Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File:                     E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier:          Py8Y+Nh7F8Jm+WMihshdKDhuxKQEr8bXNJHHu5eryvY=
Subject key identifier:   86:67:1F:70:63:EE:56:27:2B:37:6C:3D:54:9B:D9:C9:92:94:32:77
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer:       /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial:       3128EFAE719ACE13DEA23BCC59D786B719F27150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number:          05A7
Signing time:             Fri 17 Apr 2026 07:57:13 +0000
Manifest this update:     Fri 17 Apr 2026 07:52:13 +0000
Manifest next update:     Sat 18 Apr 2026 10:25:13 +0000
Files and hashes:         1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: fFGE4ZZX3SP7pkdKYL9OJNW1iuDQz8Y2WUolUptcvCA=)
                          2: AS208453.asa (hash: toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:28:ef:ae:71:9a:ce:13:de:a2:3b:cc:59:d7:86:b7:19:f2:71:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
        Validity
            Not Before: Apr 17 07:52:13 2026 GMT
            Not After : Apr 18 10:25:13 2026 GMT
        Subject: CN=86671F7063EE56272B376C3D549BD9C992943277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:4f:07:1c:ef:a3:36:9e:c6:1e:2b:40:ba:
                    a0:1e:5f:77:b7:1b:9d:b5:de:06:03:dc:80:61:03:
                    ba:c7:a7:79:41:5b:4a:ff:85:b5:87:33:eb:54:87:
                    db:77:db:86:8e:b1:79:b0:5f:c6:b0:56:44:98:b0:
                    db:05:77:aa:92:ff:be:d4:f9:54:60:d1:ef:38:a5:
                    d4:08:98:86:fe:db:b5:a3:23:7a:d0:a0:f8:85:c1:
                    9f:91:4e:7c:22:02:a7:0a:38:54:4f:7a:fe:de:43:
                    0d:58:66:3b:67:37:21:b1:42:93:c4:9a:4a:f3:a1:
                    9e:99:7a:50:17:ba:c3:fd:8a:51:6d:b3:28:b6:11:
                    e2:39:5b:aa:e3:a4:07:53:f8:79:6e:dd:58:00:55:
                    1b:33:30:62:a0:69:38:d0:4a:fb:28:df:5a:35:2e:
                    89:4f:be:bc:42:f0:8f:33:db:86:5e:33:7d:d1:57:
                    0c:c5:7e:28:1f:eb:a6:cf:bd:30:fb:e5:ec:b9:0d:
                    05:4c:62:b4:e1:d3:27:da:53:ca:13:44:64:d4:13:
                    ae:d9:f9:21:46:dc:9b:dd:eb:35:ee:b8:db:94:5b:
                    97:ad:a3:ac:4e:95:c8:13:1d:cf:0a:b7:be:88:3e:
                    f6:51:3c:63:6a:4b:13:4a:81:b5:9c:ff:e5:72:c1:
                    25:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:67:1F:70:63:EE:56:27:2B:37:6C:3D:54:9B:D9:C9:92:94:32:77
            X509v3 Authority Key Identifier:
                keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:82:58:a4:c1:19:31:74:45:66:c8:a8:92:e3:5b:59:53:d9:
         6b:36:94:1b:c2:1c:d2:16:d7:01:3b:c6:55:39:97:54:70:b0:
         41:7e:5c:8a:c1:e6:48:7e:f1:eb:71:5a:c1:cb:2b:27:07:9c:
         50:ac:7c:16:19:b0:d2:7b:e1:a8:c2:14:c6:c9:6c:66:a6:58:
         54:3a:29:c9:b2:ca:6a:ff:56:46:aa:bb:23:36:8d:d4:a6:14:
         f6:5e:b5:d0:e1:0c:2d:2e:2a:d7:ab:6f:36:80:3c:8a:b4:48:
         e7:9a:3a:24:cd:07:b3:4d:05:4a:8e:2c:c3:d6:6f:24:b3:c6:
         f7:3b:32:ed:70:6f:a9:44:dc:fa:a9:42:1b:d8:5d:65:52:d5:
         22:8d:df:14:6b:2d:f1:8e:56:bc:97:60:5c:64:34:5f:92:85:
         41:70:b4:eb:2b:9a:45:94:77:cb:aa:12:f2:3b:a0:dc:a4:a6:
         4e:0d:6c:8f:76:4f:2b:f9:c8:df:b0:e8:33:29:79:9b:3a:46:
         88:73:d0:4f:31:93:99:57:b7:3d:eb:69:31:c1:1c:bd:35:8d:
         e1:1f:68:e1:f2:04:e9:f3:bb:c0:dc:e9:55:0a:01:d8:4f:3e:
         dc:f8:9e:a0:51:4c:fb:68:9f:bb:4f:03:3a:ac:52:cf:43:f8:
         03:71:81:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:49:04 2026 by rpki-client