Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
File:                     ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json)
Hash identifier:          KqORi4dGz0BCqpXi8JyUmCz95mzn8mRFjucqxmNRUjk=
Subject key identifier:   5C:39:13:53:FE:D3:1B:EB:91:88:EA:D7:81:50:28:C4:A6:FA:DB:59
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       4D7A7ECCB8D5C4904EBFCCB4DB298A760ADBA9B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
Manifest number:          056D
Signing time:             Tue 12 May 2026 03:04:35 +0000
Manifest this update:     Tue 12 May 2026 02:59:35 +0000
Manifest next update:     Wed 13 May 2026 06:08:35 +0000
Files and hashes:         1: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=)
                          2: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=)
                          3: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=)
                          4: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=)
                          5: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=)
                          6: 39332e3131332e3231322e302f32342d3234203d3e203239383032.roa (hash: KOkJXzM4wXOGsvFs/zh/ieHh7T/PcK/t6m2YsCzBo+I=)
                          7: 38392e34322e3131302e302f32342d3234203d3e203239383032.roa (hash: Chbmines5hwhR4F+JuY4APAYPbeg1c32lDZMdiR/MqQ=)
                          8: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=)
                          9: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=)
                          10: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=)
                          11: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: tBQ9LzvU9dBrSuSaNRq/CfwkNORZi93LG8k4EPTL7VE=)
                          12: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=)
                          13: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=)
                          14: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=)
                          15: 38392e34322e3131312e302f32342d3234203d3e203239383032.roa (hash: L8E/k5WG1P2zSzdmF8rJ5boiZXvKF22tBofIgUqK42s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 06:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7a:7e:cc:b8:d5:c4:90:4e:bf:cc:b4:db:29:8a:76:0a:db:a9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: May 12 02:59:35 2026 GMT
            Not After : May 13 06:08:35 2026 GMT
        Subject: CN=5C391353FED31BEB9188EAD7815028C4A6FADB59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:12:be:da:72:0c:51:2a:1b:b2:49:b5:cb:a8:
                    74:ac:f7:14:7b:8a:77:8b:a9:52:ab:8c:9f:46:1d:
                    43:18:1a:c5:49:9b:fa:8d:a8:ec:94:bb:5f:ec:e0:
                    03:21:01:e4:ac:ce:7c:13:85:94:29:dd:57:ac:ba:
                    d3:21:aa:35:52:9b:f6:38:e6:78:24:37:e8:3e:9d:
                    26:f5:b1:53:f0:13:18:a6:c6:58:a9:08:76:60:76:
                    5a:1c:dc:c3:8b:79:24:f6:f6:af:d3:50:8f:15:77:
                    6b:39:6a:61:84:81:fe:d1:59:e9:4e:f7:9b:b8:c9:
                    1c:ab:5f:d1:e4:3a:e5:c5:8a:87:3d:20:d0:40:cb:
                    54:75:44:17:33:57:8c:3b:7d:c3:36:2c:a7:29:59:
                    05:28:8c:52:e4:c9:35:b3:74:1c:65:64:5d:a8:96:
                    b4:c1:39:aa:55:84:c7:04:9f:57:2d:62:36:9d:56:
                    58:6f:08:14:2b:c6:f1:a2:98:d8:ec:29:23:c3:ab:
                    58:41:62:66:16:49:0e:cd:be:90:61:ba:51:bf:c6:
                    df:d5:ab:6c:16:bf:e6:5b:e5:55:45:b7:ab:25:14:
                    f0:e3:ef:8f:a6:bd:0b:91:b9:6a:ee:6b:9b:10:f4:
                    de:2d:76:2c:56:1a:dc:e3:f2:6d:6f:f9:5d:59:ca:
                    e7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:39:13:53:FE:D3:1B:EB:91:88:EA:D7:81:50:28:C4:A6:FA:DB:59
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:20:ad:96:15:a0:cb:2a:95:23:04:cb:94:a2:6f:10:06:55:
         18:22:c8:cf:12:e3:92:69:64:f7:47:08:60:b8:c4:1e:4d:89:
         ab:a8:e5:0a:34:4c:69:7d:2c:ca:fb:fc:b7:66:e5:34:77:35:
         1d:84:15:81:ce:97:17:fa:79:85:87:e1:ca:ac:5a:60:78:8e:
         03:de:42:63:16:49:44:e5:f7:9b:e0:d2:65:33:d8:6c:3d:1f:
         88:59:c6:dc:1f:46:35:5e:8e:fc:40:3b:e2:fb:d9:19:e8:40:
         26:30:4e:95:57:58:76:fe:40:af:ec:5b:8c:e8:d2:c3:ed:41:
         44:9c:74:c4:e3:5e:1e:64:d5:80:1e:5c:04:3a:67:5b:ac:50:
         a5:0f:52:54:28:84:25:03:fc:e1:2c:c9:d7:c3:5b:30:32:7c:
         27:36:e3:bf:a7:14:81:da:5e:58:5e:b0:47:ac:9c:c5:82:0a:
         9e:1f:e1:89:17:82:bf:3d:ad:df:28:b3:44:02:31:cf:83:36:
         2f:41:1c:a1:95:f4:2e:f5:06:40:13:7c:40:44:59:27:fa:9e:
         60:33:84:1b:e6:a4:0a:62:fb:90:fc:48:95:41:bb:0b:91:d8:
         d5:f8:4f:23:15:0f:4c:02:4d:06:0a:cd:7e:00:37:90:ad:ab:
         e4:91:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:38 2026 by rpki-client