Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
File:                     6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft (raw, json)
Hash identifier:          ul+5uSGbF2zgOe3WdeZ988xM1kU0j1Enx+aPfBtnjOk=
Subject key identifier:   24:27:F1:5E:4E:7A:6D:A7:71:4B:27:F5:9A:C9:9B:9B:28:D5:1D:86
Authority key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
Certificate issuer:       /CN=6a3130acfbfba9017addef637acd312fc763829a
Certificate serial:       03B55C302E502C4B833D51F01FA21000F3949148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
Manifest number:          03BC
Signing time:             Thu 24 Sep 2026 01:50:07 +0000
Manifest this update:     Thu 24 Sep 2026 01:45:07 +0000
Manifest next update:     Fri 25 Sep 2026 04:27:07 +0000
Files and hashes:         1: AS211562.asa (hash: 8C3+cv4Ox/77O136RcP0jRWcrYpRs3rcK+fBYsAe678=)
                          2: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl (hash: LVfQM+kMoamakuXRHSfDgXWZbM5WhqBIoMRmjkAbwUY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b5:5c:30:2e:50:2c:4b:83:3d:51:f0:1f:a2:10:00:f3:94:91:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a3130acfbfba9017addef637acd312fc763829a
        Validity
            Not Before: Sep 24 01:45:07 2026 GMT
            Not After : Sep 25 04:27:07 2026 GMT
        Subject: CN=2427F15E4E7A6DA7714B27F59AC99B9B28D51D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:c4:11:b0:73:3b:33:e2:4e:18:c6:a7:5b:
                    3e:b7:13:ad:f3:7e:3a:6b:0c:cf:f6:38:7a:39:7c:
                    12:b4:8f:c2:e1:fd:cd:83:87:e8:a4:f0:17:8e:85:
                    16:5e:ef:0b:60:73:4d:ea:86:6a:8f:d8:d2:23:f1:
                    c9:02:86:18:1c:ea:dc:f9:93:c7:50:58:4f:e1:02:
                    25:d0:5e:f4:8e:10:07:06:97:a7:cc:f2:c7:8c:60:
                    87:5a:6b:93:5b:0f:9e:51:0a:6f:21:4a:0b:e8:ac:
                    a4:ed:09:5d:83:32:98:e3:74:32:7c:66:34:31:eb:
                    cf:56:09:79:19:e5:0b:c8:30:19:5c:78:04:59:af:
                    db:60:14:2d:e4:58:fa:d2:a9:25:99:de:57:a2:e3:
                    e7:13:e4:bd:0f:2f:9b:53:46:8b:6c:9b:45:46:32:
                    6e:99:f6:66:68:c7:a7:0c:c2:51:ea:77:7d:e8:c5:
                    b3:b2:79:de:f6:71:dd:69:38:c8:62:49:96:09:10:
                    f7:08:de:b2:ac:6d:46:14:27:c8:22:5c:e7:19:21:
                    c2:91:3f:63:f4:39:f4:56:49:cb:6d:f9:20:93:a4:
                    6c:c6:af:90:eb:08:d4:ba:1c:1a:27:1a:fa:66:3b:
                    d8:2c:93:e5:0f:10:46:7c:b0:8a:96:91:33:a6:9f:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:27:F1:5E:4E:7A:6D:A7:71:4B:27:F5:9A:C9:9B:9B:28:D5:1D:86
            X509v3 Authority Key Identifier:
                keyid:6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:71:66:e8:e2:36:58:09:00:fa:3c:42:5e:b0:2e:f4:4a:ed:
         6f:e5:48:50:2b:ec:a8:a9:9f:7c:0c:6a:48:da:32:6a:56:b3:
         2a:dc:be:0e:86:fd:76:dc:b0:a8:d6:23:47:66:18:39:84:01:
         d2:08:5d:40:5a:62:3e:50:45:4a:d9:9b:15:89:da:f3:c1:4a:
         60:9d:da:b1:43:d1:70:b6:64:64:49:20:cf:b8:71:1d:dc:d2:
         9c:83:5c:da:4f:d9:1e:cf:22:07:81:54:93:58:1f:30:1d:69:
         f9:2a:d8:20:8d:0f:20:81:68:3f:9e:9e:93:c0:f4:1a:c4:5e:
         0d:8c:64:0a:54:ba:40:7f:74:3a:00:5c:93:77:96:c4:50:72:
         10:40:40:97:12:b3:63:aa:ba:f7:1d:fd:04:75:b8:09:42:86:
         c2:07:89:97:53:18:0b:40:95:0c:aa:4b:d4:2f:f0:c1:ac:9f:
         13:02:6b:13:16:84:eb:e0:e8:45:b2:fa:56:87:27:bd:5d:70:
         5e:52:22:b5:f4:17:e6:95:c0:ac:41:c8:3e:db:8b:d8:1d:ce:
         1b:62:62:29:5f:fe:ca:38:34:bb:2f:5f:d9:97:1a:7d:cb:d0:
         3c:eb:e3:83:c8:a1:bb:28:9d:75:7e:30:bd:93:0f:41:ed:5a:
         1c:60:e3:ee
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUA7VcMC5QLEuDPVHwH6IQAPOUkUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmEzMTMwYWNmYmZiYTkwMTdhZGRlZjYzN2FjZDMxMmZj
NzYzODI5YTAeFw0yNjA5MjQwMTQ1MDdaFw0yNjA5MjUwNDI3MDdaMDMxMTAvBgNV
BAMTKDI0MjdGMTVFNEU3QTZEQTc3MTRCMjdGNTlBQzk5QjlCMjhENTFEODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxO8QRsHM7M+JOGManWz63E63z
fjprDM/2OHo5fBK0j8Lh/c2Dh+ik8BeOhRZe7wtgc03qhmqP2NIj8ckChhgc6tz5
k8dQWE/hAiXQXvSOEAcGl6fM8seMYIdaa5NbD55RCm8hSgvorKTtCV2DMpjjdDJ8
ZjQx689WCXkZ5QvIMBlceARZr9tgFC3kWPrSqSWZ3lei4+cT5L0PL5tTRotsm0VG
Mm6Z9mZox6cMwlHqd33oxbOyed72cd1pOMhiSZYJEPcI3rKsbUYUJ8giXOcZIcKR
P2P0OfRWSctt+SCTpGzGr5DrCNS6HBonGvpmO9gsk+UPEEZ8sIqWkTOmn2odAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUJCfxXk56badxSyf1msmbmyjVHYYwHwYDVR0j
BBgwFoAUajEwrPv7qQF63e9jes0xL8djgpowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5
NzMyLzEvNkEzMTMwQUNGQkZCQTkwMTdBRERFRjYzN0FDRDMxMkZDNzYzODI5QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FqRXdyUHY3cVFGNjNlOWplczB4TDhk
amdwby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmE4MDY4Mi1j
NTRjLTRkNWEtOTQ1Ni1iMjM5MjUzMDk3MzIvMS82QTMxMzBBQ0ZCRkJBOTAxN0FE
REVGNjM3QUNEMzEyRkM3NjM4MjlBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnFm6OI2WAkA+jxCXrAu
9Ertb+VIUCvsqKmffAxqSNoyalazKty+Dob9dtywqNYjR2YYOYQB0ghdQFpiPlBF
StmbFYna88FKYJ3asUPRcLZkZEkgz7hxHdzSnINc2k/ZHs8iB4FUk1gfMB1p+SrY
II0PIIFoP56ek8D0GsReDYxkClS6QH90OgBck3eWxFByEEBAlxKzY6q69x39BHW4
CUKGwgeJl1MYC0CVDKpL1C/wwayfEwJrExaE6+DoRbL6VocnvV1wXlIitfQX5pXA
rEHIPtuL2B3OG2JiKV/+yjg0uy9f2ZcafcvQPOvjg8ihuyiddX4wvZMPQe1aHGDj
7g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:49:59 2026 by rpki-client