Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File:                     926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier:          QRO2kBGACizJScxExomZsB0N1x4pVm6nCaSI9UyMdUQ=
Subject key identifier:   24:94:D2:3E:E4:CD:1B:20:09:DF:DD:90:5C:55:18:98:E5:84:BD:44
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       704C5243C749499CD2ACC9652438FEC0FFECCB7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number:          051C
Signing time:             Sat 23 Aug 2025 01:56:57 +0000
Manifest this update:     Sat 23 Aug 2025 01:51:57 +0000
Manifest next update:     Sun 24 Aug 2025 04:32:57 +0000
Files and hashes:         1: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=)
                          2: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: vwSEUgdFJ5PPtETvmVfTCVmULHvCJLz5jSqlSjdS13k=)
                          3: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: d0CNhbryIL6+c90j2TaBqi7Cbf7qOSrpLqHJfEOqvns=)
                          4: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: G0pJKexFl5iJSj7RvTDDHGwylbeAPcm6mkIGuJ7MB4g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4c:52:43:c7:49:49:9c:d2:ac:c9:65:24:38:fe:c0:ff:ec:cb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: Aug 23 01:51:57 2025 GMT
            Not After : Aug 24 04:32:57 2025 GMT
        Subject: CN=2494D23EE4CD1B2009DFDD905C551898E584BD44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6e:e3:df:54:ab:70:0b:cc:bf:36:81:8f:5c:
                    03:e9:89:37:05:1b:b8:8d:e0:84:f7:37:b2:79:39:
                    01:02:37:61:60:37:ee:8b:e6:62:f9:f3:ad:e1:51:
                    70:c3:ca:12:9d:12:e2:24:ce:29:4f:d2:d7:71:ea:
                    db:f2:07:05:5c:aa:06:13:4a:49:5b:2c:56:f6:c6:
                    5c:88:d0:53:37:31:90:54:ca:c6:e3:af:79:75:38:
                    d9:25:a9:fe:52:7c:d1:c8:f3:d4:f2:d4:c1:37:e9:
                    09:e4:4e:06:65:f9:ac:db:41:1a:ae:a2:49:46:d7:
                    6a:f7:2a:d2:a3:ba:16:6a:fd:01:80:52:5a:ce:12:
                    a0:57:b8:30:fe:54:32:4f:19:7b:b6:54:e9:3b:78:
                    f1:18:3f:1e:4c:75:db:e3:06:85:bb:68:79:59:15:
                    a3:da:7a:7a:57:11:4b:84:08:94:10:9a:e1:24:01:
                    0c:06:93:2d:76:4c:7e:42:ab:a5:76:0c:58:ff:54:
                    40:9d:e0:16:41:3a:65:aa:9e:75:04:2a:c1:74:6d:
                    de:78:85:9b:52:5d:28:d4:15:16:b4:92:6c:a8:89:
                    37:96:5c:e4:af:f7:e2:2b:67:b5:5a:a2:55:59:bb:
                    7a:f5:42:c7:13:f3:7d:4d:74:c2:fa:dc:cd:c0:94:
                    26:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:94:D2:3E:E4:CD:1B:20:09:DF:DD:90:5C:55:18:98:E5:84:BD:44
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:75:9e:4e:ca:ef:80:7a:17:eb:69:90:43:af:50:34:37:d2:
         74:9b:07:6d:e5:68:42:17:e1:b1:f2:34:80:f3:02:a1:bc:0b:
         e0:a4:bb:8b:0c:80:ee:a6:fd:20:90:12:9e:58:0b:9a:5e:12:
         a0:4e:7d:70:d3:98:9f:cc:68:73:8d:5a:c4:c1:28:7f:f9:19:
         62:0d:4d:9d:3e:44:f0:10:ec:8c:7b:e4:0f:c0:2e:5e:c4:1f:
         c6:e7:46:65:fc:d6:2a:f2:18:41:cb:3b:63:b0:5f:e8:e9:77:
         6c:b7:4a:b9:b9:de:9e:9c:63:e4:da:24:ef:06:56:e8:a8:a8:
         8e:b9:d8:c7:00:23:6d:da:70:c6:30:e8:22:a0:35:59:9d:1b:
         1d:5d:f8:ee:00:0a:09:66:cd:f8:df:17:b1:d6:3f:33:57:b1:
         2f:f2:08:39:b9:50:e3:48:14:17:d8:64:3b:4b:c6:43:77:c1:
         1b:19:eb:e8:d2:7a:4d:bb:af:b5:b4:42:6a:8c:57:7b:45:38:
         17:87:84:71:da:c0:cb:61:9c:5a:a9:dc:7f:bf:83:1a:f5:99:
         56:7f:7f:e5:ef:ec:bd:1e:86:fd:f5:09:70:30:f2:79:bb:b4:
         9f:6c:92:33:ec:cc:63:5f:01:74:64:4c:35:94:9e:c6:e8:0f:
         33:74:c5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:26 2025 by rpki-client