Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
File:                     1F84A2481D280DE0A103598276DB0C954193C755.mft (raw, json)
Hash identifier:          ifd5fP0qYPDZvfyJbM2Fii4o5Ly9b3LyBlt0l2adaNE=
Subject key identifier:   E0:91:34:9B:A6:D6:9A:77:DA:9B:69:2E:33:19:0D:03:93:53:47:02
Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55
Certificate issuer:       /CN=1f84a2481d280de0a103598276db0c954193c755
Certificate serial:       595719B84663F07242A1DADE410720A695052D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
Manifest number:          F7
Signing time:             Thu 23 Jul 2026 15:33:48 +0000
Manifest this update:     Thu 23 Jul 2026 15:28:48 +0000
Manifest next update:     Fri 24 Jul 2026 19:22:48 +0000
Files and hashes:         1: 3139332e32342e302e302f32342d3234203d3e203530333835.roa (hash: ZF+yUQjQ8mafUSh2s0Gf6Vv2FDEQSv7tGMKU59lfZ0Y=)
                          2: 3139332e32342e312e302f32342d3234203d3e203235313938.roa (hash: tu1VWADpDVIR+YbpiB1AkhOtamaNSmGBU07mI/bDM1c=)
                          3: 1F84A2481D280DE0A103598276DB0C954193C755.crl (hash: jZiRYDdomCI8JjEM6T8IPUeU+CSEYx64OmTtPNNn/gQ=)
                          4: 3139332e32342e342e302f32342d3234203d3e203436333730.roa (hash: BNPYbbibnrXcaaWfh8lLNxar9l/UN0FRAxH/mM14IKk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:57:19:b8:46:63:f0:72:42:a1:da:de:41:07:20:a6:95:05:2d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f84a2481d280de0a103598276db0c954193c755
        Validity
            Not Before: Jul 23 15:28:48 2026 GMT
            Not After : Jul 24 19:22:48 2026 GMT
        Subject: CN=E091349BA6D69A77DA9B692E33190D0393534702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:7d:7a:9a:86:6f:36:de:01:ea:b4:88:4c:
                    2d:a8:fb:2b:5b:8d:4b:48:ec:0a:8f:7b:fd:93:0e:
                    fb:7c:66:0c:9f:04:f9:f7:eb:8f:c0:e7:e5:9b:95:
                    e1:c0:05:f5:8b:d0:92:e6:f5:51:4d:80:68:bd:44:
                    61:fe:55:f7:cd:f8:e6:bb:54:54:67:17:92:a2:97:
                    b0:75:41:fd:db:fc:ff:f9:97:a1:27:dc:24:81:db:
                    4e:20:2d:ee:19:aa:e0:aa:f0:a0:21:de:9d:0c:f4:
                    1c:fa:bc:ca:e8:67:7c:bc:04:75:ee:b4:5d:26:53:
                    fb:b6:53:d9:79:d7:90:12:d4:3e:eb:53:bc:6a:d5:
                    a8:f2:44:f2:8c:56:db:3a:99:ba:28:b8:12:0e:81:
                    44:f3:92:ee:13:93:b9:95:89:bc:fe:47:7a:96:5f:
                    fc:ad:3a:12:71:5f:b3:5b:bc:35:eb:2d:93:8e:fe:
                    23:f6:35:a0:e5:58:37:24:b2:c1:fe:f2:19:c2:20:
                    bc:c8:07:d9:62:80:e8:68:97:b7:1d:a5:5a:a3:94:
                    8d:97:db:74:7c:ce:31:3d:c2:e3:4a:ae:7f:8e:15:
                    87:de:e9:34:d7:3b:fe:bb:50:16:e5:9f:54:20:25:
                    6d:0d:33:a5:89:6c:5e:71:86:bd:fb:1f:2f:5e:71:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:91:34:9B:A6:D6:9A:77:DA:9B:69:2E:33:19:0D:03:93:53:47:02
            X509v3 Authority Key Identifier:
                keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9e:6b:3c:c4:8e:14:39:f1:ad:bf:0e:7c:c8:bf:fe:f2:69:
         12:c9:56:9f:bd:68:e2:b9:b3:75:24:89:ed:7a:ea:e2:92:ab:
         06:0a:25:73:c4:59:59:f6:09:d7:49:b3:21:a5:22:75:18:5d:
         19:9b:00:3e:d5:bf:b4:91:fc:d5:98:2c:9c:5a:11:62:57:5d:
         5d:13:d1:e1:41:8a:e5:c6:f5:44:f5:49:d6:f6:5a:a8:df:b3:
         dc:a0:a9:4c:fa:d6:12:8c:d2:88:54:61:07:f6:07:ae:bd:ea:
         df:3c:25:14:b5:65:b1:85:c7:f2:8e:75:df:2d:a9:85:f4:96:
         c2:ff:19:6e:de:07:55:bb:35:8a:83:d9:84:75:d5:01:86:87:
         ce:55:11:a5:f0:b0:b3:61:00:27:83:92:e7:f4:b0:46:aa:5f:
         ba:2b:8f:e7:77:0b:be:6b:f5:f2:b4:20:4e:95:77:78:0a:68:
         ba:08:58:6d:a7:e2:9e:a6:2b:e4:84:83:ad:75:e7:ed:6a:66:
         86:3a:88:31:b3:76:8d:22:92:2d:19:04:37:df:e6:b6:e9:9e:
         12:f1:67:5c:c2:8c:97:48:21:bc:c1:54:e0:8e:bf:37:6b:2c:
         61:b7:db:9f:01:df:e0:ac:69:2f:c2:94:49:ff:b6:44:6a:63:
         b6:17:08:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:11 2026 by rpki-client