Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
File:                     892C2C5990DF4D7045BB55A011F473261F0643F6.mft (raw, json)
Hash identifier:          caCDjMawDliFlXN/sPrnWxHjgUlSj7NHg25Jyt0w7ec=
Subject key identifier:   7E:11:87:FC:1A:9B:5D:31:41:46:F6:CC:23:43:9F:55:A9:57:DC:3F
Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
Certificate issuer:       /CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Certificate serial:       1D7B5892A500954BA1E69AC5AF4B9636C4E00982
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
Manifest number:          0153
Signing time:             Fri 25 Sep 2026 05:38:22 +0000
Manifest this update:     Fri 25 Sep 2026 05:33:22 +0000
Manifest next update:     Sat 26 Sep 2026 08:16:22 +0000
Files and hashes:         1: 326131343a373538313a366336393a3a2f34382d3438203d3e20323136313233.roa (hash: HgdPJda6r5W610xVzMNjTKP68bG2jdXcdcTL6VaTf2E=)
                          2: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (hash: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU=)
                          3: 892C2C5990DF4D7045BB55A011F473261F0643F6.crl (hash: tJsvlaTdMUPLyITkXoqSK43aOHCqq1mSG0/Q21CJovU=)
                          4: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (hash: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs=)
                          5: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8=)
                          6: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=)
                          7: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=)
                          8: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU=)
                          9: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eEYD+/uvxh4zHSJ/ztOoyn4X0s3MJpPiWt8uJufCQxo=)
                          10: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M=)
                          11: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: qRdEAnTHQewkn5xjFMDkvIHao/PLgA0XfOA580oQ+Wc=)
                          12: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (hash: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w=)
                          13: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7b:58:92:a5:00:95:4b:a1:e6:9a:c5:af:4b:96:36:c4:e0:09:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6
        Validity
            Not Before: Sep 25 05:33:22 2026 GMT
            Not After : Sep 26 08:16:22 2026 GMT
        Subject: CN=7E1187FC1A9B5D314146F6CC23439F55A957DC3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:e8:94:83:75:06:ba:98:ac:78:00:35:d4:
                    71:4d:13:aa:6a:cd:36:72:61:fa:bc:8d:0e:62:ea:
                    b3:11:6b:09:67:ac:98:d7:55:6e:89:08:a8:87:a8:
                    0b:f0:e6:6b:5d:7c:a4:2b:8c:71:9d:dc:ff:96:98:
                    9e:5c:60:40:8b:80:f9:3d:50:2b:bb:02:b6:cc:71:
                    87:c9:cf:96:e0:cb:6e:22:38:84:0e:3b:a6:7d:1d:
                    5f:b7:0c:25:0a:0e:77:56:85:ef:f7:4b:50:e6:44:
                    13:ab:df:48:f2:5e:08:8b:73:70:a4:f4:94:6a:47:
                    1c:0f:ad:12:37:da:1a:b3:fb:a9:b9:f3:df:58:bd:
                    27:ed:ff:5a:97:fe:e9:43:2d:53:14:48:ce:11:f3:
                    4a:c8:e3:57:59:81:8e:85:4e:c8:16:b4:8f:a7:a6:
                    8d:f0:6f:40:9e:45:61:2c:74:22:da:a1:21:07:ba:
                    ef:f4:ca:dc:be:3f:9e:b4:00:96:40:6e:b1:d0:0b:
                    ef:10:69:31:8c:cd:d8:04:62:8d:99:ec:d7:73:45:
                    4c:bf:82:2c:cb:f0:da:3e:30:35:8b:3c:05:fc:29:
                    0d:51:ab:a6:df:f3:c9:f3:78:92:64:e9:c1:41:f1:
                    93:92:7c:0f:ab:ef:05:98:e9:50:1b:e1:fc:6c:8d:
                    e0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:11:87:FC:1A:9B:5D:31:41:46:F6:CC:23:43:9F:55:A9:57:DC:3F
            X509v3 Authority Key Identifier:
                keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0c:1a:3b:7a:69:3b:f0:2f:99:60:11:ba:e7:03:a3:18:c3:
         4a:5a:89:67:46:5d:a6:21:5f:c7:49:85:81:32:b2:68:cf:1d:
         8e:ee:73:1a:5b:89:56:56:c5:4f:51:07:32:d8:69:da:9e:32:
         78:b6:50:6c:e8:32:83:5c:03:c3:85:70:8a:96:55:12:a6:49:
         e4:40:fc:63:42:f2:fe:10:b3:a2:97:81:29:f9:6e:0f:b8:cc:
         57:12:b8:b8:62:03:2d:a4:c4:e3:24:6d:f5:0b:63:e7:a9:a9:
         c0:d6:36:f6:7d:32:2a:6c:3a:b2:41:1e:d8:14:64:a1:3c:29:
         e4:4c:65:e5:1b:7b:e3:c8:4d:61:b0:00:cc:ff:a3:58:23:e5:
         da:1f:a5:b6:b9:6f:80:6f:be:bf:0b:42:34:ff:59:2a:7e:90:
         24:a1:9a:f3:d5:c9:85:65:3c:9f:28:8a:61:d7:a3:6f:24:a2:
         8d:86:7c:5a:26:bb:45:1c:68:ce:6c:3b:54:f4:b5:96:53:ba:
         de:86:6e:f8:8a:93:79:2b:54:6d:db:42:64:8a:d5:1e:82:65:
         d9:b3:38:98:4b:5c:7e:b4:b5:92:01:2f:64:52:e2:67:ea:b0:
         0d:db:c3:9d:9e:25:c3:59:4c:5d:37:9f:58:b2:5a:2d:c9:40:
         ca:47:42:e4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUHXtYkqUAlUuh5prFr0uWNsTgCYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYx
RjA2NDNGNjAeFw0yNjA5MjUwNTMzMjJaFw0yNjA5MjYwODE2MjJaMDMxMTAvBgNV
BAMTKDdFMTE4N0ZDMUE5QjVEMzE0MTQ2RjZDQzIzNDM5RjU1QTk1N0RDM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZ+iUg3UGupiseAA11HFNE6pq
zTZyYfq8jQ5i6rMRawlnrJjXVW6JCKiHqAvw5mtdfKQrjHGd3P+WmJ5cYECLgPk9
UCu7ArbMcYfJz5bgy24iOIQOO6Z9HV+3DCUKDndWhe/3S1DmRBOr30jyXgiLc3Ck
9JRqRxwPrRI32hqz+6m5899YvSft/1qX/ulDLVMUSM4R80rI41dZgY6FTsgWtI+n
po3wb0CeRWEsdCLaoSEHuu/0yty+P560AJZAbrHQC+8QaTGMzdgEYo2Z7NdzRUy/
gizL8No+MDWLPAX8KQ1Rq6bf88nzeJJk6cFB8ZOSfA+r7wWY6VAb4fxsjeCnAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUfhGH/BqbXTFBRvbMI0OfValX3D8wHwYDVR0j
BBgwFoAUiSwsWZDfTXBFu1WgEfRzJh8GQ/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5
MDVkLzEvODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYxRjA2NDNGNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAx
MUY0NzMyNjFGMDY0M0Y2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzcxYmVkZjZjLWNjOTEtNGJmMC05ZDZlLTdlOWIzY2I5OTA1ZC8xLzg5MkMyQzU5
OTBERjRENzA0NUJCNTVBMDExRjQ3MzI2MUYwNjQzRjYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAuDBo7
emk78C+ZYBG65wOjGMNKWolnRl2mIV/HSYWBMrJozx2O7nMaW4lWVsVPUQcy2Gna
njJ4tlBs6DKDXAPDhXCKllUSpknkQPxjQvL+ELOil4Ep+W4PuMxXEri4YgMtpMTj
JG31C2PnqanA1jb2fTIqbDqyQR7YFGShPCnkTGXlG3vjyE1hsADM/6NYI+XaH6W2
uW+Ab76/C0I0/1kqfpAkoZrz1cmFZTyfKIph16NvJKKNhnxaJrtFHGjObDtU9LWW
U7rehm74ipN5K1Rt20JkitUegmXZsziYS1x+tLWSAS9kUuJn6rAN28OdniXDWUxd
N59YslotyUDKR0Lk
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:55:33 2026 by rpki-client