Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
File:                     6E57E27AC23C8932C53853BF557B28CD590488AC.mft (raw, json)
Hash identifier:          6SdzGE8bpEJMPwnzJmx/Su39+gTnTMkT/E32VQsxMz0=
Subject key identifier:   E3:5E:37:B9:37:0A:D1:5D:91:52:F2:22:A3:E5:4F:F4:6F:44:9E:1D
Authority key identifier: 6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC
Certificate issuer:       /CN=6E57E27AC23C8932C53853BF557B28CD590488AC
Certificate serial:       579CA67434233BC36B1D32D8822DC4BAF0A020E9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
Manifest number:          0228
Signing time:             Mon 12 Oct 2026 20:39:37 +0000
Manifest this update:     Mon 12 Oct 2026 20:34:37 +0000
Manifest next update:     Tue 13 Oct 2026 22:23:37 +0000
Files and hashes:         1: 6E57E27AC23C8932C53853BF557B28CD590488AC.crl (hash: 1jDC0zHmHH6Za025/4MTeKRx56EMP4zNxy86GeoJYCg=)
                          2: 326131343a373538333a663330303a3a2f34302d3438203d3e20323035303038.roa (hash: uVoIN03AGEpRiwfW9ipOTJBOZfjNzfUt5bFPbgTp3oE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 17:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9c:a6:74:34:23:3b:c3:6b:1d:32:d8:82:2d:c4:ba:f0:a0:20:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E57E27AC23C8932C53853BF557B28CD590488AC
        Validity
            Not Before: Oct 12 20:34:37 2026 GMT
            Not After : Oct 13 22:23:37 2026 GMT
        Subject: CN=E35E37B9370AD15D9152F222A3E54FF46F449E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:25:8c:b6:a2:4f:5b:81:69:c7:0a:42:dc:
                    8b:0b:53:c0:b0:59:d6:6d:bd:ae:42:c7:be:48:1a:
                    66:88:bf:74:8b:d0:4b:fc:1a:6f:45:fd:06:ce:4f:
                    eb:b8:a6:79:44:ff:63:19:cf:57:18:8f:a2:7c:85:
                    be:db:e8:51:bb:33:8d:19:09:b1:35:41:79:ab:8a:
                    6a:6a:d7:23:e4:af:31:e4:f6:8f:b4:93:93:cb:88:
                    69:c9:45:c1:fb:2b:d8:c9:60:a2:14:0d:c8:77:37:
                    f7:19:e0:d8:4c:f5:64:8f:cc:94:43:f0:0d:c5:55:
                    a0:84:5a:22:4e:c4:c2:2c:da:01:b6:45:d6:f3:e4:
                    aa:5a:04:e8:9c:d1:ac:4f:1a:cc:ee:d6:ba:18:7c:
                    cd:b4:a2:5e:8b:e4:f5:85:59:f2:4b:99:a5:bf:60:
                    73:67:88:61:22:42:ff:f4:45:c8:e1:15:02:4b:68:
                    88:06:f1:2e:9b:8d:70:e3:11:eb:6a:76:30:fc:5e:
                    73:33:52:12:29:0d:33:60:29:f0:15:26:0f:6c:db:
                    ba:16:3a:fb:07:de:f7:5b:ce:b5:6c:9f:03:6b:ac:
                    96:a5:80:cb:2a:63:d2:4f:7e:e0:aa:2b:59:79:45:
                    36:69:b9:ed:75:55:2c:ca:60:9e:73:aa:42:5c:53:
                    4e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5E:37:B9:37:0A:D1:5D:91:52:F2:22:A3:E5:4F:F4:6F:44:9E:1D
            X509v3 Authority Key Identifier:
                keyid:6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:be:90:3e:76:5c:68:72:df:c0:3a:74:a6:2a:3a:a4:53:90:
         3c:7b:59:63:bd:3e:34:0c:29:f2:c2:d6:ec:e8:52:b6:b5:a2:
         3e:fc:5c:fa:69:4b:22:af:27:20:f9:9b:dd:bc:a1:79:08:12:
         0c:ac:c5:2c:3d:74:ef:f5:cc:4c:d2:6d:cf:f4:89:c3:d7:62:
         51:ce:c8:da:05:33:e0:58:47:2e:58:19:04:7d:69:11:d3:b8:
         2d:b4:c4:87:2d:cd:35:60:d6:6b:d5:9b:b9:7a:75:8e:c4:7d:
         3f:1d:97:cd:7a:6f:bf:63:f5:d5:cf:ae:03:c9:f9:69:58:88:
         15:bc:ea:ed:ee:59:ef:66:6a:d9:0b:85:67:7c:59:75:51:27:
         07:93:12:c9:62:9e:1f:bf:c9:dd:be:d0:2d:61:1c:5a:ac:94:
         3a:b5:5c:44:4c:3b:f5:e5:13:3a:a5:66:22:23:48:1e:a1:22:
         2e:60:38:7e:23:15:87:08:0c:a5:2b:f8:13:86:2a:ae:e3:84:
         06:4e:f4:dc:98:f4:bc:a0:2a:22:a3:30:af:2d:40:24:4b:03:
         8e:4b:d3:37:82:9c:cb:94:85:8b:e2:bd:06:cf:c9:d6:06:54:
         1f:57:b2:0d:03:25:e0:db:92:89:a0:dd:11:ca:43:31:b3:e9:
         5d:ee:fc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:24:34 2026 by rpki-client