Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File:                     A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier:          YLu9qsi5S4RAdIYxgwKt1D+Q5/84AgU3Y1pXmRdSlc0=
Subject key identifier:   AD:D4:7B:C3:91:97:CA:B5:34:85:4E:74:CA:A6:BB:12:ED:A4:11:2D
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer:       /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial:       0C6D38A63A9005BF37D680A68934A223BA8BEE6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number:          06CB
Signing time:             Thu 16 Apr 2026 21:09:11 +0000
Manifest this update:     Thu 16 Apr 2026 21:04:11 +0000
Manifest next update:     Fri 17 Apr 2026 21:33:11 +0000
Files and hashes:         1: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: Jj8IsHwq6RYSTRJAIHxqIsMSKmlUGDd3/RBqbZfjKgY=)
                          2: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:33:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6d:38:a6:3a:90:05:bf:37:d6:80:a6:89:34:a2:23:ba:8b:ee:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
        Validity
            Not Before: Apr 16 21:04:11 2026 GMT
            Not After : Apr 17 21:33:11 2026 GMT
        Subject: CN=ADD47BC39197CAB534854E74CAA6BB12EDA4112D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f8:45:52:9d:b2:05:7a:8d:f4:bf:d0:b7:3d:
                    46:d3:72:00:7a:ce:21:5e:b1:8a:c0:c2:c0:62:f1:
                    57:87:90:e3:de:d3:3d:93:c9:9e:c2:9d:23:ff:19:
                    ac:ef:a5:a9:c4:5b:9e:6e:04:49:70:31:f4:74:8a:
                    7a:dd:6a:3f:f3:b2:29:24:18:a5:e6:fd:d2:a3:c5:
                    a5:01:64:90:4c:80:1c:8f:7d:a1:4b:13:f9:6f:5c:
                    b9:5b:35:a4:34:31:09:79:90:76:c3:1c:8e:3a:46:
                    ce:93:c4:f3:f6:72:ed:8f:d5:e7:bf:f0:49:48:8b:
                    6c:e2:3d:e3:94:c9:1c:1d:94:4e:bf:8f:70:55:fa:
                    4b:fc:c8:07:32:5a:9d:42:8b:92:47:8c:2e:d6:b4:
                    ba:8b:75:34:8e:0a:f1:de:78:8f:b1:b9:c1:e9:3e:
                    2d:55:e6:c9:36:2b:3e:78:16:52:d2:68:62:b3:0f:
                    84:77:67:20:e5:34:e3:53:a2:83:65:dd:9f:46:61:
                    eb:ab:23:d4:96:66:2f:58:ea:06:36:60:0d:02:f1:
                    6a:b9:66:79:07:20:eb:84:a5:bd:f1:34:17:bd:98:
                    c6:75:50:15:9f:ae:47:c5:13:c8:bf:c9:71:83:52:
                    8f:b0:34:57:98:37:18:47:1c:d4:36:0a:3c:d6:d6:
                    98:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D4:7B:C3:91:97:CA:B5:34:85:4E:74:CA:A6:BB:12:ED:A4:11:2D
            X509v3 Authority Key Identifier:
                keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:da:94:7c:f3:ea:00:10:d1:b4:4f:65:b8:f6:62:f6:1e:1e:
         c0:a6:c2:e6:64:1f:56:e9:06:00:df:7e:b2:d0:3e:4a:71:0d:
         42:75:dd:7b:34:36:1c:bf:ce:f1:b9:91:b5:f9:0c:a0:10:08:
         3a:6f:fc:f6:c2:c9:ef:d6:8d:cb:82:1c:68:5f:28:bd:5b:83:
         a9:83:9e:c5:0f:1b:d9:5b:23:ae:cd:c5:92:e6:c4:e2:55:a4:
         88:d3:f2:14:e0:a4:4e:5d:ac:72:97:1d:6f:69:ed:83:6e:c6:
         ba:77:83:ba:53:9c:d8:b4:08:9c:9b:2b:00:d4:77:80:18:63:
         45:72:89:3f:b6:69:fd:8e:fd:33:a3:20:46:53:6b:42:9f:6f:
         2c:6b:57:16:aa:71:fc:57:d8:62:a4:9b:95:71:c6:a7:82:06:
         bd:1f:9f:8a:fc:de:d6:0f:6d:d1:9f:b3:dc:07:f9:02:90:e5:
         dc:f9:3f:a8:3e:6d:cc:85:ae:fb:f8:f5:4d:64:e8:10:97:76:
         89:a0:56:8e:77:2d:89:cb:c2:b1:44:e9:c0:5a:a1:34:14:49:
         14:5f:e4:3f:32:8b:62:78:2d:d3:8e:27:01:56:90:14:de:84:
         96:ab:6e:1f:e5:2e:39:e9:53:95:48:83:03:19:65:44:4f:a9:
         f8:a4:4e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:00 2026 by rpki-client