Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File:                     D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier:          Y2X/cjyWzcpIDb0AAEcri5TEo34RjYTDbsOfJJKT9QQ=
Subject key identifier:   EF:B3:3E:48:38:93:78:3B:15:D2:EA:A9:A0:48:9D:BB:73:9D:42:52
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer:       /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial:       60FBBB6973FF5B473D619047666BEDD88C53B390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number:          0561
Signing time:             Tue 28 Jul 2026 23:56:45 +0000
Manifest this update:     Tue 28 Jul 2026 23:51:45 +0000
Manifest next update:     Thu 30 Jul 2026 03:43:45 +0000
Files and hashes:         1: AS203843.asa (hash: V8ALni8uGvnQlob1ieX97WK3dqsrOaJM1khRqBJJdKg=)
                          2: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: /wdA7+2z/wUBSlQX1KtLNIQ91rqh+Oi73Nh0gOMdnLo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fb:bb:69:73:ff:5b:47:3d:61:90:47:66:6b:ed:d8:8c:53:b3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
        Validity
            Not Before: Jul 28 23:51:45 2026 GMT
            Not After : Jul 30 03:43:45 2026 GMT
        Subject: CN=EFB33E483893783B15D2EAA9A0489DBB739D4252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:39:15:f2:f7:d0:67:9c:06:05:ae:f0:49:
                    9e:88:ec:de:ae:e9:57:f8:93:2f:fb:8e:09:30:fe:
                    2e:8d:b9:98:db:63:6b:35:98:af:88:04:f9:37:f2:
                    45:74:a1:3f:21:bc:d1:75:c6:89:db:f1:13:0d:4e:
                    75:d3:de:e1:51:b7:23:78:51:5f:76:9e:ce:82:80:
                    bf:45:60:64:20:ad:01:2b:85:80:60:24:89:7b:c3:
                    b8:16:73:cc:06:e9:5c:52:97:62:1f:ae:46:41:61:
                    db:9d:35:d3:0a:04:43:b7:6c:84:ed:95:aa:64:c5:
                    78:55:e8:c8:c7:7e:1e:cb:7a:2a:9f:81:bb:b4:45:
                    a4:08:41:b4:5d:5c:70:f0:66:b1:7c:95:69:9c:09:
                    23:6e:33:16:0d:4c:1b:42:8c:ef:e8:2a:4f:cf:e8:
                    06:1b:f6:53:64:9b:d8:ef:bf:a5:41:c9:dd:88:3f:
                    00:41:50:7b:fb:2b:ee:6b:fb:d6:c7:20:d9:b3:9c:
                    c1:54:a2:f1:a0:8d:f3:66:9b:fe:12:71:75:07:4c:
                    81:a7:28:41:7f:4e:7d:68:3c:fe:7f:7b:e6:aa:7d:
                    b2:3e:a9:d7:53:5b:96:1b:14:80:f8:43:ab:14:37:
                    4d:8a:20:43:95:64:af:03:55:46:e3:a1:fa:f1:d1:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B3:3E:48:38:93:78:3B:15:D2:EA:A9:A0:48:9D:BB:73:9D:42:52
            X509v3 Authority Key Identifier:
                keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:6e:04:8c:16:a1:7c:5d:72:b1:9c:63:38:ee:c0:b6:c7:cb:
         04:94:3f:6c:0d:8d:b2:75:75:af:c8:74:d7:cc:47:9b:d4:b3:
         ea:bd:6c:90:ef:26:a3:9a:8b:29:01:27:9b:4d:18:fe:00:e5:
         c1:d0:64:38:f6:9c:7c:c8:a5:bb:08:9d:ea:1c:18:d7:31:e4:
         84:cc:45:de:4e:cf:13:e3:f3:88:49:85:9d:6a:7d:2b:65:7d:
         2a:86:4a:67:25:a6:a8:21:b3:f2:95:79:89:7c:c5:3b:ae:3a:
         ff:f5:49:da:77:26:35:c4:1d:e1:a6:66:a3:10:64:6f:d4:80:
         cc:e2:e7:ef:28:b3:01:a7:0b:f7:d0:2b:05:38:58:d4:c3:9f:
         a1:54:65:1f:3e:f8:09:97:32:5c:d3:43:1c:0a:2a:8b:8d:f2:
         36:2c:32:b0:14:1e:d5:33:5f:9d:97:63:28:7b:c0:41:2a:30:
         42:f7:87:01:58:15:db:e1:b3:84:a1:ee:e5:aa:f6:66:df:a0:
         1d:6b:81:8d:4c:8e:7b:cd:4d:c7:82:82:bf:21:96:68:65:a3:
         7d:bc:a9:a0:73:e5:14:34:bc:cb:1a:58:f5:dc:29:19:95:64:
         57:0f:20:81:05:b9:3c:6a:98:bb:b4:c4:87:e0:84:a2:82:b6:
         23:c0:de:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:30:15 2026 by rpki-client