Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
File:                     B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json)
Hash identifier:          FIBh4WJpTCwYBS4c5I6gHJtZQtGLIknNMWifOm9JxW0=
Subject key identifier:   7C:10:B3:20:FB:EA:2D:AF:2C:5E:00:34:2C:EF:35:4E:B7:D2:69:FA
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Certificate issuer:       /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial:       038ED0DAA8DB5877534A04842BF6DE6ED8ACED2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
Manifest number:          0577
Signing time:             Thu 23 Jul 2026 18:59:23 +0000
Manifest this update:     Thu 23 Jul 2026 18:54:23 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:23 +0000
Files and hashes:         1: 39332e39352e3131342e302f32342d3234203d3e20383334.roa (hash: IsnU6ukDDEIOI5GUZtNKQeXqnu0yVtwPD36tnVnbVrI=)
                          2: 39332e39352e3131362e302f32342d3234203d3e20313534313332.roa (hash: TKltJX5YgKOXisaMoj3sr6XgcIKTujLLlLGN3DK/bAA=)
                          3: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=)
                          4: 39332e39352e3131372e302f32342d3234203d3e20383334.roa (hash: CM3wE9oMOmtHvDjQgnEFIh/koUTAh6A0vP9wAJbGTDU=)
                          5: 39332e39352e3131322e302f32342d3234203d3e20383334.roa (hash: 8VgwWSsnsM9p/J2+q6Eb6nFU9lWBzTkvoQCsZ4F1sbs=)
                          6: 39332e39352e3131362e302f32342d3234203d3e20313437323038.roa (hash: VQw3xwT3qwaoiTp+ohl+Ab4wtG5O6EYzNSMXJr70CM0=)
                          7: 39332e39352e3131332e302f32342d3234203d3e20323135343337.roa (hash: M7lEqE1+KGgF78w8mWdBggax3ZKunAR48q+d2JT/Oyk=)
                          8: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: VXmeKlTcMJlUHIl8vg+XmO3ANZOlLlec4zL+q1Cv0dQ=)
                          9: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=)
                          10: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=)
                          11: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8e:d0:da:a8:db:58:77:53:4a:04:84:2b:f6:de:6e:d8:ac:ed:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
        Validity
            Not Before: Jul 23 18:54:23 2026 GMT
            Not After : Jul 24 19:00:23 2026 GMT
        Subject: CN=7C10B320FBEA2DAF2C5E00342CEF354EB7D269FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:cd:50:49:9c:aa:76:89:ff:84:49:54:63:
                    ff:09:8c:89:cf:5a:4d:62:1c:b5:41:74:57:8a:c9:
                    b7:5d:ec:a9:70:a7:b6:1a:b9:5a:56:02:a2:1c:39:
                    e1:88:a3:25:9f:69:15:34:4e:2d:99:39:c0:ac:a6:
                    09:0e:ae:51:de:34:5f:b5:ec:c7:4b:67:c8:13:b4:
                    10:6d:f7:3e:c8:4c:7e:76:13:45:a8:15:53:c4:59:
                    33:14:bc:05:87:b5:1a:3e:2b:64:ae:9f:44:9a:89:
                    cc:bb:7d:07:bf:88:8f:b8:f4:88:36:96:b0:95:52:
                    66:ba:0f:34:12:a6:27:e9:8a:2c:06:6d:95:d3:88:
                    e0:77:95:5e:ab:53:63:48:17:18:75:b7:30:48:cf:
                    b5:ae:08:c0:fa:7f:f9:70:44:84:27:d4:ae:e0:0a:
                    a2:7f:51:a7:b7:4a:63:a9:24:3c:a3:f9:34:47:b8:
                    fa:f1:ea:51:89:92:01:a9:16:90:79:db:ea:d9:c7:
                    9c:c7:50:f3:44:a6:74:5d:0d:1c:bd:c5:5e:0f:b3:
                    0a:38:2b:61:3b:9e:8d:ff:fd:aa:7b:d2:fb:1c:0e:
                    20:70:9f:75:47:f1:69:3c:43:4f:52:4e:d5:cd:8e:
                    5f:48:83:ca:20:05:c0:ef:71:70:2b:fd:9d:df:95:
                    52:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:10:B3:20:FB:EA:2D:AF:2C:5E:00:34:2C:EF:35:4E:B7:D2:69:FA
            X509v3 Authority Key Identifier:
                keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:7f:ab:79:5a:e1:ce:ba:c9:d4:9c:c0:f3:a7:54:b6:35:
         60:8c:43:75:71:96:6e:8b:ae:b1:78:4a:24:f8:04:8e:6c:6d:
         b3:82:ec:e4:1e:ab:30:0b:2a:98:2b:c7:69:2e:f2:eb:e6:6f:
         20:69:43:5d:cd:f8:84:79:cd:93:ad:8d:cc:f3:47:66:c7:e0:
         15:69:ce:57:60:19:78:95:bd:46:fe:a2:5b:47:c8:bc:df:14:
         69:5d:2a:f7:e4:52:4d:6c:c6:27:9a:9d:24:7e:4f:de:2f:cb:
         d3:f0:30:ad:db:6b:37:04:58:e1:4d:37:91:36:a2:be:c4:e6:
         96:6c:64:9c:f8:b2:09:b6:59:47:54:3f:1f:9a:9f:88:e2:fb:
         fa:b4:a0:9b:cf:20:6e:a7:05:31:a4:58:ad:17:c5:99:a1:ac:
         b4:f3:11:82:25:ff:36:69:85:6c:de:95:b3:ef:ea:27:6f:cf:
         34:28:f2:e8:8d:41:b6:b5:39:50:51:d8:2a:63:40:3f:d7:87:
         a3:60:3c:37:99:05:71:35:65:ab:a0:56:ed:2b:36:39:0e:2f:
         bf:48:92:d8:c6:ba:78:9a:d4:02:f0:7b:82:74:e5:da:cf:d2:
         6a:56:b8:67:60:be:0b:5d:09:e9:44:9d:38:f0:7b:76:57:1d:
         89:43:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:58 2026 by rpki-client