Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
File:                     5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json)
Hash identifier:          N+q9HrzNg1qyWNtEaOUg9p1JfAtJjGQuqjdWLtXZAN0=
Subject key identifier:   82:7E:79:6E:5A:02:45:81:3D:60:E3:01:F9:5B:47:55:DA:69:5F:68
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Certificate issuer:       /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial:       21D6892249341E154AA5CACE453510A3471DD877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
Manifest number:          0638
Signing time:             Wed 25 Mar 2026 14:20:44 +0000
Manifest this update:     Wed 25 Mar 2026 14:15:44 +0000
Manifest next update:     Thu 26 Mar 2026 16:30:44 +0000
Files and hashes:         1: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: CCWx5/mnzUAvPW2QXDisPqaJoMOmAAYfjlJp2z2VVX8=)
                          2: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: bA7vtpR0TyML0HjZJJdgMHPc1uK0jGA3YpWrjwZ8y+U=)
                          3: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: k8RY7QTEncAN/MOxUGAuMRRlssrdtl7ahwCsdlVrRY0=)
                          4: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: GXLgWx6Q3CLvfyeGG+4M+PXnBAwSeVlRcKDTfEKYkeQ=)
                          5: 38332e3135302e3231362e302f32342d3234203d3e20343032313837.roa (hash: 6oURErocR+RBWBtjKCL5X7Q++2pWaiVnhpSM8lQTOTw=)
                          6: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: GRr6EqMuPQe+HM0B22pWwZ4hys8ODZ6ONNrf4hPBgYc=)
                          7: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: yCFgEcnTSAhMVf29HMHp04B1k4DqC3mlqJPDdmg8wFQ=)
                          8: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: nLtvC8u+G2wQDXhAgNrW8KG32IP0qBYrlPwszbjCA50=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 16:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d6:89:22:49:34:1e:15:4a:a5:ca:ce:45:35:10:a3:47:1d:d8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
        Validity
            Not Before: Mar 25 14:15:44 2026 GMT
            Not After : Mar 26 16:30:44 2026 GMT
        Subject: CN=827E796E5A0245813D60E301F95B4755DA695F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:64:e3:36:9c:27:72:02:a0:b6:e1:e4:bb:75:
                    cd:09:7d:23:ef:a4:8c:92:0e:04:a4:bb:dd:a6:73:
                    62:b1:b4:81:66:8f:ae:99:81:29:b2:37:90:b8:59:
                    69:18:f1:b1:6c:1c:92:8f:0f:cb:2c:78:0a:1f:10:
                    0e:3c:7b:da:eb:be:76:c3:6b:ea:bd:ea:17:2b:34:
                    cd:fc:fb:49:c2:ef:15:72:41:df:0d:d4:bd:22:33:
                    1f:98:34:e7:76:53:b0:29:15:40:77:c2:a8:71:8e:
                    f0:9b:cc:33:c8:35:92:89:f8:f9:16:a9:28:f6:ed:
                    05:e4:5f:1d:80:8b:a5:48:56:bf:69:88:a1:ff:9c:
                    52:1c:22:85:b0:61:47:5d:c2:0a:f1:d1:08:89:f2:
                    92:84:8f:e3:41:ed:b2:d7:4a:41:bd:4b:6d:14:94:
                    27:a9:08:5a:da:3c:e0:56:61:20:1a:b1:6c:7f:bb:
                    16:4d:b0:22:86:18:66:08:5d:4f:c7:d8:28:8d:74:
                    88:9f:a5:d8:a4:17:7e:81:61:5a:2a:95:64:6a:70:
                    5b:f4:11:94:6d:e2:23:0f:c5:95:e3:83:cc:d4:2d:
                    66:94:ef:0d:f2:b0:be:2c:e8:d7:c3:03:c2:b6:a3:
                    f7:72:2d:eb:10:b0:88:aa:ab:4a:87:ee:2f:c0:56:
                    3f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7E:79:6E:5A:02:45:81:3D:60:E3:01:F9:5B:47:55:DA:69:5F:68
            X509v3 Authority Key Identifier:
                keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:19:61:5a:64:88:d1:5d:4e:bd:60:32:40:22:7c:df:5e:65:
         ba:96:cc:0f:e5:35:c0:ff:ce:ce:e0:75:e9:1a:bb:0f:6e:46:
         12:1f:6d:53:0f:90:d7:37:7f:b3:27:1d:76:71:5b:01:aa:a3:
         1c:9c:43:a6:46:40:66:5a:f5:36:48:9b:81:73:02:e9:b4:3c:
         73:fe:8f:40:06:8a:5e:98:93:18:29:8e:6b:a1:8d:86:fc:55:
         62:18:b3:07:b5:35:ff:56:5e:ad:b7:57:46:a6:cc:2f:fb:db:
         db:ce:fb:5a:91:85:56:c2:4c:98:f0:db:59:7e:f3:ee:22:6e:
         30:14:ec:21:cb:fe:30:c3:77:f8:dc:e1:7e:4d:77:fe:33:98:
         05:42:60:87:35:1d:86:4f:38:c1:c5:3d:8d:2e:64:96:ae:24:
         c8:5c:f0:e9:ac:4d:0b:7b:73:27:f7:f0:b8:fa:a6:3e:8b:28:
         e2:57:8e:45:37:ef:f6:c1:5e:55:72:69:ed:c6:c9:45:7f:76:
         db:15:7a:ec:e1:39:c9:a1:ea:b3:50:2e:0d:f9:80:dc:6d:33:
         45:3b:84:2e:70:2f:2c:87:e8:f4:96:be:79:53:98:ca:5c:b0:
         f6:57:25:84:ee:0c:aa:39:f4:df:1d:20:c2:13:40:4e:cb:53:
         e5:dc:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:19 2026 by rpki-client