Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
File:                     1E74494683D8D2A4E029AAD4573928D2A55FA411.mft (raw, json)
Hash identifier:          FAZPSUiGXDI9VOrLfHQjVA7cT0o//xa7pWwZ+5kNanc=
Subject key identifier:   B7:6D:A1:81:27:FC:E6:2D:75:92:AB:AC:15:B1:6B:0C:6F:A8:4E:BC
Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11
Certificate issuer:       /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
Certificate serial:       12DEE7C025CFF00F48E15629F56ECAE0DA7C8750
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
Manifest number:          8C
Signing time:             Thu 23 Jul 2026 16:50:15 +0000
Manifest this update:     Thu 23 Jul 2026 16:45:15 +0000
Manifest next update:     Fri 24 Jul 2026 18:43:15 +0000
Files and hashes:         1: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer (hash: WUexCqCUAvgyF/Iv7z1a1aWJ8dcJnS0fgUUz16Pzr18=)
                          2: 326131333a633863343a3a2f33362d3438203d3e20323035393431.roa (hash: MHTbuB6+g+ci+W3xhK1wq8aUoLgunvms/wXlaRYr9A4=)
                          3: 326131333a633863343a313030303a3a2f33362d3438203d3e20323134373632.roa (hash: JofSJio1ZSiKcgoMirJLUr+PbzVMXTI571DpwJP8INM=)
                          4: 326131333a633863343a663530303a3a2f34302d313238203d3e20323035393431.roa (hash: PxxBGQ7SipAzWoOzhhkRsumojkCUT+Er192+snUK4gs=)
                          5: 09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer (hash: zWi5rFdGQYwJBXDhW9PKUkb3++OgSqlJ6YAaEWudTiw=)
                          6: 1E74494683D8D2A4E029AAD4573928D2A55FA411.crl (hash: HEmvwYZZ+IBmitemMoHWJ3M4nPspaPwpoFQKE3RLZyU=)
                          7: 326131333a633863343a3a2f33322d3332203d3e2030.roa (hash: gSZ+pcHkiMWO1K79/Mncci1lQFYMKmKkgDaeUtpna0Y=)
                          8: 326131333a633863343a666630303a3a2f34302d313238203d3e20323134373632.roa (hash: eFBa4OwWuclMBCgU5m433/KeC4fb2SOvKkGDpf2qYGU=)
                          9: F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer (hash: QeIsnFtF/EdZr3eDL8K0OYPSz/bi5xfqK6RvjhvtAeE=)
                          10: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer (hash: qnGfja2gp1Dt5eiLazr0XeABKN1iXqNbT2nfPewlL3k=)
                          11: 326131333a633863343a666630303a3a2f34302d313238203d3e20323135393235.roa (hash: DCRzh/+o5rf4TeU7EAqLSelJkyKiofWcnaurItVLmfU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:de:e7:c0:25:cf:f0:0f:48:e1:56:29:f5:6e:ca:e0:da:7c:87:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
        Validity
            Not Before: Jul 23 16:45:15 2026 GMT
            Not After : Jul 24 18:43:15 2026 GMT
        Subject: CN=B76DA18127FCE62D7592ABAC15B16B0C6FA84EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d7:cb:aa:96:64:8b:5d:a6:0d:e4:d2:c1:0c:
                    84:87:3a:10:fd:ee:ef:fa:27:4b:a6:c4:29:23:0b:
                    eb:5c:80:50:28:13:35:16:1c:9e:38:16:33:2f:b9:
                    78:4c:7a:a6:72:bd:53:b6:ac:f0:04:94:74:27:4f:
                    4d:b5:66:e1:69:b3:0d:eb:d2:d6:7d:2e:8a:c5:f2:
                    fc:6c:0f:7d:1b:91:c5:9f:63:ac:c5:4f:98:3d:f4:
                    e8:55:0d:95:6f:a2:1f:be:c5:4d:4f:b0:72:87:9c:
                    ef:9c:c3:e2:ce:f1:e7:ec:fb:67:7c:fb:86:cf:14:
                    c8:15:9a:62:ee:c4:51:05:c3:29:df:a6:be:cf:e1:
                    c3:0f:3d:24:fb:1c:c8:50:95:7d:93:11:c2:37:0d:
                    87:57:60:da:31:aa:b0:ff:82:16:90:73:5f:04:6f:
                    72:2b:b4:fb:f6:c8:d2:4d:a7:f0:25:2a:3d:c1:fa:
                    95:86:bf:d1:7f:a8:44:28:f9:2c:34:82:45:6a:54:
                    a4:3c:1b:95:05:f7:38:9c:b9:39:54:e4:6d:d7:3f:
                    09:49:c1:6d:6c:39:bb:fe:de:9a:a9:1a:ec:00:92:
                    30:90:4f:4e:16:22:08:b3:7f:75:b1:b7:9a:16:d3:
                    4c:ba:a2:60:b5:10:e3:36:45:56:ab:c2:87:48:5b:
                    4a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6D:A1:81:27:FC:E6:2D:75:92:AB:AC:15:B1:6B:0C:6F:A8:4E:BC
            X509v3 Authority Key Identifier:
                keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:da:2e:5c:e1:27:54:37:7a:51:8b:a6:e9:33:18:77:16:ef:
         25:68:7f:ca:15:30:17:50:96:01:32:d3:9c:02:25:b5:7a:b3:
         e9:c5:27:ac:ab:4b:fb:5b:d4:04:cf:c8:4a:dc:3e:cd:b6:2a:
         c4:fb:35:49:81:1d:73:be:5d:1f:0f:05:01:5a:a5:99:ef:ce:
         9e:d8:7f:b9:ff:82:ae:fb:4c:88:92:db:a2:7d:fb:84:43:6d:
         36:4f:9a:16:1a:52:77:1f:72:9a:37:dd:45:8f:82:2c:a6:35:
         19:fe:da:40:73:45:42:06:53:df:53:3d:81:1d:dc:b8:03:a2:
         1e:cc:8b:28:8f:21:72:84:08:a7:ab:28:c0:8b:e9:4e:72:b1:
         c8:1e:70:6a:10:28:d2:5e:2e:e9:6a:93:5b:a8:c5:a4:88:cc:
         79:ac:19:a9:12:52:05:52:e7:a8:ef:94:be:ff:aa:1e:8d:0b:
         02:3b:cd:53:12:f4:1b:f8:9c:22:e4:66:a4:e6:72:7a:c8:7a:
         72:d6:b4:0c:d2:0a:50:f3:ec:a7:9d:86:00:24:2f:a1:b6:40:
         c1:39:cd:74:57:f3:0d:18:b6:b8:94:a6:3e:a9:32:82:06:57:
         9a:65:74:e1:a5:3b:64:3f:f4:06:3c:b3:50:b1:e8:23:bb:f9:
         9f:2a:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:06:43 2026 by rpki-client