Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
File:                     60D5CF86368D32D8BD736410814916DA300E83CF.mft (raw, json)
Hash identifier:          859kijEu4ZLOO7xdo6nJWvn6ID0layAlUNpU3aOBq9c=
Subject key identifier:   F8:B6:3C:11:28:DB:17:15:21:69:82:B7:8F:3D:24:0A:04:EF:36:F7
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Certificate issuer:       /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial:       224DCA0F2D3F3453AC1C00FDD1D70F1EF558B05C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
Manifest number:          CE
Signing time:             Wed 23 Sep 2026 00:25:48 +0000
Manifest this update:     Wed 23 Sep 2026 00:20:48 +0000
Manifest next update:     Thu 24 Sep 2026 01:19:48 +0000
Files and hashes:         1: AS402215.roa (hash: U4zqGiRh2HKz7V2BVswG4BxWJSD8QZQJN6sTG6xQBqE=)
                          2: AS218885.roa (hash: lmbftI7uPwX2re286SXzaYJgk2ze0TG0pJEe3MwdD44=)
                          3: AS38186.roa (hash: dsuwn/3M2LUnV+IKnH32JptJyKflMmZT+0mNMEafWOA=)
                          4: AS137409.roa (hash: OAHtflkSH7rfWtK82vwAdtKvj1khmmPIRF/8uLy9b/Y=)
                          5: AS205960.roa (hash: klvh7s/US/WhOVbuOD6eQFxaQjYezAJK98w9Jqytce4=)
                          6: AS147281.roa (hash: DiSiRw64bLLgFoNg29O/bSC+8t5k8ctXCfYCCfDIz54=)
                          7: AS2856.roa (hash: lTN8/vt3smxEIcast1BeI+binYh2056gwzs5+WmQRuw=)
                          8: AS3223.roa (hash: gla7DtHK1OrkIGVDoA01+OL3aT0M7RlbtSvmDghbNT0=)
                          9: AS214483.roa (hash: SPUe9FhPSX3hGSxN9xvgPo8hyrTOCSHNQfthlMB7BGY=)
                          10: AS219394.roa (hash: vzJcrg3ajNSV/DDqLPXW+cJV9GTjaQelCQvixE03OAI=)
                          11: AS31715.roa (hash: IgCz/N9E+w8nKuNJLUAbrE0l2DE1qoW2P/h+62/qPNU=)
                          12: AS40676.roa (hash: nBaGqH7C3J6hVVl/hLrUaoZEzWKu3gb3dTaTOsqnhZ4=)
                          13: AS140681.roa (hash: 4JCpOQrvL7qRzuxERggGyQ7ejQOtCYQW/neczGupCTw=)
                          14: AS9304.roa (hash: DQGnE2D1z0J8FBSnh+Yo6t7MF9FUteVLpM6pbEoa3Jc=)
                          15: AS199707.roa (hash: cqZNdPYfBW0SBV3E6mqQe2fod34zOXw2HSoa1nDu2yY=)
                          16: 60D5CF86368D32D8BD736410814916DA300E83CF.crl (hash: 9jiW8Ngf0/km7u6nufd91qXz8necTFLOvli8/VugzEw=)
                          17: AS219393.roa (hash: FRpsVXspbxo6y6if4zWnPXjaRoZlpeYy0MqZvoAoVNo=)
                          18: AS152179.roa (hash: JJd1V2KZXPkmruqXUGSz+i+ajVHrOsuH5U05eYMUzCQ=)
                          19: AS148996.roa (hash: ZnMXv5b1geOEhnLX5L1Rq34UGDbv0MEJjTifLBtEe08=)
                          20: AS25369.roa (hash: 07eNZ9Na4Rf2PrzufpbjcaOrd3RSRkDtIOUkQ/zNhVY=)
                          21: AS402288.roa (hash: 5hj/7PZQTGiCK6f7do/sM2E1Q5+fnlNhluVYOenygos=)
                          22: AS142240.roa (hash: WIfw/GycD6AYTvy/c/z8oyKQQNk3X4SaS3jBM2WLPUg=)
                          23: AS197537.roa (hash: RF2pchDBjJN9zUOu0vF0M2+Wgu8SnpmLNvNxWilLYoY=)
                          24: AS10648.roa (hash: QzGDG0Ww/qUGF7mkdsXh5AcoxsQKaochwHm2uLgp8So=)
                          25: AS152698.roa (hash: bFVhkaUjQpSE2LMSWn8jJ4/uGcOzPSD6/gOfreXyQmw=)
                          26: AS29802.roa (hash: KT6ZRsx/jQF6DHHkLdkG2KbRcpj858/4Isq60Xcx8Ws=)
                          27: AS6475.roa (hash: d6ROn/nCD56lej6Y1IiGDIfiFPYv5is5YCxb2AaX6pE=)
                          28: AS13537.roa (hash: B6bD0yeqYN8EGr/gyMJQve2bVkdaNlpuA148S9ZRj44=)
                          29: AS21840.roa (hash: sUOfAiYdaM80gpangBMV6FhA0LpfgLts35SPQWzB0Cc=)
                          30: AS219427.roa (hash: TwUQQmBooplu5yiXjQi9me3qbDacU1EKCx3fBz9eL6E=)
                          31: AS402265.roa (hash: nepIyk75nH/AuxkdJagyuE6I7GsAJVUuqzG1lzehl1w=)
                          32: AS834.roa (hash: M1INHrksNT6MEltiI6kKDelJFhyZ46taRTMiu+HTiUg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4d:ca:0f:2d:3f:34:53:ac:1c:00:fd:d1:d7:0f:1e:f5:58:b0:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
        Validity
            Not Before: Sep 23 00:20:48 2026 GMT
            Not After : Sep 24 01:19:48 2026 GMT
        Subject: CN=F8B63C1128DB1715216982B78F3D240A04EF36F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:e3:16:5d:1f:b5:55:d1:10:02:03:f1:f2:
                    08:ee:79:c3:16:e5:bc:53:85:be:7d:92:41:d8:fc:
                    c4:a7:1d:26:9d:a1:98:69:2d:11:19:92:0b:e3:30:
                    1e:1e:c3:15:3a:1f:e3:81:b3:5a:d5:ba:ce:4e:c2:
                    56:77:38:2e:af:c7:a8:ff:d5:30:cc:bb:62:fb:94:
                    0a:c9:72:4a:01:45:2b:59:41:ff:d0:c0:8a:6a:2c:
                    d1:88:26:b8:4e:34:1e:4a:d7:cc:65:79:17:56:47:
                    09:6d:9f:9f:80:57:9f:42:cb:05:57:19:32:37:b2:
                    59:e1:b6:91:48:50:ca:65:57:0d:4e:20:11:7b:39:
                    20:ae:b0:c4:5d:97:58:17:78:a7:0e:52:fc:0b:b3:
                    47:20:8c:1d:c4:58:a9:be:89:d4:21:21:71:70:31:
                    e5:12:61:21:ea:a4:f9:91:0e:85:c8:79:46:70:e7:
                    40:da:4c:e6:1c:b2:6d:c5:04:7f:fb:68:c8:c6:6c:
                    75:44:d2:44:f7:cb:96:de:8e:f0:2e:32:19:a4:46:
                    68:7d:ad:3c:3b:9d:a2:bf:22:c4:3d:25:43:fd:fd:
                    d4:b1:ba:bc:38:b3:21:51:68:42:35:cf:50:98:42:
                    7d:ff:be:04:e7:af:65:9b:59:d0:54:c2:01:2f:18:
                    c8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B6:3C:11:28:DB:17:15:21:69:82:B7:8F:3D:24:0A:04:EF:36:F7
            X509v3 Authority Key Identifier:
                keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c0:1b:5f:b1:cd:3f:48:af:68:98:8c:da:6e:08:0c:ad:27:
         c0:b0:91:02:19:78:8e:2d:c4:4e:9a:33:54:89:19:d1:5a:58:
         0f:63:23:ae:1c:e1:b5:03:c9:08:c1:dd:5c:65:a9:1b:4c:9b:
         82:92:8e:52:5a:11:3f:68:56:91:f0:75:06:16:5e:4b:9d:40:
         b9:c3:0c:4c:f1:0a:f4:5b:e0:10:a9:21:77:d7:f1:cd:10:8c:
         b2:20:cf:21:66:59:71:b4:8a:0e:50:75:89:11:cb:e8:78:5e:
         2b:2a:b8:cf:c4:4a:5e:62:f1:db:db:81:13:e6:cd:b2:af:59:
         a5:20:e0:f9:ba:4f:dd:03:8f:d2:6a:e7:70:ae:7c:6b:46:ef:
         48:ae:9c:82:a7:44:03:53:0c:c1:4a:e4:c1:b1:dc:5e:3f:26:
         97:9e:9a:2a:26:e0:05:d6:7d:c5:d0:b4:1b:ce:63:9d:c2:ec:
         b1:a6:80:fa:d5:a9:14:93:b8:98:98:8f:bf:28:26:aa:42:09:
         ec:c3:58:75:20:ff:a7:c9:d4:0b:d1:2e:4c:4a:0f:99:47:2d:
         b5:38:d6:50:75:cf:25:1b:84:57:b1:cf:a1:f2:67:31:fa:65:
         83:20:6f:e3:7e:82:d3:23:bd:b7:ea:ba:8f:81:ca:88:d3:d9:
         c1:27:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:21:25 2026 by rpki-client