Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
File:                     851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft (raw, json)
Hash identifier:          dmKX5t3S/U0yyajSBfJ2twR67YbQJfpxoe2b9qPmyIw=
Subject key identifier:   C8:E3:9C:1A:8A:49:AE:E7:74:8E:B8:B2:98:DF:B0:66:53:CD:5D:D7
Authority key identifier: 85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
Certificate issuer:       /CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Certificate serial:       412959D26827ACB92581F128243954035040095D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
Manifest number:          0151
Signing time:             Mon 21 Sep 2026 03:17:45 +0000
Manifest this update:     Mon 21 Sep 2026 03:12:45 +0000
Manifest next update:     Tue 22 Sep 2026 04:52:45 +0000
Files and hashes:         1: AS199310.asa (hash: HsjyYaB6+XITG4qMcBoHUioWoHgu/QTQ6Xm/zkvNsJ0=)
                          2: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl (hash: 4+Vmr9XF7S7fzkBECVwouq9GiYpcakQwddjsViWHzEs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 04:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:29:59:d2:68:27:ac:b9:25:81:f1:28:24:39:54:03:50:40:09:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
        Validity
            Not Before: Sep 21 03:12:45 2026 GMT
            Not After : Sep 22 04:52:45 2026 GMT
        Subject: CN=C8E39C1A8A49AEE7748EB8B298DFB06653CD5DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:ee:79:17:81:b8:70:4f:5b:06:e3:88:fc:
                    d6:ec:a0:9e:75:2b:a0:97:22:ec:62:f3:82:0c:af:
                    ab:f1:13:96:3d:f0:60:b7:af:8d:f6:eb:a7:49:3a:
                    40:15:ae:1c:15:12:3c:e6:ed:51:c3:68:ab:c7:2f:
                    70:d4:c5:00:6b:b7:82:21:5f:f2:db:af:3d:06:c5:
                    26:22:42:4d:ef:5a:dc:c3:92:f7:2a:d5:cc:3f:6a:
                    a1:e7:ac:c5:2a:8e:2c:6a:ea:4f:45:eb:e9:3f:fb:
                    88:e1:89:85:d7:b8:a6:ce:a3:86:62:57:8b:28:6a:
                    39:f0:96:20:bf:10:37:7e:82:6e:b6:12:91:f4:4a:
                    e1:73:16:b0:94:f4:9b:3c:b4:bc:f5:4c:b1:33:e6:
                    0f:f7:4e:b6:37:58:7c:84:91:c3:ea:6c:b9:f1:12:
                    7a:54:46:2a:20:b1:34:5f:51:a5:2d:30:9f:b5:e5:
                    cb:53:dc:30:79:fb:73:e2:48:df:ca:74:d1:92:b2:
                    22:f8:20:4c:c4:1d:00:65:1f:2e:6d:b2:48:8a:11:
                    42:5e:b3:b6:03:c6:93:7c:b3:da:b0:f3:8a:5d:e8:
                    3c:37:7a:26:19:87:f2:a4:81:85:a2:ce:cb:49:76:
                    74:55:77:ee:6b:ad:2c:75:09:ee:41:f6:fe:9d:7c:
                    bb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E3:9C:1A:8A:49:AE:E7:74:8E:B8:B2:98:DF:B0:66:53:CD:5D:D7
            X509v3 Authority Key Identifier:
                keyid:85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:60:a9:16:5d:56:78:a3:61:ec:38:7e:5c:9d:71:84:90:44:
         09:57:6a:ca:f9:92:46:ae:50:20:b5:73:ff:10:aa:f6:a8:54:
         d9:2d:2f:f4:fd:b7:fc:8e:cb:c0:0f:12:91:8e:b3:4f:5c:2b:
         9d:fa:1e:81:5b:b5:d8:a3:03:be:3a:86:20:a5:68:c5:96:64:
         96:ca:00:a4:3f:eb:2f:69:7e:52:ce:03:1d:43:c4:b2:cf:95:
         7a:50:60:33:a8:f2:b0:5b:4b:cb:0d:63:79:52:38:03:09:82:
         6a:73:91:fe:61:66:fb:bb:06:d3:ec:c6:12:40:6f:08:ed:0c:
         bd:fa:2d:49:d7:f8:50:69:3b:f9:3c:98:4d:9a:c4:28:06:f0:
         0b:3c:7e:68:cd:c5:d7:13:ca:db:d1:e6:8e:07:16:70:c3:ff:
         8b:07:7e:ef:c5:3d:6d:69:5f:c7:11:44:ea:c5:6f:66:b4:75:
         cf:18:17:cb:99:23:64:ac:e8:c1:96:46:6d:ef:d7:03:e7:53:
         03:e2:d9:2f:c1:79:a2:ff:ed:f0:f2:7b:f2:6c:84:71:07:05:
         85:f0:e3:b0:ab:ca:7f:dc:7a:ec:9c:83:b0:49:ad:97:87:35:
         9e:00:ba:8b:4f:c2:dc:1b:ac:4d:9a:22:85:e5:73:d2:2f:e9:
         7c:b4:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:49:19 2026 by rpki-client