Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
File:                     883931AAB8B1363015BC8FDDF0B582321767440A.mft (raw, json)
Hash identifier:          vToZu0RPcKywxNFgAwkfYQf3R0u0OM6yRbnsGKVPJB8=
Subject key identifier:   37:98:78:02:E8:D6:95:10:3B:21:41:94:77:FC:C2:FF:EC:42:31:AC
Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
Certificate issuer:       /CN=883931aab8b1363015bc8fddf0b582321767440a
Certificate serial:       63109790B4A5C3A26B3E62F0494B4DC7EC2AE348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
Manifest number:          0177
Signing time:             Wed 23 Sep 2026 08:23:13 +0000
Manifest this update:     Wed 23 Sep 2026 08:18:13 +0000
Manifest next update:     Thu 24 Sep 2026 11:56:13 +0000
Files and hashes:         1: 323030313a3637383a3533633a3a2f34382d3438203d3e20313534313835.roa (hash: ToBUFvUom+h4rbM7uZ7L3aEUItGSsZaFzls2rQ5hJzY=)
                          2: 883931AAB8B1363015BC8FDDF0B582321767440A.crl (hash: bAsIjv6Ht/SSzTjB3wARVLruPDlCHSLjNRXb4CB2Aes=)
                          3: AS213605.asa (hash: igrNvZj8Ah3+J7gTmeE+yrLyghPaTuTVe4Bp7Kk0StU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:10:97:90:b4:a5:c3:a2:6b:3e:62:f0:49:4b:4d:c7:ec:2a:e3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a
        Validity
            Not Before: Sep 23 08:18:13 2026 GMT
            Not After : Sep 24 11:56:13 2026 GMT
        Subject: CN=37987802E8D695103B21419477FCC2FFEC4231AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:b3:27:ab:28:ef:66:4d:fb:62:cb:4d:cf:
                    28:a9:04:e5:f8:0f:ad:f1:ec:8b:64:fb:4a:5b:33:
                    ee:9b:ee:3b:8b:a6:f5:93:84:e5:38:fb:29:c4:0a:
                    de:9a:a3:05:36:04:07:fa:c8:b7:0b:74:8c:6c:c8:
                    67:0f:91:b7:23:e7:37:db:cd:31:7e:23:e8:56:7b:
                    42:25:3c:d1:99:2a:73:c1:e5:eb:61:a6:09:7c:72:
                    16:d7:4d:31:cd:0f:11:2e:93:44:59:cb:7f:34:0d:
                    84:c0:bc:d1:89:5f:e8:73:26:e2:66:b1:eb:56:59:
                    4f:74:5e:ed:e8:22:7b:8b:f9:a2:54:92:11:0b:80:
                    88:a1:dc:6e:91:6f:ff:57:1b:5d:2f:82:c5:5a:a0:
                    4e:1b:8e:df:bb:fa:7c:95:18:57:f7:13:e5:6b:7d:
                    d9:c1:b2:14:93:18:0d:0c:dc:ec:fd:5b:dc:df:f0:
                    2b:37:9d:87:76:83:d1:5d:b9:79:c3:52:06:48:62:
                    7a:35:2c:c9:c0:00:2b:3c:20:2f:19:2e:4f:21:1d:
                    20:5b:03:cf:2a:82:d7:76:4c:15:cb:96:7c:5b:ff:
                    6d:f0:63:ff:b5:dc:6d:e8:d4:55:3e:f3:89:21:69:
                    b3:e7:f8:3e:fd:c3:f9:85:d1:9a:a8:cf:be:ec:08:
                    5b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:98:78:02:E8:D6:95:10:3B:21:41:94:77:FC:C2:FF:EC:42:31:AC
            X509v3 Authority Key Identifier:
                keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6e:b8:fb:c3:28:99:58:3e:7d:cf:79:e4:40:c2:79:eb:e9:
         5f:cf:db:83:00:68:9d:8d:02:25:d0:13:48:67:61:f4:bc:86:
         05:a3:d4:ef:7e:47:18:e8:59:d4:d4:31:7d:ee:c3:97:63:d4:
         27:43:90:bd:ac:10:fe:d1:c4:a7:97:72:67:83:83:8a:9e:5f:
         4d:38:ef:a9:5b:ab:8f:a1:65:3a:ba:16:08:f3:36:20:40:61:
         f1:59:4c:6b:9e:01:9b:fc:4a:8c:e6:24:4e:dc:ee:31:bc:83:
         e6:e5:02:b2:b5:ec:ff:45:fd:6d:55:07:20:d8:dc:3c:c2:5e:
         98:b4:03:32:fc:17:bb:2c:d2:09:26:70:99:d6:30:af:8a:57:
         b3:05:dd:06:21:33:48:82:27:db:a8:04:02:6f:d6:a1:1a:ef:
         81:15:c4:2c:50:12:5e:2a:1f:d7:59:6c:96:2a:2f:90:53:1b:
         30:35:18:d7:74:21:e0:65:b7:70:20:93:db:bf:bd:48:8f:5f:
         43:49:27:47:30:4d:7b:e4:da:b4:85:91:88:c1:23:13:dd:ea:
         80:06:77:60:e0:7e:08:ba:b0:f3:e2:1d:94:c1:55:13:07:38:
         49:62:ed:6a:dc:0a:1c:5b:8e:b9:84:7d:7f:d3:22:71:53:90:
         31:8e:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:51:14 2026 by rpki-client