Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
File:                     892C2C5990DF4D7045BB55A011F473261F0643F6.mft (raw, json)
Hash identifier:          09ao9QizXsVGbhCo8jYPzJc2R/iydXGJ+l+OtByZ+Zg=
Subject key identifier:   8B:54:76:89:D9:EE:2D:26:5E:2C:79:4A:23:20:11:C4:52:6E:78:D8
Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
Certificate issuer:       /CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Certificate serial:       42A4736F581CDC85AF923FDF15D2539FBFB788F8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
Manifest number:          FF
Signing time:             Fri 24 Jul 2026 03:20:51 +0000
Manifest this update:     Fri 24 Jul 2026 03:15:51 +0000
Manifest next update:     Sat 25 Jul 2026 06:15:51 +0000
Files and hashes:         1: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eEYD+/uvxh4zHSJ/ztOoyn4X0s3MJpPiWt8uJufCQxo=)
                          2: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU=)
                          3: 326131343a373538313a366336393a3a2f34382d3438203d3e20323136313233.roa (hash: HgdPJda6r5W610xVzMNjTKP68bG2jdXcdcTL6VaTf2E=)
                          4: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: qRdEAnTHQewkn5xjFMDkvIHao/PLgA0XfOA580oQ+Wc=)
                          5: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=)
                          6: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ=)
                          7: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8=)
                          8: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (hash: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU=)
                          9: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M=)
                          10: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (hash: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs=)
                          11: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (hash: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w=)
                          12: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=)
                          13: 892C2C5990DF4D7045BB55A011F473261F0643F6.crl (hash: zYrswEbJ46CboqJEtr37gCjwnHHP+3DCRzMvNQezq0s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a4:73:6f:58:1c:dc:85:af:92:3f:df:15:d2:53:9f:bf:b7:88:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6
        Validity
            Not Before: Jul 24 03:15:51 2026 GMT
            Not After : Jul 25 06:15:51 2026 GMT
        Subject: CN=8B547689D9EE2D265E2C794A232011C4526E78D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:e5:70:a0:d6:5d:6c:9b:cc:49:c7:a8:5c:
                    ea:0b:0c:54:7a:7a:71:63:e8:0d:0e:7a:b6:37:5e:
                    fe:8a:51:b0:92:11:95:2a:78:a6:10:30:df:2f:cd:
                    1b:7f:51:34:e3:37:42:9f:8b:d7:6a:5d:11:af:1e:
                    7a:ce:a5:37:82:71:d3:0b:e7:da:e5:1d:aa:b2:11:
                    f6:77:ca:b3:46:49:43:97:a0:22:24:a2:d3:c2:15:
                    ec:15:87:9c:6e:46:bb:27:20:3d:d2:0a:2b:d1:b7:
                    58:46:20:61:e1:cd:60:91:60:02:69:f8:3d:14:fa:
                    a7:f9:49:6c:6e:a0:b9:2d:5e:83:a7:21:4d:a2:c9:
                    38:85:3f:04:2c:05:24:a4:24:37:f0:fa:b8:16:cd:
                    7f:6f:62:76:75:28:aa:71:74:32:22:5f:35:6b:e9:
                    f3:3b:ee:0c:03:39:1e:91:24:b4:98:a4:66:b4:44:
                    6c:59:30:e3:12:0d:0e:39:9c:0e:5f:d3:88:e2:f6:
                    a1:0d:97:15:01:51:b5:1e:34:97:33:f0:c5:14:59:
                    da:0d:fc:8f:1c:4b:20:bd:7e:28:e2:89:c4:5b:9e:
                    a7:3b:66:6f:e6:b9:bd:8f:9d:9c:32:14:0e:0f:ca:
                    bb:ee:4b:71:d7:7d:ef:90:2f:78:4b:53:15:76:09:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:54:76:89:D9:EE:2D:26:5E:2C:79:4A:23:20:11:C4:52:6E:78:D8
            X509v3 Authority Key Identifier:
                keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9e:07:c9:96:97:06:24:7b:45:98:50:ef:fa:d5:18:37:2d:
         07:98:19:48:e7:d1:d7:45:b4:f4:b1:64:16:0e:b2:93:b7:e5:
         5c:63:e9:a6:56:0a:d2:c0:11:f5:1d:8c:1c:1d:08:93:ab:6a:
         b8:98:f2:9f:49:c0:8a:f1:0b:26:d3:b3:f0:40:23:39:19:3f:
         e3:d7:41:35:d2:b1:2e:83:c0:cb:53:03:9f:56:2e:05:2d:97:
         5c:2a:d9:1d:b6:77:8b:e4:84:7c:7d:dc:0d:d3:96:e6:c6:82:
         62:f7:a1:72:ca:de:70:1e:d2:48:1c:b3:b5:17:09:04:7b:ac:
         cd:d8:e5:93:99:05:76:9b:a2:b0:f1:75:58:3d:dd:90:94:3a:
         48:fe:53:32:c1:07:52:9e:18:12:2d:fd:b8:53:58:ba:f4:33:
         ce:e2:88:60:68:22:7b:13:9e:31:36:aa:c5:e8:78:15:45:70:
         4a:8e:f0:6f:c2:05:e5:66:f8:25:ea:b5:cb:e0:aa:33:f3:5f:
         35:6b:b2:ec:6a:a1:75:de:49:c5:fe:50:05:45:48:ff:75:a9:
         df:8a:62:68:1e:cd:55:a0:2c:aa:f0:37:e8:9d:f3:7a:33:3a:
         a0:4f:f1:8a:8b:9f:36:b4:79:f2:bc:2e:0b:95:1a:cc:97:18:
         ce:3f:dd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:41 2026 by rpki-client