Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft
File:                     D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json)
Hash identifier:          kcfcZCwBpRGV+INIC0/U9p3RA+BGLZUxPxMu5blWNZo=
Subject key identifier:   8B:95:5E:B2:58:AE:70:2E:8B:1D:3D:F3:DA:F6:DD:8D:E1:F5:22:4A
Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A
Certificate issuer:       /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A
Certificate serial:       49094AEFB69BDBE660792892EF990AD93C5EF219
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft
Manifest number:          01C1
Signing time:             Sat 28 Feb 2026 22:18:40 +0000
Manifest this update:     Sat 28 Feb 2026 22:13:40 +0000
Manifest next update:     Sun 01 Mar 2026 23:17:40 +0000
Files and hashes:         1: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: +fPqE+PLbvvQ5+1hCQwveOcavSRuQaEhutwzzizvUSU=)
                          2: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=)
                          3: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=)
                          4: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Mar 2026 23:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:09:4a:ef:b6:9b:db:e6:60:79:28:92:ef:99:0a:d9:3c:5e:f2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A
        Validity
            Not Before: Feb 28 22:13:40 2026 GMT
            Not After : Mar  1 23:17:40 2026 GMT
        Subject: CN=8B955EB258AE702E8B1D3DF3DAF6DD8DE1F5224A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:e9:25:cf:f1:d9:81:b7:a6:f2:99:93:c4:
                    6f:25:df:a4:d0:51:5c:39:1e:02:0a:93:74:ee:12:
                    48:c8:1d:b9:e1:b5:01:5d:47:d9:74:3d:35:a7:4f:
                    a2:1a:b8:1b:6f:5f:41:3c:f5:80:a0:91:1f:ca:fc:
                    c7:fa:d4:50:18:d5:21:d8:cd:cd:e5:c8:a4:9f:8c:
                    0f:18:0d:fd:19:ca:0a:a9:f9:c3:9d:4b:dd:c6:97:
                    53:f8:4a:73:32:7c:1c:bb:1a:73:eb:cb:05:2e:a6:
                    25:a1:45:a8:a1:27:26:dc:69:8c:b2:c4:a1:b2:c7:
                    40:44:2f:83:05:13:17:99:07:0a:99:2f:22:7c:12:
                    a2:3f:81:d1:22:be:72:63:e8:6e:43:b7:c4:53:14:
                    f9:90:76:2a:0f:d8:0a:87:dd:bb:7c:eb:60:55:a7:
                    89:fb:0b:e3:4c:7f:62:df:26:aa:4e:b9:6e:14:67:
                    9f:fd:0e:1d:9f:59:d6:28:d9:4c:79:bf:8d:6a:38:
                    f2:bc:1a:3c:36:28:57:c8:64:d8:95:fb:4d:0a:72:
                    d7:8a:a8:9c:9b:b9:dc:a9:2b:3d:73:00:0c:61:53:
                    2c:15:18:19:fa:c8:1e:98:d7:25:9d:78:d8:3b:6b:
                    f1:2a:c8:71:0c:8e:c8:ee:4d:9c:f0:02:bf:f8:6b:
                    57:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:95:5E:B2:58:AE:70:2E:8B:1D:3D:F3:DA:F6:DD:8D:E1:F5:22:4A
            X509v3 Authority Key Identifier:
                keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:26:90:ef:b3:bc:2e:2e:ad:2f:25:37:32:e2:a0:dd:ff:9f:
         db:52:ab:75:35:fc:95:00:b8:cf:59:62:f9:07:51:22:18:fe:
         ec:f6:bb:eb:08:d3:b3:bc:f3:39:6e:bf:00:3c:32:e4:aa:c1:
         69:4b:19:4e:90:94:37:3a:00:ba:11:8e:64:2e:6b:aa:56:de:
         35:ce:c9:f1:e6:a4:54:ed:d9:cb:c8:7d:15:a2:64:5f:16:9c:
         1c:4d:d8:d2:86:ba:d3:3c:c2:c6:96:70:80:8b:8e:c9:19:06:
         35:2a:81:2c:36:ef:23:b5:a4:f7:16:a4:4b:bc:26:42:73:d1:
         d7:96:4f:17:03:de:ae:39:57:27:82:0d:1a:1d:e0:49:08:13:
         5c:dc:56:16:c5:63:1b:f4:bf:3c:97:d7:cb:e7:2e:4b:aa:9a:
         4f:dc:75:14:cc:ba:b6:74:88:f0:f0:eb:76:2b:67:9f:50:90:
         b8:aa:49:63:13:ce:14:5f:47:f3:c6:68:0d:6d:39:5f:d5:68:
         fe:d3:46:73:da:c5:e0:73:c4:f8:5c:81:15:e3:b1:e3:06:48:
         47:35:9c:30:e7:19:7e:77:48:07:81:1b:21:96:00:e9:53:d0:
         f1:3d:cc:7f:49:33:cd:97:1c:84:f1:9c:24:26:50:54:c7:9d:
         ff:3c:6a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:36:33 2026 by rpki-client