Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
File:                     D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json)
Hash identifier:          UoXfNuZMV3EloYGkPjQjt7iHvogDHEEkIv6m4GgViMw=
Subject key identifier:   D6:F2:25:5B:FA:F1:3A:35:18:73:47:ED:BF:B5:FA:35:3B:B2:5E:76
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Certificate issuer:       /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial:       50C57C4DBB1C78A723ECAD3219CD4CDC9F7EEDEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
Manifest number:          044E
Signing time:             Tue 12 May 2026 21:19:11 +0000
Manifest this update:     Tue 12 May 2026 21:14:11 +0000
Manifest next update:     Wed 13 May 2026 23:57:11 +0000
Files and hashes:         1: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3ZFhB/5ygf5t4lpptEoHt4tGKQVifxYsEJPws7ZipKw=)
                          2: AS202881.asa (hash: XHj3wS//oUB0bBxH4kvJ0ulJ7YLDJlbJqdRBWQiQMqk=)
                          3: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: MUrIH2boj+LfSuDuWmFyYK79Z3rGx6hOcdAedr+E2Uk=)
                          4: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: SVc+06+kSTZLFSZYHt+18ILRTqVegdlc2kojDgxmDjY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c5:7c:4d:bb:1c:78:a7:23:ec:ad:32:19:cd:4c:dc:9f:7e:ed:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
        Validity
            Not Before: May 12 21:14:11 2026 GMT
            Not After : May 13 23:57:11 2026 GMT
        Subject: CN=D6F2255BFAF13A35187347EDBFB5FA353BB25E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:c9:3c:3c:c0:44:f6:d5:87:3c:65:8f:e3:
                    8a:0e:20:77:77:a6:4b:78:46:df:ee:ee:dc:96:f9:
                    6c:88:3c:a8:e2:9b:df:54:01:d5:57:68:a7:7a:9c:
                    bd:3d:7a:57:e0:b9:5b:4e:4a:91:01:45:48:32:18:
                    df:e6:e7:f6:36:0e:36:f6:26:bb:b7:08:b7:dd:bd:
                    78:eb:f5:f5:dd:b9:a1:ba:9f:55:d9:b3:c3:a5:de:
                    29:f9:02:14:fc:3c:5d:57:a5:41:ce:2a:e1:b5:1c:
                    d3:f7:77:31:71:fa:2a:6b:8d:d1:12:3e:54:d5:f6:
                    34:91:12:fc:e7:55:b2:39:03:e8:4d:f5:13:07:36:
                    b9:82:d3:cb:c7:fb:bc:93:c6:53:be:8a:49:ed:76:
                    d6:37:78:af:85:6a:b3:62:7e:94:44:ef:cb:6f:15:
                    69:b8:c1:75:83:21:2d:f9:2a:8b:8f:0f:e3:72:0b:
                    7b:ee:c0:07:e5:9f:49:13:5d:d9:d2:44:54:2e:95:
                    7e:54:ca:6d:7b:34:db:3a:d8:62:85:b3:eb:b7:5b:
                    92:7f:eb:9b:b4:64:ed:72:67:09:bf:c7:14:7b:e7:
                    b8:00:dd:9c:8c:55:70:cf:6a:e1:ad:91:74:c3:d4:
                    2b:3b:f3:03:1f:1c:55:b7:ec:d3:1b:dd:2f:59:07:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F2:25:5B:FA:F1:3A:35:18:73:47:ED:BF:B5:FA:35:3B:B2:5E:76
            X509v3 Authority Key Identifier:
                keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f9:47:74:92:94:c2:a3:32:64:ef:cb:48:01:3f:28:5f:cb:
         86:34:5b:21:eb:b9:03:41:e7:c0:a4:5f:54:01:a9:ad:0f:d3:
         63:93:b4:71:bb:53:19:7e:12:56:74:4f:af:c0:86:7c:2e:cc:
         11:78:65:95:8e:5f:d5:7d:19:6d:ed:83:32:a9:d2:6c:fb:c8:
         09:fc:ee:ff:77:04:cf:2e:94:b0:c2:6c:77:44:22:8a:f3:c3:
         22:68:22:d0:ec:8a:e2:dc:ee:07:58:23:0d:86:2d:85:fa:2b:
         a2:ef:12:6a:e5:c7:91:8a:ff:c2:28:6f:e1:55:b8:2d:ad:ec:
         67:0f:1f:57:43:53:19:f3:95:89:b1:89:80:55:51:f3:23:25:
         be:10:3f:42:f5:67:ac:a3:6d:80:3f:13:d5:cb:5d:fe:90:32:
         29:11:49:76:dd:68:03:b0:ac:6e:f2:aa:90:df:cc:ed:88:74:
         f3:e9:49:a0:af:91:6d:a0:2c:44:2d:ae:34:31:33:a7:a4:11:
         11:47:28:e6:ff:77:f6:24:e0:77:86:28:68:15:46:bf:69:c8:
         dc:38:f8:ba:3e:87:b2:ba:0b:c8:1b:da:04:14:d6:6d:37:0b:
         f5:55:e6:4c:b9:98:65:1f:18:90:2f:99:c5:e9:be:ce:a3:75:
         4d:96:67:42
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUMV8TbsceKcj7K0yGc1M3J9+7eswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0
YmM5ZDhkODAeFw0yNjA1MTIyMTE0MTFaFw0yNjA1MTMyMzU3MTFaMDMxMTAvBgNV
BAMTKEQ2RjIyNTVCRkFGMTNBMzUxODczNDdFREJGQjVGQTM1M0JCMjVFNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvCck8PMBE9tWHPGWP44oOIHd3
pkt4Rt/u7tyW+WyIPKjim99UAdVXaKd6nL09elfguVtOSpEBRUgyGN/m5/Y2Djb2
Jru3CLfdvXjr9fXduaG6n1XZs8Ol3in5AhT8PF1XpUHOKuG1HNP3dzFx+iprjdES
PlTV9jSREvznVbI5A+hN9RMHNrmC08vH+7yTxlO+ikntdtY3eK+FarNifpRE78tv
FWm4wXWDIS35KouPD+NyC3vuwAfln0kTXdnSRFQulX5Uym17NNs62GKFs+u3W5J/
65u0ZO1yZwm/xxR757gA3ZyMVXDPauGtkXTD1Cs78wMfHFW37NMb3S9ZB73XAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU1vIlW/rxOjUYc0ftv7X6NTuyXnYwHwYDVR0j
BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2
OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2
SjJOZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h
Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMy9ENjQyOTc1RjUzNUY0NUZEOUY2
RDhGRUE2MjZCQzZEMjRCQzlEOEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPlHdJKUwqMyZO/LSAE/
KF/LhjRbIeu5A0HnwKRfVAGprQ/TY5O0cbtTGX4SVnRPr8CGfC7MEXhllY5f1X0Z
be2DMqnSbPvICfzu/3cEzy6UsMJsd0QiivPDImgi0OyK4tzuB1gjDYYthforou8S
auXHkYr/wihv4VW4La3sZw8fV0NTGfOVibGJgFVR8yMlvhA/QvVnrKNtgD8T1ctd
/pAyKRFJdt1oA7CsbvKqkN/M7Yh08+lJoK+RbaAsRC2uNDEzp6QREUco5v939iTg
d4YoaBVGv2nI3Dj4uj6HsroLyBvaBBTWbTcL9VXmTLmYZR8YkC+Zxem+zqN1TZZn
Qg==
-----END CERTIFICATE-----
Generated at Wed May 13 01:33:44 2026 by rpki-client