Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File:                     7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier:          zD93NV32H+ubr3oCIP0L5Fs7V+TTsFvmhn9Zi9epJJw=
Subject key identifier:   D6:18:23:8C:93:3F:BA:D6:52:8B:71:2B:D8:F8:DE:09:AB:E4:C5:CD
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       2806DB48522625BA0BBF45D5444E993BDD1B7CBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number:          03C0
Signing time:             Tue 28 Jul 2026 09:40:09 +0000
Manifest this update:     Tue 28 Jul 2026 09:35:09 +0000
Manifest next update:     Wed 29 Jul 2026 12:24:09 +0000
Files and hashes:         1: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: Rmtazp9pURexP7aFT1dOII0TGTjKJV0baPOeZ3gJaQ0=)
                          2: AS215849.asa (hash: QZI6Yvoi4hUBSRXS5p8Ju6CY1eYmF0fNOYB66ntflGk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:06:db:48:52:26:25:ba:0b:bf:45:d5:44:4e:99:3b:dd:1b:7c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Jul 28 09:35:09 2026 GMT
            Not After : Jul 29 12:24:09 2026 GMT
        Subject: CN=D618238C933FBAD6528B712BD8F8DE09ABE4C5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:31:10:96:3b:56:6e:5a:44:15:f5:f8:2a:d1:
                    18:5c:88:51:32:49:7f:c9:19:1d:14:59:b1:e6:18:
                    91:7c:c3:2b:22:5c:e5:60:39:7a:0b:59:1b:9a:a0:
                    67:9b:bd:c5:98:9a:bb:3f:e0:5b:a4:bb:bb:13:be:
                    fe:ff:6c:2f:99:39:66:92:a9:38:87:f4:fe:9e:a4:
                    38:b6:34:19:b7:14:4f:57:ec:ed:d0:b6:8c:52:27:
                    d2:9c:33:c7:f8:e9:ee:87:39:36:ba:d5:09:ee:58:
                    46:f5:47:25:ae:fc:54:eb:e5:98:b2:e8:eb:1f:fa:
                    eb:09:8c:5a:e8:e1:0b:82:ba:ef:c2:57:cb:d5:6b:
                    ef:62:10:73:ba:46:b9:f7:ce:38:3d:90:c7:66:4a:
                    43:8a:43:be:f6:25:41:b2:3d:68:b7:48:69:86:f8:
                    1c:8b:86:d9:31:65:26:28:dd:73:09:35:c3:a6:de:
                    4c:ba:5c:f3:03:f1:b5:83:33:ef:29:7d:4d:f9:2d:
                    fb:ec:05:a7:ca:eb:d6:8f:13:41:f9:41:d2:c5:fa:
                    e2:5c:25:c3:c4:9c:b4:da:47:19:57:ea:ad:0b:34:
                    04:ea:7b:74:5c:b6:0c:bb:61:01:6d:0a:1b:a1:1b:
                    54:e8:79:8f:44:7e:be:6d:2c:78:16:d4:39:42:9b:
                    41:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:18:23:8C:93:3F:BA:D6:52:8B:71:2B:D8:F8:DE:09:AB:E4:C5:CD
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:46:0d:6f:9d:50:fb:1c:03:9c:e0:39:ce:2a:73:7d:33:12:
         cb:22:fe:ed:03:86:db:03:57:d8:cf:27:6e:24:f9:31:c3:f6:
         06:f3:f0:a2:bf:8b:d5:d9:1c:55:44:be:c0:b9:8f:57:dc:8a:
         49:49:a2:ca:83:5b:a4:32:7a:0a:1b:89:4a:b5:ab:7a:bb:8f:
         4b:08:e6:16:30:57:08:dd:88:2c:c5:78:2b:86:12:73:26:4f:
         77:9c:88:ce:2a:32:b7:b0:81:7f:a4:7a:04:e0:14:1a:8a:04:
         0a:c8:2f:c8:50:ba:99:91:98:a7:a0:fd:e8:07:b7:fa:13:36:
         20:0c:75:42:cd:a3:74:76:63:12:cd:97:fe:43:05:80:fc:db:
         c8:3c:c3:50:c6:ff:77:8c:a1:f5:4f:e2:21:5b:fc:42:7e:33:
         5a:d4:49:4f:d3:88:dd:b8:69:95:20:6a:8f:07:05:00:9e:50:
         92:80:4d:df:83:42:62:fb:d0:8e:b8:aa:c8:f0:03:48:d2:57:
         64:44:f2:bc:8e:c4:cb:95:3b:2c:c5:a3:53:5f:ed:cd:4d:45:
         ae:3e:97:01:59:a9:f8:a6:7f:86:e1:ee:47:b9:59:e5:a5:06:
         fd:6f:f8:67:30:19:96:9b:59:07:2a:01:d2:81:0a:ba:14:e8:
         22:9d:1d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:23 2026 by rpki-client