Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
File:                     295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft (raw, json)
Hash identifier:          33MnzQXAQ/HCfjLRtXmjpITmXwZOumkD18trBmAx5Os=
Subject key identifier:   62:D8:22:76:AB:B4:F6:B7:F1:07:36:D7:2F:12:CF:AB:44:14:04:34
Authority key identifier: 29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46
Certificate issuer:       /CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46
Certificate serial:       423889D0B1E6697BD7143FA81329ED29268E130D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
Manifest number:          B6
Signing time:             Thu 23 Jul 2026 17:28:38 +0000
Manifest this update:     Thu 23 Jul 2026 17:23:38 +0000
Manifest next update:     Fri 24 Jul 2026 20:36:38 +0000
Files and hashes:         1: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl (hash: 6LVS5kYwCq7Vjr+gigvKVCpGLPdVbPONV7FE0xNLVo8=)
                          2: 326130313a6234303a3a2f32392d3438203d3e203438373030.roa (hash: zprKAfMxuhh44vBmZdJyS4oUsSHm80ESOd6bFepuvfw=)
                          3: 326130313a6234303a3a2f32392d3438203d3e203134363138.roa (hash: aQ7Zs1GXD2YhsOFRwSIq/T9v5bNh9rH0xnn29aQh438=)
                          4: AS48700.asa (hash: vc5Bz0waDsfQ0bs/Gu6racwgW1gSmnJnpEJHohHaeIg=)
                          5: 326130313a6234303a3a2f32392d3438203d3e203136353039.roa (hash: CivQf/u/Gk+LE+nokddTRzH9kTLqet4Y/E+g0q0KfIo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:38:89:d0:b1:e6:69:7b:d7:14:3f:a8:13:29:ed:29:26:8e:13:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46
        Validity
            Not Before: Jul 23 17:23:38 2026 GMT
            Not After : Jul 24 20:36:38 2026 GMT
        Subject: CN=62D82276ABB4F6B7F10736D72F12CFAB44140434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:b9:f1:20:b5:1d:28:bc:3c:c9:fd:7f:07:
                    3f:5b:d1:39:26:f4:c5:41:01:02:62:67:18:7b:36:
                    5c:26:27:10:57:80:1c:8e:90:69:ab:5e:64:80:ef:
                    48:bd:cb:70:8f:cc:90:f0:77:cd:af:c5:6f:c7:16:
                    c1:60:3f:17:3a:fe:94:bd:a6:0a:a5:77:10:31:0c:
                    f1:49:d7:bb:1c:9d:b2:22:d7:f4:b7:06:f6:b7:c6:
                    94:de:28:b9:96:2a:25:06:35:77:af:7a:72:6f:33:
                    4d:83:e0:f0:19:a7:1f:77:3e:cc:64:44:b5:7e:fe:
                    24:f5:63:31:ef:38:7f:23:51:b0:b0:40:51:6c:b3:
                    79:07:86:d1:12:06:c5:59:ce:df:22:42:34:bb:08:
                    a6:55:19:b2:81:02:94:c8:20:57:3c:ab:68:fa:35:
                    3e:3b:c9:72:78:04:fa:17:dc:64:a4:20:de:b9:30:
                    0f:84:a9:cd:fc:d5:bb:bc:ec:c0:0e:97:28:64:5e:
                    cb:6f:2e:eb:52:1c:5b:65:8b:25:bd:72:52:2d:aa:
                    93:02:ae:e7:01:08:44:5d:47:26:4e:24:9a:e7:80:
                    c7:a1:55:17:cb:c6:18:90:9b:01:52:6f:85:3a:10:
                    43:98:40:95:3b:de:6a:1f:c6:28:d8:cb:03:e8:1b:
                    d3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D8:22:76:AB:B4:F6:B7:F1:07:36:D7:2F:12:CF:AB:44:14:04:34
            X509v3 Authority Key Identifier:
                keyid:29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f5:50:61:4d:8d:2e:00:37:ab:e0:3a:62:4f:e9:ab:ba:5b:
         51:51:15:1b:a8:a0:da:bf:4b:ec:e2:05:28:e7:ff:16:68:d5:
         42:c9:f1:d0:98:63:61:9b:d3:ba:47:c8:38:d4:22:a8:d2:18:
         7d:ab:e7:30:c1:a3:8b:b1:3c:b8:6b:63:22:9f:65:88:dc:9b:
         d0:42:43:25:a2:6e:32:fd:2a:f4:18:44:59:50:13:b1:c4:ae:
         aa:55:d2:8c:d0:46:3e:ba:c6:fb:6d:31:76:2c:97:5c:c8:d1:
         3e:79:98:5d:8d:69:47:f6:e3:ce:6a:9e:d2:c5:c1:b7:dd:f3:
         65:ed:75:05:b5:bb:3b:f5:c4:c6:61:96:42:2d:d7:8c:1f:2f:
         bc:46:84:7c:e8:6d:c1:d2:54:1f:f0:3b:7d:c7:79:b7:ae:a8:
         86:57:13:b8:9e:83:ef:73:67:a8:fd:02:32:77:6e:41:2a:90:
         e1:38:24:3f:a5:bb:ed:02:0b:3f:b2:26:c3:db:12:0b:0e:6d:
         c7:98:cd:96:de:ae:7f:94:ad:ce:0d:0f:4a:98:0d:b7:e6:0c:
         f7:f4:22:a6:33:80:50:0f:32:ef:c6:19:bd:1e:30:df:28:e7:
         8e:91:5f:2b:b1:8d:49:dd:02:0a:1d:c9:0d:39:c7:a2:0c:93:
         3a:14:1c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:58:07 2026 by rpki-client