Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          3LZ4NT8gA5ULtQBMuVz3mIQizpcZnaUmPdo6/w8+ryo=
Subject key identifier:   ED:E1:29:3A:FF:B1:A2:8D:CC:A1:D7:CB:40:02:6C:59:2B:5F:18:F3
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       2BB14E9CE554A66C6DBD09DB2A224E2EFAA8C03B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          0406
Signing time:             Thu 23 Jul 2026 20:47:25 +0000
Manifest this update:     Thu 23 Jul 2026 20:42:25 +0000
Manifest next update:     Fri 24 Jul 2026 21:42:25 +0000
Files and hashes:         1: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=)
                          2: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: XRiKxatyVLysBjqVSJJoRWMIYhIOm7ZhYhL0/zUT8W0=)
                          3: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
                          4: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=)
                          5: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          6: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=)
                          7: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: n+Ls1jXfWmBHifONKmtp9H1RDvGnEsrCqesBPgQc1ow=)
                          8: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
                          9: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
                          10: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
                          11: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: SggrSd58rYWUnF7aoXbJS01Xsn0gasOjLa9BRU+eZog=)
                          12: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=)
                          13: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=)
                          14: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
                          15: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: XxZQPg3bymA39RzaDkTbJBcK/NEqin5of0P6cgBF9Yw=)
                          16: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: h3VcKI8rQsN3JtAe6OwHMHeBRW3aUtosh0JU525Pq4c=)
                          17: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b1:4e:9c:e5:54:a6:6c:6d:bd:09:db:2a:22:4e:2e:fa:a8:c0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Jul 23 20:42:25 2026 GMT
            Not After : Jul 24 21:42:25 2026 GMT
        Subject: CN=EDE1293AFFB1A28DCCA1D7CB40026C592B5F18F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:6f:f8:a1:31:4f:7a:54:1a:08:ae:b5:6c:
                    34:a1:73:e8:e5:c4:39:74:5a:8f:d2:51:1a:63:d8:
                    4a:ac:80:94:9e:c4:ad:81:bb:0f:03:bd:a8:be:f9:
                    a7:02:5e:b3:1b:6a:a3:fd:78:b2:da:b3:5b:84:c1:
                    47:c1:f3:df:08:4d:de:0d:e6:9a:39:aa:7b:78:5a:
                    57:99:c4:29:71:fe:f4:3c:13:16:2e:c7:f4:7a:da:
                    ec:ae:4e:87:93:b3:6a:eb:70:4a:fd:ef:04:39:ae:
                    d1:75:3d:fc:a6:fc:90:e6:21:ca:f5:84:76:b2:b8:
                    50:9a:bd:7a:f5:7f:5e:b2:47:60:24:9f:c1:81:9c:
                    5d:4c:44:93:1e:53:5e:db:f2:bb:f8:bb:61:1d:f5:
                    40:49:69:0e:84:ad:c6:04:af:17:b2:fa:c6:96:de:
                    fd:63:87:a7:bf:d4:48:94:e2:a6:35:a5:bc:77:88:
                    46:50:a6:da:ed:ec:90:0a:07:02:27:49:76:e0:92:
                    9d:13:29:76:39:6a:6b:d8:8f:28:ab:59:ed:9f:a7:
                    53:42:47:ee:81:9e:7d:47:86:8d:3a:3a:85:ab:4b:
                    6a:d9:0c:4a:d0:99:82:2f:56:35:0d:8f:97:03:d0:
                    5c:e2:60:4f:64:9b:2c:e7:66:66:23:a4:49:4b:3a:
                    e3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E1:29:3A:FF:B1:A2:8D:CC:A1:D7:CB:40:02:6C:59:2B:5F:18:F3
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:19:b4:dd:8a:72:66:33:2a:86:70:d3:e4:cf:19:04:c6:f2:
         de:d9:fe:d4:51:db:f9:e7:cf:11:7e:fb:6b:68:e8:6f:1f:fa:
         cc:8e:59:8a:91:db:e6:8c:c1:69:2d:47:2a:34:de:26:de:d8:
         18:21:63:ec:24:8b:24:93:6b:50:df:29:32:20:f8:dc:32:74:
         0b:d4:88:14:9c:f9:d3:5d:01:e6:97:89:1a:10:6c:03:f9:e6:
         e9:2b:ae:29:5f:01:af:13:0f:b3:6c:1b:bf:af:89:4f:41:56:
         0c:c1:84:ff:0b:fa:1c:ce:63:a8:6f:0f:ce:b7:92:b6:c1:4e:
         7f:32:24:c6:c7:6d:e3:5d:46:f8:f2:62:a9:65:a7:84:9b:64:
         6f:89:33:c1:f6:a0:af:7c:f5:9b:da:2d:a9:a4:e0:80:41:09:
         17:b8:b2:5e:a1:a1:bb:92:cf:a7:d8:d7:0b:67:65:02:67:be:
         3a:36:20:82:48:61:80:33:27:10:ad:cb:05:bd:cc:c5:f4:a0:
         91:9e:5b:cb:fb:50:a2:c1:a7:c1:80:21:91:3c:a9:c8:0b:46:
         c8:31:3b:32:56:30:d6:81:a8:80:7e:3f:26:a2:b0:7b:e3:d2:
         54:ff:9d:85:89:58:75:f5:f6:a6:2f:e3:42:5a:32:37:6e:39:
         17:49:02:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:22:29 2026 by rpki-client