Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File:                     0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier:          7j+uvXAIFDC8+krdhUKxMJWU/3ED1wfwvWwi3f0yA1s=
Subject key identifier:   DC:A7:3C:1C:F1:75:9A:4D:CF:78:38:14:6A:56:B6:FE:96:5B:66:25
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer:       /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial:       4CFD436D4D1D7AB49CB3F600ED5A54F2405FF655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number:          01E6
Signing time:             Tue 28 Jul 2026 08:52:47 +0000
Manifest this update:     Tue 28 Jul 2026 08:47:47 +0000
Manifest next update:     Wed 29 Jul 2026 09:06:47 +0000
Files and hashes:         1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: UkzXUKFJaJG63OYeEU1TjYScEXUWKFFO9fvsIsgPsxU=)
                          2: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 09:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fd:43:6d:4d:1d:7a:b4:9c:b3:f6:00:ed:5a:54:f2:40:5f:f6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
        Validity
            Not Before: Jul 28 08:47:47 2026 GMT
            Not After : Jul 29 09:06:47 2026 GMT
        Subject: CN=DCA73C1CF1759A4DCF7838146A56B6FE965B6625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:4f:c0:95:3f:12:11:86:ae:f4:62:90:b6:
                    b7:22:6e:af:75:0c:ce:16:64:80:b7:ee:db:67:c4:
                    65:1d:a8:21:6b:20:e2:04:25:8f:b6:4c:2f:82:54:
                    34:b3:9e:ad:cc:1f:55:82:a0:71:41:3e:0c:a6:01:
                    41:6e:f4:fd:44:a8:0a:95:dd:f3:7d:9b:ec:e4:d3:
                    5d:4a:ad:5b:71:57:25:a9:a6:4c:bc:6c:21:9b:48:
                    c0:84:d9:d0:91:34:6a:f3:5a:89:a1:c1:f1:d1:45:
                    9b:3d:b7:b7:8c:e8:89:b0:9b:0f:07:8a:c5:1d:18:
                    d5:b7:0a:57:f3:23:7f:81:fd:8c:7d:81:48:97:cd:
                    b6:eb:3a:6b:35:7c:b4:6d:b6:66:93:f2:cd:ba:6b:
                    c4:5d:38:c6:fc:15:f4:e4:af:51:e0:46:9b:be:c1:
                    ee:41:22:22:e0:e9:e1:0d:33:63:7e:45:7c:16:30:
                    41:eb:d2:da:38:c6:e7:00:50:88:47:a0:48:7e:12:
                    ed:ad:3d:bb:d2:50:9f:30:04:4e:3d:9b:4f:4e:ff:
                    4b:e0:6f:8d:a0:c0:1c:47:e2:22:8d:23:48:22:f3:
                    d5:ab:c5:62:dc:03:5c:e3:63:40:cc:f6:c2:d2:c2:
                    4c:2a:a1:86:e7:0e:73:21:c1:e0:b2:df:0d:68:fd:
                    d3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A7:3C:1C:F1:75:9A:4D:CF:78:38:14:6A:56:B6:FE:96:5B:66:25
            X509v3 Authority Key Identifier:
                keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:55:d2:c0:8e:f0:a3:e9:48:a2:03:40:73:9a:48:c2:11:40:
         a8:51:1c:f8:2f:f4:fd:5b:bb:2a:eb:6a:b0:2f:ee:12:72:07:
         70:00:18:44:a4:40:5f:55:65:20:e2:7b:7c:2e:09:b6:15:07:
         8f:44:09:03:af:d1:ce:df:13:bd:61:4a:24:63:f3:cb:07:61:
         5b:d1:be:72:c2:ac:98:b4:16:b5:67:35:07:17:3b:06:f0:78:
         aa:7e:e6:a1:b3:e3:3e:ee:27:86:2e:2d:9e:50:1e:fb:59:c1:
         8b:7b:64:3d:03:c4:ed:c9:6f:68:68:06:f6:60:80:25:27:de:
         7a:a2:c5:d6:f8:04:6d:73:40:79:5b:10:cf:9f:68:29:fb:4c:
         c2:c6:6e:ae:34:52:93:a8:dd:e1:6a:c4:0b:4f:34:2a:d9:09:
         2c:b0:75:4c:a5:9d:b0:a9:4f:a0:6c:4d:6b:3e:22:fb:c0:bb:
         75:f0:88:8c:59:ef:d5:15:e1:7d:7a:92:85:47:89:28:ca:ba:
         40:be:c2:c3:23:b0:55:dd:bb:42:88:96:5d:62:a1:c9:11:2c:
         a6:11:30:db:d3:49:24:48:64:66:31:8c:d5:1a:f5:e7:74:ac:
         ed:94:8b:87:1e:f4:44:2c:aa:d1:a0:f5:07:c5:ad:c8:6c:57:
         75:44:08:43
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUTP1DbU0derScs/YA7VpU8kBf9lUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGRkNGNmYTIxZDgzYWJkOGI1NjU0OTgxODA2ODBkMTQx
YTgxOTYwZjAeFw0yNjA3MjgwODQ3NDdaFw0yNjA3MjkwOTA2NDdaMDMxMTAvBgNV
BAMTKERDQTczQzFDRjE3NTlBNERDRjc4MzgxNDZBNTZCNkZFOTY1QjY2MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaQ0/AlT8SEYau9GKQtrcibq91
DM4WZIC37ttnxGUdqCFrIOIEJY+2TC+CVDSznq3MH1WCoHFBPgymAUFu9P1EqAqV
3fN9m+zk011KrVtxVyWppky8bCGbSMCE2dCRNGrzWomhwfHRRZs9t7eM6Imwmw8H
isUdGNW3ClfzI3+B/Yx9gUiXzbbrOms1fLRttmaT8s26a8RdOMb8FfTkr1HgRpu+
we5BIiLg6eENM2N+RXwWMEHr0to4xucAUIhHoEh+Eu2tPbvSUJ8wBE49m09O/0vg
b42gwBxH4iKNI0gi89WrxWLcA1zjY0DM9sLSwkwqoYbnDnMhweCy3w1o/dPfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU3Kc8HPF1mk3PeDgUala2/pZbZiUwHwYDVR0j
BBgwFoAUDdTPoh2Dq9i1ZUmBgGgNFBqBlg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjEyNTMxYzgtYjI0OC00NDMxLWExOGUtNGU2ZGM4ZDZi
NmU4LzAvMERENENGQTIxRDgzQUJEOEI1NjU0OTgxODA2ODBEMTQxQTgxOTYwRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RkVFBvaDJEcTlpMVpVbUJnR2dORkJx
QmxnOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMTI1MzFjOC1i
MjQ4LTQ0MzEtYTE4ZS00ZTZkYzhkNmI2ZTgvMC8wREQ0Q0ZBMjFEODNBQkQ4QjU2
NTQ5ODE4MDY4MEQxNDFBODE5NjBGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1XSwI7wo+lIogNAc5pI
whFAqFEc+C/0/Vu7KutqsC/uEnIHcAAYRKRAX1VlIOJ7fC4JthUHj0QJA6/Rzt8T
vWFKJGPzywdhW9G+csKsmLQWtWc1Bxc7BvB4qn7mobPjPu4nhi4tnlAe+1nBi3tk
PQPE7clvaGgG9mCAJSfeeqLF1vgEbXNAeVsQz59oKftMwsZurjRSk6jd4WrEC080
KtkJLLB1TKWdsKlPoGxNaz4i+8C7dfCIjFnv1RXhfXqShUeJKMq6QL7CwyOwVd27
QoiWXWKhyREsphEw29NJJEhkZjGM1Rr153Ss7ZSLhx70RCyq0aD1B8WtyGxXdUQI
Qw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:43:34 2026 by rpki-client