Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
File:                     6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft (raw, json)
Hash identifier:          PbZ1wgKjMV7aJAjj0i327uYK9wvy1nhyZmUji69IRBo=
Subject key identifier:   22:95:6E:48:AB:BC:1C:B1:42:D7:8A:5E:04:6F:6D:22:17:F7:27:A2
Authority key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
Certificate issuer:       /CN=6a3130acfbfba9017addef637acd312fc763829a
Certificate serial:       647D1C692F2305D3D49AECCDDC194BE09797A15A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
Manifest number:          02A8
Signing time:             Sun 01 Mar 2026 00:46:17 +0000
Manifest this update:     Sun 01 Mar 2026 00:41:17 +0000
Manifest next update:     Mon 02 Mar 2026 01:47:17 +0000
Files and hashes:         1: AS211562.asa (hash: 8C3+cv4Ox/77O136RcP0jRWcrYpRs3rcK+fBYsAe678=)
                          2: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl (hash: zzL/Z058/uGkCHhaU0T2mSC3Lhz25u+tPAiCcxJZGCs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 01:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7d:1c:69:2f:23:05:d3:d4:9a:ec:cd:dc:19:4b:e0:97:97:a1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a3130acfbfba9017addef637acd312fc763829a
        Validity
            Not Before: Mar  1 00:41:17 2026 GMT
            Not After : Mar  2 01:47:17 2026 GMT
        Subject: CN=22956E48ABBC1CB142D78A5E046F6D2217F727A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:bf:c7:b2:7d:54:b7:2e:7e:bb:d5:d7:ab:
                    14:5f:b9:92:68:d3:fd:20:f3:43:c4:f8:78:eb:b8:
                    0a:fb:02:b9:0b:aa:4d:0b:e4:ac:51:e9:61:93:67:
                    4d:56:d4:24:09:db:6c:12:e2:fd:71:7d:38:d1:bd:
                    aa:53:4d:77:18:56:fb:71:6b:84:5a:3f:d9:15:70:
                    52:1a:2b:46:4a:5e:83:5e:a1:d4:b9:2c:fb:30:55:
                    26:fc:56:2e:bb:31:af:e0:9c:65:e2:d3:fb:0f:e1:
                    2f:4c:f4:96:c0:ca:35:05:f4:19:33:b0:af:92:24:
                    b4:d4:0d:37:18:a7:87:1f:9f:09:9d:81:1d:8d:81:
                    f1:98:d7:22:d5:53:f2:36:58:08:28:0f:8e:b5:37:
                    6f:3f:d2:e4:51:4a:6f:67:fe:be:80:e0:7f:5c:cb:
                    a9:3f:23:64:d4:e6:6b:bb:50:77:4c:96:82:a4:f7:
                    41:f3:0f:3f:76:ff:ac:c7:43:e6:cf:c4:2c:c0:2e:
                    5b:8d:d6:77:fc:f1:b3:ce:c6:cd:a4:4a:23:fd:01:
                    1c:dc:35:6b:5a:e5:2d:e6:7d:f8:e0:08:f0:10:a4:
                    8b:4c:9d:fb:7b:9d:77:e4:44:dd:76:83:d7:20:37:
                    94:9b:90:17:1c:f1:f6:40:ac:06:2c:78:37:ad:3d:
                    51:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:95:6E:48:AB:BC:1C:B1:42:D7:8A:5E:04:6F:6D:22:17:F7:27:A2
            X509v3 Authority Key Identifier:
                keyid:6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:26:58:bf:ee:73:a7:93:7a:ba:fa:28:aa:01:1b:25:3e:8a:
         f0:d1:f0:fd:01:60:ff:5e:b4:9b:9a:89:62:c6:33:67:7f:3b:
         ce:61:38:f0:42:5f:de:c9:9e:c2:df:e8:36:c6:dc:24:26:77:
         68:62:0d:7a:9b:1e:50:a4:8b:16:0f:f1:f0:ca:7b:30:e9:2e:
         26:f6:d8:c3:0d:f7:37:d3:91:57:86:86:7d:74:b6:83:0f:e7:
         c8:81:2a:20:47:75:61:00:72:29:ad:4d:09:71:ea:79:7b:d9:
         29:84:7a:38:d3:13:10:19:69:e9:91:f3:1e:e0:5d:ac:42:a6:
         31:d0:af:b3:f5:df:b5:18:02:cc:1f:2c:dd:d7:43:08:dc:42:
         a8:d2:21:64:1c:8e:2b:d3:85:cd:01:49:73:4e:2a:25:5a:98:
         99:c2:3b:15:7e:32:1b:b5:7f:17:a8:de:aa:d2:f7:c2:5f:5f:
         d9:b5:ad:02:bb:03:b6:91:35:da:06:1b:bc:1d:73:50:82:7f:
         36:b1:02:70:a6:01:9d:c9:68:53:37:11:90:98:25:79:66:d2:
         ce:df:a2:5d:8d:91:41:e5:6c:0f:71:8c:14:b3:03:58:88:6c:
         55:4e:05:5a:eb:3d:9b:1d:0e:29:0e:20:a7:5c:bd:93:76:8e:
         16:38:1a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:28 2026 by rpki-client