Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
File:                     AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json)
Hash identifier:          OTj4Fk+mMmLVNSidKhqT0DYisOkdpQzWpfzztWbLz2w=
Subject key identifier:   4E:64:69:98:B1:7B:5D:6C:D3:CA:B4:45:54:C3:BA:68:9A:14:EC:E9
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Certificate issuer:       /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial:       1E3026D59813AA0BD31E306420377F9803598B15
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
Manifest number:          F0
Signing time:             Thu 23 Jul 2026 16:44:01 +0000
Manifest this update:     Thu 23 Jul 2026 16:39:01 +0000
Manifest next update:     Fri 24 Jul 2026 20:16:01 +0000
Files and hashes:         1: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=)
                          2: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=)
                          3: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=)
                          4: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=)
                          5: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=)
                          6: 3139342e33312e3136342e302f32342d3234203d3e20313531373034.roa (hash: qPTeTmV7oWgeHcKKTzXESARKHRkTDbk6syKPhIyZlgk=)
                          7: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=)
                          8: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=)
                          9: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: jE3Y0pi24Df/xVkg7RPuVurM2wOFumHCNG4mNVHus2A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:30:26:d5:98:13:aa:0b:d3:1e:30:64:20:37:7f:98:03:59:8b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
        Validity
            Not Before: Jul 23 16:39:01 2026 GMT
            Not After : Jul 24 20:16:01 2026 GMT
        Subject: CN=4E646998B17B5D6CD3CAB44554C3BA689A14ECE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bb:70:3b:e6:be:dd:84:1f:d1:f4:a3:6e:8f:
                    58:69:61:1b:14:86:94:83:9d:a0:34:a9:24:75:32:
                    3d:8f:53:ef:3a:2b:b6:88:7d:1d:9e:70:10:77:87:
                    b1:26:10:fe:78:c1:25:36:f6:aa:e4:71:a0:0c:25:
                    dd:aa:0d:63:94:6f:8d:4d:a1:94:84:f0:a7:e1:4a:
                    77:eb:7e:a1:35:a6:7f:f7:c1:15:8e:4c:2e:14:78:
                    93:f8:8d:65:c5:4d:33:78:34:42:99:57:b9:49:f9:
                    67:69:75:3a:9a:1e:f5:ed:ca:be:37:d2:5e:91:f5:
                    ee:a0:a3:d0:65:0f:c1:d3:85:65:df:f5:a3:4a:5c:
                    26:45:cb:9a:6d:6c:50:45:40:ae:38:40:b2:b2:b9:
                    a8:06:ab:02:87:87:ef:c4:2a:f1:12:a2:fb:90:90:
                    0c:2d:88:33:a2:40:25:e3:ef:31:42:67:a0:ef:ee:
                    7c:9b:ea:09:8c:1d:34:57:9f:52:6d:47:9a:2c:c3:
                    a4:66:c4:90:5b:7b:19:18:ba:49:d8:ee:e7:7a:05:
                    cc:bd:00:10:f5:03:c7:9b:1b:10:76:19:d2:0f:9c:
                    2d:8f:9e:eb:76:81:e6:5d:d5:8b:3e:30:67:ad:55:
                    3b:c7:8d:44:09:43:46:86:2c:2e:4f:56:b5:e7:f3:
                    24:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:64:69:98:B1:7B:5D:6C:D3:CA:B4:45:54:C3:BA:68:9A:14:EC:E9
            X509v3 Authority Key Identifier:
                keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:67:ac:c0:bf:84:f7:8b:19:4f:e8:18:1a:73:49:c4:9b:14:
         ef:b4:67:f3:a3:bc:83:9d:d4:78:74:10:cb:f2:7a:eb:f4:ab:
         db:06:c2:9f:52:b7:4f:40:f7:72:cf:5f:6d:e5:62:0b:5c:63:
         3b:bd:46:af:50:47:4f:5c:cf:df:5a:91:b0:18:74:b9:cc:6b:
         f0:0d:b2:92:e4:1f:27:4a:cc:04:40:60:5c:d6:bd:ec:3e:ce:
         b4:60:ba:bc:21:14:01:30:32:f7:1b:6f:98:9b:a9:c8:66:97:
         f2:6d:39:10:26:8c:d1:8b:a8:b7:6a:37:c9:85:ec:7e:7f:6d:
         b4:21:9a:39:fc:5d:9e:20:68:3c:d7:aa:90:4c:80:1e:10:ee:
         8f:94:70:6c:66:0d:c0:46:bc:27:17:cf:7f:9c:86:69:7e:d8:
         4b:7c:81:6b:58:b1:e8:32:d4:5c:4f:68:27:95:d7:35:76:a8:
         ff:2e:4d:fb:4d:ba:b3:20:bb:c0:3b:7f:71:73:db:77:fb:2a:
         c2:3d:99:db:0b:e5:3a:f1:0d:71:2a:99:43:69:e0:fd:9c:8a:
         31:e2:ab:8a:c1:b5:cd:4a:a3:a2:80:4d:6c:6e:62:c3:64:4f:
         c7:28:4c:3b:0b:58:4d:06:1c:8f:d2:df:9e:38:98:c4:cf:22:
         53:71:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:41:27 2026 by rpki-client