Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
File:                     1E74494683D8D2A4E029AAD4573928D2A55FA411.mft (raw, json)
Hash identifier:          /nTIJyTHCUWFAnyxLkTP/Ld4tQ7kR8XQ7fwozRUF7pI=
Subject key identifier:   98:7B:E2:DC:63:A1:76:9A:10:71:9C:FE:47:A0:C3:AC:E6:9C:41:23
Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11
Certificate issuer:       /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
Certificate serial:       15689556A9CD7E3DF12A6CEEDAFD7E322BA7178A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
Manifest number:          E8
Signing time:             Fri 25 Sep 2026 07:50:10 +0000
Manifest this update:     Fri 25 Sep 2026 07:45:10 +0000
Manifest next update:     Sat 26 Sep 2026 08:13:10 +0000
Files and hashes:         1: 09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer (hash: zWi5rFdGQYwJBXDhW9PKUkb3++OgSqlJ6YAaEWudTiw=)
                          2: 326131333a633863343a666630303a3a2f34302d313238203d3e20323134373632.roa (hash: eFBa4OwWuclMBCgU5m433/KeC4fb2SOvKkGDpf2qYGU=)
                          3: 326131333a633863343a663939303a3a2f34382d313238203d3e20323138393931.roa (hash: k853DvbN3iiS1Slm5LVndazbumM9csvV2y0CQquqjmY=)
                          4: F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer (hash: QeIsnFtF/EdZr3eDL8K0OYPSz/bi5xfqK6RvjhvtAeE=)
                          5: 1E74494683D8D2A4E029AAD4573928D2A55FA411.crl (hash: k42tVQwa9iOM8MQC75gfBwHrFXEtCCjDCZQIyUaiHPw=)
                          6: 326131333a633863343a666530303a3a2f34302d3430203d3e2030.roa (hash: lRwRWYrxiGTqXR9JW+d3Dce/wBwgk0miE3YSYcNIgOA=)
                          7: 326131333a633863343a313030303a3a2f33362d3438203d3e20323134373632.roa (hash: JofSJio1ZSiKcgoMirJLUr+PbzVMXTI571DpwJP8INM=)
                          8: 326131333a633863343a663130303a3a2f34302d313238203d3e20323134323035.roa (hash: llWttPtFxzSvHdRpuA4UR+5ss5mF3yPJlws0jwD0FEM=)
                          9: 326131333a633863343a663530303a3a2f34302d313238203d3e20323035393431.roa (hash: PxxBGQ7SipAzWoOzhhkRsumojkCUT+Er192+snUK4gs=)
                          10: 326131333a633863343a343030303a3a2f33362d313238203d3e203430343139.roa (hash: dcoRck7LWZ+s3AnLux3w6i69H91cy2y1ItvIJro8d4c=)
                          11: 326131333a633863343a666630303a3a2f34302d313238203d3e20323135393235.roa (hash: DCRzh/+o5rf4TeU7EAqLSelJkyKiofWcnaurItVLmfU=)
                          12: 326131333a633863343a3a2f33362d3438203d3e20323035393431.roa (hash: MHTbuB6+g+ci+W3xhK1wq8aUoLgunvms/wXlaRYr9A4=)
                          13: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer (hash: WUexCqCUAvgyF/Iv7z1a1aWJ8dcJnS0fgUUz16Pzr18=)
                          14: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer (hash: qnGfja2gp1Dt5eiLazr0XeABKN1iXqNbT2nfPewlL3k=)
                          15: 326131333a633863343a3a2f33322d3332203d3e2030.roa (hash: gSZ+pcHkiMWO1K79/Mncci1lQFYMKmKkgDaeUtpna0Y=)
                          16: 326131333a633863343a333030303a3a2f33362d313238203d3e20323035393431.roa (hash: 97shXnpfJislpBbqVEqju6Q/sYqLAovLtvyjPdhr0V4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 22:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:68:95:56:a9:cd:7e:3d:f1:2a:6c:ee:da:fd:7e:32:2b:a7:17:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
        Validity
            Not Before: Sep 25 07:45:10 2026 GMT
            Not After : Sep 26 08:13:10 2026 GMT
        Subject: CN=987BE2DC63A1769A10719CFE47A0C3ACE69C4123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:ea:c8:cf:72:b3:5e:fa:6b:5d:af:70:34:
                    fd:be:67:09:20:da:c5:64:a6:7a:b4:bd:84:ea:7f:
                    4e:4a:3f:3f:ba:74:c5:21:38:19:e7:3a:c6:29:c6:
                    e8:c6:0c:8b:94:65:2a:ae:54:05:6f:fb:49:bd:c9:
                    71:41:37:4b:fa:b5:da:db:d6:3a:7e:e3:88:54:49:
                    47:7e:3a:78:97:f7:68:ff:7f:a6:34:35:52:51:98:
                    d7:27:e5:32:ba:63:de:50:74:0a:8b:2c:4e:2e:10:
                    a2:7a:64:d1:b7:df:d2:70:83:3d:05:19:c6:16:45:
                    57:33:fd:a4:ae:58:4a:20:ed:9b:a1:a7:02:ae:30:
                    2f:94:3e:6f:31:ca:e8:8b:94:3c:86:7a:ad:44:d8:
                    89:12:77:8c:0c:58:6a:b5:60:20:15:2b:bf:41:20:
                    d3:d8:6a:af:41:40:66:d0:9e:a9:86:b6:29:51:04:
                    ac:ad:6d:61:48:de:08:9a:b9:0b:a6:68:a7:af:00:
                    56:b0:e2:32:a1:c9:19:9e:3f:f2:c6:dd:9e:24:11:
                    ac:d7:53:c8:1f:26:66:56:79:81:d9:e9:5c:af:3b:
                    b9:7f:07:15:2d:75:3f:da:16:25:2d:eb:57:13:75:
                    0b:c9:3e:23:c9:4b:98:19:24:fc:f8:0b:56:48:78:
                    40:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7B:E2:DC:63:A1:76:9A:10:71:9C:FE:47:A0:C3:AC:E6:9C:41:23
            X509v3 Authority Key Identifier:
                keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:8b:76:ff:86:03:07:f8:05:d1:88:dc:f6:7f:e1:c7:46:15:
         6f:63:ce:4f:93:44:b4:e9:ff:6a:62:4a:cd:b5:6b:36:ac:bd:
         d0:cc:eb:d1:97:6c:20:fc:0d:7d:2f:79:19:ba:ad:03:3d:14:
         fd:d5:7d:1f:45:cc:f6:84:f7:be:52:f3:ba:14:17:6c:32:7b:
         f0:f7:8c:ea:12:94:2d:8c:f4:da:55:64:43:d9:df:79:a3:85:
         12:c8:8a:ed:c4:32:41:97:cd:0c:a7:fe:47:2f:ac:e6:87:6c:
         5c:08:07:1a:da:d2:2d:33:7e:0d:60:20:55:b7:1b:ef:0e:f2:
         b8:92:5c:f5:95:6e:32:9c:d4:38:43:6b:55:16:d4:2e:b4:7d:
         61:49:1f:23:0b:19:17:58:9d:5c:09:18:9c:47:98:c0:55:73:
         c2:b4:29:62:14:59:75:c0:b3:64:9b:b2:9e:23:ba:1a:10:2c:
         2e:f6:64:53:40:19:0e:2d:2a:70:6b:7c:39:d2:c7:20:e4:94:
         58:0b:7e:e5:af:03:37:a3:46:87:4f:4a:85:f4:f3:68:61:e0:
         41:91:18:8b:86:02:cd:c4:9a:55:8a:91:37:df:aa:ea:84:7e:
         81:47:29:d2:7f:8e:dc:d7:49:b1:6a:2a:2b:71:8c:68:aa:05:
         30:15:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:21:35 2026 by rpki-client