Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          8XaO1l/Qc3rTPdyn8xyJCDNZAObHbb/TtSYa9TdkGMw=
Subject key identifier:   6D:FC:3E:FA:70:00:86:DE:58:21:EB:D1:D1:32:37:B5:E6:31:68:6D
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       6EFC88F93239E9186508A627D0E1033B528D2216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          021C
Signing time:             Tue 12 May 2026 22:15:16 +0000
Manifest this update:     Tue 12 May 2026 22:10:16 +0000
Manifest next update:     Wed 13 May 2026 22:28:16 +0000
Files and hashes:         1: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: 6VJ0BRDW5vzl9vSQFhJrbqoPj47Dkmz6QrWwxneNt7M=)
                          2: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: 0Zp30SZD1ySzP48ju/uKZj5em3cs2q9wJ8nxRbqKLek=)
                          3: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: jnmt3whqRbI6D2vf6sBU5xOTdVKUeUwqqqV6QhoXPsE=)
                          4: 39352e3231342e3137332e302f32342d3234203d3e203231383430.roa (hash: ufGlQ+DrhT42dGKvfqF9MmDLago1FeOS1zGb2GQoeMQ=)
                          5: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: yBIbgSutRM6w0CO+SuN+puGD+EsV9mNPvZ8qHnyid+k=)
                          6: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: S4ddw73hDoSEhNKtyBEjIhztHOdB0qUYUD8sWKdWm3o=)
                          7: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: 7k+RlsbEAvDIHt5Is/doveA233QJ/dZMJOIDSEPgfCs=)
                          8: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: 9sHNJMiehNbP1O+jWpsdoBoSI67XbsxRM7NeVaaB37s=)
                          9: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=)
                          10: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=)
                          11: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=)
                          12: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: IltzG0K+W6/4OY3N4Cei605pBnUrFv4cf5U0zN9qrBQ=)
                          13: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: 0Nw79EMxO4DuYLh23x86SyP3DqFJicDqK5+0xzSE8zA=)
                          14: 39352e3231342e3138332e302f32342d3234203d3e20383334.roa (hash: Z1Q4kx6vq2YLO0ENZ87r0ADZn0l74mnh92bq+MVy+80=)
                          15: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 0kzSFbUQv3IPSe44pUr9DkaCNbLJS/E0eVH3iom57gk=)
                          16: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (hash: AjgG1gM1OxMVlGFutJS1mpX2Qd4qqtcRZt6UVKIG+j4=)
                          17: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fc:88:f9:32:39:e9:18:65:08:a6:27:d0:e1:03:3b:52:8d:22:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: May 12 22:10:16 2026 GMT
            Not After : May 13 22:28:16 2026 GMT
        Subject: CN=6DFC3EFA700086DE5821EBD1D13237B5E631686D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4d:ee:8f:98:60:0d:79:66:40:f7:10:a7:a0:
                    6b:e5:8d:e8:41:3a:ed:b5:10:5f:ed:a1:6b:14:8b:
                    41:a8:df:71:a5:3b:45:21:d9:c7:8a:62:0e:e8:a0:
                    f9:15:e1:87:6f:e1:ba:40:98:ad:f9:eb:6d:73:12:
                    f7:d3:6c:67:0f:20:37:ae:6c:c9:cd:51:0e:af:5a:
                    52:66:af:79:27:56:39:e6:3f:de:3f:af:7f:2a:8a:
                    62:6e:5f:e4:08:c5:0b:3f:77:14:b3:a8:40:28:04:
                    bd:86:6d:1e:90:a7:c7:0c:79:08:20:4d:59:7f:91:
                    68:69:5f:d5:13:49:0a:03:aa:b9:ea:5b:a0:dc:91:
                    2f:ba:cd:ab:7e:ce:1e:ac:2e:f8:1e:8b:8d:fe:31:
                    8a:04:9e:95:32:4f:eb:35:6d:71:20:53:b6:99:e3:
                    3f:83:38:c6:c2:dd:df:11:4d:c6:a4:44:ff:94:c8:
                    db:b4:43:d8:e1:15:fd:0f:cc:63:29:90:9c:89:7d:
                    bc:75:b7:c8:f6:27:e3:3d:9a:8f:32:f9:94:7c:b6:
                    49:ea:1d:4e:7a:89:e9:54:21:29:4e:7b:b7:f1:82:
                    5c:cd:eb:a8:43:db:32:29:90:07:e7:0a:12:03:9f:
                    5a:49:1b:e9:a1:4d:d7:2c:92:5d:5e:bf:03:c0:06:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FC:3E:FA:70:00:86:DE:58:21:EB:D1:D1:32:37:B5:E6:31:68:6D
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:bf:93:38:2b:07:e5:8a:3d:44:6e:a5:77:1e:66:5e:39:c5:
         f0:3e:e9:9d:03:80:25:54:1b:90:b3:f2:81:01:70:07:cf:a1:
         bc:85:f1:d1:ac:eb:e1:26:9e:6f:f7:1b:93:48:81:cd:02:1d:
         32:3c:c1:83:d1:16:3d:39:8b:7b:35:bb:79:f2:e5:0b:4e:55:
         02:39:b8:fc:4c:35:34:a7:8f:50:2e:fa:5c:74:5d:c6:01:8a:
         93:78:a5:f4:68:b7:a5:dd:36:24:34:b5:20:be:b8:3b:c6:f1:
         bf:de:0f:b5:bb:1a:b1:08:13:f2:73:1a:0f:97:85:03:a4:d5:
         9e:15:4b:88:94:23:f7:8e:4c:65:d1:20:24:85:bd:be:05:88:
         ca:ce:9e:3c:85:12:47:c4:73:de:6c:0b:84:a1:cc:cd:a6:68:
         a2:3f:1c:95:4e:1c:c2:3f:b1:d1:94:3e:19:6e:c6:02:b7:62:
         6e:3a:82:e0:b2:c5:e0:23:35:3e:92:e7:e8:73:af:92:7a:a3:
         01:d0:25:2b:f2:ba:01:99:49:ba:d9:3c:16:da:83:e7:69:53:
         1d:e2:bf:0a:97:dc:37:7f:e4:70:34:f8:0b:ad:51:52:84:68:
         c3:ee:d4:2f:42:60:13:ae:18:fc:1c:96:ff:4c:33:ba:2d:de:
         d6:2e:3e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:23:14 2026 by rpki-client