Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
File:                     1F84A2481D280DE0A103598276DB0C954193C755.mft (raw, json)
Hash identifier:          AVAt4YXnIktfBRAVnahbRqjDYlFB2SErP/HloHUVrzE=
Subject key identifier:   02:EF:C6:BD:C2:B6:40:1A:4C:28:BA:D9:4C:D6:BC:19:43:17:F2:4A
Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55
Certificate issuer:       /CN=1f84a2481d280de0a103598276db0c954193c755
Certificate serial:       4361227FDBE3797008BC5C9E7E481C0717810AF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
Manifest number:          014D
Signing time:             Thu 24 Sep 2026 04:35:56 +0000
Manifest this update:     Thu 24 Sep 2026 04:30:56 +0000
Manifest next update:     Fri 25 Sep 2026 07:29:56 +0000
Files and hashes:         1: 3139332e32342e302e302f32342d3234203d3e203530333835.roa (hash: ZF+yUQjQ8mafUSh2s0Gf6Vv2FDEQSv7tGMKU59lfZ0Y=)
                          2: 1F84A2481D280DE0A103598276DB0C954193C755.crl (hash: sj5qTB1M2wzYaLTTzP/Ci0IfYuT6M3bYSC52Rsg0e1o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 07:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:61:22:7f:db:e3:79:70:08:bc:5c:9e:7e:48:1c:07:17:81:0a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f84a2481d280de0a103598276db0c954193c755
        Validity
            Not Before: Sep 24 04:30:56 2026 GMT
            Not After : Sep 25 07:29:56 2026 GMT
        Subject: CN=02EFC6BDC2B6401A4C28BAD94CD6BC194317F24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:92:c6:35:77:75:f4:99:fe:55:d1:0d:56:
                    00:ac:20:ad:60:5c:32:f0:6e:d1:ad:2a:2d:36:82:
                    e8:97:b8:ca:15:d1:c7:a4:1b:ca:8d:62:08:03:e3:
                    91:45:82:55:9e:21:24:2e:34:2c:e8:c5:fb:f1:d0:
                    d0:34:8d:38:c2:73:d6:64:f6:ed:6f:7d:03:55:27:
                    f4:19:7c:a9:5f:d7:ab:fd:2a:bd:3a:d3:2d:51:d5:
                    2c:a0:c9:e3:4b:ae:60:b4:d4:a6:0f:d9:16:63:dd:
                    37:af:1f:0b:be:b5:9e:c2:73:3d:b6:d6:f8:9f:40:
                    c3:31:2f:23:ec:14:20:92:7b:4b:89:a6:ed:71:c6:
                    72:2c:6c:33:1e:7b:d5:2e:26:a0:8c:ad:4b:39:68:
                    47:2e:6e:3a:6b:b7:eb:8c:13:5d:64:2a:a5:d9:9f:
                    97:12:0c:a5:c9:44:2c:4b:76:bd:88:f5:6d:a9:99:
                    89:76:63:17:f9:e4:b7:1b:0b:b8:97:54:9f:c8:84:
                    de:3b:f4:e4:1a:ea:07:e5:1e:a6:fb:ca:32:95:82:
                    b6:a0:a0:87:cd:0f:a3:ad:95:31:4d:76:79:8a:e8:
                    07:eb:4a:c7:22:81:3a:ed:06:8e:22:50:bf:14:88:
                    b0:e7:64:0c:f0:50:06:c9:4d:67:94:f3:b4:c6:33:
                    5d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EF:C6:BD:C2:B6:40:1A:4C:28:BA:D9:4C:D6:BC:19:43:17:F2:4A
            X509v3 Authority Key Identifier:
                keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:5d:c5:70:48:02:60:77:46:a5:e0:8b:3a:10:b1:15:b8:45:
         e8:ca:76:10:fe:f2:34:2d:a8:a0:99:64:4b:8e:f0:52:09:26:
         b9:77:69:65:1c:2b:40:1c:5b:80:e2:22:15:f1:bb:e5:cf:d0:
         7e:ea:eb:e6:87:d0:78:6d:29:1a:de:e5:ab:9b:91:b6:8c:26:
         5f:02:53:89:5d:b7:7d:e9:a2:4f:07:38:35:d1:4b:bd:4a:ac:
         ce:61:09:75:13:e1:30:c8:66:d9:1d:37:22:84:14:cd:1a:b4:
         da:a5:9a:d7:7f:70:c8:2e:50:fd:e4:59:fd:7d:a2:fe:d0:fb:
         ea:b0:55:30:4b:17:e2:87:19:92:51:bc:57:82:b3:fd:c2:40:
         be:57:4b:8b:28:17:22:7f:b0:93:07:19:22:fb:c1:3a:2c:70:
         e9:79:78:30:b2:df:6a:b3:3f:cb:72:2e:de:ef:f9:bb:d7:82:
         d7:1a:d1:98:32:48:7a:aa:00:d6:fe:ee:00:cb:9f:d3:0f:cd:
         9a:39:86:6a:02:65:61:d3:04:90:f7:64:7f:10:55:ba:ea:df:
         8f:29:4e:34:ef:54:cc:5c:8d:ea:7a:03:37:71:c1:2c:9e:76:
         46:54:94:aa:d2:93:fd:da:c4:20:e9:3d:6f:9b:7e:05:37:37:
         f0:1c:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:21:53 2026 by rpki-client