Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File:                     926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier:          wGx9VtXdVRQplImu5Ye/T+2Wr7Dzs5h/Ze+FxNqijgo=
Subject key identifier:   AD:59:34:20:9F:F0:D9:15:41:2D:5C:17:3A:8E:0D:13:01:19:15:3A
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       5B0A5D5328E785A98F0FB999229DC4858876D6E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number:          072F
Signing time:             Fri 25 Sep 2026 06:33:59 +0000
Manifest this update:     Fri 25 Sep 2026 06:28:59 +0000
Manifest next update:     Sat 26 Sep 2026 10:04:59 +0000
Files and hashes:         1: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: /6JYnu74FnlMKLeMyxGRy9zINdjsl5pRxawy91gInjc=)
                          2: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: 8+rGpY6MzGINXYF4yG64dKFsRmpbZcY+C5LFCExwDcc=)
                          3: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: uK0Qd/USy59AqNTwWN3wPV3irBo5HSGqpruSyYVoTWs=)
                          4: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: wZK8GKavAyHxdXi2NXubIUtrqAxE1wgx7MB4jomVNVo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0a:5d:53:28:e7:85:a9:8f:0f:b9:99:22:9d:c4:85:88:76:d6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: Sep 25 06:28:59 2026 GMT
            Not After : Sep 26 10:04:59 2026 GMT
        Subject: CN=AD5934209FF0D915412D5C173A8E0D130119153A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:14:97:3b:59:1e:5e:f0:e5:4c:ba:d4:54:70:
                    76:fa:19:7d:5a:92:0f:5f:90:ac:78:a5:70:f1:d0:
                    da:1b:f8:96:f4:56:41:45:39:32:87:40:8e:38:5e:
                    93:0b:7b:b1:dd:48:94:0b:e4:71:82:66:b5:13:82:
                    e6:69:0b:98:eb:66:b6:3b:1f:ed:76:a7:5a:c6:21:
                    35:41:a8:5c:32:0f:d5:91:34:f3:e1:bc:38:81:fa:
                    7d:06:b4:0b:57:d2:c6:46:39:d7:a2:69:fd:9e:ec:
                    db:e7:36:1d:33:93:f9:11:63:2a:4c:79:4a:59:53:
                    d4:f0:7c:5d:44:91:dd:4e:78:8f:83:6a:fc:bb:08:
                    06:08:d4:13:be:7d:27:95:59:cc:a8:bd:b9:54:99:
                    26:de:51:05:f7:ee:cc:f1:e5:d7:13:18:50:e3:bc:
                    d4:c6:8d:02:bc:18:b9:f1:e8:56:df:cc:a5:6a:22:
                    3a:02:da:ea:57:8e:60:13:e5:c2:6e:3b:70:45:e3:
                    13:9c:64:f3:ae:5a:8a:09:2f:03:8a:54:76:b4:e2:
                    ef:60:8a:34:f1:69:97:f3:14:5b:06:fe:f6:2a:2d:
                    f4:a4:b1:05:ee:f0:8a:f8:ed:ac:03:8e:ef:4b:17:
                    da:26:c7:b9:e2:87:8e:0f:24:84:da:72:fe:c9:6f:
                    31:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:59:34:20:9F:F0:D9:15:41:2D:5C:17:3A:8E:0D:13:01:19:15:3A
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:42:3d:f2:c0:8d:1f:e1:c7:27:db:5b:c8:ce:36:7a:71:79:
         a2:19:aa:6b:25:2f:08:ca:74:81:f4:f2:30:61:02:d0:74:1c:
         f6:d5:97:d5:fc:ea:fd:a3:f5:b4:57:6a:29:04:6a:48:66:00:
         f6:5a:e2:77:7e:e9:ff:cd:6f:e7:41:e0:58:70:50:04:fa:70:
         9d:c7:fe:d1:c9:19:7f:86:88:2f:9a:d3:1b:c1:83:b1:1f:80:
         81:8b:1f:9c:cd:c4:57:12:2a:b7:f6:68:77:64:89:25:60:20:
         fa:57:f9:af:cc:cb:77:05:b3:6a:6d:3d:dd:46:8b:49:2e:da:
         58:7c:ad:a5:16:e3:3d:98:53:da:0a:33:dd:59:75:b3:4c:67:
         c8:df:b0:4b:9d:74:81:09:64:1e:0b:99:b2:a8:e8:c3:88:3c:
         49:82:16:cb:0e:14:53:d8:17:0d:79:94:13:3d:e9:51:85:57:
         0e:85:3e:11:c9:94:65:da:6c:cb:1f:c4:2e:bd:85:18:73:c0:
         2f:b0:a1:31:73:ee:dd:cb:cf:43:60:90:c7:43:d8:a0:6b:23:
         de:fa:31:db:bd:3f:6d:8a:aa:bd:fa:2d:60:4a:4f:46:b6:fd:
         0a:8e:9f:4d:10:08:e3:82:c1:e2:8e:76:47:80:4e:be:88:e5:
         91:28:21:09
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWwpdUyjnhamPD7mZIp3EhYh21ukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk
NTg4NzRmMjAeFw0yNjA5MjUwNjI4NTlaFw0yNjA5MjYxMDA0NTlaMDMxMTAvBgNV
BAMTKEFENTkzNDIwOUZGMEQ5MTU0MTJENUMxNzNBOEUwRDEzMDExOTE1M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeFJc7WR5e8OVMutRUcHb6GX1a
kg9fkKx4pXDx0Nob+Jb0VkFFOTKHQI44XpMLe7HdSJQL5HGCZrUTguZpC5jrZrY7
H+12p1rGITVBqFwyD9WRNPPhvDiB+n0GtAtX0sZGOdeiaf2e7NvnNh0zk/kRYypM
eUpZU9TwfF1Ekd1OeI+Davy7CAYI1BO+fSeVWcyovblUmSbeUQX37szx5dcTGFDj
vNTGjQK8GLnx6FbfzKVqIjoC2upXjmAT5cJuO3BF4xOcZPOuWooJLwOKVHa04u9g
ijTxaZfzFFsG/vYqLfSksQXu8Ir47awDju9LF9omx7nih44PJITacv7JbzHTAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUrVk0IJ/w2RVBLVwXOo4NEwEZFTowHwYDVR0j
BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4
ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX
SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w
NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy
ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUI98sCNH+HHJ9tbyM42
enF5ohmqayUvCMp0gfTyMGEC0HQc9tWX1fzq/aP1tFdqKQRqSGYA9lrid37p/81v
50HgWHBQBPpwncf+0ckZf4aIL5rTG8GDsR+AgYsfnM3EVxIqt/Zod2SJJWAg+lf5
r8zLdwWzam093UaLSS7aWHytpRbjPZhT2goz3Vl1s0xnyN+wS510gQlkHguZsqjo
w4g8SYIWyw4UU9gXDXmUEz3pUYVXDoU+EcmUZdpsyx/ELr2FGHPAL7ChMXPu3cvP
Q2CQx0PYoGsj3vox270/bYqqvfotYEpPRrb9Co6fTRAI44LB4o52R4BOvojlkSgh
CQ==
-----END CERTIFICATE-----