Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
File:                     547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json)
Hash identifier:          UdpuKnNCCE7KRyP+6B23kbEFb9yNQDLQnvcYpy+nh0U=
Subject key identifier:   E1:95:AB:E0:5A:24:59:1A:81:08:81:B3:8B:D6:19:C5:39:13:C8:F8
Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
Certificate issuer:       /CN=547bc28c92a229a5ac78c0de287d89ce37726409
Certificate serial:       018338844D06CF2F9E39AB68190CDE6F21D92D96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
Manifest number:          0354
Signing time:             Tue 12 May 2026 04:01:05 +0000
Manifest this update:     Tue 12 May 2026 03:56:05 +0000
Manifest next update:     Wed 13 May 2026 07:27:05 +0000
Files and hashes:         1: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: utwrqG/1k6qyhjzxqxfsIfDkj33KE0HmwhjLx5CU12Y=)
                          2: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: oBjaSehJQyFbIJ5LnuvRBYLl+6ciKH+5dpyejqkvX1M=)
                          3: AS60431.asa (hash: W8B2btvY8654NatOoBPRRMV+PSLMlHitlzk3n1vMklQ=)
                          4: AS204931.asa (hash: zM51UdB/A/IZqHl1wn4NbUbXZwQrun9iugvDxBnKfTA=)
                          5: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: dHqMpXO8Fn1QmdwMgzIUNohViMqf6+wcagP7yILYRFI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 07:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:38:84:4d:06:cf:2f:9e:39:ab:68:19:0c:de:6f:21:d9:2d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409
        Validity
            Not Before: May 12 03:56:05 2026 GMT
            Not After : May 13 07:27:05 2026 GMT
        Subject: CN=E195ABE05A24591A810881B38BD619C53913C8F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a5:cc:98:e2:b8:39:b4:6f:c1:49:1d:80:8d:
                    9f:32:8d:76:c0:36:a9:96:5e:d7:c4:37:04:69:54:
                    13:68:b5:58:71:33:b3:23:98:27:cc:79:37:d9:41:
                    4e:63:96:23:7e:3c:8e:7e:d9:30:1c:68:77:84:3e:
                    bb:50:55:48:f4:c0:0a:02:f1:38:af:5c:2a:35:50:
                    f4:5b:0c:cb:cc:8d:9b:ff:14:bd:b7:16:9b:9a:60:
                    fc:54:b1:33:10:d6:84:fa:c0:12:c5:40:10:a8:f4:
                    b3:76:46:c1:2f:f3:ed:88:49:76:01:b1:d1:76:d0:
                    b2:ad:ea:77:9c:59:fd:0b:d0:bf:dc:60:fe:02:b2:
                    7f:28:51:de:15:7b:83:56:14:b8:59:8a:2a:b4:82:
                    d2:be:f3:7a:d3:59:1b:13:15:37:9e:86:ae:42:8a:
                    aa:56:0a:58:e0:50:35:ff:01:ac:d9:17:c3:a3:6b:
                    6d:18:40:34:bd:22:a5:92:5e:33:04:bd:81:08:d9:
                    c8:c7:e5:34:cf:79:19:fe:3a:7a:7e:fb:f0:0a:69:
                    11:d3:68:3d:14:20:71:af:b3:dd:e7:ed:b1:2d:17:
                    50:87:63:b8:53:a2:af:2c:57:77:df:80:d9:11:47:
                    5c:a7:a7:27:1c:bd:7b:8c:10:5c:9d:88:96:6c:92:
                    4f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:95:AB:E0:5A:24:59:1A:81:08:81:B3:8B:D6:19:C5:39:13:C8:F8
            X509v3 Authority Key Identifier:
                keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:45:92:70:70:86:ee:a5:f7:b6:ae:9a:56:97:5a:b8:cb:3b:
         32:9b:f4:1d:d0:4e:87:b3:85:ed:c0:b7:1d:77:23:c8:99:44:
         16:b3:a2:6d:a8:df:93:92:d7:fe:31:8f:cc:60:a6:36:05:2d:
         1b:97:00:21:fc:3b:9a:86:78:90:d3:39:24:7d:61:1a:8d:1e:
         55:6a:3a:d5:96:98:15:9a:e0:0e:38:18:e7:0f:7d:67:84:b8:
         a5:2b:d6:b9:c6:a9:25:f3:fa:a6:47:67:99:34:98:ff:c4:4d:
         fc:71:61:9f:5b:f1:ab:11:fb:5e:ba:a4:2e:ef:df:fe:5f:d9:
         eb:45:a8:ef:d7:c5:c6:19:56:7f:ba:b2:b9:95:2c:fe:a2:74:
         3f:6c:b3:70:84:ea:0e:f6:ce:68:b3:42:6c:69:2f:73:e4:a0:
         b5:75:98:6a:24:e4:a2:b6:22:0c:45:00:4c:e3:c9:2f:f9:95:
         f8:0b:07:5f:e3:5d:08:ed:60:de:d1:e7:8d:9e:23:22:98:d1:
         92:02:37:c9:6a:f0:ea:0f:b4:e7:83:1c:25:32:ec:e3:bf:ab:
         eb:14:21:55:3a:00:79:24:c3:fe:80:c5:c6:86:0f:ef:e8:25:
         67:27:b4:03:85:62:7b:ca:ef:e7:69:37:bf:56:93:64:c8:63:
         dd:af:1d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:03:13 2026 by rpki-client