Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
File:                     0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json)
Hash identifier:          zWqRgrkTeVC14OaOO/QAzg5C92oSYPLHMX7eWatjq5o=
Subject key identifier:   DA:6C:71:18:E1:E0:D5:85:B1:D5:8B:18:C2:2E:86:68:54:15:C1:00
Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
Certificate issuer:       /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Certificate serial:       6A01EA2024D36E5B0504B9B9E25E8B6646343337
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
Manifest number:          0566
Signing time:             Mon 02 Mar 2026 06:19:44 +0000
Manifest this update:     Mon 02 Mar 2026 06:14:44 +0000
Manifest next update:     Tue 03 Mar 2026 07:45:44 +0000
Files and hashes:         1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: YEP5cPYiAqyHuKW8vSIDWeQyf2qZ6M4Sao91Mig8jAk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:01:ea:20:24:d3:6e:5b:05:04:b9:b9:e2:5e:8b:66:46:34:33:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
        Validity
            Not Before: Mar  2 06:14:44 2026 GMT
            Not After : Mar  3 07:45:44 2026 GMT
        Subject: CN=DA6C7118E1E0D585B1D58B18C22E86685415C100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:9c:ef:2a:41:f1:21:53:5e:49:c2:a5:cb:
                    00:b3:1d:70:fb:21:f5:2a:b9:a2:7d:26:b6:b8:68:
                    e9:d1:8b:6d:ba:e2:55:e1:fe:c1:92:15:6e:51:8d:
                    8a:67:81:36:45:ab:fd:43:f0:55:3f:98:53:ea:53:
                    c8:b7:25:6a:4d:16:39:45:3a:4a:79:a3:ba:4e:4f:
                    72:89:b1:32:13:e5:a6:17:08:b3:d8:15:27:7d:83:
                    43:a4:f5:82:1b:6f:80:c3:58:0f:ef:d6:76:65:64:
                    16:1f:5b:eb:f5:ba:03:fb:2d:fa:57:55:ee:82:dc:
                    19:e6:c9:9a:48:c8:8a:18:2a:70:6d:b8:dc:02:66:
                    df:35:d3:1d:c8:37:3e:4b:96:d9:28:88:4c:eb:e9:
                    5a:63:b4:38:3a:2b:4b:18:e2:5a:af:a5:29:ef:40:
                    77:3c:04:23:d2:b9:92:0b:22:9e:0b:76:fe:45:ac:
                    13:33:a0:3e:65:f2:3c:a5:b3:58:2c:ab:64:97:2f:
                    98:a8:2d:ee:64:22:43:b6:be:22:d0:3e:a1:e2:dd:
                    34:34:c4:da:cf:7e:c1:fb:c2:47:4a:24:dd:2f:ae:
                    cd:01:15:83:f6:29:1c:1b:76:65:a2:f2:ed:ca:e6:
                    6d:8e:f4:2f:12:60:e3:f2:f1:7e:c2:63:d8:e2:43:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6C:71:18:E1:E0:D5:85:B1:D5:8B:18:C2:2E:86:68:54:15:C1:00
            X509v3 Authority Key Identifier:
                keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:79:12:34:ce:a6:3f:d5:73:f0:93:3d:2f:bd:0f:91:b3:22:
         b3:dd:82:ac:2c:8c:aa:c9:07:4d:b6:e9:05:77:50:99:99:16:
         2b:c7:c3:02:28:d3:97:3f:28:ac:a7:bc:09:69:e7:f5:15:8d:
         ef:4c:93:0f:61:30:f9:8a:de:10:42:ee:39:9c:54:01:7e:d3:
         82:0b:90:8a:7c:ff:85:e7:9e:aa:16:cd:e1:c5:93:25:84:a1:
         8e:81:44:30:d7:fa:a1:49:e2:49:e1:6d:8a:ae:79:10:e1:6f:
         43:2e:cf:f9:5e:94:67:db:aa:86:08:95:20:1d:fb:db:12:01:
         a6:04:f2:4b:4a:29:e3:ce:c8:c6:b2:cd:af:a3:98:1f:e4:df:
         af:df:14:fb:f9:9f:91:13:1e:5f:cd:4f:16:3c:51:bc:12:b7:
         3f:2d:3c:83:81:7a:c4:2e:e3:dd:32:2c:c5:a3:d7:71:aa:b4:
         79:6a:23:14:4b:54:e2:a1:37:53:55:b5:d6:02:51:63:88:ad:
         ff:4c:a9:1c:a4:df:58:89:04:20:dc:2f:cb:b3:8f:e2:d9:a4:
         4a:7e:2f:14:66:7f:74:25:06:3e:84:3c:08:52:67:c1:b0:47:
         90:42:ed:2d:81:18:29:02:a3:0c:4a:88:f7:a7:2d:d3:a0:98:
         97:83:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:56 2026 by rpki-client