Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft
File:                     62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft (raw, json)
Hash identifier:          ArPcL6fQIsmFsT9Xm5dyk1v27juahWEqjaPMbi90YDU=
Subject key identifier:   6F:03:73:B1:B5:C8:AC:C4:BA:42:4D:9C:D5:AC:44:83:56:1B:F5:E2
Authority key identifier: 62:D2:9A:06:48:EE:6D:89:D9:E9:A6:A9:AC:15:B4:A6:92:B2:25:36
Certificate issuer:       /CN=62D29A0648EE6D89D9E9A6A9AC15B4A692B22536
Certificate serial:       1FA68B9F721F37EA1D33AFF4638A50797697B1A4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft
Manifest number:          30
Signing time:             Wed 13 May 2026 04:36:41 +0000
Manifest this update:     Wed 13 May 2026 04:31:41 +0000
Manifest next update:     Thu 14 May 2026 19:51:41 +0000
Files and hashes:         1: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: nZjZ1BnZI0dBzNhskqIxoEygMMm+y+RvaVl8qJu9fX4=)
                          2: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: U3VxlYVJDi8xV7CxMMI72zfRcW4i6iOC2MTfg2xraIY=)
                          3: 62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.crl (hash: vSpZd/FCNKcPuZrPWJPX72vdyFAjy3RKTHeg6Hauv+I=)
                          4: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: pdi0gEMaG5/D7JK9Zh5vusH8qIO/fIfz8EKZlEVkW00=)
                          5: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (hash: loAr9lftLZ3vwuvJmyBvS0IHmVlrS0vLLB8SxJIq1d8=)
                          6: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: O1DOX7fA9jfnoSeWMa11Wp/d995uhroRM2jfe2mLRug=)
                          7: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: +HkEXWJnMNkqLcMHQ1DXhuOI1jBvZDFvEhgNll+1Gx0=)
                          8: 326131343a373538313a393966663a3a2f34382d3438203d3e20323134333434.roa (hash: t4EI/Mk5YhylQpYGn3RlsMvjC7W6xYVw8s3ZATd/tDM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a6:8b:9f:72:1f:37:ea:1d:33:af:f4:63:8a:50:79:76:97:b1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D29A0648EE6D89D9E9A6A9AC15B4A692B22536
        Validity
            Not Before: May 13 04:31:41 2026 GMT
            Not After : May 14 19:51:41 2026 GMT
        Subject: CN=6F0373B1B5C8ACC4BA424D9CD5AC4483561BF5E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:67:0a:d6:2f:9e:94:c6:aa:f0:93:f8:55:50:
                    9d:8c:cf:80:1b:27:38:8d:c2:e4:be:73:59:3f:97:
                    9e:a4:d2:44:80:86:1a:6a:ed:ea:96:64:0d:ed:e9:
                    be:8e:8e:84:e9:db:ce:9d:27:8a:1c:9a:b2:48:39:
                    fe:ed:3d:2f:38:9e:8b:18:5f:92:7a:7b:84:29:27:
                    e4:44:bc:c7:2e:27:67:66:9d:2f:ee:09:51:55:bd:
                    23:ee:60:95:11:a5:ed:ea:0d:31:95:e4:96:1a:a4:
                    80:42:37:65:b4:6e:a1:a1:91:1a:a6:14:55:c7:38:
                    c1:6e:06:17:7b:ce:52:c7:c2:53:c4:2f:c1:77:22:
                    ce:5c:6d:04:37:b9:07:c0:7d:2b:ad:3d:9b:a4:ef:
                    21:53:60:ea:aa:c0:59:36:27:25:da:4c:5b:53:14:
                    3e:50:93:53:d3:be:cf:4e:88:74:fc:bc:09:02:a8:
                    fb:53:af:44:28:93:e3:b7:80:30:32:3a:41:82:6d:
                    8a:7d:2f:df:18:e6:8d:18:77:00:34:9a:ad:ef:c6:
                    f2:66:69:77:c3:31:85:49:6c:65:18:37:37:c1:4d:
                    49:5a:47:e8:46:b9:0b:3f:db:1a:99:9c:91:9d:cc:
                    d0:a5:c3:04:d9:8a:8e:9d:92:72:a2:b5:96:f9:08:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:03:73:B1:B5:C8:AC:C4:BA:42:4D:9C:D5:AC:44:83:56:1B:F5:E2
            X509v3 Authority Key Identifier:
                keyid:62:D2:9A:06:48:EE:6D:89:D9:E9:A6:A9:AC:15:B4:A6:92:B2:25:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:5e:d9:96:ec:82:e6:6a:03:20:cb:c0:19:55:c9:d6:26:a3:
         d9:6a:e9:cf:4c:8b:ae:2e:a4:e2:f8:14:a0:cd:75:59:a5:e5:
         95:ae:ed:4b:5e:1a:e2:be:94:b5:a1:09:4f:ec:74:3c:a9:c3:
         d9:d6:79:52:53:b2:e0:17:0a:e8:28:70:99:f6:c9:12:83:66:
         11:01:f9:b6:38:3c:eb:75:cc:df:ab:21:bc:d4:e0:bb:2e:91:
         19:79:be:21:45:c9:32:4c:78:5a:c1:7a:9d:0c:3e:99:a2:69:
         c7:71:da:fd:ff:ac:b6:df:98:d8:78:d7:60:06:e4:77:60:b8:
         7a:9a:49:d3:ff:81:1d:6b:53:97:6e:df:7c:4c:c9:32:7c:ab:
         48:db:ac:84:6d:0e:77:45:b7:60:d3:b9:5e:6d:c3:13:8a:e5:
         14:00:c1:20:81:fc:e0:3f:ac:90:05:90:a2:1f:e6:3a:9e:a3:
         d4:3a:27:cc:25:9b:56:76:90:ad:10:38:77:21:8a:4f:31:91:
         1b:b3:5a:4d:ff:8c:48:35:75:28:0b:df:e5:8d:e6:7f:c7:1f:
         53:1a:5a:b8:90:c9:45:45:c6:ca:0b:e4:c3:7a:36:21:f4:21:
         a1:8f:f8:53:40:d0:90:49:aa:00:34:4c:0e:5e:fe:b2:33:87:
         c6:e8:fb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:24 2026 by rpki-client