Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File:                     2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier:          ICPzXVooLrsEL4PGBQR1FeBr/A3a9U9RYOTHnpiXoVE=
Subject key identifier:   D4:24:AE:A9:74:F6:D3:42:96:5D:1F:99:BC:23:6B:8B:3D:E6:43:0C
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer:       /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial:       78F84636FECD34778B0FD192465D285C4C087D08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number:          0501
Signing time:             Wed 23 Sep 2026 21:28:32 +0000
Manifest this update:     Wed 23 Sep 2026 21:23:32 +0000
Manifest next update:     Fri 25 Sep 2026 00:13:32 +0000
Files and hashes:         1: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: MA6NPPoujdiQWojyCVLJyxDFh4C42V7H1GeWERt+WOo=)
                          2: AS205329.asa (hash: D7v68W1jFkdHMUdFoafa1ip0HB/iYsJ/PoPFEmKh9to=)
                          3: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: Dbs6r4LoifH0DrgHxVFSpDdhjvyNQiGkcRoqWxmCwws=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 00:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f8:46:36:fe:cd:34:77:8b:0f:d1:92:46:5d:28:5c:4c:08:7d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
        Validity
            Not Before: Sep 23 21:23:32 2026 GMT
            Not After : Sep 25 00:13:32 2026 GMT
        Subject: CN=D424AEA974F6D342965D1F99BC236B8B3DE6430C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:18:f2:68:24:b6:e2:f1:03:ce:01:65:e0:ea:
                    1b:48:2d:21:41:33:0b:b0:e0:dd:13:c8:1c:a3:ad:
                    72:24:af:18:23:8c:e8:f3:7f:ee:75:65:f7:f6:13:
                    1b:52:9b:b0:8a:66:94:b5:8c:89:3f:3a:4b:c5:de:
                    62:2a:ed:53:19:59:11:8b:06:8f:75:9d:d2:bb:f2:
                    42:48:0b:06:53:00:35:ce:2b:66:09:67:15:0e:fc:
                    28:0f:23:77:ff:9a:f0:f9:3f:49:54:97:bf:5a:56:
                    1e:fc:54:ca:d9:fc:6d:b5:84:56:1b:d5:10:10:71:
                    0c:4e:57:8e:f2:75:9b:86:0a:c1:ba:15:c4:dd:f3:
                    5d:9b:84:ab:e1:a0:41:1e:90:36:fe:12:c0:9b:2f:
                    97:8f:b0:a3:d1:9e:d7:16:54:16:90:68:94:8a:08:
                    fc:1d:11:a1:b6:fc:61:0e:b5:23:8a:b9:80:61:39:
                    2e:92:a2:bd:74:7f:dd:d3:05:2c:aa:e7:5f:c8:64:
                    32:9d:ed:75:7e:f1:79:f4:ec:76:23:ad:f2:c5:aa:
                    d8:43:d4:db:fa:95:36:dd:4c:b7:7c:47:3c:6b:f2:
                    28:a2:9d:a6:ab:9d:8e:8e:17:eb:0a:76:51:11:a1:
                    07:48:ab:80:33:c3:ad:44:69:1e:15:84:4d:3b:3d:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:24:AE:A9:74:F6:D3:42:96:5D:1F:99:BC:23:6B:8B:3D:E6:43:0C
            X509v3 Authority Key Identifier:
                keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:40:a7:04:eb:b6:1d:86:b1:38:1e:17:27:72:98:47:49:17:
         dd:3d:c9:cc:68:06:0b:ed:d1:17:b9:5b:58:03:42:f3:57:1f:
         4d:38:8f:5d:aa:23:37:be:34:61:42:d7:f3:b0:f3:10:46:00:
         86:86:4b:81:91:1a:f7:3c:5a:97:11:04:73:4f:a7:8d:34:20:
         81:80:94:bb:ce:a9:e8:89:d0:0f:9f:3d:11:1b:90:0e:c6:39:
         12:5c:20:0f:ee:23:91:18:ab:6f:58:e8:26:1d:43:e7:c9:8f:
         89:80:e5:89:41:03:6b:ee:27:9a:96:15:46:8a:a9:d3:e1:28:
         67:10:74:86:c7:1b:f2:cc:78:4d:00:06:d1:e7:cf:51:de:07:
         9e:8f:f2:35:5c:d5:9c:9a:18:7d:84:25:f0:e3:3f:7f:22:22:
         31:c4:9f:87:0b:45:4f:8e:cd:f2:e1:08:d6:b1:c3:1e:5b:d7:
         53:72:9b:3b:5d:0d:2d:85:18:53:0d:a0:40:10:8f:f5:0c:ab:
         4e:e5:e7:65:8c:1f:a4:fc:70:58:00:0f:3f:d9:4d:8a:f7:21:
         93:82:cd:33:3d:f6:c8:4a:22:de:be:6e:7a:9f:73:f8:68:66:
         6b:d8:28:8a:c4:8a:8e:41:96:ec:95:9f:31:91:dc:27:e3:8e:
         36:0d:40:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:00:31 2026 by rpki-client