Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
File:                     2615B626807D30988381C32656617AE6FD6638B6.mft (raw, json)
Hash identifier:          1R4M+KeVAFXw7F+PMXdieQJcm75tvsVoX+7lsbAiHRw=
Subject key identifier:   94:AC:11:D7:14:49:4A:3F:DC:79:12:57:9C:67:24:2B:BD:C2:74:86
Authority key identifier: 26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
Certificate issuer:       /CN=2615b626807d30988381c32656617ae6fd6638b6
Certificate serial:       429D3DC674BD5AC1CE3EC1E07AD320B5E4571B1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
Manifest number:          01C1
Signing time:             Tue 28 Jul 2026 09:38:50 +0000
Manifest this update:     Tue 28 Jul 2026 09:33:50 +0000
Manifest next update:     Wed 29 Jul 2026 10:51:50 +0000
Files and hashes:         1: 2615B626807D30988381C32656617AE6FD6638B6.crl (hash: PMli6w4Wbqhy/ZB5+JAURLNbWxyoBRFx+p1HqJiIvBE=)
                          2: AS209710.asa (hash: uOB5Z3Fmg18HMKsvzyzZbGRRD3+2nlkihW02xag7eqw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9d:3d:c6:74:bd:5a:c1:ce:3e:c1:e0:7a:d3:20:b5:e4:57:1b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2615b626807d30988381c32656617ae6fd6638b6
        Validity
            Not Before: Jul 28 09:33:50 2026 GMT
            Not After : Jul 29 10:51:50 2026 GMT
        Subject: CN=94AC11D714494A3FDC7912579C67242BBDC27486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9b:d9:a5:c6:a7:69:db:0f:08:7e:f5:c6:35:
                    89:ad:2e:10:99:20:37:bd:92:22:0f:9b:d6:94:b1:
                    a3:a3:8a:7b:a8:90:53:68:2d:db:86:a6:6b:be:e4:
                    52:3c:8c:31:c1:e2:22:d6:54:15:ea:e1:5a:74:7d:
                    af:1a:5f:6e:81:b7:a5:62:58:74:d0:c7:74:65:b4:
                    e3:b4:d4:bf:0b:52:d9:56:c4:f8:86:60:55:00:b5:
                    2a:a2:db:6c:b2:d0:25:b2:46:a3:48:11:c8:09:d4:
                    92:9f:48:81:90:79:8c:fd:0e:51:c1:32:68:ea:e4:
                    53:fc:5d:f7:d5:d3:49:29:fb:bb:a6:d6:42:00:bc:
                    9a:6b:65:d7:09:18:16:c0:c7:81:18:8b:94:67:c7:
                    a4:aa:43:1f:a3:15:a9:7c:2f:df:1d:f3:92:97:67:
                    11:93:78:70:35:64:46:1f:e7:79:9d:77:ed:bd:61:
                    02:f1:8f:6d:71:a5:8a:ee:44:95:fa:23:5e:23:20:
                    25:dc:74:42:ec:de:1e:d4:10:dd:cc:13:55:5b:6b:
                    cd:d9:d3:70:e1:b9:ab:da:4a:b0:37:e7:34:57:c2:
                    6c:61:d5:7d:38:65:d1:f9:8e:1f:06:38:97:16:f0:
                    cb:5a:95:a8:ad:64:6a:3c:54:79:5f:2d:88:62:cb:
                    8c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AC:11:D7:14:49:4A:3F:DC:79:12:57:9C:67:24:2B:BD:C2:74:86
            X509v3 Authority Key Identifier:
                keyid:26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:29:c4:9e:8d:95:1b:b9:a2:0f:1e:85:fc:45:ee:9f:72:60:
         db:43:f4:a6:cd:e9:31:16:43:ee:b7:2b:a8:eb:28:5d:f7:5c:
         36:a4:95:56:d3:a5:2d:a3:85:13:28:b9:d2:47:5d:4e:c0:b4:
         9e:28:64:37:92:a9:ae:73:14:42:e4:61:ce:20:17:d9:3e:ce:
         53:3f:4c:d6:3b:39:c2:ca:26:5f:73:7d:da:d6:64:e6:f7:e7:
         26:b2:21:d6:2b:ca:30:bf:92:5f:e5:4e:d2:63:38:e6:09:bf:
         50:42:9a:fb:91:9c:0a:93:82:47:99:90:51:f4:5d:1f:56:9e:
         e8:76:9f:b2:5b:43:bd:87:01:83:c5:3e:d7:07:73:33:a2:b7:
         4c:20:8c:2a:10:19:ab:df:47:ed:7b:02:fd:2a:73:f0:a9:4b:
         6e:e0:a9:f5:b2:90:8e:56:ac:13:43:fe:ba:ce:d2:b4:e3:52:
         69:a8:1d:14:bb:44:aa:d7:8f:a0:bb:45:0d:4c:26:0b:65:92:
         f1:c7:1c:0c:b5:28:30:1c:d1:6c:13:9c:51:7b:bf:16:3f:e6:
         24:49:b2:35:a7:1f:fa:36:f2:af:d3:ed:29:48:22:85:30:a2:
         97:50:25:c7:6d:fd:ef:80:2b:3f:e4:f3:09:19:24:ae:9f:42:
         57:9b:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:20:54 2026 by rpki-client