Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File:                     7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier:          Alp/wNngm6fK6tYpz0rkjysLB8B7B9AILirLSZKQe0U=
Subject key identifier:   06:B1:77:E1:1A:A7:81:07:57:90:0E:5B:83:42:4A:03:42:2A:BB:39
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       48891D345EC023CBC7600C8409440FB21DCAABBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number:          02EF
Signing time:             Sat 28 Feb 2026 22:03:45 +0000
Manifest this update:     Sat 28 Feb 2026 21:58:45 +0000
Manifest next update:     Mon 02 Mar 2026 01:45:45 +0000
Files and hashes:         1: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: KtPjPjHC5JBZOE61sYPkzuM3fLe7oS2w1LGbKEl5bu8=)
                          2: AS215849.asa (hash: zDqRf1CmpsA1KFLVwsUM6m+4OIs88BLCSJXXlOwSvmc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 01:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:89:1d:34:5e:c0:23:cb:c7:60:0c:84:09:44:0f:b2:1d:ca:ab:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Feb 28 21:58:45 2026 GMT
            Not After : Mar  2 01:45:45 2026 GMT
        Subject: CN=06B177E11AA7810757900E5B83424A03422ABB39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:0b:fb:c9:a4:c9:38:eb:97:0a:de:97:da:
                    d3:7a:ee:05:43:e8:96:dd:04:62:bf:31:b6:22:1d:
                    ee:29:3b:be:dd:6c:df:36:ee:3b:c8:61:71:cf:9e:
                    e1:60:9b:af:28:25:9e:ee:cd:ba:84:30:c6:24:0b:
                    64:1c:ed:7f:74:35:46:7e:36:a0:0d:aa:9d:9b:96:
                    70:94:fb:a8:6e:85:d9:e2:37:3e:f3:ea:db:2c:3c:
                    42:0b:a8:36:12:93:5f:e3:56:43:32:b3:02:ea:39:
                    87:2d:39:3a:a5:4a:c6:25:2a:02:44:ea:23:60:00:
                    4d:07:35:5f:60:a1:71:9c:91:ba:75:81:2f:b6:56:
                    b0:a7:ae:1c:ad:99:54:83:a0:b9:a0:b9:d7:ad:8c:
                    3a:62:bd:1e:a4:6b:02:5a:fe:28:37:5b:14:d6:c8:
                    9a:d9:9b:9c:6b:a5:44:fe:7e:84:f9:4b:f3:a9:12:
                    6d:cb:72:0d:0f:99:04:ce:d3:72:5c:b7:9b:2f:de:
                    02:59:fc:be:6b:fa:0c:55:bb:35:f2:b3:70:f4:14:
                    3a:0b:95:80:b6:85:b9:57:14:2e:f8:8e:89:d0:7a:
                    ef:cb:56:5f:b4:90:9f:a1:ff:93:6e:be:2f:41:02:
                    67:93:bc:2d:0c:74:b5:be:0c:69:33:c4:38:e7:2c:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B1:77:E1:1A:A7:81:07:57:90:0E:5B:83:42:4A:03:42:2A:BB:39
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2d:95:b0:be:61:35:9a:a9:e5:51:2d:1c:cc:a8:6d:1c:f3:
         5f:64:25:ab:64:d1:15:35:b2:54:4e:16:04:68:19:d9:5e:9a:
         7f:2a:70:9e:e4:3c:e0:2b:b0:a7:df:04:be:03:f3:fc:53:f4:
         27:f0:fa:fc:e5:dc:16:ac:0f:37:13:fc:11:37:ba:08:68:24:
         9e:ed:cd:11:7a:7c:bf:86:2d:dd:e2:61:8a:47:ec:74:ed:a8:
         fa:6f:c8:c9:cd:83:5c:d7:10:52:4d:e0:4f:de:8f:5e:2b:34:
         f8:95:15:11:e5:ee:83:2a:38:0c:8a:9b:40:86:60:a1:64:9d:
         a4:79:7d:37:47:c2:a3:dc:8e:4c:2f:82:c2:fa:b9:bb:40:e6:
         47:53:67:68:02:c5:76:5a:d3:37:f1:f5:89:4f:55:ce:a0:2f:
         54:60:bb:04:08:45:fa:68:4e:d1:4e:ec:e1:b6:e7:5c:0e:1e:
         29:e4:0a:69:79:c8:b9:28:49:ab:1f:c2:73:49:97:35:12:ec:
         53:3b:2a:c1:c3:71:bd:3c:5a:bb:3d:be:6a:a5:3f:f7:b8:f4:
         8d:ac:26:36:9c:c7:ef:a3:17:90:a4:3e:db:53:fc:e9:19:96:
         8f:14:6f:4c:6a:65:06:06:bf:b1:d9:6a:2f:c1:dc:59:08:25:
         f4:55:5f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:24 2026 by rpki-client