Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
File:                     A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json)
Hash identifier:          PUWwuC/hlZYgy9mGGR6XtBhmpwSUg4CjetofVG2aEK8=
Subject key identifier:   1D:EA:FE:B9:8A:EA:32:51:C9:D2:4D:AD:9D:6D:16:78:3F:2D:0F:5A
Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89
Certificate issuer:       /CN=A4A082EAE8EF48C7B407C40E742479EADD862089
Certificate serial:       113A46E5667F67089DA330141F9262B815B8D561
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
Manifest number:          02DD
Signing time:             Fri 24 Jul 2026 06:33:24 +0000
Manifest this update:     Fri 24 Jul 2026 06:28:24 +0000
Manifest next update:     Sat 25 Jul 2026 10:17:24 +0000
Files and hashes:         1: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: x4URndcJbSIXure+2iXcOWOE33cWiEMr6K82aexzHlI=)
                          2: 326130663a383563313a3339303a3a2f34382d3438203d3e20313331363330.roa (hash: SDgvWVR9BK4ArLiN2y0FdP04j29HfEBVHHfa70zlSZU=)
                          3: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: PpctkXb5KUjo1ZozH4ZG/Vu6RAiqzknnMgLdpVk1Gts=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3a:46:e5:66:7f:67:08:9d:a3:30:14:1f:92:62:b8:15:b8:d5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089
        Validity
            Not Before: Jul 24 06:28:24 2026 GMT
            Not After : Jul 25 10:17:24 2026 GMT
        Subject: CN=1DEAFEB98AEA3251C9D24DAD9D6D16783F2D0F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:f6:1f:1a:1a:0c:49:da:d5:aa:f6:cf:6a:
                    92:0f:25:47:17:51:bf:3f:fb:0e:fb:f4:99:39:f6:
                    5f:53:31:ec:e7:0a:e6:cc:4b:a1:bc:21:b7:8f:d3:
                    99:e6:2a:26:97:b1:4a:f5:3e:ed:ba:d1:fc:5a:4e:
                    33:bd:ed:f6:5f:1b:78:84:2b:ac:84:dd:2d:a9:4d:
                    31:87:aa:97:b6:03:ca:66:5d:18:39:3d:40:6d:9b:
                    3e:93:44:a7:cf:92:5d:76:e5:12:04:35:52:33:af:
                    88:d8:1c:b6:5a:e4:55:7c:f3:9c:b5:d7:fa:2c:96:
                    97:57:0d:6f:4c:e2:62:2a:57:79:fa:39:09:f2:1a:
                    d6:d9:6d:fa:8a:e0:82:c7:42:5e:75:e0:a3:42:89:
                    35:08:d5:73:f9:86:40:ae:9b:0f:23:a5:d3:d4:23:
                    8b:75:06:e0:0a:8b:34:04:f3:ee:a6:7c:34:1d:73:
                    5f:30:a5:91:3f:ba:97:06:9f:01:3a:a4:9e:62:10:
                    b9:ec:be:ce:5a:a8:74:9f:4b:5e:14:f6:06:5f:f1:
                    cf:82:9c:a0:c3:f8:71:a8:92:f6:d4:bc:f9:9c:fb:
                    03:6b:72:e4:5b:a2:92:7e:4f:9a:57:d6:c0:da:95:
                    95:5e:78:ab:fc:89:52:d3:57:88:2c:9e:48:b9:40:
                    4a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EA:FE:B9:8A:EA:32:51:C9:D2:4D:AD:9D:6D:16:78:3F:2D:0F:5A
            X509v3 Authority Key Identifier:
                keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ea:de:0d:56:3b:c1:e2:7d:57:4e:78:ac:1f:7d:a3:33:10:
         f6:fd:36:66:fe:8c:ba:53:e3:62:98:52:3d:36:d2:29:a3:ce:
         33:84:e1:d9:7e:9c:1a:33:87:eb:3b:36:3d:a5:63:61:60:0e:
         67:9b:dd:5a:b1:3b:83:83:30:5f:a0:64:82:ac:b4:b3:84:56:
         99:e0:99:e9:54:b8:c7:c4:a1:e4:eb:14:67:27:6e:1a:1f:ee:
         e2:e7:46:87:f3:a4:97:40:41:f2:ad:56:98:ec:af:4e:99:ba:
         42:fd:ce:b2:1a:73:c4:8b:34:a6:7b:c4:30:97:f8:02:00:18:
         69:51:e9:8b:ef:61:05:34:9f:f0:dd:56:9c:ec:f2:c5:47:63:
         ca:f6:9b:52:f2:93:d5:f2:db:42:de:52:76:6d:11:e0:4e:91:
         88:f4:69:7d:5a:c6:5b:bf:83:c4:87:4b:d0:94:ee:dc:81:ba:
         bc:69:a8:8c:21:08:d7:93:1b:e9:5f:43:2b:bd:44:2d:ae:b6:
         f3:4a:d6:d7:7b:f7:5f:e3:96:be:61:e6:ad:ae:ca:a7:1e:2e:
         c1:d2:e1:f4:93:d8:0a:71:c4:76:cb:69:ad:2c:f6:35:47:5e:
         e8:b1:55:e4:5b:a5:4e:00:b2:b8:54:61:f0:2d:83:82:ea:87:
         de:76:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:32 2026 by rpki-client