Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
File:                     E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft (raw, json)
Hash identifier:          X9O6ka1DvaqXV6C8SMrCGWwcJKKZcrY+ldlxJwbZtXM=
Subject key identifier:   DA:1E:54:0B:E7:62:DD:7C:D3:7E:3F:52:77:1A:16:0F:07:0B:80:90
Authority key identifier: E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95
Certificate issuer:       /CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
Certificate serial:       6803F1AFD8B44B707E07D5EBD9195C7AD21D53C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
Manifest number:          0133
Signing time:             Tue 28 Jul 2026 05:20:55 +0000
Manifest this update:     Tue 28 Jul 2026 05:15:55 +0000
Manifest next update:     Wed 29 Jul 2026 08:26:55 +0000
Files and hashes:         1: AS214976.asa (hash: v5lBSdK131Etk8q/qrO2YWGrpYrwgCaCsAichEGY55Y=)
                          2: E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl (hash: u6r/9wSiqIxFT7/3SSPKADi8mBzpu8porGaUuxht/n4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 08:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:03:f1:af:d8:b4:4b:70:7e:07:d5:eb:d9:19:5c:7a:d2:1d:53:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
        Validity
            Not Before: Jul 28 05:15:55 2026 GMT
            Not After : Jul 29 08:26:55 2026 GMT
        Subject: CN=DA1E540BE762DD7CD37E3F52771A160F070B8090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:84:e5:9b:7d:1b:67:23:99:06:0f:00:5a:
                    f6:a5:aa:a2:46:60:b1:eb:3e:4c:14:b6:d5:b4:40:
                    90:99:6f:f5:56:70:81:dc:33:57:3c:7f:c1:c2:88:
                    de:59:d8:bb:e9:38:8d:d4:e2:f8:41:e1:03:14:5a:
                    d5:59:ae:61:70:ae:76:62:54:de:66:67:64:24:89:
                    3c:05:79:91:54:c5:29:e1:8f:ca:55:5e:87:78:4b:
                    5e:fb:59:48:55:1a:43:19:e2:40:4a:8a:1c:41:c8:
                    c7:20:fb:9a:4c:41:f4:e6:45:78:cc:21:25:88:0d:
                    8e:bd:7b:79:5a:f4:51:c7:9d:63:86:b6:aa:41:52:
                    51:d9:68:d1:06:03:0e:7b:29:88:04:79:8b:5c:2b:
                    fa:b5:2a:fc:17:ad:dd:1e:ff:02:6b:48:48:cb:fa:
                    ff:e0:e7:7f:80:04:92:5d:97:c0:29:3f:2f:44:b9:
                    76:78:a0:f6:0c:e4:48:9b:14:d7:f4:9f:a9:07:84:
                    3e:a6:b2:aa:a1:4c:0c:6c:fb:3b:7c:10:88:fe:4c:
                    0e:fe:d1:6d:bd:6b:c2:e4:a8:62:76:09:ad:40:00:
                    d2:2d:86:24:f2:44:6b:4b:c2:e4:e3:93:4c:81:f3:
                    66:e2:a3:97:5e:10:4b:14:ae:5b:99:46:ae:ab:a4:
                    34:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1E:54:0B:E7:62:DD:7C:D3:7E:3F:52:77:1A:16:0F:07:0B:80:90
            X509v3 Authority Key Identifier:
                keyid:E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1a:11:dd:eb:33:9e:fb:9c:0a:4e:37:86:d4:53:7e:19:40:
         b9:2e:e9:c0:24:b7:08:fd:eb:2e:df:9e:95:23:5a:d2:d3:fb:
         60:72:98:a7:e9:77:91:5c:56:79:fb:32:59:54:da:44:f4:04:
         fc:d3:60:e5:ce:66:ee:3e:78:e0:e5:cf:5c:21:8e:e8:8c:d8:
         bd:6d:d0:5f:b7:74:9a:cc:93:28:e4:21:d7:dd:3b:1b:dd:77:
         72:70:fe:dc:85:ba:cd:6d:e5:ed:15:a5:ad:c5:b7:e4:52:05:
         3e:c5:23:39:c4:d3:85:13:ed:17:be:f0:20:9f:4e:c8:4a:25:
         11:4b:42:f2:65:04:f6:60:7e:5d:50:f5:ad:5d:ea:4a:7a:e7:
         a7:73:8c:04:cc:e3:dc:e4:d9:f0:bf:57:4e:ad:b5:7c:9e:c1:
         ed:d7:32:2a:17:ad:04:2b:d2:a3:b7:b4:78:4a:75:a2:14:eb:
         c6:a4:53:1e:4e:a1:11:4d:0b:3a:c0:27:7e:ec:a7:52:1c:b0:
         09:10:45:3b:84:8c:7a:a5:12:53:64:91:03:fc:33:61:d2:cc:
         3c:4c:d8:41:e9:df:2d:c1:f1:18:2b:f7:0f:99:53:6b:c7:b6:
         e3:dc:3b:c2:f8:9b:b8:85:1a:48:85:0d:ef:4b:7b:e1:96:1a:
         c3:3a:f0:c3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUaAPxr9i0S3B+B9Xr2RlcetIdU8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTRiOTg4ZTBjNWYxNmNkNWE1OGI4NzlhMzE3MzdiNGYy
ZjA4NmI5NTAeFw0yNjA3MjgwNTE1NTVaFw0yNjA3MjkwODI2NTVaMDMxMTAvBgNV
BAMTKERBMUU1NDBCRTc2MkREN0NEMzdFM0Y1Mjc3MUExNjBGMDcwQjgwOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrE4Tlm30bZyOZBg8AWvalqqJG
YLHrPkwUttW0QJCZb/VWcIHcM1c8f8HCiN5Z2LvpOI3U4vhB4QMUWtVZrmFwrnZi
VN5mZ2QkiTwFeZFUxSnhj8pVXod4S177WUhVGkMZ4kBKihxByMcg+5pMQfTmRXjM
ISWIDY69e3la9FHHnWOGtqpBUlHZaNEGAw57KYgEeYtcK/q1KvwXrd0e/wJrSEjL
+v/g53+ABJJdl8ApPy9EuXZ4oPYM5EibFNf0n6kHhD6msqqhTAxs+zt8EIj+TA7+
0W29a8LkqGJ2Ca1AANIthiTyRGtLwuTjk0yB82bio5deEEsUrluZRq6rpDQXAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU2h5UC+di3XzTfj9SdxoWDwcLgJAwHwYDVR0j
BBgwFoAU5LmI4MXxbNWli4eaMXN7Ty8Ia5UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi
MzRiLzEvRTRCOTg4RTBDNUYxNkNENUE1OEI4NzlBMzE3MzdCNEYyRjA4NkI5NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVMbUk0TVh4Yk5XbGk0ZWFNWE43VHk4
SWE1VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03
ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvMS9FNEI5ODhFMEM1RjE2Q0Q1QTU4
Qjg3OUEzMTczN0I0RjJGMDg2Qjk1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShoR3esznvucCk43htRT
fhlAuS7pwCS3CP3rLt+elSNa0tP7YHKYp+l3kVxWefsyWVTaRPQE/NNg5c5m7j54
4OXPXCGO6IzYvW3QX7d0msyTKOQh1907G913cnD+3IW6zW3l7RWlrcW35FIFPsUj
OcTThRPtF77wIJ9OyEolEUtC8mUE9mB+XVD1rV3qSnrnp3OMBMzj3OTZ8L9XTq21
fJ7B7dcyKhetBCvSo7e0eEp1ohTrxqRTHk6hEU0LOsAnfuynUhywCRBFO4SMeqUS
U2SRA/wzYdLMPEzYQenfLcHxGCv3D5lTa8e249w7wvibuIUaSIUN70t74ZYawzrw
ww==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:06 2026 by rpki-client