Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
File:                     13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft (raw, json)
Hash identifier:          zrtAHQpT3NYT2/ShZ07nN4wlTjSC/53CYg13SSlgucs=
Subject key identifier:   26:C6:47:29:1E:4E:1C:A5:50:E9:5C:84:02:CC:BD:64:E0:7B:96:FF
Authority key identifier: 13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42
Certificate issuer:       /CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
Certificate serial:       70A0C57A840A3B482C1F65552C81E93D1D91FB7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
Manifest number:          42
Signing time:             Sat 28 Feb 2026 19:00:28 +0000
Manifest this update:     Sat 28 Feb 2026 18:55:28 +0000
Manifest next update:     Sun 01 Mar 2026 20:56:28 +0000
Files and hashes:         1: 13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl (hash: 0lEPfQ2w4y+mn7Jo8Sg9xAwIRq/FJre3yiKb6OtLUH0=)
                          2: AS202335.asa (hash: 9/OOvItdTQu4kOT6MnZzlSM8QNOKgaUoVDKLqjwz+xA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Mar 2026 20:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a0:c5:7a:84:0a:3b:48:2c:1f:65:55:2c:81:e9:3d:1d:91:fb:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
        Validity
            Not Before: Feb 28 18:55:28 2026 GMT
            Not After : Mar  1 20:56:28 2026 GMT
        Subject: CN=26C647291E4E1CA550E95C8402CCBD64E07B96FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ab:b0:ca:38:d1:38:00:65:bf:30:a0:81:a5:
                    51:34:5c:aa:a1:64:a9:5b:f6:8d:eb:39:d4:da:84:
                    a9:d7:c1:18:70:89:95:6e:e2:0d:c4:b8:5d:8c:cf:
                    53:1b:1c:12:87:08:15:6a:36:5b:ed:1d:8d:09:e6:
                    08:1f:f9:2c:b8:ab:2e:e5:1d:81:3e:39:77:ca:12:
                    54:08:54:c2:61:ca:55:83:92:69:24:cb:b5:a8:78:
                    4f:ed:2f:1e:6e:a6:ee:a6:4a:d5:73:e5:61:f8:27:
                    43:29:86:73:d6:2c:bb:4d:b6:11:fd:cc:19:fa:fc:
                    55:44:47:ee:fa:f3:62:cc:b6:27:12:97:62:8c:d4:
                    4b:31:f8:e6:1a:4d:64:88:f9:b4:4d:8e:ce:e7:5e:
                    d9:3a:b3:39:1b:c2:6b:13:b8:b9:a4:aa:d2:6e:a1:
                    ed:aa:e5:1d:09:ff:5c:df:08:13:dd:bd:71:1a:aa:
                    dd:ef:b8:7c:72:79:28:86:4f:bc:5a:df:3e:e2:85:
                    bf:9d:c6:f1:02:58:1a:5e:3f:25:6b:4a:28:5f:12:
                    06:54:42:e9:ab:4e:36:a4:ba:d7:e5:14:73:77:84:
                    bf:d7:a0:17:d4:fa:84:36:c5:ea:e1:56:ee:e6:8f:
                    8a:38:1a:0f:5d:45:2e:ac:98:fe:b1:a3:0a:30:95:
                    20:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C6:47:29:1E:4E:1C:A5:50:E9:5C:84:02:CC:BD:64:E0:7B:96:FF
            X509v3 Authority Key Identifier:
                keyid:13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:83:67:dc:96:db:c3:b3:11:09:b6:7b:f1:9d:94:1f:d1:56:
         23:08:0f:25:5c:a2:2c:9f:4c:fe:87:f2:9a:0f:8a:2d:5f:9c:
         d1:64:f0:6b:4c:3e:dc:f4:f9:13:b3:89:b3:45:70:cd:6d:22:
         34:37:6d:96:be:e3:a6:d5:92:de:d6:db:b2:9f:3c:70:35:92:
         5e:70:9a:a0:62:fb:21:4a:a0:04:40:b2:85:a2:2e:0a:a6:26:
         9f:f3:8a:70:40:32:4e:a7:50:43:95:65:9d:21:11:12:c8:d5:
         9b:03:33:fc:cd:c2:a6:a7:65:35:6c:26:e0:e7:31:1b:68:c8:
         64:5d:3b:b0:bb:5f:bb:7e:54:1b:8b:8d:70:7f:98:4d:3e:06:
         ac:53:5a:19:bf:c1:52:6f:6c:fe:e1:da:94:aa:1c:e0:eb:52:
         5d:62:68:c3:43:df:1f:77:54:f3:de:d4:4f:9f:1f:56:3a:2c:
         63:0f:18:cd:c3:96:13:ba:10:3b:96:5e:cc:4c:6c:70:05:31:
         ff:3e:b7:87:c0:30:bd:c7:2c:cb:f4:be:52:1a:dd:30:46:ac:
         c9:3d:ed:bf:aa:94:1c:e5:54:d0:04:f8:25:f0:eb:ff:11:84:
         81:2a:d4:aa:3f:8c:a0:8c:5c:6d:57:57:d5:3f:f1:5e:6b:63:
         5a:cd:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:26 2026 by rpki-client