Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.mft
File:                     A465A2ED221B2681A593F3273EC5E73FB69E883D.mft (raw, json)
Hash identifier:          4ejJ6otnpIofmmtLfNpqtA6kpbadtke1Tg4nnns8dtM=
Subject key identifier:   FE:16:0F:F6:EE:D2:DB:71:F6:4B:AF:17:E5:70:32:AB:B1:14:D1:E1
Authority key identifier: A4:65:A2:ED:22:1B:26:81:A5:93:F3:27:3E:C5:E7:3F:B6:9E:88:3D
Certificate issuer:       /CN=a465a2ed221b2681a593f3273ec5e73fb69e883d
Certificate serial:       4682A9203E30C618379B01B66F6B90D93CF995EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pGWi7SIbJoGlk_MnPsXnP7aeiD0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.mft
Manifest number:          3D
Signing time:             Sun 01 Mar 2026 14:38:10 +0000
Manifest this update:     Sun 01 Mar 2026 14:33:10 +0000
Manifest next update:     Mon 02 Mar 2026 15:28:10 +0000
Files and hashes:         1: A465A2ED221B2681A593F3273EC5E73FB69E883D.crl (hash: gpMhE36WEVfrJaoqvKcnPj5/1x+e9obwIYhAr3xt9GE=)
                          2: AS210773.asa (hash: /JteockIlNHN2+cPErXzdclJuRFyUn7Il8RAa/YV9sk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pGWi7SIbJoGlk_MnPsXnP7aeiD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:82:a9:20:3e:30:c6:18:37:9b:01:b6:6f:6b:90:d9:3c:f9:95:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a465a2ed221b2681a593f3273ec5e73fb69e883d
        Validity
            Not Before: Mar  1 14:33:10 2026 GMT
            Not After : Mar  2 15:28:10 2026 GMT
        Subject: CN=FE160FF6EED2DB71F64BAF17E57032ABB114D1E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:a8:33:fe:07:12:ce:81:59:33:2e:40:5c:
                    cd:fc:40:3c:f0:3a:4e:3c:cb:5a:3c:a9:22:f4:59:
                    80:73:f6:66:ec:d6:cc:f9:70:ab:db:ca:a9:e1:04:
                    95:4a:04:66:d3:f4:97:ff:f0:d7:7d:d8:48:68:0f:
                    97:d8:31:41:5a:18:d0:70:78:c8:08:4a:29:ab:7b:
                    27:01:d8:4a:ae:0a:7d:40:ba:b6:37:1a:98:2d:1c:
                    b0:d0:1a:df:31:5d:f2:ca:3a:8b:1c:46:33:85:5d:
                    42:d8:d5:5e:0a:f7:8f:1b:9e:05:ed:73:3a:04:99:
                    b8:48:bd:a2:4a:76:07:5f:c1:a1:31:6a:99:21:c3:
                    b2:9e:25:3c:39:24:4a:7c:89:67:72:e1:a0:c0:c3:
                    93:e8:dc:34:65:25:87:bc:66:db:32:8f:94:a3:0f:
                    36:fe:c7:6c:80:97:68:9c:61:70:5a:c3:75:cf:6e:
                    60:84:4e:30:33:c9:3c:88:f8:dd:2d:43:1a:d9:36:
                    6a:97:6d:2d:b8:6e:55:e6:70:83:f0:79:28:2c:ff:
                    59:03:7a:77:99:33:d4:c2:c6:85:d0:4d:aa:e0:fc:
                    51:6a:af:c8:bc:bd:90:14:70:b0:8f:91:74:36:2c:
                    a7:c1:22:5b:f7:26:2b:f7:97:4b:7b:71:39:0b:e3:
                    e2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:16:0F:F6:EE:D2:DB:71:F6:4B:AF:17:E5:70:32:AB:B1:14:D1:E1
            X509v3 Authority Key Identifier:
                keyid:A4:65:A2:ED:22:1B:26:81:A5:93:F3:27:3E:C5:E7:3F:B6:9E:88:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pGWi7SIbJoGlk_MnPsXnP7aeiD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:04:cb:58:e9:b2:f4:45:ef:48:6b:cb:1a:43:2d:cc:b6:a1:
         08:ee:db:c2:ea:e6:b3:ca:a6:ec:98:6b:f7:80:8a:32:db:34:
         90:17:0c:00:7f:e4:5b:43:53:2b:01:fe:b3:1d:a2:dc:b5:2b:
         20:10:4b:6f:e3:00:92:75:58:f7:5f:90:c1:1b:76:1f:a4:e3:
         dc:5e:40:9f:f1:fc:df:ab:85:eb:fc:56:e5:ce:db:a5:17:82:
         29:41:b2:78:78:e7:67:17:d9:c6:37:3f:fa:63:a5:f4:39:ee:
         99:3e:e7:c3:22:c3:c6:1e:f3:33:23:4a:53:e7:f2:90:8e:ae:
         92:24:2e:64:c9:ee:0f:98:8b:12:c3:6a:7b:1a:f1:96:d8:97:
         a0:64:81:c7:23:0d:47:c1:7f:0d:8c:a9:a1:80:f5:b3:f6:81:
         9a:28:7f:36:5e:14:53:e1:92:dc:b9:61:01:53:43:62:67:32:
         8c:2d:8c:69:b8:f2:bb:8c:5a:b9:b5:12:37:9b:77:8e:b7:d9:
         51:d9:01:27:42:4a:eb:da:1e:ba:9f:31:c2:0b:7a:b1:73:20:
         ff:73:93:46:75:fe:b5:25:dc:f0:e0:ae:d4:ec:30:9d:38:16:
         10:80:2d:bf:b9:bd:13:42:44:d9:55:2f:91:32:bc:38:dd:fd:
         a4:02:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:31 2026 by rpki-client