Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
File:                     51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json)
Hash identifier:          dIQng6G3E/Xux98ZinGQ0NTzrcldviTBbA/GnelmnOk=
Subject key identifier:   C7:4F:4C:ED:22:A0:4A:15:51:92:F5:DD:B8:08:11:55:8E:7A:52:08
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Certificate issuer:       /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial:       07B30CA8B654F14D39DC18D6A6A1BE9B6B5B1012
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
Manifest number:          02B3
Signing time:             Tue 29 Sep 2026 01:40:00 +0000
Manifest this update:     Tue 29 Sep 2026 01:35:00 +0000
Manifest next update:     Wed 30 Sep 2026 05:33:00 +0000
Files and hashes:         1: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: neZNgw7PLsgojfCmijqKDTuLqRpUvAzbBuxRqQ5exHY=)
                          2: 326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa (hash: SwKF9ZgurLBB1Omp9sHNYZoTnYJ/E2ALGPkMC5kD1BA=)
                          3: 326131343a373538313a396637633a3a2f34362d3436203d3e20323138363831.roa (hash: 1hZDvl0qMpuDYfCMXPsCzSbYrHRxie7+lNBIWvvROBs=)
                          4: 326131343a373538303a3534303a3a2f34322d3432203d3e20323039373130.roa (hash: Av1B/CsfeimpaPDyAr/GwqgA0mmdJ8tWvzjK+NZ598o=)
                          5: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: 9UWTF9iOH6Z8mdDpbREEu5a0hC5xt7Bg4lhZ1je0aZk=)
                          6: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: VqS5xTgMt4Ve90n9OZrI0nbLdp3XJUGys6dJrhIFmL4=)
                          7: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: O87kVBfj2J0xa4geQQDpom/gGWGIsL/XNYxhJIFYJnU=)
                          8: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: K5Xy+N6vovUlNC0hH4Ylpz0CuwFyVgs8D5euzFF+k+o=)
                          9: 326131343a373538313a396637303a3a2f34342d3434203d3e20323039373130.roa (hash: p385P4xF8QHkqCPa/hdjhVarHB8rsNeeYo+n7g9pTZ0=)
                          10: 326131343a373538313a396637303a3a2f34382d3438203d3e20323039373130.roa (hash: PbnJV4v8C5QHnq2aBllU+RDCvAtSgAjZp/KgSmiAfVA=)
                          11: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: oduxdCtQvXNc6ctPbCrLlRtfzRRekU/B8PphIdwPh98=)
                          12: 326131343a373538303a3530303a3a2f34322d3432203d3e203331383938.roa (hash: kW0ykfTSwnRmtw5rqdfSJAoTUHSez3ElPGoIMTMRV0A=)
                          13: 326131343a373538303a3538303a3a2f34322d313238203d3e20323031313539.roa (hash: grtkVLSeBmK4RqaDolkiQDYEwz7NMtPUQB+CaYiZS8U=)
                          14: 326131343a373538303a666635303a3a2f34382d3438203d3e20323039373130.roa (hash: CqYBJlC9HxvR/lzF60EvrSr55WqoXGsIwp/JfWPn/XM=)
                          15: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: CqPRVIJ+q90RN8VSTd4vYU1rnp26YUct1kQ2Ab1MyQw=)
                          16: 326131343a373538303a3563303a3a2f34342d3438203d3e20323030393833.roa (hash: LWgSbiG8v12rmho8doO09JfDrfMqGywJ9H2+gVPGrQM=)
                          17: 326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa (hash: SHYewRnAEyfHeIS/ErCy1dNpuo8kVPzhKkgjNNzYVkM=)
                          18: 326131343a373538303a666635663a3a2f34382d3438203d3e20323039373130.roa (hash: bVu9jG4ygbQ2M9hg7Q2hYueCn9dZ67U+HzZp2NSwh9Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b3:0c:a8:b6:54:f1:4d:39:dc:18:d6:a6:a1:be:9b:6b:5b:10:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
        Validity
            Not Before: Sep 29 01:35:00 2026 GMT
            Not After : Sep 30 05:33:00 2026 GMT
        Subject: CN=C74F4CED22A04A155192F5DDB80811558E7A5208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:24:f7:27:14:bf:70:bd:e7:7f:08:9d:9b:
                    79:c1:8e:68:bd:61:9a:2f:ea:2b:94:a8:9e:2d:21:
                    e0:ba:91:07:fb:e9:79:cb:8d:49:18:1e:0e:ac:f8:
                    24:59:e2:5b:0d:b3:76:21:8b:a4:fb:78:b7:86:50:
                    f0:b5:1d:7e:a9:40:33:73:4f:92:86:18:f7:4c:e5:
                    c6:a0:32:c9:72:4c:67:e4:0a:07:5c:db:9d:cf:93:
                    c2:79:95:5c:be:51:7b:8e:73:36:dd:34:ba:c6:73:
                    5c:ca:08:0c:ee:63:a5:1e:f0:77:25:7c:25:7c:c1:
                    4b:79:56:22:11:fc:7e:6e:f4:1d:47:bc:a7:64:fc:
                    bd:c0:7e:50:b8:a5:5d:83:c6:1d:66:1b:08:04:0b:
                    5d:1a:54:3f:91:b0:19:17:19:ba:22:99:71:b3:e1:
                    35:59:80:ba:09:48:b6:ba:1c:ab:e9:ab:34:97:2f:
                    b4:36:67:5d:2e:c4:ac:bd:e1:a9:17:21:9a:de:cf:
                    fb:d3:34:2c:6d:8e:19:3d:b2:93:84:63:75:bf:31:
                    99:6a:2d:e0:57:b2:eb:54:7e:eb:d9:7f:0b:88:b6:
                    37:41:45:48:06:f4:79:8c:0e:4d:10:b2:59:8c:8f:
                    ee:cd:9f:07:8e:99:f2:df:7a:35:6d:25:8a:0f:cc:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4F:4C:ED:22:A0:4A:15:51:92:F5:DD:B8:08:11:55:8E:7A:52:08
            X509v3 Authority Key Identifier:
                keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:16:92:0f:cb:c3:e6:ad:8f:2a:2c:43:6c:fc:b7:74:12:cf:
         d4:e5:5b:8e:9a:eb:0e:46:23:3b:35:4b:f9:93:ae:71:a4:8c:
         87:f8:ea:23:0e:35:66:93:8c:42:26:f9:e1:2d:42:04:ea:6e:
         98:d8:cd:51:d1:86:96:2e:e7:66:af:1a:d2:a1:8a:a3:e5:4f:
         ad:e5:00:27:d1:44:71:04:73:37:46:09:f1:1a:cd:49:cb:83:
         d4:bd:78:c8:e9:8f:df:6a:d5:e3:b5:a0:2f:3a:3b:c8:e9:15:
         88:1f:d1:e7:38:4f:5c:78:ff:8c:fb:22:1e:14:7a:7a:ad:cc:
         e0:4d:71:80:19:66:2e:c0:34:a7:c8:d2:af:a9:08:c4:0e:f1:
         88:1b:70:44:f8:79:b8:bb:c8:5d:92:57:2e:91:6f:fe:50:09:
         ca:bd:05:a6:3c:f8:8c:30:34:f4:21:bc:6b:3a:ac:ab:3e:07:
         e4:93:22:72:9c:a4:fc:7b:20:6f:d8:46:4d:65:fd:8a:17:2b:
         14:fe:24:b3:9a:4b:80:7b:80:b6:5e:79:72:85:c0:b4:3b:b4:
         a3:e4:2f:41:71:9b:92:6a:bc:78:d3:99:2a:0c:06:a4:9c:05:
         fc:bc:9a:55:27:e8:a2:61:88:60:2b:de:5a:2d:66:0b:b3:af:
         5b:d7:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:43:15 2026 by rpki-client