiI=)
                          4: 38392e34322e3131312e302f32342d3234203d3e203239383032.roa (hash: L8E/k5WG1P2zSzdmF8rJ5boiZXvKF22tBofIgUqK42s=)
                          5: 39332e3131332e32352e302f32342d3234203d3e20323135363539.roa (hash: I0itF5+/8CondhM9QNDfv0y0vQPHYwTgwfaL4yXTNmo=)
                          6: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=)
                          7: 39332e3131332e3231322e302f32342d3234203d3e203239383032.roa (hash: KOkJXzM4wXOGsvFs/zh/ieHh7T/PcK/t6m2YsCzBo+I=)
                          8: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: zuBRLO+8gED/P8Eo04HfZLlz2ygMpUXoQgp4z4sshfo=)
                          9: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=)
                          10: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: 12VqqOdLZaAJa3aHa+Cq0IgL9Ra+dgjtL5I1Sa/ga7w=)
                          11: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: LGJGjV6UWHbwIblC6ckxLXCtLYSSAPAENCMv4jhxFF8=)
                          12: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: 6hPXDpxoSp9EuEfmiuPb4M+w0B+aK71BZeoPnB8RMa8=)
                          13: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=)
                          14: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=)
                          15: 38392e34322e3131302e302f32342d3234203d3e20343032323135.roa (hash: 4q0YcsiWd4B6iGzuYZR4w0idR1J4f8XIP91ctcVbe5s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 05:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:72:b6:f6:30:c3:ae:84:9a:98:fd:5a:90:45:53:78:28:8b:59:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: Sep 18 01:55:36 2026 GMT
            Not After : Sep 19 05:59:36 2026 GMT
        Subject: CN=F1E351557F1A9A1C33B48CFB4AF913EB856D7375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:f7:ab:c2:a8:35:c9:89:78:79:8f:18:6a:
                    48:e3:76:59:e6:e0:2f:05:af:12:38:3c:d0:f5:fc:
                    31:25:44:0e:b9:a5:3c:98:c0:f5:d3:54:35:96:30:
                    46:bb:37:7d:0f:52:7a:16:52:ec:e6:ba:33:b9:ae:
                    63:1b:99:da:a4:27:b8:bb:45:2d:3e:02:b9:73:23:
                    dd:3f:46:a9:f1:5c:04:07:b4:f5:0b:0a:df:28:c4:
                    f0:c6:27:8a:b8:af:84:41:cb:42:93:7e:75:4b:e1:
                    3f:93:11:2b:6b:e9:8d:1c:5f:d5:d5:c9:b9:40:fd:
                    7e:6e:8e:6c:a0:68:2b:e0:06:7d:e5:cd:68:19:0c:
                    88:6e:ca:5a:dd:f5:7a:07:61:6d:66:39:cf:61:6b:
                    8a:27:49:2e:6c:e8:c1:cc:4d:4b:97:3c:3a:dc:22:
                    68:cc:ed:32:09:28:32:34:1a:de:a9:80:e7:4a:a0:
                    b8:96:b8:01:c6:e9:c0:af:6a:49:50:7b:7e:f7:e5:
                    70:ea:85:11:72:69:10:93:b5:9f:67:58:d2:5b:04:
                    c2:5c:dd:1b:c3:f1:16:3f:c4:1d:80:ae:cb:26:0d:
                    62:42:17:4d:57:d8:9d:ce:09:93:90:a1:d2:da:fd:
                    30:3e:77:7e:b0:e2:26:21:8e:44:ca:dc:d7:9d:70:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E3:51:55:7F:1A:9A:1C:33:B4:8C:FB:4A:F9:13:EB:85:6D:73:75
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:dd:16:78:8d:d4:da:a2:5c:23:3b:e1:1c:c8:25:72:bf:da:
         68:4a:c4:a5:9b:52:a2:0c:2a:4b:61:61:03:1b:41:39:e5:93:
         28:0c:00:79:f1:ec:28:1d:49:f1:ac:a3:1b:71:96:50:b1:cb:
         03:db:6e:d0:1a:84:2d:96:d5:dd:05:30:25:2a:32:33:03:5a:
         ec:49:08:88:f3:88:7c:d0:62:fe:41:75:21:14:be:77:1e:5f:
         a4:3a:a4:10:e3:24:e0:11:b9:e5:01:80:b5:7c:2d:25:8b:5b:
         ec:d9:c6:91:9d:ea:ad:38:ff:10:29:3b:49:b5:0f:a3:11:31:
         56:d4:ea:6c:17:2a:f0:3a:e2:f5:8d:05:91:f3:a4:40:27:b2:
         54:f7:cf:dd:92:ab:81:06:9f:b1:9b:bc:6b:f8:a1:5e:bf:3d:
         51:a7:dc:97:a0:0d:80:00:e6:dc:40:67:77:0b:e6:33:9c:4f:
         c9:9b:7f:fc:0b:c0:70:d5:35:9a:94:0d:71:1f:30:28:be:60:
         e3:80:32:4e:b7:f9:07:a0:ef:c5:86:a8:62:c2:66:a0:b6:40:
         e8:00:e3:d4:d4:ca:6a:46:1a:f9:8e:f6:78:92:03:db:57:fb:
         11:64:64:36:56:99:5e:a5:19:38:9e:71:02:e3:85:f1:43:e4:
         58:66:82:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:08:33 2026 by rpki-client