Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft
File:                     52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft (raw, json)
Hash identifier:          bA3Yd6nbB5NBnpjPX2ZvRrT406QEtFi+4f8yR1ipgfc=
Subject key identifier:   7E:20:D0:8A:AE:85:05:FA:59:5E:6A:28:44:16:7D:86:78:BE:34:06
Authority key identifier: 52:72:2D:E3:E7:67:BA:8F:C1:EB:29:A7:D1:67:9F:73:4C:55:96:6D
Certificate issuer:       /CN=52722DE3E767BA8FC1EB29A7D1679F734C55966D
Certificate serial:       7D30D5305BA746015C436EBA0304BF158B1F1793
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52722DE3E767BA8FC1EB29A7D1679F734C55966D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft
Manifest number:          47
Signing time:             Thu 23 Jul 2026 14:46:02 +0000
Manifest this update:     Thu 23 Jul 2026 14:41:02 +0000
Manifest next update:     Fri 24 Jul 2026 15:48:02 +0000
Files and hashes:         1: 326131343a373538343a333030303a3a2f33362d3438203d3e20323135383439.roa (hash: mRoIFmsCmEGH6SUTDOuYeSSlx3FrBmmk9tb2GFLY9aI=)
                          2: 326131343a373538343a333030303a3a2f33362d3336203d3e20323135383439.roa (hash: EhQvT5ZMCX9huG89IO3Xb6heQ+ZoxMGHcoAExi8XBfA=)
                          3: 52722DE3E767BA8FC1EB29A7D1679F734C55966D.crl (hash: srUIstn4xrq+6FC8SVBAz4C+V6q5Hwg19/r9RTmOFbg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52722DE3E767BA8FC1EB29A7D1679F734C55966D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:30:d5:30:5b:a7:46:01:5c:43:6e:ba:03:04:bf:15:8b:1f:17:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52722DE3E767BA8FC1EB29A7D1679F734C55966D
        Validity
            Not Before: Jul 23 14:41:02 2026 GMT
            Not After : Jul 24 15:48:02 2026 GMT
        Subject: CN=7E20D08AAE8505FA595E6A2844167D8678BE3406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f5:dd:ec:3b:72:c6:90:d4:8e:98:22:4f:d5:
                    1b:84:cf:59:3f:e6:b3:5e:e5:28:95:6d:8c:95:69:
                    93:58:04:4e:5f:e4:1b:78:fd:8e:1c:b1:5d:b3:04:
                    8a:fb:96:2b:be:f7:79:e1:4b:52:9f:2c:7e:83:33:
                    53:f3:d7:72:29:16:bb:43:46:2c:09:2f:90:d3:6f:
                    f7:b8:ba:4d:de:fc:9f:f2:c3:27:68:b6:fd:62:21:
                    a1:e3:d3:8a:0a:7c:1c:74:3b:2f:43:09:d4:83:a7:
                    b3:0a:2c:d2:db:0b:0b:84:31:af:90:60:21:4d:fa:
                    ca:46:3b:b8:d8:46:e8:9b:2f:23:4f:94:31:23:f2:
                    1d:82:d0:3e:d3:db:ec:fb:c8:fa:f9:a7:3f:55:b0:
                    7b:2c:7a:a7:30:34:d4:8c:28:c5:f1:12:69:17:3b:
                    78:dd:65:6f:0e:ed:e6:3c:61:3b:7b:7b:c8:01:8e:
                    15:05:6d:86:28:74:8a:4c:9b:ab:da:31:db:b2:58:
                    34:89:2b:0f:2b:fb:d9:20:b7:12:79:88:c7:20:68:
                    38:ea:c6:6e:10:6a:ea:2f:e0:76:be:67:6e:3b:fe:
                    8d:9d:fd:75:cc:b0:63:ce:61:b3:a0:29:7e:68:5a:
                    1e:03:60:9d:54:db:ab:76:36:a7:14:ab:33:8a:5f:
                    83:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:20:D0:8A:AE:85:05:FA:59:5E:6A:28:44:16:7D:86:78:BE:34:06
            X509v3 Authority Key Identifier:
                keyid:52:72:2D:E3:E7:67:BA:8F:C1:EB:29:A7:D1:67:9F:73:4C:55:96:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52722DE3E767BA8FC1EB29A7D1679F734C55966D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:01:87:dc:04:8b:26:4e:68:37:cd:3a:8f:27:04:d9:2e:fd:
         d4:88:b2:0a:a5:ca:60:09:75:40:e3:9e:68:d5:86:20:f1:63:
         f3:11:c2:31:fb:38:61:4f:3b:c0:1b:80:7d:af:f7:45:81:3e:
         00:fc:0f:4a:17:35:41:5f:a7:0b:15:37:0c:f0:7e:4a:b1:5b:
         41:8e:01:6b:05:ee:0e:74:6e:cb:bb:a8:31:43:42:09:97:83:
         16:83:4f:bf:bc:8a:5d:2c:dc:ea:6f:b8:bb:d6:0c:04:ba:e0:
         dc:7b:89:8d:31:f3:e8:1a:70:c7:8d:17:eb:8d:e8:88:b7:73:
         3f:e5:7a:34:5d:5f:bb:2b:1c:c6:f4:a2:10:4e:5e:88:bc:b8:
         19:68:5a:be:4e:d3:cc:68:ba:9e:55:ae:a9:8d:d6:8d:45:80:
         f4:69:6d:be:63:b0:4c:56:78:29:7a:8c:07:59:2e:09:fb:44:
         ce:c5:57:f2:ff:c9:b4:6a:1c:40:ca:e1:99:57:fa:2b:00:1d:
         68:55:37:dc:ac:9d:7f:6a:00:3c:f2:21:14:5e:a4:84:0b:29:
         ed:02:8f:b6:3e:ae:3b:e4:38:2f:93:cf:09:90:f7:41:98:58:
         4a:3f:4b:00:63:80:7b:30:df:d0:fa:bc:8a:54:85:7f:12:30:
         02:72:19:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:12 2026 by rpki-client