Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
File:                     B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json)
Hash identifier:          3nujrxV+KIC6mxFlTeqOq6yfMhRMVNegtaYffkqyKEM=
Subject key identifier:   86:7A:F8:D1:C0:2C:2B:4D:BE:38:32:A9:CC:6C:A3:28:CC:D2:5B:AD
Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
Certificate issuer:       /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Certificate serial:       118EEF71208E71AE03EBEBF24045D5D140B8D181
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
Manifest number:          01D4
Signing time:             Thu 23 Jul 2026 09:14:28 +0000
Manifest this update:     Thu 23 Jul 2026 09:09:28 +0000
Manifest next update:     Fri 24 Jul 2026 11:40:28 +0000
Files and hashes:         1: 326130623a396534303a3a2f33312d3332203d3e20323134343531.roa (hash: Kwvgoy8rYmD0xpV60BQdFB5n1PMXF0SutBXK7a1aRaY=)
                          2: 326130623a396534323a3a2f34342d3434203d3e20323134343531.roa (hash: Zck6J2syHDIk/NrGxsNjciGhnmYGMCo7e0kQNyx+lQM=)
                          3: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: eBcQ1vziEXltJ7Q/5SSSALHQ462temPFbhRL8rcjfMM=)
                          4: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: e3h2ZTUNZXjv98ArysnYSYWhaEkUBmjS0VqOuj8+VAI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8e:ef:71:20:8e:71:ae:03:eb:eb:f2:40:45:d5:d1:40:b8:d1:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
        Validity
            Not Before: Jul 23 09:09:28 2026 GMT
            Not After : Jul 24 11:40:28 2026 GMT
        Subject: CN=867AF8D1C02C2B4DBE3832A9CC6CA328CCD25BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:73:16:4a:ff:28:85:da:45:99:2b:83:cc:
                    5e:b4:ef:29:c5:8f:71:a6:cc:05:66:77:4d:79:55:
                    92:9b:ec:f6:ba:4e:06:d9:e8:4a:53:9f:2d:27:9c:
                    b5:61:6b:3b:31:30:ae:96:4e:87:f4:9b:63:bf:6e:
                    f8:64:56:90:dc:63:3f:91:a3:e0:22:6a:12:77:43:
                    13:d9:d3:f7:8d:2a:8a:4c:91:d9:c3:ee:42:c9:76:
                    91:7e:e2:26:5a:a0:ac:d8:a9:80:bf:04:bd:e9:d0:
                    35:44:d1:ee:7d:a2:22:16:69:39:a0:31:93:22:a3:
                    63:ef:8f:10:61:5b:b1:94:44:1c:e3:8e:ef:8a:56:
                    ef:b1:4b:b5:1b:32:b1:74:f1:f4:19:7c:f2:0d:89:
                    30:09:85:7a:2c:1c:2b:6b:4c:b6:1d:c2:c0:34:32:
                    1f:95:6e:27:fc:a1:75:12:bc:47:27:88:d3:b8:56:
                    34:47:f0:40:81:f8:fd:1a:08:5c:1c:7d:f1:55:fa:
                    cf:a1:24:07:cb:cc:d7:8c:a7:7d:a9:a0:5d:27:9a:
                    f0:70:55:3c:dd:7d:97:85:10:65:00:7c:32:c6:2f:
                    a3:d6:3d:dd:f2:28:41:d0:48:c9:3b:4e:40:b3:38:
                    6d:b2:35:7b:ec:55:55:60:82:ef:49:9c:49:04:a1:
                    4f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7A:F8:D1:C0:2C:2B:4D:BE:38:32:A9:CC:6C:A3:28:CC:D2:5B:AD
            X509v3 Authority Key Identifier:
                keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4a:f8:5b:86:57:bc:23:ae:79:6c:a0:ce:eb:d7:92:37:75:
         62:bd:ee:04:e4:a4:4c:13:90:dc:12:1d:c7:fc:86:44:96:ff:
         d8:2c:8c:3d:e5:40:b7:c0:36:d0:99:51:0f:06:dc:c6:7f:ec:
         17:96:70:98:ef:ea:c7:a2:3f:a5:07:46:66:ed:7b:bd:f6:5d:
         89:c1:49:03:2f:69:15:56:93:e1:99:57:ae:0d:18:dd:0e:9e:
         6f:6c:de:49:c2:ad:67:20:d6:8d:16:20:b1:52:11:8e:38:ca:
         1e:03:88:77:ee:22:19:fd:b4:88:d3:77:d1:b0:ae:61:bf:81:
         e0:69:19:d9:3e:9f:bc:f4:c2:f2:77:9d:35:75:6e:cf:3b:64:
         b5:ae:50:98:dc:6c:39:e1:df:66:5e:fa:0d:cb:ae:64:88:cb:
         fa:85:cf:c0:96:04:b7:15:40:c1:3f:8f:58:b2:b5:9a:71:a2:
         04:9d:50:67:43:ff:b3:73:fe:7c:df:f9:ae:a6:b7:be:66:a3:
         4a:6d:c0:8d:58:15:53:23:d6:40:84:51:af:55:99:c6:b6:94:
         21:5d:3f:7c:37:08:38:1c:2e:fc:62:24:f8:85:03:4f:10:e3:
         20:71:8e:7a:90:b7:13:b5:5a:b5:72:1a:d0:70:61:2b:d7:46:
         6d:17:cc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:10 2026 by rpki-client