Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File:                     A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier:          c/8V6ns0JjhofSaJhj9RcEvGn6yTXlJu8Eu+U+u11I8=
Subject key identifier:   11:28:CE:A0:EF:11:FD:CB:36:56:D9:80:76:A7:B7:9C:96:E3:28:F4
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer:       /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial:       1C4C3E27354E897686B526A4A85F10725E0CF1A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number:          0681
Signing time:             Sat 13 Jun 2026 01:37:54 +0000
Manifest this update:     Sat 13 Jun 2026 01:32:54 +0000
Manifest next update:     Sun 14 Jun 2026 03:58:54 +0000
Files and hashes:         1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: /mjuSufrOJOXwnxX+E/2eGIw4783y0vT8jc8aGBgN0E=)
                          2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4c:3e:27:35:4e:89:76:86:b5:26:a4:a8:5f:10:72:5e:0c:f1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
        Validity
            Not Before: Jun 13 01:32:54 2026 GMT
            Not After : Jun 14 03:58:54 2026 GMT
        Subject: CN=1128CEA0EF11FDCB3656D98076A7B79C96E328F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c7:7a:10:81:8a:a1:b8:c1:2f:22:94:08:a8:
                    d0:cc:e2:47:7b:fe:ba:45:88:e9:bf:c4:0f:82:2e:
                    80:e8:33:22:2d:67:de:db:1e:8b:b8:4e:c3:fe:5f:
                    7c:79:f3:24:0a:5d:05:fe:d1:9b:3f:be:f8:9a:9d:
                    02:cb:ef:c1:f1:23:1d:c0:aa:87:e8:af:9f:6e:29:
                    0d:e0:78:00:7f:89:d5:a5:e2:e3:fe:56:81:e0:94:
                    9e:49:d2:41:bf:2e:43:ae:22:5f:6d:81:7b:84:41:
                    ef:9a:67:f1:89:75:09:3e:6f:fb:d9:fc:a5:38:5d:
                    ad:97:e3:a8:da:e4:7e:3d:16:25:54:a0:41:b4:7b:
                    50:66:17:91:63:82:a7:5a:d0:ff:f4:6b:69:f3:1f:
                    5d:58:79:cb:ef:16:8f:11:c7:5f:65:16:bf:a4:12:
                    9c:34:32:81:d6:8e:f8:41:a4:07:d2:97:49:ff:13:
                    74:81:df:82:62:b1:bc:ba:78:b3:1e:3f:bd:93:b4:
                    9a:80:f1:33:42:01:7b:06:86:50:97:0b:1b:7f:96:
                    40:2b:ef:3e:79:84:9a:61:43:9f:f5:b0:72:af:59:
                    a6:65:83:94:0f:df:e5:84:bc:26:10:3b:ed:cc:38:
                    41:55:f3:cd:1b:f1:5c:f5:5e:8e:03:e9:b6:c3:df:
                    31:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:28:CE:A0:EF:11:FD:CB:36:56:D9:80:76:A7:B7:9C:96:E3:28:F4
            X509v3 Authority Key Identifier:
                keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f8:ca:01:98:14:cf:34:cf:a8:88:8f:ec:2f:2c:97:15:63:
         49:3d:c0:5f:6f:c3:2a:19:f5:d1:1e:bd:e1:21:65:4c:e6:c5:
         54:5b:ae:eb:51:da:5a:e5:d0:b8:f2:f8:28:26:d5:f2:2c:3a:
         57:1b:fa:05:7c:7c:c0:8b:74:0d:87:33:58:48:3d:9d:ac:d8:
         b7:ce:61:8d:7b:58:c9:2b:ac:2c:4c:2b:8a:56:2f:af:34:52:
         e8:97:63:3f:c4:99:a9:7d:6a:f3:10:42:49:a2:17:1f:73:47:
         8a:37:be:f5:83:57:2f:f5:05:f1:f9:e0:bf:2c:49:4a:f6:79:
         18:36:55:3d:b8:87:ed:c2:38:d5:4a:fb:29:96:82:1a:75:2a:
         7c:1c:98:29:3a:c3:3a:f3:df:3a:3a:58:11:da:b2:45:6c:23:
         a9:4e:18:dc:93:73:c9:85:4f:06:dd:c6:56:ee:f7:e6:0b:dd:
         31:c4:a8:e7:bc:dc:fe:d5:63:1c:d5:a1:cf:94:60:bf:6e:ac:
         23:46:b8:80:d9:0f:14:dd:eb:26:ec:0e:cd:11:06:dc:63:10:
         25:67:b7:ab:06:99:b1:48:88:b9:01:6b:4c:2c:32:c1:eb:bf:
         da:35:76:7c:c9:a0:66:50:5f:09:65:8e:c0:cf:04:cb:9f:75:
         1a:09:14:0c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHEw+JzVOiXaGtSakqF8Qcl4M8agwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl
MTZkODdmYjAeFw0yNjA2MTMwMTMyNTRaFw0yNjA2MTQwMzU4NTRaMDMxMTAvBgNV
BAMTKDExMjhDRUEwRUYxMUZEQ0IzNjU2RDk4MDc2QTdCNzlDOTZFMzI4RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhx3oQgYqhuMEvIpQIqNDM4kd7
/rpFiOm/xA+CLoDoMyItZ97bHou4TsP+X3x58yQKXQX+0Zs/vvianQLL78HxIx3A
qofor59uKQ3geAB/idWl4uP+VoHglJ5J0kG/LkOuIl9tgXuEQe+aZ/GJdQk+b/vZ
/KU4Xa2X46ja5H49FiVUoEG0e1BmF5Fjgqda0P/0a2nzH11YecvvFo8Rx19lFr+k
Epw0MoHWjvhBpAfSl0n/E3SB34Jisby6eLMeP72TtJqA8TNCAXsGhlCXCxt/lkAr
7z55hJphQ5/1sHKvWaZlg5QP3+WEvCYQO+3MOEFV880b8Vz1Xo4D6bbD3zEDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUESjOoO8R/cs2VtmAdqe3nJbjKPQwHwYDVR0j
BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1
NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G
dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05
MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1
NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfjKAZgUzzTPqIiP7C8s
lxVjST3AX2/DKhn10R694SFlTObFVFuu61HaWuXQuPL4KCbV8iw6Vxv6BXx8wIt0
DYczWEg9nazYt85hjXtYySusLEwrilYvrzRS6JdjP8SZqX1q8xBCSaIXH3NHije+
9YNXL/UF8fngvyxJSvZ5GDZVPbiH7cI41Ur7KZaCGnUqfByYKTrDOvPfOjpYEdqy
RWwjqU4Y3JNzyYVPBt3GVu735gvdMcSo57zc/tVjHNWhz5Rgv26sI0a4gNkPFN3r
JuwOzREG3GMQJWe3qwaZsUiIuQFrTCwyweu/2jV2fMmgZlBfCWWOwM8Ey591GgkU
DA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:27 2026 by rpki-client