Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File:                     B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier:          O9ciVECOMtAJR5o6dAoJLLU5aLIRiZ+zyrp2SJSfHcs=
Subject key identifier:   01:83:63:1A:04:BF:8F:7A:83:84:D2:30:06:5D:8F:A6:F1:EC:E2:B4
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       09BCDECD8F1A13B894C7806C6D40863645AEA621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number:          0509
Signing time:             Fri 17 Apr 2026 06:31:11 +0000
Manifest this update:     Fri 17 Apr 2026 06:26:11 +0000
Manifest next update:     Sat 18 Apr 2026 08:28:11 +0000
Files and hashes:         1: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: sqsk3HfNzVxBoBGG208I0raPg8gQ3JNT1biBEdIuWYE=)
                          2: AS215147.asa (hash: V4drWJQ/7sFUfjPNiZYcVavwB0fiOFeqFeNdQOc3roQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bc:de:cd:8f:1a:13:b8:94:c7:80:6c:6d:40:86:36:45:ae:a6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Apr 17 06:26:11 2026 GMT
            Not After : Apr 18 08:28:11 2026 GMT
        Subject: CN=0183631A04BF8F7A8384D230065D8FA6F1ECE2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:4c:85:7d:49:37:83:e8:ce:90:15:d9:ef:
                    a9:f4:3d:6b:f2:f8:62:e8:e2:16:4a:6d:f1:2b:d0:
                    82:ce:6b:ad:09:f5:ce:f4:55:0f:b3:67:21:1d:27:
                    b6:62:8c:c3:60:0e:8c:75:e2:2c:67:96:4c:d5:b5:
                    e7:f6:18:c2:01:a0:4a:22:b2:7e:1a:dc:ab:93:bc:
                    55:64:9e:19:c8:96:1a:53:e2:c1:34:da:55:88:ef:
                    ca:95:da:a8:d5:2f:45:1b:2d:e8:ad:20:15:18:9f:
                    51:b2:82:08:1a:48:85:c4:bc:11:a4:a8:a4:25:25:
                    49:ee:09:6c:fb:6d:f5:f9:6c:09:96:ef:dc:b1:46:
                    0a:ee:06:5e:42:10:5e:75:d1:23:b5:91:fa:d3:b7:
                    4d:2a:bd:63:9e:40:86:7b:ae:2a:0e:29:e2:3a:57:
                    5c:7f:60:8a:d6:f4:8a:08:f0:df:b7:6b:f2:62:06:
                    c7:c6:21:c5:0f:bf:8b:ad:0f:bd:03:e4:c4:87:d2:
                    09:45:10:af:ca:48:94:fd:f1:39:cd:a7:87:c6:e2:
                    75:cd:d2:73:ce:b3:3f:bd:00:2f:c8:67:d5:30:38:
                    73:72:4f:54:b7:02:fa:85:25:81:c6:cc:b8:78:cf:
                    f6:5e:03:d1:c5:5d:a3:6f:cb:15:7c:b5:1f:6e:ab:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:83:63:1A:04:BF:8F:7A:83:84:D2:30:06:5D:8F:A6:F1:EC:E2:B4
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6a:9f:09:30:53:17:f4:da:9d:12:e0:83:4b:6a:e6:8e:ea:
         14:73:7b:33:33:a4:09:4b:69:99:b1:ae:e2:b4:de:55:1f:16:
         63:5c:ad:4e:d3:3b:74:14:d2:a0:b2:bb:a8:62:ec:7f:2c:a1:
         2b:63:4b:69:1d:5e:bb:14:a6:88:0e:da:87:44:d5:6c:a1:a2:
         4a:86:f0:ed:fb:76:d2:ba:a2:e8:ea:b9:27:f4:e1:ce:de:84:
         36:21:cf:99:8a:1f:0f:cb:22:55:e6:d4:48:1b:72:91:48:15:
         38:92:e2:56:19:23:bb:9f:f8:8d:5b:97:86:9c:89:18:61:83:
         29:4f:c6:0c:39:ce:e4:9f:bc:53:33:1b:90:00:e3:f1:86:5c:
         ce:c2:10:29:b9:9b:6b:0d:11:d4:98:63:1d:e9:38:b8:a6:3b:
         ca:f2:b8:2b:d2:1b:da:7b:64:2a:d7:e4:36:b3:b4:cd:37:e6:
         cd:62:f1:f2:46:02:bc:b2:0d:c8:f1:dd:39:50:15:e5:14:07:
         e7:1a:e0:6a:65:de:2b:12:59:82:9f:2f:2c:72:d0:a5:27:43:
         6f:39:c2:cf:47:73:27:86:ac:8c:86:ee:e8:62:9b:db:5b:c9:
         55:0f:49:7f:af:27:02:39:7a:37:77:4e:88:0c:8e:00:41:bb:
         c0:b4:9e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:39 2026 by rpki-client