Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File:                     B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier:          wO5L5IPdqDUrDGUxf3729gyeSy/2TtbvbYNWuLAreR8=
Subject key identifier:   B6:99:25:0B:44:2E:58:D1:31:4F:1A:1F:A2:F0:2C:FC:6B:2B:6A:5A
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       776297789B16CCF0CABC6D38E018707F71E018FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number:          07AC
Signing time:             Thu 23 Jul 2026 22:29:50 +0000
Manifest this update:     Thu 23 Jul 2026 22:24:50 +0000
Manifest next update:     Sat 25 Jul 2026 02:02:50 +0000
Files and hashes:         1: 3231332e3133392e36362e302f32332d3234203d3e20383334.roa (hash: gmWH6xBqv6iHkSUEaOI6mVn4z54Nuz/S3PczBQJukcU=)
                          2: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: YdmUivZOiB+z6zp254vUpjVQR2cGS4KwZb90oR6ZVsM=)
                          3: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: BWn7Fyc71HS3Qx09imcUTYAlGWvzW8ei/YZ4vwsjDbQ=)
                          4: 3231332e3133392e36352e302f32342d3234203d3e20383334.roa (hash: aBJ7OoaXb6rDbnpVY6odGndz/aaVwq/3W9uHVst1MOE=)
                          5: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: MNLBCqMmK/mGKn+arx3sMtp4e+thFoWGhi8ivlTfj0U=)
                          6: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 0cchwdJLnMGDMK7R7/iy+DuTxrLqECv6lMhtpTOQuYc=)
                          7: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: NJOowo5VUyyKfXn6pnDF/Tz4fWJEVeCOza5neOzvfGM=)
                          8: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: CavYIrZSFhZfgGj2RhsuO+5dyTDRj7K4lMIF+18l9zg=)
                          9: 3231332e3133392e37392e302f32342d3234203d3e20383334.roa (hash: AEIp6S70Gj6QR1Z2+hxR6CJde/WoBwWvkBWWBSrENhA=)
                          10: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: ddkCuB2C0zIUJCsHJnqd7PIRz+kBJmKHlIRYHjQdbXM=)
                          11: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: e2HbFyb9jJVCReOUGrS06701Hln0j7R9pUtzgWwuBh4=)
                          12: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: Ibuscf+bYdB1t/uDv+JpkjwWtpfa4PQU8Vt4AGHXqf8=)
                          13: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: OH/dvNiYWhw/SVHGvLSGkBdK+Kv4T+yJzETwI0tfRWM=)
                          14: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (hash: 4avklCjVMylCEeeI60KDAm2gKF0wrDefWHJR4YHtwEk=)
                          15: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: +9ZlUjFGDijH8b5+yzD1PMjjZdY4zblyEeoJ6+Yq2Hw=)
                          16: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: CxXf2MZIKaUycFVCcvqJ0pu6d/h/wQOBy3gRZyXomCo=)
                          17: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: imvON1NIsf5RjQ1xycG0mxKjYBudQ7J1/WlKrbcZWA4=)
                          18: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: UJuRx/b7ZuN3xXtU9UGl0rZYUByVV4xgOSCJ1FXm9MY=)
                          19: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: 2qZQfOcJdShx8dQdW3jSDzAf+zGAwRn+nvT7o3J4pwE=)
                          20: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: hksR2RFjNh00D4GQuid5Bvdsyv72DQ8eShLKWLWJ500=)
                          21: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: DZpFNtIJlcLHmoaMDeodOmCa2IVlyKcWWOjWi093JRY=)
                          22: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: iBZrpirngtNdiGfgs1e/5egkTxly/jS9DyH9F0hqP68=)
                          23: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: Dtv0Rk3S6CYGgeyc9Utp8OCStFSnf/fyoGbb6uGogTI=)
                          24: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: xh9MbcQaOVI91ITKhlmBWnlkj2aoxPKUoH1PWhneuhw=)
                          25: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: ZNpXP0V7X1SLVOWk1qf9gaielEOXyCXpXadwIPelQAs=)
                          26: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: YJQzrkCNdtcHF03SEJIbUA14cqWLzrSdWGFwfzoZWw8=)
                          27: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: mu6JkT3fZoMbVctkEBjnrLNPWmpvwLKVK+IulCwBuzU=)
                          28: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: JEuERYX+zmY14zA8MGqIEE+WMqqmJly2u5v4u9LNrmQ=)
                          29: 3231332e3133392e37352e302f32342d3234203d3e20383334.roa (hash: qufxABzYtPVqJhKbvB3PBmop5jMgkyRVa/W0Bx1F4s4=)
                          30: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: r1pjD687zCx4FmCuXlGB5h73ScKoFYopGKhXlE6KUfY=)
                          31: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: jYd4q98qoULIjdslO4Xk9d5wPUuNksXv3RR74JoHySc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:62:97:78:9b:16:cc:f0:ca:bc:6d:38:e0:18:70:7f:71:e0:18:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Jul 23 22:24:50 2026 GMT
            Not After : Jul 25 02:02:50 2026 GMT
        Subject: CN=B699250B442E58D1314F1A1FA2F02CFC6B2B6A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1a:bd:5c:8c:17:99:e8:e3:73:7f:c1:d1:3f:
                    58:63:a1:ad:55:7f:3c:93:0b:97:a6:2c:56:e4:4d:
                    a4:89:49:73:2a:7e:06:7d:54:d3:9e:a0:65:c9:32:
                    b5:5d:21:18:c0:72:99:b2:95:3e:df:da:be:69:e0:
                    39:43:4e:4c:13:95:3f:1f:ca:6a:02:c0:5e:a1:d5:
                    40:d1:67:a3:ad:09:fa:52:1a:93:87:5a:27:d5:c1:
                    80:d0:6c:2e:36:6b:16:f8:ae:b5:4e:d3:b2:a2:00:
                    63:49:4e:d9:6a:06:1c:bf:67:04:e4:d0:17:a5:18:
                    84:26:2a:a4:84:1a:f4:99:d1:a7:4b:9d:a7:4b:bd:
                    43:c1:ef:fe:f1:5d:02:33:81:e9:e3:8a:83:44:65:
                    8c:df:bd:53:80:80:b3:52:08:1b:35:45:c8:9b:48:
                    ac:b5:9a:43:d6:1d:cb:a6:17:51:75:ab:b3:34:d2:
                    f1:82:4e:1b:95:92:3d:1b:4e:9e:06:83:c0:fb:65:
                    b1:29:a2:3a:bb:5d:52:53:3a:cc:d4:1c:88:38:49:
                    6f:46:1d:57:a4:45:bc:20:bb:86:ef:66:60:83:d3:
                    6d:1c:c0:78:94:a3:2a:48:7e:d5:6d:f9:48:e5:71:
                    dd:63:81:28:8e:3a:1c:a4:88:27:31:1d:d7:50:b3:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:99:25:0B:44:2E:58:D1:31:4F:1A:1F:A2:F0:2C:FC:6B:2B:6A:5A
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:22:b6:51:81:ee:54:e2:ea:e0:5f:2a:86:c6:8a:5e:28:dd:
         7b:b9:b5:ab:c9:5f:df:0a:c6:40:0a:2d:17:8d:cd:a9:82:d0:
         8e:f2:a6:38:59:ff:d6:6e:7c:f0:46:7a:a3:f9:68:9c:62:7f:
         51:fd:a8:cf:7a:e3:3c:f6:74:76:2e:f8:44:32:f7:25:5e:44:
         57:d4:5e:a8:b6:d0:3c:75:00:b4:38:a0:59:8a:00:42:0e:9f:
         7f:78:2c:ea:95:4c:9e:e4:01:f3:02:e3:65:ea:3f:67:c2:08:
         fd:a2:2d:7e:d4:4f:fc:87:01:56:dc:3c:b0:ea:9f:a2:40:ef:
         47:1c:3e:37:89:9c:96:93:f9:de:91:18:d1:b7:53:09:b5:a0:
         b1:27:ac:b5:8b:9d:92:a9:e5:49:88:2a:0b:8d:58:93:ff:08:
         3b:cb:54:1d:ef:3b:ec:e7:76:66:9d:39:0f:fe:5c:79:69:fd:
         c0:b8:96:9a:47:d9:37:fb:69:b7:b3:86:0b:3e:19:c1:64:3a:
         7f:df:85:8d:0c:e7:96:44:91:3b:ff:04:78:99:5f:d3:87:aa:
         8d:56:54:8c:a6:7a:4b:6b:85:06:25:2e:6c:fc:1f:53:67:52:
         14:95:4d:e5:20:c0:be:1d:7b:11:0d:5b:63:d4:45:cd:3e:4e:
         9e:8c:6c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:14 2026 by rpki-client