Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File:                     D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier:          QQSlerKDKt9xTbfMU8uzms0Q+6BVp2lPKgezeedjkzo=
Subject key identifier:   19:58:CE:3A:BC:89:BE:EF:26:3D:81:B3:23:FC:FD:51:78:88:03:A0
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer:       /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial:       276C85B1AD9CE0F24363958ED9D0F0D63F0945BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number:          0426
Signing time:             Sat 13 Jun 2026 03:03:48 +0000
Manifest this update:     Sat 13 Jun 2026 02:58:48 +0000
Manifest next update:     Sun 14 Jun 2026 04:53:48 +0000
Files and hashes:         1: AS215828.asa (hash: VgsD8NIsIss3o16ZxAfQixlQwnZhHsUIcDjeAoab2YU=)
                          2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: XceLZiWYnQ719OncgFkH4Wq62YUP+M5DugTeNR+Tu7g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6c:85:b1:ad:9c:e0:f2:43:63:95:8e:d9:d0:f0:d6:3f:09:45:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
        Validity
            Not Before: Jun 13 02:58:48 2026 GMT
            Not After : Jun 14 04:53:48 2026 GMT
        Subject: CN=1958CE3ABC89BEEF263D81B323FCFD51788803A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:1e:8b:19:e2:40:72:34:81:db:17:ca:e4:
                    74:1c:fc:86:54:de:4f:4c:d5:6f:d8:5d:05:31:c6:
                    54:1b:65:7e:b3:92:e1:f0:3e:49:16:5c:3a:6e:54:
                    b3:99:c5:e0:99:67:e4:8f:08:40:f3:1c:55:89:99:
                    6e:7c:d3:7f:27:62:bc:60:64:0b:2d:b2:78:35:05:
                    70:f6:63:0b:73:d1:f6:1e:37:81:d0:6c:d2:50:db:
                    92:ac:95:c3:03:49:cb:81:b1:60:6a:d6:a2:46:bf:
                    2d:5f:46:99:f7:90:bb:a1:e0:e5:98:74:08:a7:e2:
                    f7:e2:bf:b5:b7:b6:68:19:0b:ea:3f:27:b0:63:9b:
                    30:55:32:01:14:71:6b:3e:7a:23:84:85:51:31:e3:
                    68:56:d3:6b:0b:37:8f:81:f1:89:13:25:e7:96:4d:
                    d3:d4:ef:5f:3e:68:60:51:c6:2a:ca:e6:05:cb:69:
                    b4:64:da:f6:39:35:e3:60:1e:7d:b1:0b:aa:2f:a1:
                    a0:27:81:2c:85:22:7e:49:c8:b2:8f:3f:6c:c1:65:
                    bb:4f:44:0b:9d:60:13:57:48:7c:31:fc:d6:e9:80:
                    0a:84:28:dd:24:d1:9b:f8:ea:18:ef:d9:a0:d0:d9:
                    a5:67:69:ac:17:f3:69:6a:0c:b7:20:af:58:ef:6d:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:58:CE:3A:BC:89:BE:EF:26:3D:81:B3:23:FC:FD:51:78:88:03:A0
            X509v3 Authority Key Identifier:
                keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:8e:61:2c:d5:86:20:45:ed:10:da:23:88:78:3e:47:ad:c3:
         f9:26:cb:33:2d:74:73:4b:bc:1e:80:2d:07:5b:cc:2f:df:ac:
         6d:23:ac:d5:00:21:ee:5b:5e:84:21:ff:30:1f:64:2b:bb:f1:
         40:98:56:47:4a:41:96:b8:a1:0c:81:bd:97:fb:b6:37:94:c4:
         1c:54:c7:3f:65:e0:64:77:d5:7b:0a:18:12:17:68:f4:54:79:
         f4:9b:7a:7f:96:d9:7f:00:bd:4f:10:ca:00:2c:89:41:2c:33:
         8e:39:66:97:6d:f7:c4:fd:33:63:36:e8:5c:34:31:ba:7b:2b:
         cb:17:8f:f3:d7:3d:84:f6:47:cb:3e:84:2b:9e:69:08:4a:e6:
         0c:0c:62:e8:b1:27:25:ef:b8:8b:50:dd:0a:85:8d:dd:0e:b7:
         73:35:74:a2:b4:a3:2d:3c:0d:1c:27:8c:5c:a2:99:f7:ff:58:
         d3:39:25:c6:c5:67:24:87:a9:28:08:d4:03:7a:81:a3:5a:d0:
         00:ca:15:18:33:05:7f:db:f8:f8:72:76:c1:bf:db:b0:05:3f:
         57:08:15:a6:fa:a1:08:b7:26:4d:ad:4e:7e:30:ef:61:9c:59:
         c1:ec:4c:4f:93:f0:4c:c0:f1:77:8f:94:9a:dd:27:ce:9b:bb:
         37:cd:e3:da
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJ2yFsa2c4PJDY5WO2dDw1j8JRbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDgyMTk2NDc0MTUwMThlNGZmZDNmMTFjMjdhODA3NTMw
ZDdiN2NmMTAeFw0yNjA2MTMwMjU4NDhaFw0yNjA2MTQwNDUzNDhaMDMxMTAvBgNV
BAMTKDE5NThDRTNBQkM4OUJFRUYyNjNEODFCMzIzRkNGRDUxNzg4ODAzQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjrR6LGeJAcjSB2xfK5HQc/IZU
3k9M1W/YXQUxxlQbZX6zkuHwPkkWXDpuVLOZxeCZZ+SPCEDzHFWJmW58038nYrxg
ZAstsng1BXD2Ywtz0fYeN4HQbNJQ25KslcMDScuBsWBq1qJGvy1fRpn3kLuh4OWY
dAin4vfiv7W3tmgZC+o/J7BjmzBVMgEUcWs+eiOEhVEx42hW02sLN4+B8YkTJeeW
TdPU718+aGBRxirK5gXLabRk2vY5NeNgHn2xC6ovoaAngSyFIn5JyLKPP2zBZbtP
RAudYBNXSHwx/NbpgAqEKN0k0Zv46hjv2aDQ2aVnaawX82lqDLcgr1jvbZsLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUGVjOOryJvu8mPYGzI/z9UXiIA6AwHwYDVR0j
BBgwFoAU2CGWR0FQGOT/0/EcJ6gHUw17fPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzAvRDgyMTk2NDc0MTUwMThFNEZGRDNGMTFDMjdBODA3NTMwRDdCN0NGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJDR1dSMEZRR09UXzBfRWNKNmdIVXcx
N2ZQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m
YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvMC9EODIxOTY0NzQxNTAxOEU0RkZE
M0YxMUMyN0E4MDc1MzBEN0I3Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANI5hLNWGIEXtENojiHg+
R63D+SbLMy10c0u8HoAtB1vML9+sbSOs1QAh7ltehCH/MB9kK7vxQJhWR0pBlrih
DIG9l/u2N5TEHFTHP2XgZHfVewoYEhdo9FR59Jt6f5bZfwC9TxDKACyJQSwzjjlm
l233xP0zYzboXDQxunsryxeP89c9hPZHyz6EK55pCErmDAxi6LEnJe+4i1DdCoWN
3Q63czV0orSjLTwNHCeMXKKZ9/9Y0zklxsVnJIepKAjUA3qBo1rQAMoVGDMFf9v4
+HJ2wb/bsAU/VwgVpvqhCLcmTa1OfjDvYZxZwexMT5PwTMDxd4+Umt0nzpu7N83j
2g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:59 2026 by rpki-client