Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
File:                     883931AAB8B1363015BC8FDDF0B582321767440A.mft (raw, json)
Hash identifier:          rheNX1Bjhe4UOov1o5V0hI/6LENu2CBw0dft8BsUqK0=
Subject key identifier:   EE:15:CE:E6:C4:43:3C:CF:FA:0F:7E:E9:77:7B:0F:93:37:43:C8:AD
Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
Certificate issuer:       /CN=883931aab8b1363015bc8fddf0b582321767440a
Certificate serial:       4A6BDDDC8FEFD401B699D03AAA7B664EBFEBE386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
Manifest number:          ED
Signing time:             Sat 13 Jun 2026 04:33:44 +0000
Manifest this update:     Sat 13 Jun 2026 04:28:44 +0000
Manifest next update:     Sun 14 Jun 2026 08:10:44 +0000
Files and hashes:         1: 323030313a3637383a3533633a3a2f34382d3438203d3e20313534313835.roa (hash: ToBUFvUom+h4rbM7uZ7L3aEUItGSsZaFzls2rQ5hJzY=)
                          2: AS213605.asa (hash: /VNMUci42IHQGokYnePPu+nWfjn6z+W+mTSXWO4Akec=)
                          3: 883931AAB8B1363015BC8FDDF0B582321767440A.crl (hash: yGP6bEG1UlhaD+t7ygKm2Vner5re5m2NiCxhyiVLQ4M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6b:dd:dc:8f:ef:d4:01:b6:99:d0:3a:aa:7b:66:4e:bf:eb:e3:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a
        Validity
            Not Before: Jun 13 04:28:44 2026 GMT
            Not After : Jun 14 08:10:44 2026 GMT
        Subject: CN=EE15CEE6C4433CCFFA0F7EE9777B0F933743C8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:43:4d:46:44:6e:91:45:8b:11:85:70:3f:
                    c6:9f:9b:26:4c:a4:22:fe:d6:d6:07:1e:81:37:ec:
                    15:de:8e:34:a2:0d:7d:3b:48:74:8b:9f:63:dd:72:
                    8f:6f:de:7e:d2:2c:e6:37:73:ea:93:c6:61:92:d0:
                    f3:69:5d:25:88:35:fb:3e:97:7a:d4:76:8b:6a:8f:
                    85:32:9f:8a:9e:86:7d:84:c1:94:ea:f6:3b:87:46:
                    9e:58:be:07:93:e9:5d:e0:63:d0:b7:6f:40:8e:12:
                    75:dc:62:f6:33:1c:0b:83:aa:c1:87:d4:57:c6:47:
                    d8:b4:5c:97:a1:3b:d3:7a:38:d9:65:d0:80:a4:58:
                    b2:9d:44:4d:08:c0:38:38:ba:ef:73:bb:89:d5:b2:
                    41:4e:30:cc:a3:76:22:1c:77:dd:bb:b9:2d:ba:d4:
                    93:68:b6:44:a9:f4:49:2e:b4:86:42:3b:d8:90:2b:
                    c3:a2:95:e4:b5:35:90:07:a5:9f:39:b7:7e:08:ed:
                    ba:89:e3:7e:1d:c2:3d:9c:40:62:d7:a1:ec:91:22:
                    47:f8:3c:b3:d7:46:6c:0c:a5:30:b3:06:51:4c:6e:
                    77:09:c7:8d:37:3c:1d:53:78:09:fa:13:85:99:c6:
                    6f:1c:f9:10:ff:32:7e:4b:48:d7:37:61:b3:70:61:
                    05:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:15:CE:E6:C4:43:3C:CF:FA:0F:7E:E9:77:7B:0F:93:37:43:C8:AD
            X509v3 Authority Key Identifier:
                keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b5:11:eb:9a:8b:61:4a:f1:39:ca:07:53:94:78:ad:4d:a9:
         6a:19:26:c4:cc:0a:b5:d0:01:6a:65:da:c2:e7:5b:03:72:2c:
         a4:13:37:81:e7:3f:f6:5c:75:08:66:ea:b3:43:f9:a9:c1:a4:
         fb:7e:38:39:8b:d2:b1:b2:cc:f6:55:64:b8:c6:04:52:a4:b4:
         2d:93:ed:44:fe:1b:b3:f2:5a:f2:8f:fa:16:8d:51:0e:10:f4:
         c3:5a:dd:be:49:ea:e6:f4:b9:2d:4c:82:e5:c1:26:74:c4:da:
         a1:2e:ff:f2:9b:6d:27:94:3a:9a:bf:87:4b:0c:7f:e4:59:22:
         0d:d4:e3:09:5c:37:b2:74:ed:73:0a:da:e3:f4:49:7b:0f:f5:
         8c:d8:f0:07:ed:a9:6a:d4:0a:03:18:d5:d4:e6:d5:b6:a3:c6:
         71:48:57:7a:20:25:99:e1:75:85:80:f4:03:24:94:52:66:a1:
         a9:35:2e:0c:e4:9b:db:45:1e:bd:58:23:38:b7:e2:e1:d2:c2:
         55:b3:60:95:34:3c:d0:f7:0d:4c:19:82:50:01:39:92:ae:ce:
         1c:eb:c9:44:96:b3:5a:64:86:a1:0b:a6:d6:57:03:8b:31:d1:
         62:77:da:3e:55:9d:74:74:93:fd:d1:24:0f:64:5c:06:01:70:
         03:a4:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:27:37 2026 by rpki-client