Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
File:                     13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft (raw, json)
Hash identifier:          wy1wnsEmE9TP+CGkcK1ozz27vyFjksCSGNvRIK66vCE=
Subject key identifier:   1A:1E:DE:C2:69:BA:25:EB:98:44:F4:33:F5:3A:0A:AF:2A:2B:F3:B8
Authority key identifier: 13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42
Certificate issuer:       /CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
Certificate serial:       7CC0D48FC805F77EAB4761772AE2CE8E54DE863C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
Manifest number:          015B
Signing time:             Mon 21 Sep 2026 10:30:30 +0000
Manifest this update:     Mon 21 Sep 2026 10:25:30 +0000
Manifest next update:     Tue 22 Sep 2026 13:56:30 +0000
Files and hashes:         1: AS202335.asa (hash: Tk7EdIYruwFxIplr7D0ggKX0PDtz9Hbgt1QeGKtP1ak=)
                          2: 13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl (hash: 3BC//AH2zJGRWVVvF6Roo+L3FA5juiRN5Vm20nsW6D4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c0:d4:8f:c8:05:f7:7e:ab:47:61:77:2a:e2:ce:8e:54:de:86:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
        Validity
            Not Before: Sep 21 10:25:30 2026 GMT
            Not After : Sep 22 13:56:30 2026 GMT
        Subject: CN=1A1EDEC269BA25EB9844F433F53A0AAF2A2BF3B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:da:30:98:c0:35:a6:4e:4d:3b:c2:d2:13:
                    8f:93:8a:f9:32:14:d3:c5:64:ca:5f:cb:03:d1:79:
                    b3:52:d0:43:ef:32:02:ca:ae:b7:88:19:48:10:9a:
                    a8:e2:3f:ae:6f:74:35:30:9f:d3:4a:57:16:1d:52:
                    26:7c:56:a0:69:54:99:de:65:bf:d4:4c:11:03:20:
                    37:e7:3a:0d:54:60:50:5b:02:85:ca:96:3b:43:3e:
                    ed:e7:1b:a4:f2:59:89:58:b0:e9:89:ca:f0:d5:8a:
                    64:d0:a7:ec:f3:b0:b3:1e:62:29:04:91:e1:a9:60:
                    8e:31:fc:60:e6:69:f9:28:b4:75:e4:9c:35:4b:76:
                    74:f3:36:2e:ba:a2:8a:30:e8:3f:7f:f9:3b:8c:cc:
                    21:e3:c1:41:45:36:47:63:62:a1:f8:c5:15:da:af:
                    d9:ce:fd:0a:6e:78:68:b5:e0:ea:71:0b:97:f2:50:
                    74:85:9a:4a:fc:ee:4c:77:87:eb:89:75:1e:72:38:
                    22:ed:9c:61:3e:ba:38:8c:bb:11:90:5d:26:ce:fa:
                    68:e1:95:98:d9:d9:53:e8:3f:0d:54:5d:de:aa:40:
                    29:91:e0:e4:9d:45:d3:f0:ac:c7:95:f8:d0:21:20:
                    1f:7b:67:2d:33:42:a5:d3:6c:e6:66:fb:c8:36:a8:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1E:DE:C2:69:BA:25:EB:98:44:F4:33:F5:3A:0A:AF:2A:2B:F3:B8
            X509v3 Authority Key Identifier:
                keyid:13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0d:ba:9b:2e:14:7f:7d:d2:4e:0c:1a:2a:13:f9:61:84:56:
         fa:de:c8:9b:d8:bc:e8:4b:c8:49:51:21:d6:e2:b8:45:4d:b0:
         94:28:b0:76:d8:ae:e6:1a:ad:14:48:b0:7b:f9:fb:73:ff:9f:
         ba:cd:c9:c7:31:9f:fd:62:3f:23:ef:4b:2a:96:0b:03:ec:47:
         61:48:4e:e9:c1:28:4e:86:70:0a:e4:70:97:13:6a:44:84:95:
         4a:4e:08:f1:da:86:11:83:12:1e:63:49:49:de:9d:5d:91:ff:
         f4:f8:f4:fe:3e:36:73:c3:ef:be:e9:cc:cb:f8:17:9e:c6:ef:
         b1:69:33:d4:82:b9:81:51:a0:21:f6:fe:e0:9b:ce:8e:37:6e:
         a4:42:ee:3a:3e:77:89:be:af:c7:79:6c:8b:15:a7:76:81:5f:
         0a:08:3f:9b:c8:92:98:8c:12:9d:0f:09:9e:14:9a:9b:7b:7c:
         6c:dc:07:9e:e2:5f:04:d2:7e:85:0c:d1:b3:90:6c:98:ba:85:
         52:83:1b:35:b3:f8:63:33:e1:3a:a1:86:ec:b5:5e:3b:55:15:
         79:b4:ed:c0:03:91:d1:65:1a:be:2a:15:fe:98:92:6b:56:8d:
         b6:8c:d5:ec:b1:06:30:8b:68:ca:5c:17:2f:d8:c3:a4:be:5f:
         f5:6d:45:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:16:32 2026 by rpki-client