Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
File:                     6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft (raw, json)
Hash identifier:          o5rpT+PsYS1PkM/j8lzImnCSvZ9KGPbyfC6zaIiJ1jY=
Subject key identifier:   32:6E:41:AB:61:47:A3:B9:14:2F:5C:B1:87:9B:DF:47:D0:F3:9C:88
Authority key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA
Certificate issuer:       /CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
Certificate serial:       70BA0E4989B93D8E1DACF077462EB6174095EDBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
Manifest number:          048B
Signing time:             Fri 17 Apr 2026 00:15:38 +0000
Manifest this update:     Fri 17 Apr 2026 00:10:38 +0000
Manifest next update:     Sat 18 Apr 2026 04:02:38 +0000
Files and hashes:         1: AS48700.asa (hash: C6poKzLysJKn2xBPGTwFxBEZkUwyOo+wJDJRV11LSl4=)
                          2: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl (hash: wCcVszcLOPCXsKS4JUspaWc/nTw6XroVHQFv4NfCPak=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ba:0e:49:89:b9:3d:8e:1d:ac:f0:77:46:2e:b6:17:40:95:ed:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
        Validity
            Not Before: Apr 17 00:10:38 2026 GMT
            Not After : Apr 18 04:02:38 2026 GMT
        Subject: CN=326E41AB6147A3B9142F5CB1879BDF47D0F39C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:03:46:86:d7:75:d6:e8:37:46:61:cb:f2:5c:
                    44:01:9b:78:dd:6c:df:b0:91:7f:f6:e0:a7:ea:3f:
                    26:35:10:78:39:b5:24:40:d3:44:e7:65:a5:e2:fa:
                    21:59:d4:de:70:0a:07:8e:56:e8:ad:1c:45:a3:9a:
                    dc:c1:22:b2:df:88:8f:56:b0:cd:4a:05:1d:dc:fc:
                    5b:5e:6b:5c:f8:f6:0e:08:9b:6d:7c:48:ef:3a:f7:
                    4f:7c:30:ec:24:e8:61:a8:9f:c5:a0:82:70:79:68:
                    93:82:3c:9a:b8:c6:ff:e3:d5:d3:d5:ae:f0:bc:17:
                    ff:d0:0a:96:78:c2:80:21:f3:c9:d6:9a:b9:0c:f5:
                    01:6b:b0:5d:64:4f:3e:a2:f1:5b:5f:83:b3:21:2d:
                    c0:66:f6:2d:87:85:0c:af:bf:48:1e:4d:60:45:1a:
                    5f:49:1f:02:ce:c5:b1:4e:9a:d8:75:fa:36:48:c5:
                    04:ca:7e:b5:ca:ab:b3:2a:66:15:51:96:6c:6f:1b:
                    bf:ad:64:28:3a:0a:cd:aa:c4:65:44:71:c2:7b:54:
                    4b:95:d5:b8:c1:f8:38:d0:07:64:21:e3:8b:53:5d:
                    1e:d0:dc:d7:b3:24:1c:27:d9:0a:b1:5a:8b:14:84:
                    5a:72:ab:43:1b:2c:ab:16:94:e6:fb:dc:bd:65:ba:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6E:41:AB:61:47:A3:B9:14:2F:5C:B1:87:9B:DF:47:D0:F3:9C:88
            X509v3 Authority Key Identifier:
                keyid:60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:89:5e:79:00:74:a7:d7:f7:5c:67:98:de:9d:64:bd:37:b7:
         8b:cd:c4:ed:1d:8f:51:ff:cb:49:d1:cd:cf:a8:45:d3:9b:9d:
         c2:07:6e:d7:45:3e:8f:5d:4d:36:d3:04:ab:a7:fa:8a:80:5d:
         01:62:19:26:17:b6:8d:bd:d9:e4:d0:5c:b8:81:4a:34:4f:07:
         b5:0c:9b:54:94:b2:6a:c4:2d:64:86:e0:2c:47:12:34:b7:46:
         0e:fd:32:2b:1a:21:a9:f9:ab:1c:07:54:df:e2:26:bd:c5:64:
         ee:ad:bd:76:6c:eb:0a:4c:94:0f:94:13:17:c5:94:1d:4b:9b:
         f1:1a:8d:79:14:a1:2e:e8:9e:50:fd:3e:82:b4:38:67:43:29:
         85:6b:f5:c6:84:0b:46:6a:7b:41:50:61:a1:a8:07:c7:5a:d1:
         5f:a4:37:e7:34:20:9a:40:40:e6:2c:17:81:25:cb:42:a8:60:
         78:be:01:88:db:28:eb:cd:52:02:4a:34:b3:64:a7:f1:43:de:
         fd:cd:7f:0f:86:30:f4:58:0c:39:fb:83:de:ed:1f:0a:48:da:
         40:59:43:2d:03:85:c7:42:16:1a:c1:0e:21:f6:a2:4c:1b:7e:
         91:30:d6:1f:91:16:7d:db:52:48:ac:bb:ff:98:4d:9f:08:ea:
         29:a7:f3:2e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUcLoOSYm5PY4drPB3Ri62F0CV7bwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAxOWMxMTZjOGFlMzE4YWZkNGI4MjJlOWY0ZWVlYTBj
MzRiYWFjYTAeFw0yNjA0MTcwMDEwMzhaFw0yNjA0MTgwNDAyMzhaMDMxMTAvBgNV
BAMTKDMyNkU0MUFCNjE0N0EzQjkxNDJGNUNCMTg3OUJERjQ3RDBGMzlDODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCA0aG13XW6DdGYcvyXEQBm3jd
bN+wkX/24KfqPyY1EHg5tSRA00TnZaXi+iFZ1N5wCgeOVuitHEWjmtzBIrLfiI9W
sM1KBR3c/Ftea1z49g4Im218SO869098MOwk6GGon8WggnB5aJOCPJq4xv/j1dPV
rvC8F//QCpZ4woAh88nWmrkM9QFrsF1kTz6i8Vtfg7MhLcBm9i2HhQyvv0geTWBF
Gl9JHwLOxbFOmth1+jZIxQTKfrXKq7MqZhVRlmxvG7+tZCg6Cs2qxGVEccJ7VEuV
1bjB+DjQB2Qh44tTXR7Q3NezJBwn2QqxWosUhFpyq0MbLKsWlOb73L1lusoZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUMm5Bq2FHo7kUL1yxh5vfR9DznIgwHwYDVR0j
BBgwFoAUYBnBFsiuMYr9S4Iun07uoMNLqsowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm
NDA5LzMvNjAxOUMxMTZDOEFFMzE4QUZENEI4MjJFOUY0RUVFQTBDMzRCQUFDQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lCbkJGc2l1TVlyOVM0SXVuMDd1b01O
THFzby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0y
MDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvMy82MDE5QzExNkM4QUUzMThBRkQ0
QjgyMkU5RjRFRUVBMEMzNEJBQUNBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4leeQB0p9f3XGeY3p1k
vTe3i83E7R2PUf/LSdHNz6hF05udwgdu10U+j11NNtMEq6f6ioBdAWIZJhe2jb3Z
5NBcuIFKNE8HtQybVJSyasQtZIbgLEcSNLdGDv0yKxohqfmrHAdU3+ImvcVk7q29
dmzrCkyUD5QTF8WUHUub8RqNeRShLuieUP0+grQ4Z0MphWv1xoQLRmp7QVBhoagH
x1rRX6Q35zQgmkBA5iwXgSXLQqhgeL4BiNso681SAko0s2Sn8UPe/c1/D4Yw9FgM
OfuD3u0fCkjaQFlDLQOFx0IWGsEOIfaiTBt+kTDWH5EWfdtSSKy7/5hNnwjqKafz
Lg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:53 2026 by rpki-client