Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File:                     1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier:          FD7fcCM5jeo4UO/l+wPPkkhyG1iZDoJWQKS/54vVRf4=
Subject key identifier:   45:5B:BF:23:F1:71:44:AA:2B:6E:56:D1:4C:1F:31:5C:2C:05:B0:FE
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer:       /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial:       110BCA2E0D1406902E403663881BE0A2413EDE21
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number:          045F
Signing time:             Wed 23 Sep 2026 14:35:09 +0000
Manifest this update:     Wed 23 Sep 2026 14:30:09 +0000
Manifest next update:     Thu 24 Sep 2026 16:36:09 +0000
Files and hashes:         1: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: Kd+QOrRraURrnm7DiXTAoMIjS5JdQwzRrqoABDmfXRA=)
                          2: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KwLIWCSeFKTrv4VaOW0JjqLpPgihB6aRK4CEWI2xsJA=)
                          3: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: 8MoYL/dCbo6NYCzCa70zhAMqC8Td9hN9QuTr1/49Ea8=)
                          4: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: uQ6YdX5/WUQ6EE4b+PyH9fVZLMZegSMvb7FY+FXaqfI=)
                          5: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: uku5NhfmoB+FvkZCKtV2pK3JjL2PeMGP2SHJezxHU3U=)
                          6: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: w6hSAZV2VtLUk8Lcxp15MhyaA5GCxf2u983hjysiB3o=)
                          7: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: AlY5Z1AihWSFAtcBObR2iby3i12VIhHyXxVUpZHdoc0=)
                          8: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: wItkpJymrUCqPyPQxmidR50wXi9vPRRLUnb7cZMe6Lc=)
                          9: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: sGk7ACRgj2xUOc33oWusMkib/NoqUeSQmBUzgrM/Pzk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 16:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0b:ca:2e:0d:14:06:90:2e:40:36:63:88:1b:e0:a2:41:3e:de:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
        Validity
            Not Before: Sep 23 14:30:09 2026 GMT
            Not After : Sep 24 16:36:09 2026 GMT
        Subject: CN=455BBF23F17144AA2B6E56D14C1F315C2C05B0FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:52:f3:35:41:c6:44:3f:eb:53:7b:40:5e:
                    6c:0f:ce:9d:41:26:cd:76:da:47:fa:1a:d9:e5:59:
                    b6:cb:c1:f0:24:8a:81:b7:eb:c3:b2:9a:90:b4:85:
                    03:a4:1b:bb:35:3b:ce:19:a9:20:ca:00:47:05:64:
                    36:9d:38:74:ac:a6:83:fb:a2:1f:b3:68:61:53:b4:
                    7d:24:ec:b5:75:fd:99:ef:4e:1c:63:86:4e:58:5e:
                    57:bb:fe:47:a7:a3:42:96:6e:de:dc:50:6e:6d:f5:
                    9f:9f:85:2c:c3:01:5d:4e:c4:e7:46:2d:43:3f:f7:
                    e1:b1:f4:b9:57:3f:3d:5c:ed:d2:7a:1b:12:40:6c:
                    bf:f9:a0:d7:2f:66:e5:aa:14:7d:7b:e1:d5:20:2d:
                    c0:fe:36:b9:1f:7f:e7:58:40:28:ea:b9:ec:49:68:
                    58:17:ba:f7:36:b7:20:31:a5:a4:b3:8d:b4:bc:9a:
                    1e:00:7d:0b:19:d2:bd:4a:aa:b7:17:6b:d5:d5:f8:
                    ac:d9:c8:cb:f1:2b:23:87:11:25:8a:97:9f:d7:be:
                    5f:6d:23:73:af:78:b3:b5:c1:b9:0d:29:df:bb:a0:
                    a9:ef:e4:86:a0:61:07:5d:22:bf:0c:ef:1c:65:73:
                    2e:51:01:6b:db:95:4c:1b:61:93:3a:a7:1d:87:8a:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5B:BF:23:F1:71:44:AA:2B:6E:56:D1:4C:1F:31:5C:2C:05:B0:FE
            X509v3 Authority Key Identifier:
                keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ca:7a:e6:5e:54:1b:87:5c:10:c2:55:d6:55:31:a4:ee:15:
         e8:ee:f7:93:f1:60:e1:85:2f:44:59:2c:d1:bf:9f:07:82:e2:
         04:02:9b:6b:3e:c4:ed:80:45:58:90:76:e7:6d:c4:14:76:d3:
         62:65:b2:d3:84:77:35:2b:1f:dc:eb:71:b6:83:a6:13:80:c5:
         f8:f0:c9:e5:0e:c5:fd:9d:ed:a1:fb:2c:e1:03:5e:2d:ad:63:
         ff:db:cd:85:39:72:78:ea:08:f5:34:d2:53:a5:e3:65:80:ac:
         55:de:20:72:94:23:23:18:0e:cf:e3:4c:1a:d2:21:80:65:dd:
         14:51:99:9b:33:a8:3b:58:85:4f:dc:e9:23:a8:af:3a:2d:c1:
         3b:1d:af:3f:4e:0b:43:9c:35:7f:82:21:3c:c6:99:34:be:0d:
         4f:4d:04:ba:c7:9b:1c:48:dc:50:9f:d3:bf:04:a4:2f:2b:30:
         9e:6b:ef:74:cc:6a:79:c2:eb:76:89:95:df:11:2b:de:4d:a9:
         51:23:70:01:7b:07:4a:3f:98:2e:ce:31:a5:04:1d:b6:4f:42:
         93:43:da:ae:e5:75:9b:3c:19:6e:09:26:9e:60:e3:17:9e:03:
         2a:73:da:90:2b:97:79:f3:ba:35:ee:db:41:6c:b5:e9:99:57:
         f7:62:37:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:24:30 2026 by rpki-client