Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
File:                     13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft (raw, json)
Hash identifier:          y3+Vv2Vdfwrb1aOKiAsVsDwchRU+P1+X4zN0kdXOM0Y=
Subject key identifier:   82:3C:28:9A:42:26:B4:70:7D:8A:27:EA:93:19:E1:7F:58:C0:85:57
Authority key identifier: 13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42
Certificate issuer:       /CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
Certificate serial:       1879B2F15EBB61984328F6D37EF90B6FE5EB9096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
Manifest number:          D1
Signing time:             Sat 13 Jun 2026 05:45:36 +0000
Manifest this update:     Sat 13 Jun 2026 05:40:36 +0000
Manifest next update:     Sun 14 Jun 2026 08:46:36 +0000
Files and hashes:         1: AS202335.asa (hash: hz2foXaTrW1lc/WAJQnjow0PHJBaxS9o0vdbGofjprM=)
                          2: 13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl (hash: oARAyYSiRPJcYtGtYIwEOad1KhwwPhqVf/X/bO/QaQQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:79:b2:f1:5e:bb:61:98:43:28:f6:d3:7e:f9:0b:6f:e5:eb:90:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
        Validity
            Not Before: Jun 13 05:40:36 2026 GMT
            Not After : Jun 14 08:46:36 2026 GMT
        Subject: CN=823C289A4226B4707D8A27EA9319E17F58C08557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f6:2d:55:c2:9b:cd:61:63:e9:3a:c0:27:cd:
                    c1:13:59:00:72:3d:ea:85:9f:60:b0:b1:e2:ce:a9:
                    aa:f7:48:79:1e:a1:81:d1:bc:72:29:38:6a:dd:6e:
                    83:b5:56:f9:c5:16:d7:6e:80:0d:23:84:f9:4f:7f:
                    ff:00:a7:08:e6:57:f4:a9:4a:45:6d:e1:51:b9:78:
                    3d:7d:c6:14:52:a8:63:cb:00:58:8d:cc:11:8e:47:
                    a2:39:26:6a:4b:55:52:43:73:38:73:13:71:17:59:
                    09:93:9f:46:ff:4f:9f:9a:ea:8f:b0:c7:e2:4b:16:
                    af:7c:bc:93:16:57:22:af:dc:70:12:6d:39:7b:31:
                    32:5f:8f:3a:2f:c0:64:52:cc:21:16:eb:06:f0:a9:
                    14:c8:96:07:82:3c:d2:d6:af:0c:fe:f4:5e:d4:44:
                    88:b4:64:84:c1:13:d2:2e:e7:39:1d:8a:78:f0:a2:
                    c1:94:e1:70:ce:9b:4a:93:05:69:e2:0b:77:3d:90:
                    c5:4e:df:28:1d:ad:08:cb:73:b6:3d:2d:ce:a7:c5:
                    54:1d:fe:7c:85:9f:f9:f9:4f:07:74:fb:65:13:04:
                    91:b1:52:b7:9a:c1:94:f1:66:b5:b4:2c:1b:dc:26:
                    2c:1a:6e:0c:3f:d2:e6:8a:57:fa:26:73:e9:f6:d6:
                    b4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3C:28:9A:42:26:B4:70:7D:8A:27:EA:93:19:E1:7F:58:C0:85:57
            X509v3 Authority Key Identifier:
                keyid:13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c2:d6:43:3a:77:3f:94:fa:ab:dc:de:b6:a6:06:b6:c8:ac:
         2f:24:d3:71:29:1f:d1:47:6e:78:d8:f3:78:5c:21:45:2c:fb:
         33:15:f2:1c:6f:ff:fe:2a:46:f9:92:8f:ab:60:f1:2d:02:46:
         df:c3:37:34:dc:b9:c2:2e:39:f1:08:2f:ab:a7:1e:03:7c:bf:
         ee:93:9b:88:3b:28:97:5f:e6:77:94:fb:ef:03:c5:28:e9:69:
         b7:49:8f:34:19:28:c4:6c:24:3e:37:e4:99:1a:e7:c6:59:06:
         60:5f:69:03:e5:5b:91:4b:ec:63:c5:d8:1e:8c:34:32:48:f4:
         87:37:c9:23:71:c0:86:3a:d9:b2:48:97:d8:fd:9f:fb:ee:08:
         2e:31:45:bd:7d:37:b1:98:dd:17:19:81:b4:4f:46:3a:6c:27:
         d6:e9:d4:70:f9:ad:24:d7:03:f4:7c:d7:ad:8b:88:e3:62:82:
         c3:88:3c:86:2c:51:9e:9f:8c:4a:3f:1d:f6:91:a1:f2:cb:12:
         31:5a:26:45:90:02:64:9f:86:f6:8b:b0:4a:33:99:e6:68:35:
         e7:9e:58:7f:8f:fa:a8:00:9c:fa:b3:ad:29:e1:26:25:d3:3e:
         83:ce:45:b1:6f:d6:3e:59:ce:05:91:9d:35:26:7a:c6:79:d8:
         2f:cb:11:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:31:52 2026 by rpki-client