Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
File:                     C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json)
Hash identifier:          RottHboWbfT36rQhvqLbu5nfZarsYtK+AekgPPj1Me8=
Subject key identifier:   B2:A7:46:FD:EF:1B:9A:FD:50:E3:9B:50:FE:0F:D3:18:DD:2B:99:96
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Certificate issuer:       /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial:       67396B10B88657F8F3DFD9B8BE1E37F7984E7888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
Manifest number:          0415
Signing time:             Sun 15 Nov 2026 06:00:17 +0000
Manifest this update:     Sun 15 Nov 2026 05:55:17 +0000
Manifest next update:     Mon 16 Nov 2026 06:16:17 +0000
Files and hashes:         1: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=)
                          2: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=)
                          3: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: H6z5UgqzzwENibeoaL/jOe9aa5t0uv0+rNtrD0/GlKE=)
                          4: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: dqbGTjTU/B8vA6teyanpuEPrxP3e6KA82oBtbQg0IYM=)
                          5: 3130332e34392e3132382e302f32342d3234203d3e203231383539.roa (hash: Gks1amT+rPKiG3Iiuhmb/CKRKvNQxK+jCx7Bb8Ah+xI=)
                          6: 34332e3233302e38342e302f32342d3234203d3e20313938353636.roa (hash: np6fRGdvntmo0WUS6PHKf2pD76Rp5Br0W2IrCVC8yd0=)
                          7: 3130332e34392e3133302e302f32342d3234203d3e20313939363935.roa (hash: RDauoDGr+i1zVcuayu/4HbEUes85SAVA7OzOaH8ZkX8=)
                          8: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: 7bNrxcvUZ17BVt7tVCbbxISD5HLTvxOeQrmUPkwlG/E=)
                          9: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: K6pPcrxT1qaaXfoQ1qJYcODSnYPMdIwjQ2K1qzc/KoU=)
                          10: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: sGZRYXq3pgxXgMpA6qb4Lt81cMmDp969oaWBo8d9e1M=)
                          11: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: tnR1OG5jePt02RNH++yeW931RjEl2sGrZ/u7EZcnz7A=)
                          12: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=)
                          13: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: pS1G1drRPBWH4FNN6+N6RZE6LuLa2srViTNKuVC8toE=)
                          14: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: Qks8J0X938H6HVLJgBIAZbcnO+aF1xL4OBNn/fR/W5Q=)
                          15: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: e3yeUvIbF4YF0fCErBT4H99U9jC9XkRZUBr3LRE9AVI=)
                          16: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: YaV2coN10mtSdMCwpunQHhnXdXWjWsC3QeS46Z+3lrE=)
                          17: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: xSksRDlQRA7Pfwb7wvrDvMxCyhl/WytheNu+prGdB/A=)
                          18: 33312e32322e3130352e302f32342d3234203d3e20323030383539.roa (hash: nw9YLvM7zXyP2kzR5sTyAuZwaZ0QV0qAmB4zg2Dg+gg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:39:6b:10:b8:86:57:f8:f3:df:d9:b8:be:1e:37:f7:98:4e:78:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
        Validity
            Not Before: Nov 15 05:55:17 2026 GMT
            Not After : Nov 16 06:16:17 2026 GMT
        Subject: CN=B2A746FDEF1B9AFD50E39B50FE0FD318DD2B9996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:86:f7:fb:f1:d8:bf:67:d6:7b:c9:9c:6b:
                    19:50:8d:64:d2:bb:96:7b:55:92:74:e2:9a:3f:d7:
                    38:0f:13:e0:ba:aa:34:d0:ee:5f:b7:e3:14:af:e9:
                    67:ab:7b:38:18:52:42:82:5d:b6:02:b9:4c:da:26:
                    18:5d:d5:85:77:d0:1c:a1:e5:d9:e8:61:4e:b5:ca:
                    c8:82:34:5f:cc:d1:3a:20:b2:77:6b:8a:46:29:f7:
                    da:ff:c9:56:9e:0f:81:35:16:38:ea:97:71:a4:c0:
                    31:0d:f7:51:a9:95:d9:62:6c:25:d2:80:76:84:f7:
                    8f:7c:10:3e:6e:81:d2:b6:e3:b6:9d:d8:ce:03:63:
                    71:62:c5:96:ce:ff:d9:53:91:6b:55:1d:89:65:6a:
                    fd:e6:f4:83:9d:dc:27:f9:6c:48:01:7d:08:dc:3c:
                    b9:9b:17:62:20:2a:39:87:c9:0b:f4:ae:d6:de:f0:
                    b4:af:8b:79:7d:79:6e:05:9f:d8:58:f8:60:42:e7:
                    66:35:98:7c:8a:bd:24:11:9a:1b:a0:64:09:3c:b9:
                    28:77:9c:2b:5c:66:56:f1:0a:54:20:f2:a6:67:a5:
                    3d:92:8a:5f:47:89:ff:0f:45:eb:ab:fd:16:b3:71:
                    f2:24:f6:26:05:fd:43:c9:d1:da:34:e7:3f:71:27:
                    1a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A7:46:FD:EF:1B:9A:FD:50:E3:9B:50:FE:0F:D3:18:DD:2B:99:96
            X509v3 Authority Key Identifier:
                keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1e:27:ae:f9:48:12:ef:a7:69:32:13:98:d5:fd:41:2a:a8:
         8b:1a:3a:d0:b2:52:0c:4b:56:d0:26:b1:8f:a8:b5:46:77:c5:
         5f:dd:cb:ac:8d:82:84:a5:a5:d2:ad:dd:6e:98:19:79:62:fa:
         d7:d0:e4:6d:08:5d:7e:11:a0:03:1e:8b:f7:6b:8b:2d:c0:8b:
         68:d9:4d:fe:47:df:a4:62:5b:46:c8:0c:93:03:28:9e:ca:7e:
         61:e4:9b:f3:d4:4e:2e:93:3d:46:66:a3:ea:d3:5f:ce:27:31:
         05:29:d7:ee:d1:53:4e:e1:3a:0d:53:3e:32:99:cf:4b:ee:3f:
         4a:86:c9:6d:b0:30:a2:01:e6:24:e5:4c:56:26:26:0e:ff:4f:
         8a:5d:c5:b8:3e:ca:1b:79:ed:b3:02:c9:bc:6a:c5:26:b8:b7:
         5e:52:dd:ae:57:34:d0:1d:50:60:67:fb:1c:84:50:37:be:04:
         87:d6:bb:f8:a3:68:68:71:ff:a7:2b:c0:f9:49:36:63:48:9a:
         38:98:9f:bf:fa:94:bf:56:a6:88:40:cc:0b:dc:23:c5:c3:b7:
         59:76:ad:34:3f:9d:8d:38:1d:93:2d:03:aa:1c:e2:95:33:da:
         a9:b5:5f:b8:d0:3d:50:4b:fc:66:6b:84:06:89:1e:61:ce:b3:
         2c:9a:b9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:41:03 2026 by rpki-client