Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft
File:                     5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft (raw, json)
Hash identifier:          Ns5JS8NoR+1cy8xuFAia8vnxrixidt+aLXc/VzkaBNk=
Subject key identifier:   8C:15:22:B9:A9:D9:13:D1:6F:FB:CD:12:45:34:95:A6:E4:AA:FB:31
Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC
Certificate issuer:       /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC
Certificate serial:       2F68B985325B5747C3B04D6182A815637D78669E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft
Manifest number:          023E
Signing time:             Thu 24 Sep 2026 09:43:06 +0000
Manifest this update:     Thu 24 Sep 2026 09:38:06 +0000
Manifest next update:     Fri 25 Sep 2026 11:42:06 +0000
Files and hashes:         1: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl (hash: 2vBn7k2qdZ317pfYydh+EI8vZ3z/04puWnb8iCq3NXc=)
                          2: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: hR947RLO80MjAy1fUiecS1oEpdE+fjwemP68Afa7Bvc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:68:b9:85:32:5b:57:47:c3:b0:4d:61:82:a8:15:63:7d:78:66:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC
        Validity
            Not Before: Sep 24 09:38:06 2026 GMT
            Not After : Sep 25 11:42:06 2026 GMT
        Subject: CN=8C1522B9A9D913D16FFBCD12453495A6E4AAFB31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:e9:1d:bd:73:45:21:4c:ef:8f:cc:27:de:
                    cb:4e:a6:ed:84:19:8f:e8:84:7d:f6:50:b4:af:a9:
                    7d:0b:ad:66:69:e2:35:b5:10:ff:ad:f6:dd:32:59:
                    62:2c:28:33:fc:bf:c2:99:13:3f:96:38:09:65:1c:
                    78:1b:70:fb:6c:db:d3:4d:b3:37:8c:df:f5:04:4e:
                    6d:1c:ad:f5:61:19:f7:36:e8:f4:44:9b:2f:13:9c:
                    dc:4e:1e:92:28:11:9d:ec:f9:9e:08:da:7b:c0:39:
                    d3:77:ce:64:3f:45:73:77:14:d4:92:3c:3e:32:85:
                    30:36:85:17:5a:49:0b:6d:63:88:50:32:a2:a4:3b:
                    b3:eb:dd:44:d7:1d:e9:b4:b4:f2:3f:b0:3d:77:c2:
                    2a:14:eb:51:a9:06:9a:f7:21:01:04:ac:ec:ae:24:
                    b2:9c:20:25:2c:04:4a:d3:07:f5:93:b8:fe:43:71:
                    8f:03:de:fb:e6:e7:73:ae:ca:24:ee:f0:95:44:42:
                    b7:60:93:fb:4e:bb:de:a6:bf:7d:02:e0:ce:72:1c:
                    5e:5a:c4:6e:b7:da:c9:6d:e5:cb:67:3f:a7:62:5d:
                    4d:0e:32:13:a1:cd:6f:35:d3:d8:8f:71:a7:af:b5:
                    90:60:b8:49:74:3a:4e:9a:c4:bb:0e:9f:3e:0f:35:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:15:22:B9:A9:D9:13:D1:6F:FB:CD:12:45:34:95:A6:E4:AA:FB:31
            X509v3 Authority Key Identifier:
                keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:7e:ea:91:d0:df:ab:eb:c3:87:15:7d:65:b0:a8:a7:59:9a:
         2d:d1:6c:ef:67:6a:4b:2b:82:44:cb:4a:7b:68:72:7c:34:95:
         3b:2c:1a:13:de:9e:d7:cf:12:59:51:26:f3:d7:07:a4:e0:8c:
         2f:9a:80:17:67:32:02:0f:48:3e:1e:15:22:b4:08:58:55:38:
         7d:04:37:3c:70:a3:da:c5:3a:0f:d3:d6:12:73:bc:7b:7b:8a:
         e8:68:0a:c0:33:5e:e2:f9:80:cf:75:6c:e9:4b:1d:d3:ed:52:
         af:36:65:04:10:b4:5c:54:19:12:93:43:58:30:5f:91:4b:20:
         57:37:41:40:ee:2b:22:84:c1:bf:81:72:57:6c:c5:6b:e8:1a:
         5d:a2:2d:53:43:f5:ac:11:25:db:ac:5e:b5:5d:ea:de:b7:17:
         7c:93:7d:49:51:78:84:31:e2:64:d1:63:59:c1:c7:97:3f:1f:
         81:5b:cb:ad:35:97:c8:d0:70:29:8c:b9:88:c9:22:4a:81:81:
         bb:45:0c:3d:6b:ce:1d:ec:12:ae:07:b3:75:fc:85:ce:69:ba:
         dc:12:f2:66:15:4f:98:68:7f:4f:70:a0:02:e0:10:60:1d:a1:
         ba:1a:8e:75:02:f8:70:f0:19:b0:2f:f7:8f:b2:94:63:91:af:
         8e:d2:2c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----