Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File:                     608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier:          qdfzmUkvqOX/K7wbNpowe4B5c7ahQBEXa18bTqPADWc=
Subject key identifier:   BB:C2:D4:8D:1D:81:E5:5F:C5:29:4B:03:96:01:C5:70:F0:FB:F0:7E
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer:       /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial:       5A69C3319266E9221823CFB03276A8FE62E2B92E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number:          0294
Signing time:             Sat 10 Oct 2026 21:39:11 +0000
Manifest this update:     Sat 10 Oct 2026 21:34:11 +0000
Manifest next update:     Sun 11 Oct 2026 23:01:11 +0000
Files and hashes:         1: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: SoUE3EFO6dc1b3a6ZUgYg3XtU1Td1QrdjjR61yO5mGQ=)
                          2: AS215375.asa (hash: wqXa/0Ruf8QQrjhA88FmIcMGG2c3Hha2SQfv/Vcy8ws=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 23:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:69:c3:31:92:66:e9:22:18:23:cf:b0:32:76:a8:fe:62:e2:b9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
        Validity
            Not Before: Oct 10 21:34:11 2026 GMT
            Not After : Oct 11 23:01:11 2026 GMT
        Subject: CN=BBC2D48D1D81E55FC5294B039601C570F0FBF07E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:93:09:c1:c0:9b:45:36:78:ca:f7:fa:f8:34:
                    fc:bf:f8:5a:52:27:2a:87:a0:e2:de:a9:b2:a4:fc:
                    66:43:f6:7d:24:34:fc:7f:18:17:3f:e1:f2:f2:c5:
                    cc:fb:dd:ee:d7:50:ec:bc:53:89:97:29:17:fe:89:
                    86:e4:33:eb:57:5e:12:10:b1:f2:aa:ac:cb:03:36:
                    86:a8:d0:2a:9e:29:cc:1d:37:91:ab:81:79:7e:96:
                    f1:4a:a4:57:84:70:c7:73:f6:07:e1:02:10:fa:e0:
                    34:e3:ee:dc:f0:1b:5d:fc:71:5c:a2:52:be:91:e7:
                    fc:ff:8c:82:14:54:1b:38:86:60:fc:6b:34:34:46:
                    77:50:6d:52:57:67:3b:89:98:7d:31:17:69:b3:3b:
                    a4:e1:6c:cb:3a:23:84:8d:4e:32:7a:08:07:d2:05:
                    0b:cc:32:9f:b4:8b:f8:26:4f:da:78:eb:a7:5f:20:
                    de:67:83:7b:94:df:80:a0:2a:d0:0b:a9:bc:06:52:
                    0e:b4:df:86:d7:d0:c2:1f:b4:13:b7:69:1b:e5:de:
                    5e:5d:cc:79:4f:5f:b6:be:d0:27:61:55:c0:93:ac:
                    90:19:8a:46:dd:c0:8a:c2:eb:1d:ab:50:11:2a:a0:
                    66:27:38:5a:e2:ea:43:d2:33:9c:ec:0f:f6:d2:09:
                    e8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C2:D4:8D:1D:81:E5:5F:C5:29:4B:03:96:01:C5:70:F0:FB:F0:7E
            X509v3 Authority Key Identifier:
                keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:54:19:14:bd:a1:66:7b:1d:52:cf:81:76:87:bf:3c:da:
         76:1d:08:b9:db:fe:94:67:f9:ed:b6:15:1e:9a:8b:d2:33:d2:
         e0:6e:17:b3:f1:9f:b3:6f:eb:41:56:70:09:88:ac:cf:50:11:
         39:14:cd:c2:de:53:d0:6a:d9:d5:67:d2:2b:d5:3b:f7:92:45:
         ca:0c:b5:a1:f3:08:04:db:d6:58:ae:0e:b2:10:22:ce:41:e4:
         7f:6e:14:82:ec:d6:59:47:6f:08:31:b1:fa:1a:fa:0b:b0:47:
         ac:b2:3c:e6:97:6b:14:2e:a1:93:84:1d:a4:f0:12:7f:c4:17:
         57:90:bb:92:e4:a4:f0:fd:3d:e3:81:19:75:8f:53:93:86:16:
         50:13:10:5c:da:1d:8e:ed:f6:e1:81:45:c7:b3:2a:2a:ac:7d:
         a9:4d:1c:c9:02:62:38:40:ac:4e:47:d6:8b:3c:40:08:67:6e:
         b1:20:83:00:6e:98:00:db:46:84:cf:1d:8b:86:df:71:a9:8e:
         5d:61:c9:d5:9b:94:2c:2f:65:ad:77:f5:d0:0f:49:a9:51:5b:
         27:67:ab:0c:23:dc:e2:1e:f8:de:a8:5d:72:d4:7d:2e:85:16:
         0e:da:05:17:eb:ad:2f:2c:38:31:ff:a5:5c:1e:e1:20:45:0f:
         e8:31:e2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:06:39 2026 by rpki-client