Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
File:                     0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json)
Hash identifier:          ii/7+dCyQ/54ZW8e4SDUOifIhmx/hOVDpYu2s6TJX2I=
Subject key identifier:   AE:F0:BF:52:02:BA:BD:D8:5A:97:A9:B8:08:0E:76:C5:98:D7:CC:9A
Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
Certificate issuer:       /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Certificate serial:       3A7BD1AB1EAB816B999A6F713537798AB8BE5C97
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
Manifest number:          063D
Signing time:             Tue 28 Jul 2026 18:39:57 +0000
Manifest this update:     Tue 28 Jul 2026 18:34:57 +0000
Manifest next update:     Wed 29 Jul 2026 18:59:57 +0000
Files and hashes:         1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: Q6cLP4oQtN+tWe8lnK8Jl41kvDMpWxpPkp0NY9fNewM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7b:d1:ab:1e:ab:81:6b:99:9a:6f:71:35:37:79:8a:b8:be:5c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
        Validity
            Not Before: Jul 28 18:34:57 2026 GMT
            Not After : Jul 29 18:59:57 2026 GMT
        Subject: CN=AEF0BF5202BABDD85A97A9B8080E76C598D7CC9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:88:e5:b0:a9:02:4e:3a:2d:19:95:f8:27:10:
                    56:70:a4:43:ea:a8:51:f7:81:d6:f1:d6:3e:5d:c1:
                    d9:68:64:65:6f:c4:30:df:dc:30:79:f5:fe:cb:be:
                    97:09:eb:e4:2d:86:e1:c3:fa:11:92:3c:3c:45:d0:
                    fc:31:f7:79:a6:ef:c3:d6:4f:40:a9:31:68:3f:f0:
                    9f:d3:70:13:44:48:0b:0d:a2:2d:0c:d7:b2:ee:6f:
                    ba:63:1f:8e:9f:98:14:a5:a9:60:16:79:c3:da:37:
                    88:a8:7e:3a:0a:04:b4:19:c6:5e:06:b6:76:e3:06:
                    d5:7d:57:e7:bd:00:40:d7:cc:c7:b0:db:e8:9f:84:
                    b4:ad:51:2b:47:99:c9:17:7c:02:da:5a:c0:92:25:
                    03:15:a2:de:22:29:ea:0a:ff:2d:7c:ac:78:c7:93:
                    7c:50:64:49:01:90:2f:42:88:f4:72:4a:dd:2e:05:
                    8a:42:db:26:92:45:7e:7e:69:8b:50:53:ea:a0:78:
                    94:89:63:74:22:93:c9:1a:a1:95:70:66:91:88:7f:
                    59:9e:27:8c:01:26:bb:9c:91:b0:e6:8f:d2:28:5b:
                    56:30:bd:bf:1c:d6:04:1c:38:65:0a:5b:30:2a:85:
                    8f:b6:9e:2b:38:b2:c7:7b:62:82:03:f8:51:3e:3f:
                    e7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F0:BF:52:02:BA:BD:D8:5A:97:A9:B8:08:0E:76:C5:98:D7:CC:9A
            X509v3 Authority Key Identifier:
                keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9e:72:18:a6:82:82:3a:59:80:bf:7b:f9:67:76:29:dd:8d:
         b5:dd:aa:dd:05:51:28:c8:53:44:eb:3a:51:ca:90:e3:ad:a8:
         f5:ee:64:1f:fb:a7:a1:92:ad:11:95:6f:20:cd:7a:a0:f0:4a:
         a6:0c:d2:fa:0f:c0:7f:a7:10:a2:20:5b:a1:d6:64:cf:c2:09:
         61:52:ba:2e:c6:b6:62:78:40:a0:38:fc:db:e9:47:c0:cc:b6:
         a7:5e:bb:94:ea:51:44:b4:65:b2:ae:ab:23:61:ad:73:81:f7:
         41:c3:f0:67:5d:3b:08:cc:d2:6c:d4:97:63:02:1e:33:82:98:
         09:95:c7:80:65:22:08:dd:b7:29:62:d9:27:ad:b3:76:5d:74:
         8e:4d:69:83:77:b1:67:d6:37:09:f2:16:36:9e:7d:81:29:ab:
         63:f1:9e:13:d0:47:bc:41:f8:85:e4:28:a6:0b:d3:1b:d1:87:
         99:a1:e9:f5:f5:03:a6:96:ed:b4:ff:33:19:ed:bd:1c:59:f1:
         ae:ac:fc:07:50:14:09:62:fd:2f:30:52:01:4a:8a:d9:ed:f8:
         48:5e:f0:fe:fc:11:50:48:88:dc:a0:e5:5d:39:e2:59:b1:40:
         29:69:25:bd:7c:cf:68:60:35:be:24:94:45:e6:13:83:f4:cd:
         6d:ee:48:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:20 2026 by rpki-client