Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
File:                     20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json)
Hash identifier:          NcCb1c1ZnVXN6LhcSW22lixf02NKs/wW17cW4P7lDR8=
Subject key identifier:   74:A1:90:B8:5F:89:86:D7:06:82:55:6F:44:68:1D:02:7C:28:22:0C
Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Certificate issuer:       /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Certificate serial:       37636775E40EB4C47C5CF7D1F79317299680DBF4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
Manifest number:          06CF
Signing time:             Tue 29 Sep 2026 14:46:59 +0000
Manifest this update:     Tue 29 Sep 2026 14:41:59 +0000
Manifest next update:     Wed 30 Sep 2026 14:53:59 +0000
Files and hashes:         1: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: 5615Ny7sVmjEhhHlRGRDH3u/ySBnlb2mwndcttt3V9g=)
                          2: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: 3/JDrgPcwa3QkItCqhf73S0kH72VYqnJSSE72cvYDCQ=)
                          3: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: EOUQ1JZ1oz2xZOU8+mEukp9ybbKV7scsmw0lQsJAxX4=)
                          4: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: axDMINA+fsh/dpfRJarkl0ngrWnti1nZhRBa3/Pvw1o=)
                          5: 326131343a316563303a3a2f33322d3332203d3e2030.roa (hash: l1LgH+twMvgdn7/1KBWGxkEdCOcMXQ/E9AMQuJ/4pWU=)
                          6: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: M7y4yNzKisPGrMDI6N/h2uK0LmUwgVtJCXB3eT1YcCs=)
                          7: 326131343a316563313a376234303a3a2f34342d3438203d3e20323139353339.roa (hash: lk2g+VMPJ2e0ffh4BXNf9T04tdPmSZpAFUml3dW+JwM=)
                          8: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=)
                          9: 326131343a316563313a376235303a3a2f34342d3438203d3e20323135363835.roa (hash: IzwkS06+TU6xlgmjKohwCnvrPjgEE+53/+TvwhGB5Kg=)
                          10: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: O5hXxs076gE3Ctu2AmKUIcSxIccZcu0zLTOjhJ6fNNY=)
                          11: 326131343a316563313a313630303a3a2f34302d3430203d3e20323139353233.roa (hash: 9E1PsTjd11hXDLZSZeoJaNnT7ONzxHIoAoZBFV00R+U=)
                          12: 326131343a316563313a313030303a3a2f33362d3438203d3e20323131303636.roa (hash: VwMdcB7cjunOknijcMaBRHJjTJhyW3Liym/2KH9Cpo0=)
                          13: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: 0MGh72HtcBIx2dyROH4vCwTGrkjWjpybf+czr46U9xA=)
                          14: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: 7XqZ13Ef/+b1VNSXq2rgololpGJoJrZKisEm3FKehVE=)
                          15: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: 8VhdvV/ADl1dQyHcZOJm0iqoZEaI9FAWV7wRLCn1Kkc=)
                          16: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: wCpGpHKdqFN1DO1NvTXNItL3x3NUD8VGRqAFwBrJITc=)
                          17: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: 5zFC0aBKrn16Glyaue2oFptFutD2x5iVGxip/IIewrc=)
                          18: 326131343a316563313a313030303a3a2f33362d3438203d3e20323135313336.roa (hash: Hy38nW7g7jg3g8NEUSSR9hX3QcE4UfBQyRuLYa5OQGw=)
                          19: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: 6P+R6wuEEP+euC2TgU6pJdRCRgvMs4VP4k8K/rgjYxU=)
                          20: 326131343a316563313a313730303a3a2f34302d3430203d3e20323139353233.roa (hash: A8bwWH9/ybdeySNN01RK//BZzg4rKSE3B00g1VeCR5M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:63:67:75:e4:0e:b4:c4:7c:5c:f7:d1:f7:93:17:29:96:80:db:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
        Validity
            Not Before: Sep 29 14:41:59 2026 GMT
            Not After : Sep 30 14:53:59 2026 GMT
        Subject: CN=74A190B85F8986D70682556F44681D027C28220C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:39:7e:40:dc:7d:6e:c7:48:81:d5:70:8f:
                    64:a9:a6:54:49:00:85:e6:17:9d:38:ae:37:b5:92:
                    75:67:b0:ea:09:f7:b0:9a:58:1c:b2:ac:a3:ac:9f:
                    1c:63:0f:63:0a:3b:e3:4e:b4:45:18:da:a1:26:60:
                    23:d0:ec:fd:77:af:af:b8:cf:06:19:fd:ec:94:b3:
                    d8:08:af:28:d8:86:cd:ac:e1:c1:58:ac:9d:8d:2f:
                    c7:ef:05:58:8e:18:62:bd:f9:01:5f:bd:7f:2c:da:
                    cb:0b:36:aa:00:c1:4f:05:01:54:26:fe:ea:86:56:
                    26:15:c5:2c:ec:e3:c5:3c:a2:bb:62:b8:ac:7f:f7:
                    0e:5f:a6:80:4a:f0:dc:f5:84:5e:02:fc:c9:8b:5c:
                    aa:73:80:ba:a0:23:38:6b:18:1e:75:89:30:9a:9d:
                    4c:75:fc:54:48:aa:53:8b:b3:6d:d2:23:ae:83:c8:
                    d6:30:ac:59:96:ed:d4:a8:a9:fd:f1:f7:a8:c6:1c:
                    42:37:d0:b2:a7:e8:d5:4a:c7:e5:e6:4d:48:62:79:
                    0c:1e:2a:e4:b4:87:a6:9e:d0:8b:a4:73:9a:6d:c6:
                    74:94:1a:f3:f2:37:47:08:d1:d6:24:4d:1d:38:c6:
                    0e:83:28:8a:cf:5d:47:b1:62:52:71:c1:79:0e:c4:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A1:90:B8:5F:89:86:D7:06:82:55:6F:44:68:1D:02:7C:28:22:0C
            X509v3 Authority Key Identifier:
                keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e6:ee:b3:25:ef:6a:11:fd:3b:f1:f2:6c:f0:40:a7:15:3a:
         b3:48:8a:08:25:02:e5:16:de:8b:41:0b:92:88:58:c3:02:92:
         35:30:3b:34:80:ca:32:f0:ea:3d:1b:aa:3f:3e:d3:ef:06:d6:
         a8:e3:b5:42:da:97:e4:00:eb:65:c3:67:18:31:9a:95:2c:fc:
         37:68:26:e1:a1:a0:05:79:35:ba:ca:c7:e6:80:9d:2f:b4:43:
         b8:f4:c7:e4:dc:b2:48:fc:3a:b5:0b:46:f6:61:07:46:70:c6:
         9f:5a:48:b9:f9:29:75:8f:5e:68:b7:dc:da:08:b3:3f:51:92:
         7c:6a:2a:53:14:21:3b:8d:69:fa:3e:89:e6:4f:80:e2:53:b3:
         d5:97:bd:f1:1f:81:42:9d:9a:b7:9a:17:7d:0d:e8:fa:02:f1:
         7e:33:d0:89:dd:92:c3:31:fe:45:fe:fe:10:dd:83:69:1a:74:
         86:e9:2e:3d:4f:89:4c:12:f6:b0:be:d0:3e:c8:ef:31:63:4a:
         ff:ad:f3:0f:09:04:66:b3:94:53:64:01:23:fb:6c:80:a4:22:
         2f:ac:6e:0f:45:ee:94:87:de:59:3b:92:08:53:59:b6:25:3f:
         28:78:1c:8f:8e:2a:96:ef:47:8f:e3:34:91:90:0c:58:2d:a3:
         83:7a:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:42:15 2026 by rpki-client