Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
File:                     9B848163C7049122702E8D37941241ED5ADD94D9.mft (raw, json)
Hash identifier:          ESCZbpTZbcTJDxMAoyFoNOxatkCzOHSeDSW5nVPKMqU=
Subject key identifier:   BA:34:B6:AC:1B:99:3B:E1:20:23:F0:E7:2F:18:A9:FD:E1:3E:59:EE
Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Certificate issuer:       /CN=9B848163C7049122702E8D37941241ED5ADD94D9
Certificate serial:       0250BC414A3E11DE111ACD3F42049CD42579D4E8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
Manifest number:          C2
Signing time:             Tue 12 May 2026 21:49:00 +0000
Manifest this update:     Tue 12 May 2026 21:44:00 +0000
Manifest next update:     Wed 13 May 2026 22:37:00 +0000
Files and hashes:         1: 326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa (hash: SkZGavhoTJC5ic0mJF3ZGqoq5jWXKF9H+0oYVlFuDaQ=)
                          2: 326131343a373538333a3a2f33392d3438203d3e20323130343634.roa (hash: vW1fGYMrYSYz3dMO9eci0Q6WugN6uOArURnsJ7uQq7I=)
                          3: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (hash: u9LwYErQUKmq8o1Cp9FlrT7DQfjHnm37GLoiMAQKUWk=)
                          4: 9B848163C7049122702E8D37941241ED5ADD94D9.crl (hash: wHerrJlJr75p19EccjbfuDoxJ692o3LYZp4H57uFbEg=)
                          5: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (hash: aFhwRSDU+t/TQvGHJmF4CgULB5DA6EuNIybmGsacNPY=)
                          6: 326131343a373538303a636630303a3a2f34302d3438203d3e20323130343634.roa (hash: SE8E6a3ZD0LK5ZlZINe9eNIZjVQ9JR0AtsvzDG1ugzg=)
                          7: 326131343a373538333a3230303a3a2f33392d3438203d3e20323130343634.roa (hash: xKU1YO819a7VQTTpF+nB40wFij16/Jgq+O6qShtQ1sQ=)
                          8: 326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa (hash: txMtmYCSrCjAQUsz3jwIOMVv2WDfMNs3rFGjXdQ1uHI=)
                          9: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (hash: 6HRIzRgoHlrwDg0x+dQ+QTPqwbR2buVOX5nau8igN3A=)
                          10: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (hash: lZqMqZa8igc4AoCDRmP6SzhiPgp0yN3qUzgnbipm9bo=)
                          11: 326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa (hash: 966xfzbp7XI2tIIl6RtKV8fWr+EKvskhBHx3zk5WK2Y=)
                          12: 326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa (hash: mmfp1swzQs8+dv25AiJSqWincq1kV1e/VcrkZp1tcVY=)
                          13: 326131343a373538303a633030303a3a2f34302d3430203d3e20323130343634.roa (hash: BZx4A+1lDPAS1ebt61e3ltRE332soDf255t2tHvVUu8=)
                          14: 326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa (hash: QxJbzcNlut2XGQpfjiGDY/VAY9MqONp8dnDCfca/jtE=)
                          15: 326131343a373538303a633330303a3a2f34302d313238203d3e20323130343634.roa (hash: IxwgCbk25nW4zIf3Ev9+/v30oO87JlPDOY2TfrlWzrc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:50:bc:41:4a:3e:11:de:11:1a:cd:3f:42:04:9c:d4:25:79:d4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9
        Validity
            Not Before: May 12 21:44:00 2026 GMT
            Not After : May 13 22:37:00 2026 GMT
        Subject: CN=BA34B6AC1B993BE12023F0E72F18A9FDE13E59EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:d2:36:53:c0:da:58:fd:1c:e6:c0:a8:b7:
                    fb:ee:b8:38:6b:bb:9a:12:25:ff:c9:2c:67:34:51:
                    fe:4e:8c:b8:be:bb:75:79:6e:a6:32:9f:0c:e5:0b:
                    e6:de:66:75:0d:5e:3b:aa:db:36:41:04:e4:c4:48:
                    48:60:d3:b5:db:8f:f0:b9:27:a3:30:20:13:68:5b:
                    b9:24:71:a5:bb:47:24:5b:d4:4c:5b:bc:86:d9:85:
                    ed:54:b8:04:b8:94:0a:8c:69:83:84:1c:67:60:ec:
                    60:76:72:d4:0f:d9:20:ce:f7:e7:31:96:1f:aa:8a:
                    e1:a8:56:9d:9f:0b:a2:4f:76:1d:45:03:19:72:29:
                    b7:a5:05:5d:3c:85:8b:ca:ca:e5:fe:6c:2b:11:9b:
                    36:c7:32:02:48:d5:78:79:87:7a:57:89:98:3e:96:
                    14:a3:6b:5e:9f:53:03:70:5f:92:f8:1b:97:b5:45:
                    24:38:22:d1:67:89:10:8b:81:cb:88:a2:b2:a7:66:
                    e8:35:a1:6f:f2:ac:3d:49:7c:9f:13:c0:98:a8:b0:
                    ec:cd:03:5b:1b:b9:c2:32:a1:c9:0d:de:89:b6:6f:
                    1c:db:15:72:61:11:b8:35:bd:1e:36:8f:94:ec:e0:
                    84:43:43:30:ec:de:0a:b0:67:5b:0c:f6:ce:a7:7b:
                    55:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:34:B6:AC:1B:99:3B:E1:20:23:F0:E7:2F:18:A9:FD:E1:3E:59:EE
            X509v3 Authority Key Identifier:
                keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6f:66:6c:63:0f:55:a7:25:d5:98:53:a6:05:8b:ca:74:b1:
         1f:bb:c6:6a:6b:1d:b0:ac:67:6e:d7:d4:96:2a:ec:11:1f:1d:
         a0:c1:bd:66:97:7a:ca:de:3d:52:49:7a:18:e9:23:4f:14:46:
         cc:0f:1f:05:29:c8:49:1b:31:ac:fd:52:a3:40:76:04:21:80:
         76:5d:56:e7:f7:74:2e:ad:90:f1:ce:4b:9d:0c:8d:3c:31:7f:
         d3:87:56:02:f3:7b:b2:61:eb:e2:ea:5a:5a:3d:b4:e3:46:bf:
         67:09:4f:3b:ef:2d:66:75:dc:e7:84:95:a2:ed:35:fe:f9:dc:
         59:26:1c:b1:ed:c5:86:01:94:e8:f8:0d:da:f2:a7:9e:14:6f:
         38:22:e8:d7:90:69:88:2f:16:2c:2b:43:97:f9:55:7e:5c:7a:
         08:7f:94:fe:3b:ea:21:64:7c:0b:6c:0d:09:dc:b6:12:af:17:
         d4:b9:81:fc:03:17:8a:e5:79:70:60:1b:bd:c3:8a:f2:91:cb:
         cd:8c:23:55:5a:37:5f:31:6d:0f:90:4a:59:6b:d1:4f:34:63:
         24:05:17:82:7a:19:a7:33:db:ad:02:bd:2b:5d:80:b5:9e:ab:
         c8:88:60:03:ea:52:3f:e7:67:7d:25:8c:68:69:26:41:c5:c4:
         4e:be:f4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:55 2026 by rpki-client