Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
File:                     0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft (raw, json)
Hash identifier:          KxtRob+utrwmyZ5lanIEY4kBfvp0OD09zxE/QyNuGgA=
Subject key identifier:   09:F9:6A:79:0F:C3:F7:5F:CA:A2:CB:19:85:55:B0:4E:52:26:39:B5
Authority key identifier: 05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07
Certificate issuer:       /CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07
Certificate serial:       10345D659E49E166B6316ADA830DEB82D638F60D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
Manifest number:          0180
Signing time:             Mon 21 Sep 2026 23:43:48 +0000
Manifest this update:     Mon 21 Sep 2026 23:38:48 +0000
Manifest next update:     Wed 23 Sep 2026 01:22:48 +0000
Files and hashes:         1: 0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl (hash: 1N6VoqbmZQglUN6oJLAMkbzr4nwwo/Udx21W02UOABo=)
                          2: AS210464.asa (hash: kiZfs2DSOzpX/hEwQfyXYmM6Lxpx1hqoRdZ896mQbuo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:34:5d:65:9e:49:e1:66:b6:31:6a:da:83:0d:eb:82:d6:38:f6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07
        Validity
            Not Before: Sep 21 23:38:48 2026 GMT
            Not After : Sep 23 01:22:48 2026 GMT
        Subject: CN=09F96A790FC3F75FCAA2CB198555B04E522639B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:17:c0:81:eb:9b:7e:4f:ce:c9:9a:f2:9b:
                    4d:9f:ee:d9:7e:3a:27:40:ae:62:5b:e0:33:48:68:
                    35:70:42:7d:fe:16:99:bf:b5:54:c5:a2:1d:de:53:
                    fc:27:1a:43:78:da:99:a0:73:25:24:25:89:59:d6:
                    d2:03:a2:5b:ba:c2:a5:20:9a:f8:45:3a:25:c1:d2:
                    1f:89:9e:2c:32:3e:73:c5:6e:fb:35:35:64:fe:66:
                    5c:e1:a8:ae:a4:bc:44:1a:c9:65:c5:ce:eb:0d:83:
                    2b:85:11:a7:a9:5d:54:9a:f2:45:c6:06:50:65:ec:
                    aa:d3:c7:b5:76:8a:15:5b:23:cc:47:dc:d8:99:0a:
                    84:cc:af:bc:42:17:7f:68:07:a9:4f:7e:f3:4f:73:
                    3d:22:06:19:f1:c9:49:bb:66:81:06:cf:4b:be:81:
                    28:c1:3b:65:ae:6c:89:2d:ee:16:31:55:7e:6a:9e:
                    1a:1b:f7:fe:f1:e4:26:0d:21:db:4d:92:82:f1:51:
                    65:1f:07:15:94:31:aa:78:89:11:69:95:f4:20:2f:
                    96:4c:df:5b:35:b2:f8:6e:8a:24:3d:4c:f8:3a:d3:
                    ec:0a:bd:d0:b6:9f:96:a7:ab:af:59:18:96:a6:39:
                    a4:4b:50:e3:e6:9f:2f:8e:e3:a2:b7:d3:a5:67:2e:
                    b3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F9:6A:79:0F:C3:F7:5F:CA:A2:CB:19:85:55:B0:4E:52:26:39:B5
            X509v3 Authority Key Identifier:
                keyid:05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:21:14:99:ce:9e:3c:75:77:a6:d7:b5:6b:ba:c0:78:38:d4:
         d0:18:64:5d:41:a5:63:ac:46:c5:f0:51:88:6a:ea:75:8c:0e:
         b2:ac:91:d6:bd:a9:3a:a1:87:37:f0:e5:cc:a1:57:47:4f:fa:
         4c:11:93:a2:2c:4e:f8:a7:f0:19:36:06:06:e6:d1:cf:be:43:
         e9:ed:67:6f:2e:ef:dc:f6:3d:5e:ef:17:16:1f:eb:fa:60:ed:
         db:0a:21:f1:49:22:82:8c:69:b9:44:de:4c:dc:ee:19:38:a0:
         1e:3f:aa:3b:d5:39:40:c7:c5:7a:17:f2:09:b0:8f:fb:5e:60:
         6a:c0:de:61:71:1f:77:40:87:6d:11:ba:c5:a4:81:0f:94:6b:
         eb:65:39:5c:12:43:fa:cf:7e:f2:a6:b6:6f:57:7e:f8:e9:3d:
         8c:c7:4b:21:6e:67:3f:43:c3:e7:5a:aa:42:0b:1c:af:62:e6:
         7b:eb:77:23:e2:e2:23:3e:56:82:e5:0f:8a:a4:5e:8e:9f:c4:
         b7:d8:28:8c:15:64:3f:0d:f3:e5:8b:34:4f:72:2a:47:7f:c0:
         e7:3f:fc:27:7b:0c:d7:cd:a1:83:32:3c:d9:31:15:0f:f7:50:
         08:38:48:b1:d6:44:5c:ac:1d:d1:c4:a6:33:e3:02:e0:33:2a:
         3a:b2:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:46:30 2026 by rpki-client