Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
File:                     0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft (raw, json)
Hash identifier:          dZuehV9cz1DoqTkJe3WNVtk2DzRYY7yEB47crP4KXrE=
Subject key identifier:   FC:6C:4B:A9:AC:BC:F3:BC:66:E3:53:2F:8F:F2:EC:C9:A3:4C:C8:19
Authority key identifier: 05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07
Certificate issuer:       /CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07
Certificate serial:       187E98B11827AC137B0C609ACD4F7923A68BFD8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
Manifest number:          A1
Signing time:             Thu 16 Apr 2026 13:19:51 +0000
Manifest this update:     Thu 16 Apr 2026 13:14:51 +0000
Manifest next update:     Fri 17 Apr 2026 16:21:51 +0000
Files and hashes:         1: 0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl (hash: XDYREre36ySOdAx+pZSDAd3mLUFBPBRNd8AlY3AF7h4=)
                          2: AS210464.asa (hash: kWVtevYy5Lc5dS0nHe48lq8TKpdn/QUw0b994gEJFZk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 16:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7e:98:b1:18:27:ac:13:7b:0c:60:9a:cd:4f:79:23:a6:8b:fd:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07
        Validity
            Not Before: Apr 16 13:14:51 2026 GMT
            Not After : Apr 17 16:21:51 2026 GMT
        Subject: CN=FC6C4BA9ACBCF3BC66E3532F8FF2ECC9A34CC819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:48:4c:3e:c4:e7:a6:3f:4e:41:6e:77:93:
                    83:39:91:e4:87:89:ab:0a:f8:6c:3a:66:1b:47:88:
                    ef:64:c2:0f:ac:49:7d:61:d2:80:dd:a8:87:f5:69:
                    f4:db:12:0b:8b:06:b2:08:24:19:be:e9:06:84:fa:
                    12:e9:aa:68:8a:7c:96:b2:d6:6f:75:5e:2c:27:d2:
                    31:6f:e0:90:50:6e:95:0b:ce:cf:63:d4:80:b5:42:
                    85:88:d2:8c:9b:ab:92:d6:59:69:ae:22:04:e8:a8:
                    e1:6d:07:67:e9:06:3f:da:52:d2:43:f7:a4:3c:ec:
                    42:12:ee:8f:26:03:14:d0:a6:86:8e:0a:b7:f7:08:
                    06:a0:5e:10:51:4b:59:6a:13:56:27:3a:da:77:f7:
                    12:27:b3:ad:03:f0:71:ad:2d:24:f0:61:0b:30:60:
                    7a:c4:b4:26:3f:98:51:b0:8c:fa:00:37:28:7f:64:
                    23:bb:fe:54:b9:b1:6a:df:6b:2d:13:a9:89:c2:53:
                    b0:87:fa:62:5b:c6:4b:da:6e:51:e6:11:31:e4:46:
                    dc:5f:6f:2a:75:52:0f:82:aa:bf:ba:a8:7b:0a:a8:
                    85:37:1f:55:00:c9:e2:27:8e:4d:a4:c9:0d:c1:f5:
                    43:3f:e1:69:80:95:6c:84:15:b4:68:0a:f4:9c:93:
                    31:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6C:4B:A9:AC:BC:F3:BC:66:E3:53:2F:8F:F2:EC:C9:A3:4C:C8:19
            X509v3 Authority Key Identifier:
                keyid:05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:3a:0a:18:9d:8a:b6:e8:87:d2:bb:ea:b0:d9:c0:e4:f4:a8:
         a7:c2:da:e4:fc:f0:d6:d1:da:78:65:c9:f3:75:6a:42:3b:39:
         b7:5e:fb:f7:1c:a4:98:1f:e9:6b:d9:4d:25:aa:6e:3f:ef:0d:
         dd:bf:39:1b:0f:39:8a:02:1d:91:a0:9e:1b:dd:3d:ac:f9:ad:
         04:2e:97:99:99:1c:30:3d:ac:df:82:a7:87:a4:41:f4:77:6a:
         ae:cd:df:f6:b5:f5:6a:66:b6:e0:0b:ff:b3:5a:50:d2:1c:5c:
         17:73:5b:4c:85:c4:fa:37:b0:0f:92:8c:e9:13:a7:fd:b8:b5:
         25:e6:0d:56:dd:35:02:02:83:b3:27:29:8a:11:e9:00:7d:c9:
         ca:e2:0d:4a:8d:42:7f:b7:ff:5d:13:41:ee:00:e8:2a:90:91:
         f9:25:05:f2:dc:ed:88:45:7d:14:40:13:0f:35:72:7e:ab:82:
         c6:73:73:2d:8d:a7:87:c7:76:25:6f:df:73:0a:87:9d:7b:2d:
         2d:ec:9d:d6:12:59:4a:f4:98:66:cf:b9:1e:94:07:54:88:82:
         e7:ea:28:98:17:be:1d:9d:be:fd:1f:96:1c:fd:08:f2:e3:37:
         c4:02:e2:26:3a:5a:f4:de:48:33:b7:ae:3c:81:0d:77:1a:20:
         8c:69:69:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:18:59 2026 by rpki-client