Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
File:                     883931AAB8B1363015BC8FDDF0B582321767440A.mft (raw, json)
Hash identifier:          0Kr7dBrPnMBu4BzWQdt3WhFie8NoVv9Qe4BWY0mb6LA=
Subject key identifier:   3F:C5:FB:43:BE:1F:B6:F5:D6:BB:A6:8B:0D:67:86:01:E6:50:10:5E
Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
Certificate issuer:       /CN=883931aab8b1363015bc8fddf0b582321767440a
Certificate serial:       69966DCBC154F0C32A0F473004464795EB0C5A14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
Manifest number:          012B
Signing time:             Tue 28 Jul 2026 10:03:54 +0000
Manifest this update:     Tue 28 Jul 2026 09:58:54 +0000
Manifest next update:     Wed 29 Jul 2026 10:33:54 +0000
Files and hashes:         1: AS213605.asa (hash: /VNMUci42IHQGokYnePPu+nWfjn6z+W+mTSXWO4Akec=)
                          2: 883931AAB8B1363015BC8FDDF0B582321767440A.crl (hash: E0QfXHdlGcOwfd5wnUPxuwgpRrRd3rBgDyNGGX4NALc=)
                          3: 323030313a3637383a3533633a3a2f34382d3438203d3e20313534313835.roa (hash: ToBUFvUom+h4rbM7uZ7L3aEUItGSsZaFzls2rQ5hJzY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:96:6d:cb:c1:54:f0:c3:2a:0f:47:30:04:46:47:95:eb:0c:5a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a
        Validity
            Not Before: Jul 28 09:58:54 2026 GMT
            Not After : Jul 29 10:33:54 2026 GMT
        Subject: CN=3FC5FB43BE1FB6F5D6BBA68B0D678601E650105E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:0b:67:e3:1b:a6:28:7f:73:6d:5c:68:36:
                    24:49:11:e1:85:82:e2:32:4f:cb:86:45:88:18:dd:
                    50:58:89:7a:0a:78:28:44:8e:fa:d9:81:66:6c:15:
                    11:a8:f7:d4:82:1c:71:2f:21:de:9b:ec:5e:3d:05:
                    3c:d8:65:89:c4:94:10:f3:ba:f0:22:ab:11:15:b3:
                    b4:d8:fc:f3:13:ea:23:30:cd:e5:4c:2a:cb:7c:00:
                    6c:a2:4c:ff:b6:b1:7e:f2:5c:42:ac:ba:d3:74:15:
                    ce:30:86:e0:f5:a7:79:09:d8:67:d2:14:5d:45:37:
                    e8:65:29:be:d6:44:43:a7:fd:16:a5:83:0b:67:58:
                    fa:92:62:59:c2:e0:a6:1f:d4:1d:4e:81:fb:e3:f9:
                    69:b3:bc:60:ee:a3:37:ad:28:ce:63:74:3d:86:75:
                    b6:f0:cf:2f:b4:f7:e3:84:61:6d:04:f4:2d:95:73:
                    f7:ff:44:1f:92:36:67:05:84:ce:6f:7b:09:88:22:
                    26:2e:ea:68:b5:3b:a3:9b:ac:99:ad:0b:b2:5e:1f:
                    c9:4e:e2:d3:de:b2:d1:0e:94:92:99:29:aa:c9:55:
                    06:f5:85:ab:7e:2c:4b:a0:0b:ca:64:a2:88:5d:70:
                    60:1f:3e:7d:4e:db:cf:b5:83:26:d5:6a:96:ba:bb:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C5:FB:43:BE:1F:B6:F5:D6:BB:A6:8B:0D:67:86:01:E6:50:10:5E
            X509v3 Authority Key Identifier:
                keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:23:53:45:a5:60:48:c5:cf:54:30:31:a7:76:5b:e4:13:
         fd:81:25:8d:c6:60:4c:2c:d2:18:2f:fe:e3:b5:c3:2c:18:c0:
         fb:20:4e:df:6b:10:b9:4c:09:b8:6a:27:05:5e:cf:6c:f6:91:
         25:2a:8a:bc:d1:a3:94:9b:33:9f:6a:3b:04:26:66:a3:6d:2b:
         56:6f:91:0b:3b:ac:aa:66:56:f1:9f:9c:ed:fa:db:82:8f:eb:
         aa:ea:b5:5e:ad:5f:8f:a4:4f:81:52:da:78:49:bb:31:34:b0:
         ae:2e:09:73:40:a0:f4:98:ed:8a:4a:c3:d5:a1:24:37:8d:05:
         dd:5f:ae:a1:a6:8a:35:20:42:9d:7f:cf:51:e9:28:60:ee:43:
         85:65:5e:9c:9b:50:3b:47:81:fe:c1:e0:a6:7b:ae:5a:34:2d:
         26:65:12:5e:0d:f1:6b:73:38:ce:b5:e6:b3:2e:69:8e:f5:f7:
         67:e1:c1:e6:74:cb:28:58:c8:61:4f:9f:c3:72:49:e9:3d:fa:
         6f:d6:c8:08:48:63:ad:64:b6:ce:03:29:5c:6e:62:47:41:54:
         63:ec:45:06:ab:61:64:86:06:b4:f9:d1:a7:26:6a:8c:21:73:
         44:cc:33:b2:0a:31:43:b0:34:27:ec:f4:08:b8:0d:ae:e4:b8:
         47:45:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:18:20 2026 by rpki-client