Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File:                     0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier:          HTOeOfW3/h1bXOSggOW+yPWGwFM8KAfd38LSDeOkiwA=
Subject key identifier:   B4:C5:4E:75:1A:C3:50:68:FF:EE:BF:B5:A0:A5:FB:60:E6:32:3F:C5
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer:       /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial:       2A36232342CB948E6DC6594885B7816AF5C649EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number:          042E
Signing time:             Thu 23 Jul 2026 15:38:49 +0000
Manifest this update:     Thu 23 Jul 2026 15:33:49 +0000
Manifest next update:     Fri 24 Jul 2026 15:41:49 +0000
Files and hashes:         1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: WbdEquU64ADO9Wkk6jLeO5juDAQe4wHrtTzJSNarZJ8=)
                          2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: 7bLO5behIIxh8QOWdCdYKrNmYUJrIUwnhfkYG+jVAro=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:36:23:23:42:cb:94:8e:6d:c6:59:48:85:b7:81:6a:f5:c6:49:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
        Validity
            Not Before: Jul 23 15:33:49 2026 GMT
            Not After : Jul 24 15:41:49 2026 GMT
        Subject: CN=B4C54E751AC35068FFEEBFB5A0A5FB60E6323FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:19:df:b2:aa:7c:a3:72:6b:b6:8e:01:14:
                    97:4b:c0:72:d1:4d:9f:49:91:7c:19:dc:69:3c:49:
                    2d:f8:b6:a5:05:de:2a:87:56:4c:f0:c8:85:58:08:
                    3a:fa:31:8b:0c:65:e8:8d:04:95:57:62:93:52:d5:
                    13:05:d7:b5:06:d3:cc:9e:a2:43:bd:92:c0:da:88:
                    a7:df:f1:87:e4:39:35:11:b3:bc:91:32:a5:60:8b:
                    30:a2:57:0d:19:ab:44:72:f0:22:09:cc:69:36:bb:
                    14:33:c0:bf:fb:bc:7b:72:80:1f:26:56:63:7f:61:
                    29:f1:00:68:9b:25:1b:6b:b5:3c:2f:1b:07:47:3f:
                    8f:0a:31:e8:c1:8a:c5:63:c4:fb:ba:ef:53:61:fb:
                    f5:2c:b4:76:87:04:c7:ac:93:45:66:bd:b3:7c:a2:
                    76:31:4f:63:1c:fb:5f:20:77:4b:11:ae:b6:77:f3:
                    75:23:a0:6a:6d:ac:b5:c5:b0:4e:b7:60:38:d8:9a:
                    12:d8:b6:79:c3:fe:ae:ff:98:e8:90:3e:ea:f0:d1:
                    89:52:25:7f:21:54:ee:c8:ff:de:45:78:88:aa:8d:
                    b2:a2:c6:94:05:c9:ba:bb:2e:53:9e:15:d5:c3:1b:
                    49:c0:6a:91:6b:bd:06:10:73:ba:ff:c9:43:14:45:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C5:4E:75:1A:C3:50:68:FF:EE:BF:B5:A0:A5:FB:60:E6:32:3F:C5
            X509v3 Authority Key Identifier:
                keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:03:fa:eb:b7:fb:e7:e2:04:90:ce:dd:0e:9a:23:7b:f1:
         67:a4:31:22:ee:26:d5:08:9a:6a:bd:52:ca:47:5f:50:e1:03:
         04:67:50:35:a7:8d:e8:f1:5c:ed:c1:b2:96:99:d4:de:e8:36:
         55:a8:f0:67:7d:0d:d9:f8:1d:7f:12:29:47:21:9c:35:33:77:
         49:9a:c4:3d:e7:70:bc:2b:fa:4c:e7:5b:78:4f:e3:e7:1f:ac:
         39:93:99:d1:39:f0:78:39:ed:73:0c:37:84:4d:98:99:fb:e1:
         3d:50:60:91:cf:4f:64:8a:e5:aa:d1:bc:5a:00:87:1a:07:f0:
         35:89:c8:0c:b9:74:6f:d0:c4:58:c9:05:c9:e9:c0:76:b4:b3:
         d6:1d:d3:c6:d9:47:83:d3:b7:d0:a7:70:35:17:36:58:fb:d2:
         38:fa:17:7d:b8:4a:a1:e0:22:90:4d:96:b1:d0:56:97:48:68:
         a3:7d:97:61:10:4b:f4:4a:ff:db:b8:27:5e:45:ba:73:cf:b2:
         f9:d4:af:ef:6d:b5:71:d4:66:b4:db:99:47:b9:13:90:70:55:
         77:18:dd:7b:43:b2:8c:2d:72:31:ed:ca:5f:0a:a8:41:04:08:
         78:1d:d4:fe:b2:c8:1e:1a:89:fe:31:30:13:13:4f:a9:01:a0:
         21:bb:7e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:41 2026 by rpki-client