Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
File:                     735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft (raw, json)
Hash identifier:          lLC4pCefTEXp5Sfwqbzo/h+3fiSjmpk9v8YnoPtD+Bs=
Subject key identifier:   6B:E7:17:4B:18:6C:9F:06:2F:5E:AA:9D:B8:FD:E8:67:E2:79:BD:A4
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Certificate issuer:       /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial:       7FEB1025D2E3622D2EB893C9A3A81BD4FE73D7EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
Manifest number:          0552
Signing time:             Thu 16 Apr 2026 19:08:45 +0000
Manifest this update:     Thu 16 Apr 2026 19:03:45 +0000
Manifest next update:     Fri 17 Apr 2026 19:28:45 +0000
Files and hashes:         1: 735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl (hash: XREsluG0j9qSKnYZssY7ja7AJ0lSQ4yH9zEL3MAUj+A=)
                          2: AS6079.roa (hash: cwt2kgma2qYi3LhLoT0eQ8hzydzk6ECH01Cp7+lYh5Q=)
                          3: AS7029.roa (hash: 8PLTntWjTUT/j3wb4jf3whlNbIemwNkkni4M1Q4/mDw=)
                          4: AS42689.roa (hash: bHiyF655ZS6fGo+HfxHRjIXpprp7OxJwDoiubXJgV6g=)
                          5: AS48961.roa (hash: 3cIbAXwf9Yl1EVegsCq9QH9D9FfXgLy3FkzfZ43rjN4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:eb:10:25:d2:e3:62:2d:2e:b8:93:c9:a3:a8:1b:d4:fe:73:d7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
        Validity
            Not Before: Apr 16 19:03:45 2026 GMT
            Not After : Apr 17 19:28:45 2026 GMT
        Subject: CN=6BE7174B186C9F062F5EAA9DB8FDE867E279BDA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:db:2a:46:32:57:b3:56:b2:e5:f5:c3:bf:
                    c8:22:35:5f:3b:f6:b9:c3:70:0c:ed:6a:a1:0f:6a:
                    bd:47:e3:dc:3a:7e:08:82:17:f1:92:b5:ee:46:ad:
                    f3:22:6d:37:77:3b:2c:6d:71:8f:cc:47:48:9a:f8:
                    b7:ed:ad:84:05:b2:f2:52:ae:e3:07:0b:39:32:42:
                    2d:12:56:a0:11:bb:6c:f8:8c:29:02:07:59:54:95:
                    a0:0b:2a:24:f0:16:a3:63:73:32:5d:9b:d8:90:9b:
                    87:8f:d8:5a:c2:83:15:fd:a7:29:4a:71:98:06:d1:
                    d0:84:17:36:86:a9:6d:d4:88:82:76:6c:ca:5d:88:
                    4d:97:69:65:b3:48:27:0f:a5:73:dd:7a:79:e8:bf:
                    9d:30:07:aa:7f:b0:80:b3:ad:1c:d1:61:30:ce:12:
                    19:7d:f4:a8:8f:42:4e:03:d8:9b:94:db:43:9d:83:
                    c8:49:3b:d1:b5:87:de:b3:ca:f8:95:3e:8e:0a:e6:
                    5b:29:e4:e9:04:2f:d9:af:84:d8:a5:a4:aa:f0:9a:
                    69:d6:2b:96:a5:32:8e:06:0b:7d:6a:32:dd:e1:7c:
                    e8:d6:ef:59:98:19:fb:ab:b7:25:52:0d:d9:e2:87:
                    32:a2:46:11:55:f6:36:2e:9e:59:ef:a4:12:74:2c:
                    b5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E7:17:4B:18:6C:9F:06:2F:5E:AA:9D:B8:FD:E8:67:E2:79:BD:A4
            X509v3 Authority Key Identifier:
                keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e2:c0:3d:78:4a:80:d6:d3:ef:37:ba:88:2b:dd:82:e0:2d:
         d0:1b:a7:01:06:0c:67:f3:1a:52:6a:0d:3c:90:bd:cb:70:8c:
         af:84:d7:a2:e1:fc:9e:83:e5:01:65:16:c0:d4:e3:93:62:da:
         4c:5a:05:88:5a:39:78:39:67:3f:17:b3:ac:71:05:31:08:2f:
         4d:74:b9:76:dc:15:0a:d9:75:9f:94:23:b5:37:ed:6b:64:36:
         35:7a:c9:10:0e:a3:8c:f7:fa:9b:94:b3:e1:d8:66:48:57:f2:
         2a:5c:4c:a4:16:90:ff:57:84:58:f8:80:2e:e7:28:c8:06:71:
         89:37:5d:cf:3e:46:e1:ee:cb:a1:e9:06:7a:e4:9c:8c:bd:03:
         19:f5:0c:00:06:eb:02:5f:96:b1:51:05:a8:35:fa:0b:44:18:
         42:64:1e:36:d2:49:6b:07:bb:d8:0d:b1:29:e2:95:52:90:9e:
         ff:81:b7:7b:8d:f6:f4:d5:4b:8f:78:16:6e:0f:90:bd:6e:9e:
         9c:53:3b:b3:aa:79:8d:d0:0c:92:66:4b:19:6c:ac:e2:09:f5:
         60:a9:21:54:4f:68:37:24:36:61:21:8a:27:c9:cf:4e:84:63:
         33:be:07:39:4e:8d:98:ce:46:54:ac:26:4b:98:b7:3c:70:e2:
         76:ee:9d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:11:24 2026 by rpki-client