Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft
File:                     80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft (raw, json)
Hash identifier:          RbjYAJcDHOAXhqwIwMVwx6A2qgGLjGKSkkiHLFEyvBA=
Subject key identifier:   A0:0D:84:03:68:EE:E2:72:D4:EE:00:24:43:27:C0:A7:44:9C:E2:4D
Authority key identifier: 80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E
Certificate issuer:       /CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E
Certificate serial:       68F1398F9FAD545F0C46C664303B22F27A46FE7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft
Manifest number:          09
Signing time:             Sat 06 Jun 2026 03:35:52 +0000
Manifest this update:     Sat 06 Jun 2026 03:30:52 +0000
Manifest next update:     Sun 07 Jun 2026 03:35:52 +0000
Files and hashes:         1: 315EC08E540BCBC870FEB38832274E048E2E1F80.cer (hash: 9m0xCfQJFqthoaClvF4I5amZBD7zqwTDPas3YWk1zWg=)
                          2: 80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl (hash: vDKK76/2TCCDgHp8dghiYYaLwjKrp4BD5U4j1oJG74c=)
                          3: 326130613a643638353a3a2f33362d3438203d3e20323034323131.roa (hash: X3yUeD61GhapeOsUlkFiq5TmnoG/p0KNKBsOGJwvygw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 19:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f1:39:8f:9f:ad:54:5f:0c:46:c6:64:30:3b:22:f2:7a:46:fe:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E
        Validity
            Not Before: Jun  6 03:30:52 2026 GMT
            Not After : Jun  7 03:35:52 2026 GMT
        Subject: CN=A00D840368EEE272D4EE00244327C0A7449CE24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:44:70:b1:c1:55:c3:8c:fc:37:67:a4:6b:
                    fc:c2:40:c2:22:a2:64:50:f0:3c:6e:04:58:42:13:
                    04:ad:07:65:84:1a:45:23:69:a5:3a:3b:85:de:f2:
                    2b:81:65:de:eb:a6:33:9a:1a:fd:4f:ef:25:4c:f8:
                    92:3f:34:bb:ba:13:2a:68:c9:fa:b7:45:c0:ed:03:
                    a2:84:98:77:48:50:88:ed:cc:d3:07:82:f9:9e:29:
                    56:96:1c:96:78:04:d5:05:82:1b:3c:e0:92:09:c4:
                    0f:e1:e3:d0:fd:e6:b9:f9:57:d0:73:7f:ea:46:57:
                    41:75:8e:9f:ed:5c:d9:eb:65:6c:f0:7b:82:3d:b4:
                    0f:51:54:b4:b3:41:98:d2:6b:c8:35:e0:8d:68:07:
                    ac:bf:35:af:f2:80:0a:e5:bf:34:65:a6:cb:13:b3:
                    09:22:f8:8e:14:ad:97:88:1e:8c:8f:5a:83:04:34:
                    3e:39:c0:2a:14:4a:f9:51:81:a7:38:72:40:e2:c9:
                    b6:4c:ef:f8:cc:98:46:16:ca:17:d7:17:fe:bd:16:
                    c4:82:32:61:ca:4f:cf:22:f7:5f:65:eb:1b:26:4f:
                    af:10:ca:30:ef:90:e8:1e:b6:44:46:ce:5d:16:5d:
                    b4:56:bc:f2:ae:6f:65:4b:e0:9b:e3:78:48:ff:1b:
                    ab:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0D:84:03:68:EE:E2:72:D4:EE:00:24:43:27:C0:A7:44:9C:E2:4D
            X509v3 Authority Key Identifier:
                keyid:80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2f:6d:4e:db:c3:04:73:35:25:3f:79:dd:62:59:af:4d:b4:
         b9:5e:76:72:c3:9b:b0:2c:5e:a4:bd:1e:e3:da:e8:7d:f3:e9:
         ce:1f:df:d9:7f:86:85:26:20:41:a3:80:f5:bf:19:59:69:94:
         2c:34:a7:34:cd:17:d2:38:b7:54:81:1d:92:3a:ac:94:6f:e8:
         ab:3d:17:a1:81:a7:ab:7c:49:38:87:83:16:7a:91:f9:df:c1:
         71:18:99:bf:77:6a:c2:45:72:2e:5c:2e:60:0e:b6:a3:18:30:
         16:19:6a:84:de:5a:42:8d:ab:df:24:19:a3:91:54:35:a8:5b:
         36:c3:32:d0:7e:1d:98:08:ca:96:36:3b:75:f1:7b:8e:a4:2b:
         f3:1b:84:4c:01:52:ce:55:63:4f:3d:4a:66:5c:7a:3d:88:37:
         73:d6:d3:62:4b:0b:7e:0a:81:05:07:97:c8:34:27:bc:e8:12:
         f3:07:4c:96:ff:90:13:ef:94:46:29:29:15:f7:38:e0:d2:28:
         f0:9a:20:58:8c:df:88:69:32:32:29:db:64:8f:d1:13:84:6a:
         f7:13:09:9c:2e:74:c9:7b:a1:81:79:e3:2c:76:4c:70:5b:a3:
         b8:82:b3:0d:ac:6a:f3:e5:ce:b8:f8:cd:4e:c6:7f:71:a9:75:
         38:83:4c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:36:13 2026 by rpki-client