Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File:                     8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier:          JsFwgqnUVUcw5oXw4yXrF8sVVCxXCVrIrF/mEtv6PLs=
Subject key identifier:   30:4F:69:E7:11:4E:8B:24:8A:DD:AD:4E:FF:49:EB:84:BA:AA:C5:E6
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       1CFC49A97A4AAB7C3BCBD49DF8AC5683A23A1B79
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number:          03F8
Signing time:             Thu 23 Jul 2026 08:57:17 +0000
Manifest this update:     Thu 23 Jul 2026 08:52:17 +0000
Manifest next update:     Fri 24 Jul 2026 12:12:17 +0000
Files and hashes:         1: 326131343a373538313a343835363a3a2f34382d3438203d3e20313530323439.roa (hash: +BTOyGnB3/SY/p8Ckxmoo0odwD52ixx8ttyy1kP23KM=)
                          2: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: iVSqmJC3EENf/XVlR6YpWn7MgLMOJzCIs/ETJKcPCZ0=)
                          3: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: a74YsL1qU7MZs6Id2KBnat9Mk42FfInZrWbOj9uOpkE=)
                          4: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: C+V4kSeLDw3sO8d40Phfc7PlZ5G8vdBgrmtSr5gkXYw=)
                          5: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 2UDjxG4RlvjPmviPQqGqAVVrCPWdscmfmRM0j7DODko=)
                          6: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: Yud6VyEfzu6bUn3ZGGTJfpmlFiOU2yKLbFt5IH7TKH4=)
                          7: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs=)
                          8: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: wlujEilvSGoE2xmgZ9r1cOQVVwj+z/fdPDzPxBXeMcU=)
                          9: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: fNKVMMPiiUgfbMZ2Oos538UVQ2g0QakPLvgkCLIakls=)
                          10: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=)
                          11: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: 8xEoc2WbgF3aR/A4BmGA/5swJlN4eULU8RI9MBQf5A8=)
                          12: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: MBbahVlOUY0BFTONMtnmzy3HTHvtjPISBdqoM0Cyb4U=)
                          13: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: OJXw4bailhln27dAWvZZO7aSgL/bQWfg+Oqf5sYF+sE=)
                          14: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: AJGvbF7BW78heyFfiSVem3lCgFOYdry3zzw/zEA8pXM=)
                          15: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: 7mp0zmnlMvREYQITFuGqaUnQo4881uWLywgG1Fg4GUU=)
                          16: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 6pSA0kSz3996g9/BXeNESbR6lV0s0HcQ+D2Slss3z5w=)
                          17: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=)
                          18: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: JCFWJgEKOIfNC/UVmwFEJVNgIuAfElA5+DwW/Ff9XGw=)
                          19: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: W5Heh9gse8mKUAV/4KyRLY8JwjKj+jz/mhW/8Nexm6w=)
                          20: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=)
                          21: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: GiP4GD8ggd65aZhgm+mIHhBgcxctP4oM9yKA+INTEK4=)
                          22: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: TeM7Pek2amM1UgjzSeE/qaGScbmirVVYpr/gbbLkRM4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fc:49:a9:7a:4a:ab:7c:3b:cb:d4:9d:f8:ac:56:83:a2:3a:1b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Jul 23 08:52:17 2026 GMT
            Not After : Jul 24 12:12:17 2026 GMT
        Subject: CN=304F69E7114E8B248ADDAD4EFF49EB84BAAAC5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7a:f6:bc:05:3b:a6:32:0b:be:80:2a:17:5e:
                    1d:90:fc:b1:dd:98:b2:a7:a2:2e:90:93:6f:0f:60:
                    24:47:77:c3:8b:38:35:d6:ab:26:d1:6c:ed:e7:43:
                    47:fd:1d:15:4b:9f:2d:f5:f6:4e:41:33:0d:d8:35:
                    14:23:5f:ec:07:6f:81:1d:cb:7e:2e:d6:eb:fb:b9:
                    91:15:85:20:1f:99:aa:30:b8:35:51:0d:16:de:b5:
                    a1:65:00:c8:09:58:23:ec:84:6f:16:0e:db:8c:c0:
                    79:44:0e:f3:54:97:9b:67:7a:97:7e:99:f5:63:86:
                    ce:e5:92:c2:25:12:7f:b4:a1:3c:85:77:03:f9:30:
                    1c:4b:01:c2:7b:bb:7e:19:63:7d:3f:98:36:f5:d1:
                    48:80:c3:df:ad:3a:c4:fa:8e:06:c1:63:f8:76:fc:
                    20:f0:5f:7b:63:5b:85:df:00:57:34:84:cb:c5:6d:
                    f4:2e:ec:4f:78:95:84:0b:cf:ac:4f:bc:64:b1:e6:
                    ff:f1:3e:4f:d5:57:26:9c:96:8e:bf:66:45:d1:a8:
                    57:a7:c0:22:78:f4:43:ec:2f:7b:0d:1f:52:21:93:
                    ac:2c:ba:a8:d0:6a:6a:96:21:39:1a:5e:70:5b:d9:
                    4a:f0:c6:5d:34:e5:99:76:e0:a8:21:13:94:2b:94:
                    ad:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4F:69:E7:11:4E:8B:24:8A:DD:AD:4E:FF:49:EB:84:BA:AA:C5:E6
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:8d:65:09:b3:3c:6d:60:6b:af:33:ce:58:0a:d9:6b:54:79:
         ab:e0:67:13:b2:02:63:8a:37:49:2e:88:6b:92:c2:34:ea:56:
         99:9e:41:66:54:23:7e:a8:bc:d0:a0:fa:fe:3d:d2:7a:d9:0e:
         76:f3:df:18:94:c1:20:61:6f:e0:a9:47:9e:b2:3a:79:96:57:
         e7:c6:b2:8f:9e:9b:1d:54:ce:b9:51:f7:ea:24:a7:e4:b4:98:
         c2:fa:43:ff:a8:7e:26:64:a1:1d:f1:32:02:9a:a3:1a:e1:c0:
         df:cd:6a:9e:00:c2:5e:11:c2:07:10:44:fa:93:85:e6:f9:4a:
         ca:8e:49:59:f4:37:02:d8:e6:57:76:c7:cb:79:b6:45:93:8e:
         b5:aa:28:fc:8d:f3:24:cd:b6:9d:97:9b:e7:f6:87:b7:e4:af:
         d8:16:e0:1e:18:7d:81:15:63:37:b6:95:b3:f2:6c:c5:66:05:
         c4:a8:39:d7:f8:26:4a:dd:69:f1:da:42:b1:12:a0:be:da:d0:
         58:31:c0:16:9a:fe:03:3e:66:1a:fb:41:00:72:3a:96:cc:15:
         55:ef:92:70:b2:65:86:e5:2e:7a:6c:28:e1:30:a7:17:07:81:
         b1:91:7d:14:be:35:50:4b:42:95:1e:1c:e8:93:da:08:c5:9d:
         39:1c:fa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:49 2026 by rpki-client