Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
File:                     E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft (raw, json)
Hash identifier:          D7LykecmePX1YcqEYCGTzOuXyqmDkNM1OcYbUFRb/9E=
Subject key identifier:   5B:1C:BA:0F:9E:0E:E2:17:74:56:2E:D8:B5:D4:45:02:58:2F:87:9F
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Certificate issuer:       /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial:       040F84021AE056364DD14B5C2D75FF2CEF7C474B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
Manifest number:          031A
Signing time:             Sat 14 Nov 2026 03:59:57 +0000
Manifest this update:     Sat 14 Nov 2026 03:54:57 +0000
Manifest next update:     Sun 15 Nov 2026 07:53:57 +0000
Files and hashes:         1: 3138352e3132332e3135362e302f32342d3234203d3e20323133323832.roa (hash: +iBbjdiVDi94lxIrom4MQooPLD1N3FqJBJegGDN8U1w=)
                          2: 34352e3134392e3135322e302f32342d3234203d3e203235313630.roa (hash: LQqWRc5RiRnrFMSHCeqJMpc6vcXWST3+o1UDPgKt7+k=)
                          3: 3138352e3136322e3137372e302f32342d3234203d3e20323138353638.roa (hash: 9Burep7iVlRj8P/jinsZk17FKwXmI+T/JT8kla+a3XA=)
                          4: 3138352e3233342e3130302e302f32342d3234203d3e203335363631.roa (hash: etX7ciNZNs5174vWdmDtkQTBFeC2wxz0cAkyidyNAqI=)
                          5: 3138352e3132332e3135382e302f32342d3234203d3e203239383032.roa (hash: KKez0Khb6IZPJMlNfqEbtFW6uvUHl2oV9Icm6KoeU2I=)
                          6: 3138352e33332e32362e302f32342d3234203d3e20323132363039.roa (hash: StvUkxWAE+cFieU3uToD4GXXDDAlKXKMH9/0h+2uU3s=)
                          7: 34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa (hash: zgGogM+qScD7d85ZF42zwboByqu52VU6wbBhgFYaNlY=)
                          8: 39312e3233322e39392e302f32342d3234203d3e20313734.roa (hash: vw6CF6gn9sbz+AB9WKlGqawV53NNSKPBFf5sty8TfWc=)
                          9: 39312e3233322e39392e302f32342d3234203d3e20313937353337.roa (hash: 1zceVbNoNbGigb739DKGH12Lz3EUL5EUuGLD5sTpqIs=)
                          10: 3138352e3132332e3135372e302f32342d3234203d3e203133333335.roa (hash: etZX295Om7z5nM36qFCm/OuFaVbSdHRIoDsnpFO5H4E=)
                          11: 3138352e3136322e3137392e302f32342d3234203d3e203132383734.roa (hash: Dq65MGgP/jvbx/fRolu32u44f/9NuGsxFlxiMiQcK+Q=)
                          12: 34352e3134392e3135332e302f32342d3234203d3e203133333335.roa (hash: qOwOklOJIQDQ3iXtKHsvIrT4nC9DB9yL2jjN1btBvD8=)
                          13: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl (hash: oxPWCxXV0zbxvGBSyGppF7oVXvQPAg1OzCYEr9tER1o=)
                          14: 39312e3233312e3135362e302f32342d3234203d3e203230363438.roa (hash: wgnwOREk/SS3AgEpm0DrSplNXucfBzpB5qxDojvDuuo=)
                          15: 34352e3134392e3135322e302f32342d3234203d3e20323134313433.roa (hash: h9UpEYcBJQPvnmmvG2hq4aqmuYuGKBso5cycO357wTk=)
                          16: 34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa (hash: V4JNlPHt9GYe6uHPs4b02Df/splFF1TrehGP4K2WsXQ=)
                          17: 3138382e39342e3139312e302f32342d3234203d3e203537303433.roa (hash: HA+UGhZ1ASWNuxypbNlnHzMuidHBb0bAH8BD++/Eu9I=)
                          18: 3139342e39392e3135362e302f32342d3234203d3e203232343237.roa (hash: 7cx3PmNL2bx7p3TSn+B5wruk2DH5oi/qrUGQZZobhk0=)
                          19: 3138352e3136322e3137362e302f32342d3234203d3e20313938353636.roa (hash: wdDoFtNGXJtx9AeIa/wBLVX+rkVY2r5hbgvzi0m8KQg=)
                          20: 3138352e3134342e31322e302f32342d3234203d3e20323134313433.roa (hash: ZJ7wXNKH0K37X3MGyr0SJdcUUdR6ACeqPfjfmTPWr9U=)
                          21: 38392e3135302e34392e302f32342d3234203d3e20323135313134.roa (hash: 8+3QXBkWfKHqJrin574kCECO066l0OpHPCh7UyKJaQw=)
                          22: 3138352e3136322e3137382e302f32342d3234203d3e2032393134.roa (hash: a1awRu5W+j/OpVvgzZ2y3kpbavrV8XlF/TCtgRFx9ok=)
                          23: 3138382e39342e3139312e302f32342d3234203d3e203236333833.roa (hash: /M+EHgtAJg40NHNQTHbudfsd5rXtJO1qGVlybBfNku0=)
                          24: 39312e3233312e3132362e302f32342d3234203d3e2035363530.roa (hash: /keadxHEKLIlJdZn+7/QJ582hR4EPNEsV/ta7yXGjKc=)
                          25: 39312e3233322e3130332e302f32342d3234203d3e20323130363939.roa (hash: 2vDUBXJ+LMB0N9swiqQaAGRXTFjH9zqerwFc08311RE=)
                          26: 3139332e31372e39352e302f32342d3234203d3e203537303433.roa (hash: ZlGZ8zDu+Ph5bj7QSByoEcMl2ulTvvWRFvbekfqhnas=)
                          27: 3138352e3136322e3137382e302f32342d3234203d3e2035353131.roa (hash: JUlZBSKolE1cnU8n1sBRM9UqTq9Mj1dhnDW8iA6zVpA=)
                          28: 3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa (hash: oKlOYt/ivogY03DODAeqT+usA/kmhETdr3gop9LZK2c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 07:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0f:84:02:1a:e0:56:36:4d:d1:4b:5c:2d:75:ff:2c:ef:7c:47:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
        Validity
            Not Before: Nov 14 03:54:57 2026 GMT
            Not After : Nov 15 07:53:57 2026 GMT
        Subject: CN=5B1CBA0F9E0EE21774562ED8B5D44502582F879F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e3:82:61:be:44:d4:8e:d3:29:41:5f:92:ef:
                    88:a6:0f:34:fe:cd:e0:4c:26:94:c7:96:59:8e:7e:
                    ec:22:b9:ce:a3:74:96:56:ea:32:38:54:20:ab:1a:
                    0f:cb:b0:c2:2c:e2:f5:0e:3f:31:5a:e2:61:2b:32:
                    5f:a4:bd:0f:53:75:06:36:ea:9b:01:29:8d:c1:c9:
                    75:15:42:b5:39:aa:df:c9:4e:c2:e1:15:0b:37:6b:
                    fe:be:fb:9d:eb:0f:04:8d:ab:00:44:d0:7c:78:2b:
                    2c:85:a0:4e:03:1e:ba:a6:c7:2e:c3:c2:32:1e:b2:
                    89:da:b6:ce:11:32:fc:de:bb:2c:ff:98:7d:0e:a6:
                    c0:86:ee:2a:fb:a3:57:3d:8c:3c:d2:4d:10:2e:59:
                    b0:5b:05:f1:54:fd:02:8e:1b:25:bc:25:c8:79:ea:
                    94:88:41:dd:ab:64:d8:f3:ab:54:cf:3b:a2:ba:85:
                    f2:73:30:cc:5f:b4:bf:65:9a:12:ac:23:b1:99:24:
                    c2:b1:22:f8:24:02:b8:3f:3c:5a:a6:aa:9b:ca:69:
                    3d:b4:8d:8a:4a:d9:18:0b:1e:d6:65:a4:56:fa:c8:
                    31:f8:9c:47:bf:1d:a0:63:96:7a:6c:3a:06:b5:40:
                    17:7e:f4:4a:8a:56:44:2d:f3:bc:35:e1:a3:34:59:
                    fe:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1C:BA:0F:9E:0E:E2:17:74:56:2E:D8:B5:D4:45:02:58:2F:87:9F
            X509v3 Authority Key Identifier:
                keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:7c:66:3d:db:51:76:d2:31:03:4a:e3:49:e2:2d:32:e7:3d:
         b9:41:a4:a9:1b:15:1a:12:5f:8b:96:79:b9:aa:e7:52:de:ae:
         c9:e4:ed:59:5f:dd:a0:e5:c9:c0:40:31:dd:99:ea:c3:88:08:
         be:5e:e8:b5:37:96:25:25:74:4c:8f:2e:bb:58:de:b1:83:ae:
         38:15:9e:1e:c8:08:ea:15:2b:fb:38:aa:f2:87:0a:46:78:98:
         39:81:07:0d:de:3b:24:f6:d8:09:52:d5:c3:b6:ec:90:72:aa:
         79:90:36:d3:20:3f:b3:e8:38:f1:2a:1e:11:6e:41:cc:23:55:
         16:43:3a:06:9b:6b:d4:05:4f:05:ee:ea:33:ac:ec:4a:52:85:
         7d:ed:75:1d:5b:32:ef:34:eb:7e:f6:fa:d4:c7:c8:2f:be:9e:
         fb:27:2f:8c:17:57:40:1e:a2:d6:c1:5d:47:b3:f5:f2:8d:c2:
         72:6b:bf:6e:d6:88:4c:5d:1d:63:35:08:75:c9:f2:53:16:46:
         80:1b:ac:16:09:38:28:83:62:52:8f:13:f3:3f:c3:09:86:37:
         6b:da:ea:74:c1:e3:b2:d1:6d:29:b1:14:4a:c8:38:7b:1a:2f:
         43:ca:c7:b9:90:43:8b:8b:42:75:2b:a4:d1:d2:d7:26:ee:eb:
         c4:ef:40:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:22:24 2026 by rpki-client