Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
File:                     06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft (raw, json)
Hash identifier:          F1yI29IanDd4DLyUCvOVl5NO/pzN8+05YbVmeIOYxxs=
Subject key identifier:   EB:35:8E:95:2A:A6:43:7F:57:79:F7:BC:A2:36:28:86:7B:83:97:69
Authority key identifier: 06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C
Certificate issuer:       /CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
Certificate serial:       4E5A9CA1DDC396E31249A2152987CBDA158B3B87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
Manifest number:          CB
Signing time:             Sat 13 Jun 2026 01:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 00:55:24 +0000
Manifest next update:     Sun 14 Jun 2026 04:49:24 +0000
Files and hashes:         1: AS202782.asa (hash: BUvQaaL6LDCtZinny59vQWt/MEabU/h3KDaRVhwqAQM=)
                          2: 06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl (hash: oAYqdV1KpFJOyWTyncPeB8qE7grX9p1/KRhRcZAz6hg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5a:9c:a1:dd:c3:96:e3:12:49:a2:15:29:87:cb:da:15:8b:3b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
        Validity
            Not Before: Jun 13 00:55:24 2026 GMT
            Not After : Jun 14 04:49:24 2026 GMT
        Subject: CN=EB358E952AA6437F5779F7BCA23628867B839769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:a8:57:80:58:03:ce:6e:d8:74:69:7a:d1:
                    07:4d:b2:64:ef:08:95:54:4a:0c:39:25:3a:50:3c:
                    53:4e:a3:38:5b:a8:44:f0:34:fb:1d:ce:dc:94:e6:
                    63:da:4d:f6:5f:3f:ca:e0:7b:9e:53:d3:e3:de:ad:
                    73:01:7d:46:79:f0:bd:ba:14:7f:1f:a1:17:61:4d:
                    5a:15:f9:71:ef:f4:d4:58:19:f8:1d:7d:35:a9:5d:
                    e7:74:55:fe:a0:47:bf:ec:a7:da:54:1e:2d:5f:a3:
                    06:e8:16:56:34:f0:0c:29:9f:eb:bb:28:ef:6b:56:
                    a5:70:58:79:e8:5d:37:c7:ee:4c:84:28:61:3f:68:
                    b0:97:e5:10:5f:b7:dc:a4:b8:5d:5d:65:22:1b:6e:
                    dc:ee:62:17:63:7e:ba:e0:2e:47:a9:e3:81:e7:d5:
                    98:88:b9:2e:62:a6:3c:ed:61:bb:33:7a:a6:83:59:
                    b4:79:8f:55:47:99:38:7c:4b:2c:08:0b:2c:1e:5a:
                    f1:78:71:b9:53:52:74:b3:d8:79:23:b6:49:db:fc:
                    4a:1b:ba:f6:78:0c:b7:8d:3f:81:5b:bb:06:fc:c7:
                    d1:87:5c:cd:c0:46:54:c3:3b:63:79:4f:f4:43:f0:
                    dd:a7:68:c8:92:4a:2f:f6:dc:82:ca:d0:c2:ab:0e:
                    5c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:35:8E:95:2A:A6:43:7F:57:79:F7:BC:A2:36:28:86:7B:83:97:69
            X509v3 Authority Key Identifier:
                keyid:06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:00:5a:3e:a1:27:ac:21:4c:99:8f:39:e9:ae:0e:e4:79:fb:
         35:3d:7a:03:e8:1c:07:09:09:b2:ea:f5:1b:8c:5d:62:8b:39:
         58:b4:92:cc:51:7a:db:b6:4b:2b:49:b7:d4:2f:0d:e1:02:3c:
         67:ae:6d:6e:ca:11:02:b5:59:b2:18:c8:58:70:f2:74:e7:ec:
         32:b3:4e:fe:52:6b:61:09:3d:8a:4e:9d:70:ac:d5:83:0f:6a:
         0c:22:34:68:e6:c0:c4:69:72:8d:83:7c:cf:87:56:98:ec:5e:
         80:46:75:7a:47:8d:8a:4f:f2:89:91:8b:fb:8d:95:17:fe:94:
         0f:e9:0c:54:fa:60:2d:29:c9:cb:4f:7a:b6:93:eb:84:d2:9f:
         23:63:ba:0b:1f:c0:45:65:43:92:cf:36:af:eb:41:a3:9d:71:
         ac:37:6e:e4:7f:99:b6:c4:92:b2:79:50:a1:2d:e2:6f:ab:66:
         dd:bf:b3:e3:88:92:f2:17:20:14:9a:a9:f2:fa:89:b3:84:1b:
         a9:9d:c0:14:95:98:db:98:33:e3:a4:d1:a2:6e:ec:38:18:45:
         72:1d:c9:66:0d:f2:eb:33:14:d4:d4:5c:5a:d2:b0:bb:17:6b:
         95:2f:41:6d:33:d4:bd:8d:5c:8b:4f:09:3a:72:f1:71:e6:3d:
         6a:2e:83:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:02:44 2026 by rpki-client