Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File:                     D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier:          QUWfBdlfSXPP0eI/4kEkLirtn/4cC798cqovdCKfVoA=
Subject key identifier:   A1:A9:55:9F:AB:B8:80:F8:15:25:F1:63:14:45:FB:98:05:B8:BE:50
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer:       /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial:       73AE5FA7F8B3329CAD823742B1069D271991FC65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number:          0560
Signing time:             Tue 28 Jul 2026 07:26:45 +0000
Manifest this update:     Tue 28 Jul 2026 07:21:45 +0000
Manifest next update:     Wed 29 Jul 2026 07:51:45 +0000
Files and hashes:         1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: 8jqLHxOzNd6urKt7kbAdQCaC6TCfQVGlWbLFYgXjokM=)
                          2: AS203843.asa (hash: V8ALni8uGvnQlob1ieX97WK3dqsrOaJM1khRqBJJdKg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ae:5f:a7:f8:b3:32:9c:ad:82:37:42:b1:06:9d:27:19:91:fc:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
        Validity
            Not Before: Jul 28 07:21:45 2026 GMT
            Not After : Jul 29 07:51:45 2026 GMT
        Subject: CN=A1A9559FABB880F81525F1631445FB9805B8BE50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:af:10:df:6a:d0:74:51:d8:25:e6:67:e0:
                    01:0a:37:86:6b:5a:46:cf:fb:1b:43:12:b3:ed:7a:
                    77:b3:4f:f0:0c:1d:e6:5c:3e:7e:81:dc:6c:88:d0:
                    2f:09:79:fa:94:21:51:8b:47:d7:f5:21:6f:9a:d5:
                    e5:23:9f:8d:42:30:41:1d:e5:8b:81:a9:88:fc:66:
                    b3:a1:3c:f2:1b:98:ae:c6:2c:d5:6e:ed:86:63:c0:
                    55:e4:e1:ab:51:4c:67:e2:9b:1b:6b:f1:a1:c3:d3:
                    a1:de:82:ad:6f:4d:74:c8:4e:7b:c3:23:5b:3b:98:
                    21:16:bf:b8:c4:c4:d8:78:6b:8e:5a:34:13:aa:c4:
                    13:dc:2c:90:8f:cb:ed:4c:b3:a4:8a:de:ab:17:07:
                    c9:d1:f1:66:12:f5:be:fc:25:6f:d0:5b:2b:29:a5:
                    f0:d3:ef:83:ab:fa:02:a7:8c:f3:ea:bb:a7:ea:de:
                    61:04:91:71:ab:52:4e:4b:83:0b:dd:d4:cf:f9:81:
                    4d:98:14:e0:3c:cc:b2:6e:f3:b8:c1:26:45:be:da:
                    88:d6:31:7f:9f:c0:8f:0c:4c:0b:a4:20:a9:0b:67:
                    b3:5a:a0:a7:47:1c:55:65:9b:c2:8f:ec:a1:38:fe:
                    8d:73:3e:cb:c5:37:6f:7e:69:e7:06:89:49:88:bb:
                    3e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A9:55:9F:AB:B8:80:F8:15:25:F1:63:14:45:FB:98:05:B8:BE:50
            X509v3 Authority Key Identifier:
                keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:33:07:09:63:b2:42:95:aa:cd:ff:9b:8e:f6:a2:f3:11:74:
         c2:a6:f2:51:7d:2d:ea:ff:fa:22:1b:6b:f2:f3:9e:1e:ad:43:
         e8:1f:41:53:37:3b:38:aa:87:e9:5f:7f:25:8b:2e:74:65:7b:
         e5:ff:8f:bf:31:b2:ff:d3:e6:28:33:c2:02:7b:30:81:2d:36:
         9d:b6:d3:b4:11:57:c1:ae:85:42:76:5c:c4:ba:b5:08:e9:97:
         56:c0:36:d0:fb:67:f0:0e:48:fa:33:fd:ee:9d:f1:4c:01:8b:
         d0:b3:37:99:7d:31:ee:98:bc:8c:e5:c1:7b:48:7b:57:12:17:
         09:d9:f1:a5:31:19:df:83:c6:4c:03:ee:19:47:c8:b9:cf:e3:
         a0:96:11:0b:b3:f9:b1:52:5b:5a:c2:8a:98:e1:d2:c5:53:11:
         f5:0e:67:90:5b:bb:5a:11:32:eb:4e:db:dd:0c:9d:5d:f6:36:
         fd:cd:80:97:5b:a9:7e:b6:0d:83:45:98:12:bf:a3:eb:af:e9:
         79:cb:e5:af:49:25:5a:7a:89:ba:87:8f:f9:9f:8f:ad:8d:ef:
         87:34:6d:b6:ec:7f:7f:3b:ea:10:d6:76:12:01:d5:97:f6:26:
         8a:87:ae:45:f9:dd:ad:de:83:a6:26:dd:ef:ad:e0:f6:da:50:
         4b:a2:56:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:11:39 2026 by rpki-client