Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
File:                     13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json)
Hash identifier:          kiSgdxALEpEH9eaf9mJBKO50dfv4XFu5sXFRz3dfIOM=
Subject key identifier:   AF:F6:82:47:41:E8:DE:3F:F7:44:5F:1A:F7:BF:2C:97:84:84:5F:7D
Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Certificate issuer:       /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Certificate serial:       087021EAEA2E936D16FF5DE97AAEF1AC89F48948
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
Manifest number:          02B9
Signing time:             Thu 23 Jul 2026 15:50:44 +0000
Manifest this update:     Thu 23 Jul 2026 15:45:44 +0000
Manifest next update:     Fri 24 Jul 2026 17:20:44 +0000
Files and hashes:         1: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: OqGaVqVCLNSInBlm8X6eu0kCi8tEf6Tx9W+YlK/qfuw=)
                          2: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: 13HgrI8alXwhfvRcR3cuM4UiuHGwnYfL7SIxKn1MyyE=)
                          3: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: tIRLcVg7UrhNFhqoUSzyKAfDY3qvSoSmXd0Y8F0kvUs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:70:21:ea:ea:2e:93:6d:16:ff:5d:e9:7a:ae:f1:ac:89:f4:89:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
        Validity
            Not Before: Jul 23 15:45:44 2026 GMT
            Not After : Jul 24 17:20:44 2026 GMT
        Subject: CN=AFF6824741E8DE3FF7445F1AF7BF2C9784845F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:69:60:85:2f:d6:a5:5b:e3:ea:e2:0c:7c:
                    1b:84:a2:90:78:3d:19:7b:9c:e0:51:be:2d:f2:b4:
                    f8:2c:e6:e1:7c:6e:d2:95:63:63:57:25:0f:a4:09:
                    79:fa:fe:08:02:ca:b9:a3:57:3a:b0:63:2a:be:c7:
                    2a:d0:bd:0c:d4:fa:73:e6:42:e2:bf:e4:1b:0a:df:
                    3b:5b:b1:da:c8:76:23:66:94:95:bc:ff:a5:c7:31:
                    a5:47:64:c6:99:4b:52:03:e0:70:ee:62:f9:ae:8b:
                    4b:40:ac:c0:66:af:1a:6c:4a:85:f8:05:db:03:8a:
                    29:18:0c:8e:22:7c:62:0e:12:4b:83:d4:8d:45:fb:
                    d1:d8:08:b1:32:56:98:85:54:42:4e:da:b6:67:7f:
                    b6:3a:fc:98:59:b6:4a:2e:26:7c:32:f2:5b:3f:a0:
                    cc:ac:5f:bd:f6:bd:36:34:8f:93:30:69:a0:0b:aa:
                    63:a9:a5:44:a4:51:3d:40:c9:13:f3:aa:ce:cc:de:
                    5f:69:af:c2:c9:9e:e6:3e:ee:76:cd:57:2a:37:3a:
                    b7:92:ea:56:95:0b:28:6a:13:32:31:7a:4b:b3:c0:
                    67:62:1c:f6:c4:dc:dc:94:9c:82:2c:73:4e:0b:86:
                    60:35:40:fc:4f:b2:41:da:b0:60:f5:1c:39:5b:b8:
                    40:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F6:82:47:41:E8:DE:3F:F7:44:5F:1A:F7:BF:2C:97:84:84:5F:7D
            X509v3 Authority Key Identifier:
                keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:2d:8e:00:83:3e:aa:09:b5:fa:55:ce:77:30:a7:6a:7e:ba:
         95:4a:a6:b9:4d:c0:9a:7d:49:d8:43:ed:af:98:49:54:85:7a:
         29:59:46:2e:9e:d2:45:eb:44:00:a4:3b:cb:05:0a:a5:41:ac:
         19:a7:d8:09:0b:25:f8:42:7f:74:68:53:d4:ca:83:72:47:eb:
         9f:52:d7:ea:58:e5:3a:6e:42:1e:2c:a8:ba:94:3e:77:50:52:
         4f:97:39:87:5c:f6:99:5c:1d:f8:3c:3d:2f:2a:e9:90:43:ac:
         64:53:1e:f2:e0:4c:fd:e9:74:6b:ba:27:4e:35:27:33:66:e6:
         07:9c:d1:4b:d4:79:43:22:da:23:01:58:88:a7:7d:6d:06:f1:
         21:6e:15:fb:fd:a0:2c:39:65:80:2d:ff:5f:98:a0:07:ca:70:
         6f:bd:e1:7b:8a:96:75:d0:cc:f3:ba:bf:fc:82:40:10:e3:4a:
         1a:bf:e9:a6:01:33:00:46:9c:f2:f0:76:fa:cb:1f:88:c0:bf:
         f2:6c:fd:ce:78:c2:73:2a:ca:47:cb:af:7d:72:54:08:73:33:
         b6:4a:44:26:41:14:b3:30:b3:a8:71:98:d9:6c:ef:38:dc:cf:
         0c:e3:e9:f2:88:26:67:cb:64:18:8b:64:f3:b7:d6:7d:ac:66:
         58:f2:a2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:54 2026 by rpki-client