Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
File:                     851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft (raw, json)
Hash identifier:          hjwsie5Klfp7iVc2KzdSJvNm1TLWpNpT7yYU3aNQ7SA=
Subject key identifier:   2A:9A:37:B2:87:47:4C:C8:F7:1B:93:46:96:AC:49:4A:40:E2:CF:19
Authority key identifier: 85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
Certificate issuer:       /CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Certificate serial:       5A67FE24DE7D36AC15EC1E359A7D5370F56ED8E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
Manifest number:          0108
Signing time:             Tue 28 Jul 2026 16:25:46 +0000
Manifest this update:     Tue 28 Jul 2026 16:20:46 +0000
Manifest next update:     Wed 29 Jul 2026 17:39:46 +0000
Files and hashes:         1: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl (hash: m85bcLqME5BnOms5hKtbvgSqyZmPR6Pm67lqVxiC1b4=)
                          2: AS199310.asa (hash: Ua73ozznw6p6jkNcZL1i7+MQLv8HKO+KA4VPfkDY9rk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:67:fe:24:de:7d:36:ac:15:ec:1e:35:9a:7d:53:70:f5:6e:d8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
        Validity
            Not Before: Jul 28 16:20:46 2026 GMT
            Not After : Jul 29 17:39:46 2026 GMT
        Subject: CN=2A9A37B287474CC8F71B934696AC494A40E2CF19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8e:c4:6e:3b:9a:8c:ca:10:79:93:84:a6:bf:
                    9e:ab:2c:ce:74:73:82:bf:3d:64:b3:0c:92:00:40:
                    d0:f2:fd:bb:1b:e8:5d:fc:1c:97:9c:67:9c:bd:f9:
                    68:75:65:11:4e:6b:ec:9f:dc:38:60:33:82:ec:6d:
                    01:7e:c7:cb:2c:a1:54:17:b7:0e:48:59:9b:7c:de:
                    09:89:8c:c1:62:e7:14:0d:b2:59:c3:75:7c:a7:d5:
                    2a:8d:86:08:5c:b6:e1:9d:ce:f1:ad:a6:23:25:dd:
                    f7:ab:4f:22:b3:66:94:52:1a:e6:c9:35:b9:74:f7:
                    26:db:9c:f3:63:0d:f3:db:be:3c:74:89:00:b2:a6:
                    86:74:fc:cf:37:46:64:f1:53:3b:65:2d:ac:7c:3f:
                    fc:c8:01:c7:7e:ac:ff:2c:98:3f:5f:d2:15:0d:0a:
                    8d:d3:da:76:19:60:9a:70:43:48:d5:ff:94:de:87:
                    77:ab:c8:96:f7:43:4f:2f:d2:4c:92:9c:23:ad:b4:
                    93:3c:25:99:49:92:ce:cd:bc:60:97:88:90:d8:cb:
                    e7:50:35:18:77:d0:9c:a7:3a:74:ff:ce:b3:20:52:
                    18:df:18:58:93:8f:78:3c:69:cb:1e:e8:a4:a8:38:
                    8d:ee:5d:5c:1b:d3:39:94:a6:a7:cb:70:85:6b:3d:
                    a8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9A:37:B2:87:47:4C:C8:F7:1B:93:46:96:AC:49:4A:40:E2:CF:19
            X509v3 Authority Key Identifier:
                keyid:85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1f:58:d4:7a:da:55:68:90:ef:13:87:91:25:d4:15:0c:cb:
         b5:33:26:7c:77:bc:98:24:b7:b4:29:22:e5:78:71:ab:78:ff:
         f0:73:a2:8d:8b:0d:5f:7e:9c:38:b0:cc:b9:59:c0:c9:c5:ec:
         96:76:78:49:1f:c0:70:89:b2:65:25:09:b0:0d:d9:23:3f:17:
         39:00:08:85:07:33:c1:c2:74:f7:69:19:c3:c0:27:b6:9e:91:
         d9:25:76:03:af:43:44:86:79:76:94:58:c1:d5:10:11:cd:2a:
         cb:59:ef:98:3e:68:44:9c:be:71:d2:a6:5e:a6:c0:0e:c2:f1:
         be:00:c9:d1:31:0a:32:af:41:21:ef:1b:df:79:65:bc:27:71:
         ea:b7:65:36:81:53:13:a8:9f:06:4f:83:2e:9a:6f:24:b4:23:
         20:7a:58:48:45:31:bd:97:6c:4d:a0:2c:be:16:5e:6e:56:ac:
         54:02:58:77:4b:3d:20:af:f4:ce:60:ae:ec:a0:91:35:f4:2c:
         f0:5b:09:c4:7a:73:65:57:14:0c:1d:ec:93:28:12:18:ae:24:
         ad:77:d9:79:f7:cf:8f:a0:9b:e7:28:1a:8c:af:70:bb:1f:6a:
         7a:f5:76:8d:d9:04:ce:9d:b1:fa:6e:32:d4:a1:d0:13:f4:60:
         74:c0:6d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:41 2026 by rpki-client