Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File:                     38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier:          2e5gKgWtzP5S3JNoQaTuyKandKiFA4oo7sXLzqugrKQ=
Subject key identifier:   90:E5:00:78:A3:98:42:29:89:CB:50:3C:D1:4C:95:EF:DC:51:23:FB
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer:       /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial:       46D2A9F37105D422A10A20EEA1A9CA357B4E31C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number:          01F4
Signing time:             Tue 28 Jul 2026 17:24:37 +0000
Manifest this update:     Tue 28 Jul 2026 17:19:37 +0000
Manifest next update:     Wed 29 Jul 2026 20:12:37 +0000
Files and hashes:         1: AS211575.asa (hash: 3jQ9FknJaDWbQ17PwY7n5aItgcBqYzxUnCnDy4fGyBA=)
                          2: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: DG88QQiVyi0J4o7hqivLiEV1F4alVOJksWgy6oEiIqw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d2:a9:f3:71:05:d4:22:a1:0a:20:ee:a1:a9:ca:35:7b:4e:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
        Validity
            Not Before: Jul 28 17:19:37 2026 GMT
            Not After : Jul 29 20:12:37 2026 GMT
        Subject: CN=90E50078A398422989CB503CD14C95EFDC5123FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:05:cf:ef:22:73:d6:01:37:a5:05:3c:05:
                    aa:95:94:43:2e:fb:ed:2f:4f:68:99:9b:3e:0e:35:
                    d6:a5:5a:0e:20:6b:44:08:69:66:d9:f1:83:d2:19:
                    9b:24:b3:f3:41:0c:d5:c7:c2:c5:e7:1e:0c:be:7b:
                    cf:89:c2:cc:cf:66:9c:98:03:10:b0:20:3f:fe:72:
                    9a:2e:3b:c4:5c:9b:8c:04:02:6d:db:c3:96:8f:de:
                    d6:de:ff:3e:82:06:c6:17:d5:d1:59:1c:a3:85:3b:
                    5e:08:3f:c5:08:66:1f:14:c5:54:6e:ad:15:7b:f4:
                    44:24:dd:7c:d2:2d:78:85:49:eb:19:08:84:b4:64:
                    bc:c6:c6:9d:0c:ae:36:7d:ca:3e:b0:2f:b3:08:f7:
                    b6:93:90:94:f9:44:9b:51:af:0e:4f:80:60:07:48:
                    3a:46:b3:a7:0c:bd:6c:00:81:f7:ac:a7:ca:fb:61:
                    1e:f2:0f:59:c4:64:35:ca:d8:11:5c:ea:d5:4a:5b:
                    3a:02:89:ab:5f:14:af:f8:d0:b3:36:3c:68:e2:4b:
                    81:09:23:07:23:1c:ee:3c:02:ef:79:18:cb:19:32:
                    01:b9:32:d1:5b:31:4b:a3:32:97:a7:91:55:72:29:
                    ef:ce:b9:37:6d:7e:dc:ab:23:ac:41:8f:ca:72:00:
                    ee:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E5:00:78:A3:98:42:29:89:CB:50:3C:D1:4C:95:EF:DC:51:23:FB
            X509v3 Authority Key Identifier:
                keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:55:5b:40:7a:b4:5b:80:ba:40:2a:85:42:d1:fd:70:ff:1b:
         44:6b:cb:df:80:3b:4b:22:75:9d:40:a2:b4:33:e3:74:1f:e8:
         5f:d0:ec:ec:40:db:a9:45:9d:c5:d2:70:cd:62:5e:f5:a8:e5:
         a3:b5:d6:46:6a:60:5f:4e:9b:8a:a5:57:7a:0d:e3:4a:8b:79:
         fb:2c:7f:24:11:9e:74:01:8c:8c:0a:62:f3:b3:e5:d0:7e:77:
         83:74:64:3f:a3:c4:5b:14:e0:07:78:ba:2f:09:83:04:cf:60:
         78:1c:e6:0b:7f:f8:06:b8:63:60:72:8b:05:a7:e7:cd:e9:ab:
         92:53:85:4f:52:6b:8d:21:1c:67:d5:7c:ff:63:ec:52:11:dd:
         6d:c5:f4:df:e7:1e:2c:37:30:82:1b:84:6a:52:df:11:2d:09:
         ad:9d:a3:de:17:e5:85:5c:9a:4e:1e:cb:b0:62:22:d2:c7:97:
         1b:f3:74:54:ad:6b:2b:58:75:6f:0b:fa:18:3a:c7:cc:3b:71:
         7d:32:9c:40:d7:ea:4c:57:3b:c4:96:3e:d4:a8:7f:8c:64:76:
         9f:b1:a3:77:6b:7d:6c:b8:f8:72:6c:b0:83:dd:9b:80:ae:29:
         69:f1:19:fa:2f:18:98:fd:bd:27:41:98:8a:6a:c8:38:8b:7a:
         54:e8:6d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:22 2026 by rpki-client