Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft
File:                     77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft (raw, json)
Hash identifier:          gycpqF/qntZqJkNXQ5T9M/MEciz903oTHDihLp2Zmbg=
Subject key identifier:   97:68:09:5B:2D:07:9E:F6:26:F8:73:15:DC:E7:6B:95:A4:56:70:A2
Authority key identifier: 77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5
Certificate issuer:       /CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5
Certificate serial:       2C52E582C70AFD3AECF96D9BAD60B4EE3E522036
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft
Manifest number:          BA
Signing time:             Thu 23 Jul 2026 21:32:29 +0000
Manifest this update:     Thu 23 Jul 2026 21:27:29 +0000
Manifest next update:     Sat 25 Jul 2026 12:02:29 +0000
Files and hashes:         1: 326131343a373538303a666166303a3a2f34382d3438203d3e20323134333434.roa (hash: sJbd3x+685QBuPBnC8OOeqVgs1pJqkXNtOuVKx3me3g=)
                          2: 326131343a373538303a666166313a3a2f34382d3438203d3e20323134333434.roa (hash: LkT0ENe1YUFRxlS5aUhx4sNAMJ0+5HjZvFiPqwyHP/c=)
                          3: 77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl (hash: XJonMudzZnNwuDU5nebjQefu7T8cbdH6RLnmotH3mFw=)
                          4: 326131343a373538303a666132303a3a2f34342d3434203d3e20323134333434.roa (hash: F5inQOiSNImj2gBvrsVqMCS17ZhaQcVsyimtR4sjAVw=)
                          5: 326131343a373538303a666131303a3a2f34342d3434203d3e20323134333434.roa (hash: t+dQbhe0o/A21YGqm9dCw1DWi/aebT8VS3kHcNUIfSg=)
                          6: 326131343a373538303a666134303a3a2f34342d3434203d3e20323134333434.roa (hash: nJnylMUfQzzXqdIVQmBJRIEFv4ZtSZG/B9HDKJTMVmk=)
                          7: 326131343a373538303a666166323a3a2f34382d3438203d3e20323134333434.roa (hash: 2HKFlGEgh4l30gTTpJSrYvRSVMvgqrDNZ7KrLDKUxyY=)
                          8: 326131343a373538303a666133303a3a2f34342d3434203d3e20323134333434.roa (hash: BBvLVobm31lHE2YSVEFw7pK4NXtwbn4C2tTQjbanPbk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:52:e5:82:c7:0a:fd:3a:ec:f9:6d:9b:ad:60:b4:ee:3e:52:20:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5
        Validity
            Not Before: Jul 23 21:27:29 2026 GMT
            Not After : Jul 25 12:02:29 2026 GMT
        Subject: CN=9768095B2D079EF626F87315DCE76B95A45670A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:6f:91:27:b7:d3:d5:55:3b:60:de:e9:61:
                    e9:fa:82:94:27:31:72:df:89:13:0a:e7:f4:2f:82:
                    9d:79:d4:78:f0:0d:a4:0f:68:70:52:7e:2d:8d:bf:
                    0d:67:55:31:67:81:77:2c:61:22:28:ad:98:49:8a:
                    6d:0a:2d:e4:39:13:d1:67:a0:4f:b2:5f:c5:85:8d:
                    84:6d:b6:48:5c:ba:6e:c0:1a:df:8b:b0:00:df:ea:
                    04:13:5b:2c:e5:b9:12:30:9b:48:38:f3:16:d2:e4:
                    90:86:e4:d5:8b:19:86:3d:32:13:1d:4f:36:7e:e2:
                    73:b7:9e:ab:47:fb:eb:84:90:77:41:37:3c:30:8b:
                    8b:80:b4:3b:a2:6c:86:15:38:9d:f0:44:81:a0:4f:
                    19:d9:ec:15:92:b0:52:8e:42:2c:ab:4b:d8:ae:8b:
                    3e:0a:3b:8e:ba:cc:8d:f7:f4:79:22:39:fb:6c:30:
                    77:10:81:f6:21:6f:e3:b0:d7:04:c8:4a:28:ef:89:
                    2b:b8:89:92:82:59:f5:ad:50:d0:a8:66:4a:50:34:
                    58:5f:08:de:f9:7f:b0:06:75:4c:c8:9a:9c:cb:81:
                    9b:6c:48:3d:0b:39:f9:8c:79:0b:a2:62:cf:51:e1:
                    b4:71:31:46:08:85:d7:ff:b7:1e:8b:aa:a2:18:2b:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:68:09:5B:2D:07:9E:F6:26:F8:73:15:DC:E7:6B:95:A4:56:70:A2
            X509v3 Authority Key Identifier:
                keyid:77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:7c:4c:0a:12:fd:55:06:42:d7:56:fe:16:37:e2:85:7e:a9:
         36:87:9f:df:5a:e6:e5:9a:5d:b7:7b:03:98:30:cb:63:fb:50:
         f0:2b:aa:39:0f:fb:c4:d2:1b:b4:77:ae:08:fa:d3:bb:8f:47:
         51:01:06:a8:e6:7b:41:82:7f:16:d2:20:3c:5e:1c:08:90:bc:
         78:3f:26:dc:3c:f2:4e:88:61:4d:14:5a:cd:eb:a1:13:9f:b0:
         a0:a1:0c:37:ed:04:41:26:d3:b7:b5:fc:fc:93:47:16:3a:9d:
         92:96:96:e3:fd:dd:db:7e:bd:0b:5a:a5:68:47:3d:8d:96:e3:
         9d:79:30:0c:e0:5c:07:cc:1f:3e:fc:09:fd:1e:2a:f2:c2:7b:
         ba:90:3f:f1:80:c4:79:30:cd:84:c7:51:92:29:c0:4e:58:67:
         07:25:7c:9a:47:5a:24:18:a9:15:28:2e:ff:45:67:df:9b:98:
         eb:a6:8a:9f:17:36:33:ba:ee:39:ae:4d:55:1a:47:94:a7:53:
         d9:79:75:bb:c6:f3:a2:13:1e:1b:b4:48:ce:3c:21:1e:ab:c2:
         7d:9c:a5:31:40:df:55:4f:6f:50:21:da:3a:18:96:84:1e:87:
         60:d7:3c:6b:0f:c7:4f:88:47:7d:54:ff:55:05:b9:c2:5f:fc:
         9e:d7:22:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:52:50 2026 by rpki-client