Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File:                     B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier:          BLN37q43ebxIl0XlFIvVOhf/AjxsrG9K9v0pECagAv0=
Subject key identifier:   D6:43:FC:0D:84:3C:E2:E4:AD:9A:94:10:E5:5B:CB:00:32:CF:B8:36
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       0841D71F181EC38DBF176C99F79EA02CC7E0C3D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number:          0578
Signing time:             Sat 13 Jun 2026 04:03:40 +0000
Manifest this update:     Sat 13 Jun 2026 03:58:40 +0000
Manifest next update:     Sun 14 Jun 2026 04:08:40 +0000
Files and hashes:         1: AS215147.asa (hash: arE7PxVkqmoj/EHtL7YslYLec2sH97+ZguXgAkgz3cQ=)
                          2: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: cNp/X2eKxBD7rJStoBH7BxlzVhBXW0SNWN80hy5Bj7s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:41:d7:1f:18:1e:c3:8d:bf:17:6c:99:f7:9e:a0:2c:c7:e0:c3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Jun 13 03:58:40 2026 GMT
            Not After : Jun 14 04:08:40 2026 GMT
        Subject: CN=D643FC0D843CE2E4AD9A9410E55BCB0032CFB836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:63:49:89:a5:51:a8:12:34:7c:a9:8b:14:ba:
                    5c:46:12:eb:fb:ce:a9:e4:a1:20:9c:dc:7e:dc:20:
                    88:7c:cf:8c:78:88:c1:92:9f:8a:5c:72:c5:88:5b:
                    5f:ea:49:a8:e6:d3:7b:91:8c:db:79:60:77:7e:4c:
                    f2:16:b4:76:e4:66:6c:60:4b:11:61:9b:0b:f1:97:
                    9e:1a:fe:71:83:61:4e:6a:fb:88:e3:75:8c:9f:08:
                    38:e5:e6:26:c7:27:7c:19:38:22:7d:77:ff:58:05:
                    09:1c:85:96:cd:31:59:b5:2f:81:28:0b:c0:8e:f8:
                    b0:aa:3d:bd:0a:11:ce:bd:be:ed:6a:55:ed:f7:a3:
                    8f:fa:df:5b:80:d2:f3:87:2e:62:98:81:3f:03:81:
                    b4:b1:5a:1e:35:09:1a:9e:93:a5:4b:e2:8e:cc:bd:
                    67:73:bf:f1:c9:07:af:71:72:7d:6d:16:17:d7:f9:
                    44:d5:e4:93:a0:52:7e:86:98:f2:9b:4c:a4:9b:a1:
                    a7:2a:c9:a9:5b:ff:59:0c:9b:f6:ee:30:29:0b:30:
                    58:80:44:91:b2:ce:b6:62:0b:c7:15:ab:a2:c0:9b:
                    91:45:fc:1b:57:6c:7e:39:ed:91:fd:0c:7c:6f:ea:
                    e2:c0:67:61:16:e4:af:5f:1f:f8:b9:89:a4:a1:69:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:43:FC:0D:84:3C:E2:E4:AD:9A:94:10:E5:5B:CB:00:32:CF:B8:36
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d2:e4:fc:db:58:d7:c9:4e:35:fd:68:40:10:e2:aa:cd:84:
         fd:11:0c:31:a7:5a:53:90:7f:ed:6c:be:9f:36:cd:5b:3a:0d:
         6a:5d:9e:8e:c4:53:08:4a:58:9c:b3:d5:f5:02:c6:9c:87:27:
         29:a5:0d:ba:60:17:86:53:05:bc:88:50:74:86:08:c3:12:18:
         1c:a3:3e:28:fd:ff:4c:64:3a:ac:65:05:3f:9b:b0:48:68:3d:
         ac:99:c8:fb:10:77:71:81:63:30:bc:c6:90:af:6f:0c:ec:99:
         8c:cb:40:45:78:e4:73:15:b5:a5:23:42:cb:2a:19:49:a4:1f:
         a9:ae:ff:73:4e:81:4a:4c:b7:03:3b:9b:e9:e0:8a:e8:4e:18:
         5a:8a:96:73:a1:a7:f2:b3:ea:6f:0a:54:ea:24:ca:88:e8:84:
         00:9b:c0:39:48:90:ac:5f:4e:f4:b4:52:54:ab:f2:96:18:02:
         e0:23:d6:17:31:8f:f8:4b:b1:f5:0f:14:89:95:80:54:6c:7c:
         70:41:d9:2b:66:83:94:b8:a6:cd:df:dd:e8:bd:ec:a1:60:39:
         ed:17:13:66:d8:a1:54:06:9b:a3:d5:e2:2b:f1:54:69:ff:b7:
         7f:b1:97:6e:f2:9e:49:72:4d:75:7b:8e:f4:e7:26:33:3e:05:
         db:a7:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:25:12 2026 by rpki-client