Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
File:                     E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json)
Hash identifier:          mKZPbPyCylEzSaes/XpH2fLiMNoNsCYwCmtLc9vK+wo=
Subject key identifier:   31:52:14:AE:0F:E1:79:9A:55:17:CE:51:70:C6:DA:BF:D0:62:B5:B0
Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
Certificate issuer:       /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Certificate serial:       043436CBC495E67683575270CCE992CF68BBBDD4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
Manifest number:          0103
Signing time:             Fri 24 Jul 2026 00:07:13 +0000
Manifest this update:     Fri 24 Jul 2026 00:02:13 +0000
Manifest next update:     Sat 25 Jul 2026 03:46:13 +0000
Files and hashes:         1: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=)
                          2: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=)
                          3: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=)
                          4: 326130663a316363353a313034303a3a2f34342d3438203d3e20323136323939.roa (hash: jkUpaqC40AVryws2M4l3hA6Beu5Hl97BKn2xwWx/2YU=)
                          5: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: vRfgK2nG8xDGXAMGtnE7kZWoSBskhA/t44AktrEainw=)
                          6: 326130663a316363353a313033303a3a2f34342d3438203d3e20323031333836.roa (hash: SxyQIKRflKDfzDUyUfrdFvcREAVMOS9I7Iy4ywW3U5Y=)
                          7: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=)
                          8: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:34:36:cb:c4:95:e6:76:83:57:52:70:cc:e9:92:cf:68:bb:bd:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
        Validity
            Not Before: Jul 24 00:02:13 2026 GMT
            Not After : Jul 25 03:46:13 2026 GMT
        Subject: CN=315214AE0FE1799A5517CE5170C6DABFD062B5B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:19:ae:e2:cb:dc:db:60:97:e6:d8:7d:02:5f:
                    ce:f1:20:12:00:d7:78:13:2d:87:c9:3e:71:70:ae:
                    4e:4a:b2:5a:b4:a2:c7:58:91:a8:9f:d3:2c:0d:58:
                    25:7d:17:d2:e2:df:cf:61:0e:84:f1:e4:3e:04:e1:
                    63:68:a7:3c:5e:7b:35:8d:20:1b:af:af:d3:9d:aa:
                    82:38:59:77:0a:1a:f5:39:84:c3:95:b6:6d:fc:ea:
                    eb:ea:22:bc:fe:f7:47:98:fb:dc:a0:52:eb:2a:25:
                    ee:53:5f:80:21:81:36:da:9b:5f:9e:c7:85:31:5c:
                    ca:5b:60:ae:7d:12:20:fd:89:c7:39:0c:4c:64:84:
                    77:96:c1:68:78:b1:a2:ce:4a:c8:bf:07:96:66:10:
                    71:35:a0:b0:ab:2e:2f:1c:de:b9:d5:ee:3f:ee:4b:
                    b3:e8:ec:f0:99:12:de:61:ad:1f:cc:f8:b5:da:d7:
                    1a:80:f1:c4:17:29:21:67:d3:59:8c:35:2a:95:ba:
                    e9:ba:11:0f:f0:73:c3:7d:03:71:88:15:82:d7:b2:
                    44:b8:2e:d1:cb:59:fe:45:ae:c5:74:5e:85:9c:a6:
                    9a:44:2a:2c:d9:d5:8c:e8:03:53:69:d6:ff:72:26:
                    c8:4b:5b:fe:00:dd:cc:3b:6d:de:1a:98:ee:7d:ef:
                    e2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:52:14:AE:0F:E1:79:9A:55:17:CE:51:70:C6:DA:BF:D0:62:B5:B0
            X509v3 Authority Key Identifier:
                keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:0d:31:96:37:8b:3f:3f:f9:78:6c:5d:c0:35:d2:84:ec:
         09:00:5b:d3:c0:61:2e:bb:55:29:f2:23:af:22:d6:3e:04:02:
         18:dc:03:69:ec:29:9f:9e:97:8b:5b:8e:30:5d:df:76:ba:6e:
         78:10:d3:ff:4a:2e:b6:3b:34:18:b9:64:66:b2:78:43:69:19:
         1d:79:57:1a:d9:25:e9:8a:27:0f:d3:58:9b:48:29:11:d9:c8:
         b9:90:6a:4d:41:d2:8d:f9:cc:d3:26:d5:70:e2:4a:7c:c4:6d:
         62:62:93:f1:b2:92:48:02:b0:f0:c2:1c:03:8f:9e:e3:d9:93:
         0e:f3:89:08:07:96:19:6e:0e:dc:e7:13:1b:e6:13:74:46:ad:
         b2:07:4b:cb:0b:ea:e6:9d:86:9d:7d:14:67:06:12:e7:eb:9d:
         31:6e:01:ec:b4:72:1f:a1:74:8e:21:fa:cf:0f:d7:c9:96:13:
         f7:ae:c3:70:34:07:4b:3d:6d:39:82:46:4d:39:dc:1b:48:69:
         78:46:9c:92:33:65:fb:0d:db:10:53:e9:6a:28:eb:c1:09:2c:
         32:a3:9e:6a:cf:13:77:10:ec:e6:53:f9:3e:11:dd:57:d7:2c:
         6b:c8:29:85:40:3d:3f:97:b5:e3:d0:d5:6b:10:32:ec:f1:21:
         24:29:03:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:36 2026 by rpki-client