Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          RMH2zwff2Lb0FrpE9z0IQg4v29CBppvi+toCcDwingQ=
Subject key identifier:   37:64:9D:75:05:9A:F1:C2:0C:01:12:B7:71:39:59:70:43:44:F2:14
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       23653BA2275B366ABEF1F9029B1E5A0BD80F05DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          0516
Signing time:             Tue 22 Sep 2026 09:19:10 +0000
Manifest this update:     Tue 22 Sep 2026 09:14:10 +0000
Manifest next update:     Thu 24 Sep 2026 12:36:10 +0000
Files and hashes:         1: AS213525.asa (hash: Fq0YNh+tWWvo+GdVGRIwjFZdtE0RP8wN2+bPbK7JSk8=)
                          2: AS214498.asa (hash: MXybwtu+5M9CBNDZHODBSDxfP4tk/0gnYAktlZuo6sk=)
                          3: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: RYidHgmb4zS9AahBbJjVvxG9J6c2C27MJaYHyl7xmLo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:65:3b:a2:27:5b:36:6a:be:f1:f9:02:9b:1e:5a:0b:d8:0f:05:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Sep 22 09:14:10 2026 GMT
            Not After : Sep 24 12:36:10 2026 GMT
        Subject: CN=37649D75059AF1C20C0112B7713959704344F214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:dc:a1:36:33:7f:7c:59:c0:b2:de:4f:c8:
                    bd:93:ce:3d:ed:da:81:b0:0c:2d:c8:fb:0c:56:04:
                    15:d2:81:0e:d4:4f:87:49:08:66:d9:68:4f:ba:ab:
                    5b:fe:7e:83:df:c4:47:41:2a:d6:56:29:d9:41:0d:
                    04:ee:2b:61:4d:07:ba:4a:5d:7a:52:78:4f:06:d3:
                    13:e4:f6:02:70:9e:e7:92:bb:f6:14:61:49:a9:56:
                    f0:90:84:cf:fe:45:c4:b1:c2:ad:9c:76:fb:85:ec:
                    a2:21:be:92:7c:ce:f2:b2:94:36:9f:19:74:8d:8c:
                    d4:80:f3:65:68:b9:a7:3f:14:67:02:a2:ad:88:b5:
                    48:b4:9b:3e:0f:96:29:5d:c6:ad:e5:22:76:65:c5:
                    a4:bb:01:e7:fc:80:d5:af:e9:ae:5e:4d:63:da:c8:
                    3d:7f:e1:f0:bc:ab:ac:48:5a:c2:3f:15:50:92:ba:
                    7b:45:6d:85:87:2c:f5:1c:ef:89:52:75:fa:51:49:
                    93:f9:cf:e9:43:c9:13:cb:72:02:d0:89:22:c2:61:
                    6f:dc:fb:46:19:fd:8e:90:97:7f:fb:39:c4:48:52:
                    6a:e7:1f:7b:91:09:70:3c:d3:4d:41:53:f7:b3:d4:
                    89:e9:38:27:6b:c0:8a:fc:3d:9f:f0:1d:5c:d2:e7:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:64:9D:75:05:9A:F1:C2:0C:01:12:B7:71:39:59:70:43:44:F2:14
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:22:30:c0:4d:7b:3b:36:48:82:ad:c3:52:1d:ee:ef:f2:52:
         07:92:c7:a2:7f:45:e1:00:ce:cf:93:fb:34:5d:48:b1:11:ec:
         b5:ce:40:8a:e0:89:38:7f:39:56:30:31:1e:06:11:d5:a4:19:
         d9:cf:ed:24:5a:f6:64:4f:1c:d3:e3:18:e7:e5:af:96:69:b1:
         fd:7c:3c:9d:34:89:f6:8b:3b:a6:0a:91:98:1b:42:5a:23:8c:
         d1:60:e2:47:09:b4:4e:47:8c:b6:a4:32:b7:fb:6b:b7:2e:e2:
         34:62:84:f9:19:36:34:52:c9:34:53:a0:c4:ef:ee:f0:83:48:
         a2:72:40:ff:f9:20:41:57:87:28:8b:4f:bb:d9:59:8e:dd:8d:
         d8:d7:ec:46:02:dc:e2:b0:af:ef:94:d4:ba:34:68:22:58:d7:
         31:9d:93:c2:d8:c2:e0:ad:0e:d4:50:64:cb:4d:d1:0c:4a:9c:
         63:43:86:0c:72:f9:18:76:59:a7:35:4c:76:d8:9a:1a:a9:08:
         db:99:fe:6d:e6:b8:a7:00:4e:ea:1a:61:ad:e6:0b:5f:9b:b2:
         9e:28:4c:15:b2:8e:09:ff:a3:f1:98:ac:56:a9:3e:c2:73:6a:
         15:03:24:00:94:d0:00:a8:68:58:0f:30:5a:d9:e3:74:4a:b1:
         7f:ff:d5:5c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUI2U7oidbNmq+8fkCmx5aC9gPBd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc2MTUwMzFkMGE4ZTAyYmY1OGVmYzdmMjMzMGFmM2Q2
NTk1NGVmYzAeFw0yNjA5MjIwOTE0MTBaFw0yNjA5MjQxMjM2MTBaMDMxMTAvBgNV
BAMTKDM3NjQ5RDc1MDU5QUYxQzIwQzAxMTJCNzcxMzk1OTcwNDM0NEYyMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6pNyhNjN/fFnAst5PyL2Tzj3t
2oGwDC3I+wxWBBXSgQ7UT4dJCGbZaE+6q1v+foPfxEdBKtZWKdlBDQTuK2FNB7pK
XXpSeE8G0xPk9gJwnueSu/YUYUmpVvCQhM/+RcSxwq2cdvuF7KIhvpJ8zvKylDaf
GXSNjNSA82Vouac/FGcCoq2ItUi0mz4Plildxq3lInZlxaS7Aef8gNWv6a5eTWPa
yD1/4fC8q6xIWsI/FVCSuntFbYWHLPUc74lSdfpRSZP5z+lDyRPLcgLQiSLCYW/c
+0YZ/Y6Ql3/7OcRIUmrnH3uRCXA8001BU/ez1InpOCdrwIr8PZ/wHVzS5zJjAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUN2SddQWa8cIMARK3cTlZcENE8hQwHwYDVR0j
BBgwFoAUx2FQMdCo4Cv1jvx/IzCvPWWVTvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzEvQzc2MTUwMzFEMEE4RTAyQkY1OEVGQzdGMjMzMEFGM0Q2NTk1NEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gyRlFNZENvNEN2MWp2eF9JekN2UFdX
VlR2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x
OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvMS9DNzYxNTAzMUQwQThFMDJCRjU4
RUZDN0YyMzMwQUYzRDY1OTU0RUZDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1iIwwE17OzZIgq3DUh3u
7/JSB5LHon9F4QDOz5P7NF1IsRHstc5AiuCJOH85VjAxHgYR1aQZ2c/tJFr2ZE8c
0+MY5+Wvlmmx/Xw8nTSJ9os7pgqRmBtCWiOM0WDiRwm0TkeMtqQyt/trty7iNGKE
+Rk2NFLJNFOgxO/u8INIonJA//kgQVeHKItPu9lZjt2N2NfsRgLc4rCv75TUujRo
IljXMZ2TwtjC4K0O1FBky03RDEqcY0OGDHL5GHZZpzVMdtiaGqkI25n+bea4pwBO
6hphreYLX5uynihMFbKOCf+j8ZisVqk+wnNqFQMkAJTQAKhoWA8wWtnjdEqxf//V
XA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:09:11 2026 by rpki-client