Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File:                     B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier:          cBoRVT09EPZ+7cQUzPNrMHfWfwnRAm882ReyKQzVZhg=
Subject key identifier:   51:56:DD:F1:E6:F6:8F:E5:45:CD:F0:FF:30:9A:44:CA:16:92:40:38
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       1C5F05EF37F9A28AA53D76064E64B33D17396794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number:          0666
Signing time:             Sun 15 Nov 2026 14:42:02 +0000
Manifest this update:     Sun 15 Nov 2026 14:37:02 +0000
Manifest next update:     Mon 16 Nov 2026 16:23:02 +0000
Files and hashes:         1: AS215147.asa (hash: nfcUuwC/3qlcgX+cZTEul4NY/mXYH62iVKJI3G2XHV0=)
                          2: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: sC2OjRGQyl90AqdknsWQ2u7jst/Z/gryE0fMVY8KhNc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5f:05:ef:37:f9:a2:8a:a5:3d:76:06:4e:64:b3:3d:17:39:67:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Nov 15 14:37:02 2026 GMT
            Not After : Nov 16 16:23:02 2026 GMT
        Subject: CN=5156DDF1E6F68FE545CDF0FF309A44CA16924038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:7d:a7:84:39:f1:42:ff:f8:a5:ff:7e:5c:
                    a0:b2:92:2c:ac:97:52:ae:02:23:4b:79:2a:fc:44:
                    d4:bb:7f:28:73:92:12:04:f3:d7:0e:53:6c:4d:1d:
                    d0:65:18:28:02:a5:ca:98:8b:88:4e:95:3f:33:4e:
                    aa:71:39:8f:c0:7c:05:f3:c2:64:36:da:28:48:33:
                    04:91:b5:ad:9c:28:8e:9d:4a:e6:c5:f5:71:be:fe:
                    ad:46:a9:c4:67:59:e2:15:50:e5:ae:35:61:fd:88:
                    63:f7:04:94:e7:a7:e6:6e:78:b7:9f:92:f1:41:87:
                    46:fe:49:c9:90:fd:06:f3:af:c1:4e:66:70:1c:a3:
                    d0:a5:25:0e:a3:7e:46:55:4a:bf:21:c4:7f:fa:8a:
                    c9:08:25:1b:de:eb:6b:92:18:7b:df:1f:3d:7e:e9:
                    ec:c6:7d:4b:5e:c7:c7:49:a5:8a:ba:37:e3:23:12:
                    0c:0e:bd:ea:8e:a0:50:be:88:52:aa:9e:31:97:2f:
                    c8:02:52:27:ff:fd:e4:b5:ad:52:59:b1:07:b1:8a:
                    cb:ea:c1:63:1d:05:ed:d3:ae:eb:24:9a:06:6f:7b:
                    9a:86:80:69:ae:f2:d0:e8:27:7a:a3:48:87:3c:c6:
                    fc:0a:6f:d9:c1:23:4e:ba:1b:8b:2a:f3:25:44:5c:
                    de:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:56:DD:F1:E6:F6:8F:E5:45:CD:F0:FF:30:9A:44:CA:16:92:40:38
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8f:e8:bd:93:19:ab:d4:d3:5f:a2:4e:fb:f2:25:14:cd:d8:
         7e:d1:46:eb:02:35:79:e2:fe:8d:0a:50:3e:4f:a7:f8:cb:d9:
         73:aa:31:ab:cb:a3:2b:77:4d:82:17:b3:07:77:92:34:42:0b:
         78:a1:6f:ed:c0:b4:c3:94:fb:4b:13:3a:e1:4f:23:69:83:d5:
         22:0c:49:60:ae:52:a2:d5:f5:dc:af:c2:8d:8c:a6:b1:50:0f:
         9a:9b:0c:15:39:6c:2a:13:b4:61:12:3d:50:56:5d:1b:f7:60:
         e1:b3:0d:b4:91:28:e4:c6:f8:ce:31:62:c5:9c:46:17:45:9f:
         0d:aa:c6:2a:1e:e1:1f:4b:86:70:61:2f:b4:f7:c2:43:89:e4:
         c8:9d:b3:c1:83:b9:63:7a:33:44:7e:0a:88:72:f3:a4:a0:00:
         36:30:10:99:47:f6:65:00:20:c2:d5:b6:cd:e1:ee:09:e1:14:
         cd:57:b4:3f:7e:dd:40:0c:dc:b2:d1:23:78:35:fb:fd:12:ae:
         83:46:83:83:b5:ba:b9:ba:fa:0b:3f:d8:69:f4:95:0b:29:c4:
         f2:f3:5a:0f:d5:cb:f2:50:7b:75:3e:db:63:61:52:5e:7f:34:
         de:d0:4d:1f:b5:94:ed:40:98:d2:25:68:61:04:38:30:5e:5c:
         f5:f3:9c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:26:20 2026 by rpki-client