Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File:                     1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier:          nijWUJmIBVtYtoEddXHBpR4K91YvHjPZPs4+fjFP3W4=
Subject key identifier:   5D:C2:B6:52:71:20:20:3F:C2:02:DC:D5:59:49:74:16:27:1A:3B:54
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer:       /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial:       63818FCD7E0F67B8DA8489333E98DB54B31EC69C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number:          0460
Signing time:             Thu 24 Sep 2026 08:40:09 +0000
Manifest this update:     Thu 24 Sep 2026 08:35:09 +0000
Manifest next update:     Fri 25 Sep 2026 12:12:09 +0000
Files and hashes:         1: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: wksQaCbTe+hTJ8g5RXP+yXWdSEdQhm9ESUO+MNxsggk=)
                          2: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: sGk7ACRgj2xUOc33oWusMkib/NoqUeSQmBUzgrM/Pzk=)
                          3: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: w6hSAZV2VtLUk8Lcxp15MhyaA5GCxf2u983hjysiB3o=)
                          4: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: 8MoYL/dCbo6NYCzCa70zhAMqC8Td9hN9QuTr1/49Ea8=)
                          5: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: uQ6YdX5/WUQ6EE4b+PyH9fVZLMZegSMvb7FY+FXaqfI=)
                          6: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: wItkpJymrUCqPyPQxmidR50wXi9vPRRLUnb7cZMe6Lc=)
                          7: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KwLIWCSeFKTrv4VaOW0JjqLpPgihB6aRK4CEWI2xsJA=)
                          8: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: AlY5Z1AihWSFAtcBObR2iby3i12VIhHyXxVUpZHdoc0=)
                          9: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: Kd+QOrRraURrnm7DiXTAoMIjS5JdQwzRrqoABDmfXRA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 12:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:81:8f:cd:7e:0f:67:b8:da:84:89:33:3e:98:db:54:b3:1e:c6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
        Validity
            Not Before: Sep 24 08:35:09 2026 GMT
            Not After : Sep 25 12:12:09 2026 GMT
        Subject: CN=5DC2B6527120203FC202DCD559497416271A3B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:e2:d9:e5:9d:2e:94:77:f7:dd:ac:60:4b:
                    da:36:c4:da:74:d4:ad:21:b4:79:ca:0f:3b:b1:6c:
                    0d:fb:13:ce:c9:db:30:10:c7:f9:50:e6:95:52:36:
                    51:b2:05:b9:ca:11:d4:cb:5d:29:0b:a6:13:31:e6:
                    18:b3:75:61:4a:7b:9a:8e:33:2f:e9:6a:6e:fe:ee:
                    d4:82:d6:3c:07:91:31:03:62:7c:a0:86:b8:44:94:
                    54:8a:09:16:95:5d:b9:2e:ad:b4:c8:57:3d:e6:9a:
                    bc:91:dc:3d:9c:e4:94:87:85:14:57:a8:cd:86:00:
                    8f:08:3c:b3:22:b1:29:79:56:f9:a0:5f:8f:0d:a7:
                    0c:42:13:d6:46:98:4b:86:a6:f7:20:b1:21:6b:78:
                    37:9d:37:a1:a4:39:3e:98:4d:45:88:22:0a:5b:9a:
                    79:02:6e:62:95:00:8b:26:eb:82:57:53:1e:d1:64:
                    e3:23:b3:18:1b:60:4d:43:22:dd:f1:06:12:b8:47:
                    01:09:56:a9:a2:33:93:c2:34:a5:a9:1a:60:50:7d:
                    1e:0e:b0:3b:c3:7e:10:ef:68:2a:3c:c6:7c:26:60:
                    cd:2b:84:81:95:02:48:cd:53:38:5d:15:45:13:9e:
                    61:4a:22:33:9a:93:62:e5:d3:d7:12:2c:0b:f2:1d:
                    6f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C2:B6:52:71:20:20:3F:C2:02:DC:D5:59:49:74:16:27:1A:3B:54
            X509v3 Authority Key Identifier:
                keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:27:d5:c3:20:9c:bd:2d:64:2b:b2:2f:a8:9d:c1:cb:02:c1:
         b2:1b:e6:4f:7c:3a:b1:1c:42:6d:bb:a4:1b:e6:b9:87:ad:c3:
         1e:4c:17:9f:17:81:d6:55:e0:c7:3a:7a:31:19:50:19:d2:3b:
         2a:93:10:23:11:79:f7:dd:56:cf:e8:1f:b2:07:dd:cf:fb:c4:
         bb:2d:ae:84:e4:14:b2:e4:c0:16:ea:9a:fc:2a:c9:42:5a:59:
         fc:3e:f8:00:7e:f4:03:17:77:df:36:99:05:89:e5:fe:37:60:
         d8:d6:51:26:0b:ea:ff:0b:4f:9c:de:ba:99:42:bb:fc:ca:94:
         23:64:7c:7a:19:02:1c:1b:2a:4d:de:ab:9d:08:8b:1e:69:89:
         08:b3:57:a1:9c:18:32:de:c2:77:97:a3:a4:41:92:05:da:c3:
         cb:ed:d8:82:19:76:02:55:9c:20:c8:7b:77:b2:91:5f:a2:0f:
         e6:12:dc:8c:e3:12:00:7a:c1:f8:44:2f:1e:89:b5:bd:2a:8f:
         c1:d6:5b:f6:27:fc:78:60:08:65:e9:ad:f0:83:18:53:88:86:
         31:7e:df:8c:37:ea:e0:34:54:5e:0a:87:f1:76:b1:dd:ff:cb:
         ce:d1:5a:31:a1:9c:ee:4a:36:dc:48:e8:cc:d0:3d:32:f9:60:
         e1:a8:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:25:41 2026 by rpki-client