Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.mft
File:                     98165AF0CD51351CC539A608989BE422E50AAA19.mft (raw, json)
Hash identifier:          /lx7w6UIAUac3wDFlhVSBZLerFg4QlEW13hkimJhlZU=
Subject key identifier:   67:B4:71:F5:D8:19:E8:61:74:D3:A9:47:81:26:E9:CC:FD:F3:DF:36
Authority key identifier: 98:16:5A:F0:CD:51:35:1C:C5:39:A6:08:98:9B:E4:22:E5:0A:AA:19
Certificate issuer:       /CN=98165af0cd51351cc539a608989be422e50aaa19
Certificate serial:       1EFA54B6ECAE9A4F5B9BA21D4AC2F6F23B0E58EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBZa8M1RNRzFOaYImJvkIuUKqhk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 03:42:36 +0000
Manifest this update:     Tue 28 Jul 2026 03:37:36 +0000
Manifest next update:     Wed 29 Jul 2026 06:02:36 +0000
Files and hashes:         1: AS204464.asa (hash: jUpMyF1FdGMBRDVGmC+q6N8jj8V8Eht3QCpOL7IlOM4=)
                          2: 98165AF0CD51351CC539A608989BE422E50AAA19.crl (hash: DdDXFRcAif4oTOpI3NTcqYjzdMVgiEGn92JwS/q/vjI=)
                          3: AS199746.asa (hash: vOZzoo6IFuiCTxm/tgxRMpi8byY9plHX80lZ7TDLtLs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBZa8M1RNRzFOaYImJvkIuUKqhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 06:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fa:54:b6:ec:ae:9a:4f:5b:9b:a2:1d:4a:c2:f6:f2:3b:0e:58:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98165af0cd51351cc539a608989be422e50aaa19
        Validity
            Not Before: Jul 28 03:37:36 2026 GMT
            Not After : Jul 29 06:02:36 2026 GMT
        Subject: CN=67B471F5D819E86174D3A9478126E9CCFDF3DF36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:4f:8d:a9:a1:ec:51:6a:ae:7e:c1:60:df:
                    00:4d:cf:2b:24:60:d4:53:d2:0b:57:21:c2:7a:df:
                    6d:18:ed:49:9f:93:61:56:55:59:13:fc:7b:dd:62:
                    ba:23:9d:b9:41:52:38:68:25:19:82:3a:7d:4e:ea:
                    0e:0c:8b:86:b1:11:69:33:e7:75:52:3e:d9:7d:fb:
                    ec:b4:db:d9:83:0c:27:01:52:f1:ef:d1:c8:e8:a4:
                    d2:3e:54:d0:2a:a3:72:1f:83:b1:4b:2b:2f:8a:ac:
                    dd:d1:ba:eb:c0:44:12:82:b1:6b:cc:44:0a:0e:1a:
                    c1:9c:c0:e8:e6:d3:89:56:05:a0:3c:15:71:18:e8:
                    19:b8:11:43:47:74:65:fe:15:5e:13:43:43:6c:48:
                    c3:56:c4:ef:c1:75:1e:a4:70:dd:1b:38:f6:06:d9:
                    73:db:53:ae:28:94:38:4f:7d:ab:2b:d8:4b:9c:30:
                    0d:dc:44:07:f7:b3:02:b2:04:32:87:92:66:6e:67:
                    68:92:8b:a5:2b:96:47:3c:35:6e:f6:5b:83:d9:97:
                    41:e6:45:64:54:02:e1:0f:c9:ac:4d:a3:15:1b:f2:
                    1d:ec:e5:06:45:3c:12:a8:0a:82:35:21:3d:24:d9:
                    18:e5:59:31:ce:c7:77:00:a1:f3:d7:9b:cb:a2:77:
                    19:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B4:71:F5:D8:19:E8:61:74:D3:A9:47:81:26:E9:CC:FD:F3:DF:36
            X509v3 Authority Key Identifier:
                keyid:98:16:5A:F0:CD:51:35:1C:C5:39:A6:08:98:9B:E4:22:E5:0A:AA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBZa8M1RNRzFOaYImJvkIuUKqhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:30:94:b1:3d:81:a4:8c:33:20:2b:c6:ec:51:db:4e:a0:4b:
         f3:8c:28:98:84:dc:61:f6:5c:10:28:f1:b0:06:48:90:f6:31:
         ba:cd:7d:50:d7:ca:75:df:1c:98:d9:32:0b:4d:fe:93:cb:f6:
         17:e3:1f:13:9f:36:fc:cf:2d:ac:ca:53:40:e6:54:12:62:35:
         85:18:f9:6f:7d:33:b3:78:d6:4d:19:dc:da:aa:14:ee:89:0f:
         2d:b7:7f:ed:2f:ce:38:d6:99:16:17:d7:a9:7e:03:90:58:8e:
         12:28:e2:22:97:67:df:f3:73:b1:33:63:83:b3:9f:f9:22:38:
         6c:29:ef:f1:97:84:85:4f:0b:6e:66:78:9b:a1:96:49:b9:c0:
         d7:4e:e5:57:6d:c2:d3:cd:0b:26:47:89:07:5a:fa:0b:89:fd:
         e0:79:ac:51:4e:0a:66:6d:17:06:0d:7f:ba:81:87:a3:96:98:
         3e:63:09:c2:1e:b3:fb:ad:65:3d:c1:7b:84:4d:ac:03:bb:d0:
         fb:d2:e5:8c:e2:ef:7b:30:11:2e:1f:5c:62:78:47:f0:12:f7:
         bc:55:13:38:18:e8:28:a6:73:f3:ef:36:26:92:81:29:84:00:
         b0:e9:d4:5d:9f:ce:ba:e7:62:d0:04:75:fd:8c:94:f5:72:03:
         4d:e8:8e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:13:56 2026 by rpki-client