Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
File:                     E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json)
Hash identifier:          G24d+/Ol15HfG5jJWpCsy+1uoU3BN24e876+/9fFW5c=
Subject key identifier:   AD:C6:FF:B0:99:93:34:51:3F:DA:A5:77:8D:75:BF:0B:B2:C7:47:2F
Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
Certificate issuer:       /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Certificate serial:       05A18C78FF55214FA5AEE9A15AE7FD494D522BC0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
Manifest number:          5E
Signing time:             Thu 26 Mar 2026 00:13:21 +0000
Manifest this update:     Thu 26 Mar 2026 00:08:21 +0000
Manifest next update:     Fri 27 Mar 2026 01:30:21 +0000
Files and hashes:         1: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=)
                          2: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=)
                          3: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=)
                          4: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: jlAMZXZHBrN4WNrvXWe8DK0dcQD3Q5WIGVxMORDNavc=)
                          5: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=)
                          6: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 01:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a1:8c:78:ff:55:21:4f:a5:ae:e9:a1:5a:e7:fd:49:4d:52:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
        Validity
            Not Before: Mar 26 00:08:21 2026 GMT
            Not After : Mar 27 01:30:21 2026 GMT
        Subject: CN=ADC6FFB0999334513FDAA5778D75BF0BB2C7472F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:66:ff:39:13:af:d5:eb:cb:24:a8:1c:b5:08:
                    40:13:a1:67:10:8c:6e:ee:8f:66:27:6f:8a:03:2c:
                    40:03:c4:d1:36:11:7b:3b:16:71:28:44:88:69:3e:
                    c3:3e:47:bc:d4:29:95:22:c1:6b:e5:e4:8f:dd:91:
                    57:28:13:c9:eb:96:30:b3:8a:59:9f:62:1f:00:68:
                    bd:25:1e:09:0e:3d:35:c0:73:f9:2e:46:9e:78:5b:
                    44:78:c2:99:5c:2a:cd:18:59:af:97:36:e2:3b:40:
                    28:f8:c7:92:08:1e:d9:97:a2:27:b7:89:36:f9:72:
                    d8:f5:30:c0:96:93:1a:4b:25:bf:fc:f6:e7:8a:e5:
                    9d:59:3a:89:fa:f9:7a:f7:59:02:08:89:ea:c6:ef:
                    3a:12:80:02:f4:0f:cd:38:66:27:97:c8:db:fb:48:
                    2f:90:51:d1:40:b6:2a:3a:fc:71:0b:fb:52:7f:3c:
                    08:5f:9e:fb:96:3f:1c:05:11:07:4e:c5:fe:89:7d:
                    2e:ec:06:76:8e:15:eb:49:ce:dd:9f:d4:e7:17:f0:
                    1a:55:52:b2:01:5d:2f:f2:57:12:8f:d1:92:61:5f:
                    cf:18:42:58:bb:e0:40:c4:85:a2:15:cb:66:4f:01:
                    0a:9f:9d:20:3e:69:77:aa:ef:39:b8:f1:c7:46:4e:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C6:FF:B0:99:93:34:51:3F:DA:A5:77:8D:75:BF:0B:B2:C7:47:2F
            X509v3 Authority Key Identifier:
                keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e1:9e:b2:e0:08:71:33:77:97:5b:dc:81:04:85:a6:0e:48:
         ad:86:c1:7b:57:4f:d5:5f:75:25:62:81:ba:48:1b:15:35:bd:
         12:b9:ab:4a:80:2c:7e:47:ec:01:34:fd:d9:e7:09:7a:45:11:
         53:5c:e4:7e:00:d0:14:67:4b:15:c4:8b:57:d5:80:b4:8f:8c:
         1a:c9:a6:37:bd:d6:2a:09:6f:bd:9c:a1:8e:c2:af:f8:e8:ab:
         5f:70:c8:31:fb:18:0a:eb:4b:7e:28:96:30:64:8c:66:a9:f9:
         75:13:1c:eb:d4:15:10:c2:fb:69:4d:91:3e:41:4d:ee:a7:3a:
         e5:c0:44:28:01:0b:01:df:27:58:29:3d:5b:4a:33:0f:e1:94:
         21:45:b8:aa:bb:72:83:e8:dd:e8:e4:33:66:cb:f5:b8:ce:d2:
         be:93:7f:79:81:c4:bd:ab:91:ef:ee:49:cc:bc:c8:c4:53:6f:
         34:83:94:f2:94:d8:2e:cc:cd:fe:87:e2:ef:70:e6:d4:3d:ca:
         3b:aa:b9:1a:45:b6:49:95:e7:05:91:b5:8a:8d:02:25:e5:39:
         e7:47:fa:96:66:a5:f9:3a:0c:25:8a:00:cd:0a:7a:01:f2:af:
         df:de:04:5c:50:4f:eb:6d:b2:39:1e:ec:7f:33:90:d8:8b:d0:
         eb:85:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:02 2026 by rpki-client