Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft
File:                     5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft (raw, json)
Hash identifier:          FQpin6rwShYERvBB+AQ3fZsiQyFc76NFHlidfrvMy9k=
Subject key identifier:   5F:F9:68:98:78:3B:51:F3:A4:E4:D4:7A:AC:70:EE:C3:C0:D2:90:7D
Authority key identifier: 5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE
Certificate issuer:       /CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE
Certificate serial:       1E75E595DEF64C6C20600737DBD0C81B4FEE2756
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft
Manifest number:          07
Signing time:             Thu 23 Jul 2026 13:45:06 +0000
Manifest this update:     Thu 23 Jul 2026 13:40:06 +0000
Manifest next update:     Fri 24 Jul 2026 16:39:06 +0000
Files and hashes:         1: 326131333a633863313a3131313a3a2f34382d3438203d3e20323135383238.roa (hash: 2lS2H8IBJxOyjnm2BZrwuj7Pk6jZjmGW1zgNbopUg+c=)
                          2: 326131333a633863313a3a2f33322d3332203d3e20323135383238.roa (hash: IlMOSvLFq4VX7HZnUVxC1UdUITR3M7tj8HQPD7Fh/uM=)
                          3: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl (hash: 26m2mgLgHDT732o0nH6zIynHHFh+Zli/O1Y0jnLHs3A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:75:e5:95:de:f6:4c:6c:20:60:07:37:db:d0:c8:1b:4f:ee:27:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE
        Validity
            Not Before: Jul 23 13:40:06 2026 GMT
            Not After : Jul 24 16:39:06 2026 GMT
        Subject: CN=5FF96898783B51F3A4E4D47AAC70EEC3C0D2907D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8f:ca:e2:46:08:3e:c0:fe:a5:e9:e5:41:58:
                    4e:79:6c:b1:15:8a:11:75:34:32:3a:4f:d3:47:e4:
                    58:d4:83:a6:fc:88:a0:ea:54:96:99:1a:9b:c6:62:
                    5a:4c:b8:0f:af:b0:86:e4:50:f4:fe:73:71:52:0d:
                    f1:3e:bd:d5:f5:38:20:91:e4:af:c5:ca:88:e6:19:
                    79:8f:dd:bf:ad:b9:bc:ae:a8:3f:89:ea:7c:5b:d3:
                    ff:a2:f4:87:fa:e9:90:33:ff:f4:63:59:92:81:b1:
                    61:c9:ba:cd:3f:c0:b0:f1:60:08:c0:46:67:04:e1:
                    b9:49:f6:a5:a5:72:1a:e6:5a:47:12:df:69:35:2e:
                    06:07:f1:af:3d:73:d7:51:ec:f0:fe:43:01:67:c0:
                    64:b7:3b:79:dd:db:3d:d2:12:16:3c:7d:e2:a3:8a:
                    e6:38:17:c6:81:fe:52:25:a1:14:d2:75:40:17:6e:
                    21:a3:7f:ac:7e:46:30:11:22:fd:03:37:e2:7f:1a:
                    b3:27:de:7c:7b:af:bd:fd:1a:11:cf:10:c6:4f:fb:
                    4e:cf:ab:73:2e:d5:38:74:9d:ec:04:6a:37:bc:4c:
                    92:59:71:4a:ef:f5:54:db:9a:33:7c:65:71:ca:e5:
                    2e:ea:47:51:3c:38:cd:fc:14:87:58:c9:06:8c:57:
                    0e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F9:68:98:78:3B:51:F3:A4:E4:D4:7A:AC:70:EE:C3:C0:D2:90:7D
            X509v3 Authority Key Identifier:
                keyid:5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:53:f3:35:8d:2c:24:f9:72:5b:9b:ee:c7:31:61:54:4e:d5:
         c4:4d:9f:42:62:bb:9a:4d:75:77:f1:82:37:8e:bb:dc:2e:2a:
         2b:7a:60:02:a2:af:05:20:dc:e8:67:a0:38:67:37:02:ef:03:
         52:31:ed:c0:3c:68:b0:d1:71:fe:80:c1:e5:32:ce:21:07:5b:
         16:58:f1:b0:44:05:67:ab:db:67:8c:94:18:76:9f:9d:cf:04:
         ac:48:b6:be:a6:c9:1a:00:dd:55:a9:db:56:c7:e2:7f:af:a6:
         7c:7c:13:42:6f:5a:47:6f:ae:1b:89:81:3d:c2:0e:9f:85:15:
         de:da:4b:df:31:ce:8b:1b:b8:10:0a:ca:7d:64:b4:a0:d0:99:
         9a:6a:d3:77:92:0c:e3:89:bf:00:36:17:5c:dd:b2:06:1d:56:
         0d:34:1f:f3:1f:58:9f:f8:e1:ab:80:68:19:ae:32:36:58:82:
         f7:8a:dd:07:91:c6:48:e9:f1:d4:b5:5d:98:6f:ed:9c:a7:2b:
         b2:91:73:46:5c:73:0c:08:24:2d:71:84:05:20:ea:46:58:f0:
         34:3f:8f:f3:dd:f8:29:b9:c6:67:61:4b:5c:4f:8e:65:aa:e1:
         16:c8:69:34:e0:fe:1a:69:1a:01:57:a2:ad:39:4b:84:bc:4e:
         dd:2d:20:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:14 2026 by rpki-client