Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          xQj2E2M/Sphws57UEUvBEahz+3ct1NGZuLstTGsqUCw=
Subject key identifier:   57:EA:6B:85:09:CA:6E:3B:4B:3A:31:B7:9B:66:A2:D3:E4:9A:01:83
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       146564E6ED3EE6C1C5A64A3784283D7D1266A489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          03A3
Signing time:             Sat 28 Feb 2026 21:28:27 +0000
Manifest this update:     Sat 28 Feb 2026 21:23:27 +0000
Manifest next update:     Mon 02 Mar 2026 21:56:27 +0000
Files and hashes:         1: AS214498.asa (hash: MXybwtu+5M9CBNDZHODBSDxfP4tk/0gnYAktlZuo6sk=)
                          2: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: wsr63HqUdjIZmEw/N4j0cJYbogrS4dUvgn4I2A/2aRc=)
                          3: AS213525.asa (hash: Fq0YNh+tWWvo+GdVGRIwjFZdtE0RP8wN2+bPbK7JSk8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:65:64:e6:ed:3e:e6:c1:c5:a6:4a:37:84:28:3d:7d:12:66:a4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Feb 28 21:23:27 2026 GMT
            Not After : Mar  2 21:56:27 2026 GMT
        Subject: CN=57EA6B8509CA6E3B4B3A31B79B66A2D3E49A0183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:39:6f:9d:f7:e2:dc:21:76:68:5f:d2:84:10:
                    25:c8:2e:3c:ec:21:71:0b:4f:1f:d2:25:78:bc:14:
                    e3:8d:eb:65:00:25:e7:33:43:f1:89:09:68:a7:fc:
                    2e:d4:5f:69:cf:16:2b:1f:4a:f8:33:57:b4:e7:27:
                    24:ef:dc:80:a0:34:79:2a:5e:48:cf:d4:0d:5b:2e:
                    7e:5f:f8:49:21:a4:b2:95:d2:ec:ac:b3:b9:ca:db:
                    b0:0d:e3:87:fb:dc:d9:29:6b:f0:0f:d8:c8:67:fc:
                    68:df:88:06:cb:54:b9:cf:e8:e6:7f:ec:3a:da:58:
                    d3:65:b6:cc:c7:b4:d6:ea:8e:47:12:56:94:12:4e:
                    30:96:ac:d6:1d:4b:04:61:4b:16:a6:7b:8f:d0:0f:
                    43:37:e7:5b:49:65:21:3b:7b:70:60:c0:e3:41:f8:
                    78:68:b3:d5:23:56:02:61:13:f8:2a:ec:13:c9:25:
                    7c:12:71:99:4f:89:9d:30:8b:37:27:7b:30:21:84:
                    c2:62:ce:10:81:f5:04:b9:a6:05:83:7d:4e:c4:21:
                    bc:fa:46:a2:ef:e2:63:21:5b:90:f1:42:3b:47:53:
                    68:5b:59:d7:a0:0a:2e:bd:17:be:42:d1:5f:1c:93:
                    59:f3:ab:bb:31:a5:cc:c9:dd:99:c7:f5:8d:88:37:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EA:6B:85:09:CA:6E:3B:4B:3A:31:B7:9B:66:A2:D3:E4:9A:01:83
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6d:f5:aa:f5:4a:ba:ae:6f:3f:3a:02:2a:e7:34:67:f9:48:
         b1:6e:b8:cb:86:20:0b:63:46:a6:7b:c2:19:65:5a:b9:4e:88:
         46:e7:c1:91:e6:0f:d5:27:92:08:a3:9f:26:ec:51:b5:12:8a:
         8d:21:bb:24:6d:70:2f:ce:e8:df:4d:f8:cc:3c:64:93:00:dc:
         ad:59:10:ee:b5:94:b0:1f:21:3a:f8:52:22:d6:a5:fb:ab:18:
         ae:88:9f:73:28:d6:be:d4:c1:01:c2:b8:f2:61:b5:96:77:c4:
         df:e6:89:0b:a1:81:ad:62:cd:bd:0d:8e:d1:27:89:e2:84:87:
         db:de:13:ca:1d:8d:eb:96:d7:3f:3a:83:aa:a4:84:b9:d8:37:
         da:55:29:e8:a9:f2:17:2c:95:21:49:60:a1:b0:af:c1:7b:02:
         cc:96:cf:f0:84:95:65:29:25:a2:8d:2a:20:1f:ea:a8:50:c9:
         9f:6e:7a:06:6b:33:7a:21:18:81:33:a6:1a:d4:5c:e0:87:fc:
         bd:2e:84:64:79:73:45:4f:66:e9:0e:41:6b:49:4c:cf:68:d5:
         77:04:c0:30:a8:d1:fb:eb:54:d4:9a:7f:e5:35:ea:a1:a8:3c:
         6d:f7:78:3c:85:49:10:af:19:e6:4e:fd:bc:6d:05:17:94:84:
         29:f6:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:37 2026 by rpki-client