Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File:                     926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier:          MI9YygueHP7aMx4Mt/0WYveli8MmV5USTQbPNinJUOI=
Subject key identifier:   E7:EB:B4:F1:D5:E4:75:DC:40:B0:9C:A0:A0:EA:1E:FF:3D:BA:A4:AF
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       367C19B7597A15E95119FBE55E7A0386426EB849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number:          06DA
Signing time:             Fri 24 Jul 2026 03:51:10 +0000
Manifest this update:     Fri 24 Jul 2026 03:46:10 +0000
Manifest next update:     Sat 25 Jul 2026 07:28:10 +0000
Files and hashes:         1: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: m4JDjuZJDmmChmmlFAMJ8Bw8b2ZsdAh0iDbkWo79PPM=)
                          2: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: Pxf4B7ZT6gV1TWVd3qoH34uVviW8HXPSyFTn+jTKS9w=)
                          3: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: YqyXT3WcHc2hMaPXHRgY1U/lqF1TCZaNE9FsPGv1r+Q=)
                          4: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: wZK8GKavAyHxdXi2NXubIUtrqAxE1wgx7MB4jomVNVo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7c:19:b7:59:7a:15:e9:51:19:fb:e5:5e:7a:03:86:42:6e:b8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: Jul 24 03:46:10 2026 GMT
            Not After : Jul 25 07:28:10 2026 GMT
        Subject: CN=E7EBB4F1D5E475DC40B09CA0A0EA1EFF3DBAA4AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:3c:6b:08:24:37:a4:1e:d3:1b:82:28:ef:
                    f4:56:20:81:5d:9d:59:96:30:d8:c3:4e:d0:03:21:
                    3b:1e:81:ab:af:2c:69:47:60:a6:89:21:37:ad:57:
                    71:7f:07:91:2b:73:a7:6e:34:74:9d:07:48:44:1e:
                    4a:43:73:06:73:6d:f9:90:04:a2:f2:7c:1c:83:86:
                    3c:11:b2:c9:6a:53:05:0f:26:7f:b6:be:44:a3:a1:
                    2f:4f:22:e3:79:9b:78:02:dc:02:cb:77:95:20:e2:
                    63:a8:dd:61:4e:77:fe:05:0f:4e:30:63:a8:fa:34:
                    52:f6:fe:da:8c:00:30:5b:d2:07:28:b0:c9:cd:72:
                    d0:dd:42:e5:10:b7:d8:d4:07:2c:d0:e9:c7:3d:87:
                    ee:54:ec:81:73:7c:0f:8a:82:76:3b:df:b7:63:ca:
                    06:30:1a:f0:d1:a6:bc:10:f8:d2:cf:91:f8:48:69:
                    ce:0a:8a:ab:76:8d:a1:21:29:83:28:37:84:cf:de:
                    a7:b0:59:24:45:a4:b2:66:1d:b1:97:8f:c0:2b:6d:
                    b8:e1:3b:51:a2:90:41:1a:d7:99:ba:7d:be:0a:a5:
                    4a:12:d2:5c:3a:6c:98:e0:59:ec:1d:d5:33:0f:a9:
                    eb:20:3c:39:81:9b:ea:23:0f:ab:0e:1c:af:79:1f:
                    7d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EB:B4:F1:D5:E4:75:DC:40:B0:9C:A0:A0:EA:1E:FF:3D:BA:A4:AF
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:19:3d:e8:7c:d3:2c:51:b8:5a:96:e4:41:3d:dd:03:f4:c3:
         8c:2f:7a:94:4e:05:10:da:05:65:56:c3:d1:3e:b3:4d:a7:fb:
         c7:42:4d:c0:2c:a8:a1:3e:90:bd:10:6d:34:53:14:bd:bd:36:
         36:63:c2:47:78:2c:0c:e3:80:87:47:59:91:a6:a9:5a:e3:b0:
         89:70:4b:01:81:17:a8:95:f8:d7:27:24:f6:1f:b8:95:be:cc:
         15:76:ff:88:83:9a:2e:5a:ab:7f:02:93:06:a1:12:35:80:d4:
         3e:7a:2b:d8:62:ab:dd:af:08:e5:0a:8d:98:39:e1:d7:9d:cb:
         df:09:2a:15:60:cd:76:ae:5d:0c:6b:d8:c4:b8:8f:a2:28:27:
         9e:3c:fc:a7:a1:aa:71:95:e0:64:0c:c8:6e:70:c7:36:06:46:
         0c:26:36:01:ad:d4:da:6e:c3:00:a0:4c:67:3f:ed:86:a3:45:
         ae:83:c1:6d:a9:09:7f:66:e1:4c:83:f3:72:9b:10:eb:20:37:
         05:fb:c2:5a:37:60:cf:68:7b:bd:8f:e5:89:0f:f4:82:59:75:
         1c:dd:1b:98:3e:47:56:1a:eb:fc:f8:bc:e8:8e:41:b4:18:54:
         05:2a:8e:bf:69:64:37:27:72:20:8a:49:72:b0:bd:f2:03:8e:
         a2:e1:6f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:22 2026 by rpki-client