Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
File:                     883931AAB8B1363015BC8FDDF0B582321767440A.mft (raw, json)
Hash identifier:          mPM39JevDmU0QoljdrYcBqNNfX40cFpcPD6vjvCQC0A=
Subject key identifier:   B8:36:E6:34:44:72:FE:0C:A5:2B:75:B4:37:9C:A0:6F:CA:51:DA:5A
Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
Certificate issuer:       /CN=883931aab8b1363015bc8fddf0b582321767440a
Certificate serial:       216F6D1DB35FFB1F84E626F2E559A1A74AFCBD43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
Manifest number:          01BD
Signing time:             Sat 14 Nov 2026 07:51:02 +0000
Manifest this update:     Sat 14 Nov 2026 07:46:02 +0000
Manifest next update:     Sun 15 Nov 2026 08:53:02 +0000
Files and hashes:         1: 323030313a3637383a3533633a3a2f34382d3438203d3e20313534313835.roa (hash: ToBUFvUom+h4rbM7uZ7L3aEUItGSsZaFzls2rQ5hJzY=)
                          2: 883931AAB8B1363015BC8FDDF0B582321767440A.crl (hash: efVQDTHvKPjB7isIIJOrrQESnrD1RhHMV5ZeuLiL7YQ=)
                          3: AS213605.asa (hash: igrNvZj8Ah3+J7gTmeE+yrLyghPaTuTVe4Bp7Kk0StU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 08:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6f:6d:1d:b3:5f:fb:1f:84:e6:26:f2:e5:59:a1:a7:4a:fc:bd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a
        Validity
            Not Before: Nov 14 07:46:02 2026 GMT
            Not After : Nov 15 08:53:02 2026 GMT
        Subject: CN=B836E6344472FE0CA52B75B4379CA06FCA51DA5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:29:33:e7:01:b7:b5:fe:dc:13:1d:86:96:
                    d3:f0:3b:18:00:0a:88:58:5e:2b:e4:f8:77:bb:c7:
                    52:69:e8:c4:44:1a:97:f6:84:e9:f0:68:12:03:04:
                    3f:95:24:33:12:0a:66:21:77:1c:94:82:78:a9:af:
                    77:44:00:fa:4d:6f:42:f7:47:78:82:4f:d2:1e:85:
                    e1:d0:0b:ef:6c:ab:bc:04:18:39:bc:f4:1f:47:7a:
                    b4:85:75:bc:f2:21:3a:02:8e:55:84:36:d7:9d:da:
                    da:a1:bd:70:43:14:9c:0c:db:e8:0d:8f:e2:e6:7f:
                    52:81:20:b4:c5:50:9c:1a:ba:da:f3:22:e4:0f:fc:
                    94:a2:6f:5e:24:f1:92:ee:cb:ac:c5:3c:84:f6:a9:
                    ef:0b:51:0d:12:b0:be:1e:83:1d:47:9c:99:2c:51:
                    c2:18:6c:a8:1c:d4:da:bb:03:ff:fd:3f:4a:28:8d:
                    de:5b:67:95:7d:fa:af:0f:57:e2:04:8a:e5:cf:b6:
                    c0:fb:d8:ce:2a:7b:93:8b:0c:da:ac:bc:1d:a8:f1:
                    a7:ec:a3:c3:aa:cf:c3:b4:42:87:60:f9:4d:2f:19:
                    2a:69:5d:b9:89:53:28:3a:f2:17:b8:98:b9:70:7f:
                    92:f6:92:6b:1f:5b:08:19:97:38:a5:0e:c4:cc:9a:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:36:E6:34:44:72:FE:0C:A5:2B:75:B4:37:9C:A0:6F:CA:51:DA:5A
            X509v3 Authority Key Identifier:
                keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5a:a1:2a:e8:ed:3a:4f:3c:36:49:27:1e:00:49:3c:3f:54:
         2e:39:07:85:24:47:6b:84:b5:3b:33:75:69:21:9e:08:65:98:
         64:56:b7:51:c1:47:7b:64:8d:f5:60:ed:c6:7d:9a:35:7b:b7:
         76:14:5e:50:13:58:60:12:1d:cf:d7:20:94:f7:5e:48:40:f0:
         b0:91:2e:04:d7:66:f8:75:8c:95:e2:0a:f2:40:1d:61:7b:44:
         5c:e1:c8:3d:11:6a:28:8e:72:eb:56:b0:82:66:d3:d2:ba:6a:
         0f:76:64:ac:af:21:8f:ee:6e:7a:58:db:73:ff:90:b4:2f:3e:
         7b:24:44:d7:ac:73:04:57:10:c8:f6:84:dd:54:ba:aa:d4:02:
         a2:f2:ee:fe:a3:6c:d9:6e:30:f5:a9:03:ae:19:e0:a8:14:47:
         e7:27:19:b1:f1:f8:65:dc:84:de:02:07:bf:da:f6:c2:5c:2e:
         2c:dd:cc:22:81:e8:cf:c5:12:50:1d:31:df:48:21:b1:61:4f:
         8c:3e:be:cf:57:5c:49:40:9b:63:87:d0:8a:a3:c3:bb:33:dd:
         2b:d8:dd:7f:6e:da:e6:7c:a3:36:a8:e9:af:33:3f:e7:2e:90:
         6c:d5:16:8e:fe:a9:5c:ee:0d:0e:2c:18:48:06:05:67:5d:92:
         95:3a:a6:13
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUIW9tHbNf+x+E5iby5Vmhp0r8vUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgzOTMxYWFiOGIxMzYzMDE1YmM4ZmRkZjBiNTgyMzIx
NzY3NDQwYTAeFw0yNjExMTQwNzQ2MDJaFw0yNjExMTUwODUzMDJaMDMxMTAvBgNV
BAMTKEI4MzZFNjM0NDQ3MkZFMENBNTJCNzVCNDM3OUNBMDZGQ0E1MURBNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oSkz5wG3tf7cEx2GltPwOxgA
CohYXivk+He7x1Jp6MREGpf2hOnwaBIDBD+VJDMSCmYhdxyUgnipr3dEAPpNb0L3
R3iCT9IeheHQC+9sq7wEGDm89B9HerSFdbzyIToCjlWENted2tqhvXBDFJwM2+gN
j+Lmf1KBILTFUJwautrzIuQP/JSib14k8ZLuy6zFPIT2qe8LUQ0SsL4egx1HnJks
UcIYbKgc1Nq7A//9P0oojd5bZ5V9+q8PV+IEiuXPtsD72M4qe5OLDNqsvB2o8afs
o8Oqz8O0Qodg+U0vGSppXbmJUyg68he4mLlwf5L2kmsfWwgZlzilDsTMmj9zAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUuDbmNERy/gylK3W0N5ygb8pR2lowHwYDVR0j
BBgwFoAUiDkxqrixNjAVvI/d8LWCMhdnRAowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx
MTA2LzAvODgzOTMxQUFCOEIxMzYzMDE1QkM4RkRERjBCNTgyMzIxNzY3NDQwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lEa3hxcml4TmpBVnZJX2Q4TFdDTWhk
blJBby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wOTJkMTZmMi05
YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMC84ODM5MzFBQUI4QjEzNjMwMTVC
QzhGRERGMEI1ODIzMjE3Njc0NDBBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllqhKujtOk88NkknHgBJ
PD9ULjkHhSRHa4S1OzN1aSGeCGWYZFa3UcFHe2SN9WDtxn2aNXu3dhReUBNYYBId
z9cglPdeSEDwsJEuBNdm+HWMleIK8kAdYXtEXOHIPRFqKI5y61awgmbT0rpqD3Zk
rK8hj+5ueljbc/+QtC8+eyRE16xzBFcQyPaE3VS6qtQCovLu/qNs2W4w9akDrhng
qBRH5ycZsfH4ZdyE3gIHv9r2wlwuLN3MIoHoz8USUB0x30ghsWFPjD6+z1dcSUCb
Y4fQiqPDuzPdK9jdf27a5nyjNqjprzM/5y6QbNUWjv6pXO4NDiwYSAYFZ12SlTqm
Ew==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:07 2026 by rpki-client