Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
File:                     F7DD807E33980D7322171230874230C1DB2A1A7F.mft (raw, json)
Hash identifier:          dw0WlKExtMTDgKiz/XlNhx0lSUv68kuAbSUyAMLn8wE=
Subject key identifier:   EA:BE:B5:F4:E0:65:44:63:78:D1:01:D3:D9:5A:3D:59:AE:5D:8F:D2
Authority key identifier: F7:DD:80:7E:33:98:0D:73:22:17:12:30:87:42:30:C1:DB:2A:1A:7F
Certificate issuer:       /CN=f7dd807e33980d7322171230874230c1db2a1a7f
Certificate serial:       1CCFC4B50902B201F446D759041591C6A4ADFD0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
Manifest number:          C1
Signing time:             Sun 15 Nov 2026 12:24:54 +0000
Manifest this update:     Sun 15 Nov 2026 12:19:54 +0000
Manifest next update:     Tue 17 Nov 2026 02:42:54 +0000
Files and hashes:         1: F7DD807E33980D7322171230874230C1DB2A1A7F.crl (hash: EGiCXyOTflmgctbdqkXMIqgjVriJc4AkbB/eTCpxBfg=)
                          2: AS214344.asa (hash: uariAkNcC7BunX/HDd6SiaYS4ed/MPMzbBuNgQzVolM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cf:c4:b5:09:02:b2:01:f4:46:d7:59:04:15:91:c6:a4:ad:fd:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7dd807e33980d7322171230874230c1db2a1a7f
        Validity
            Not Before: Nov 15 12:19:54 2026 GMT
            Not After : Nov 17 02:42:54 2026 GMT
        Subject: CN=EABEB5F4E065446378D101D3D95A3D59AE5D8FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:00:83:b2:c7:f5:28:c4:6f:9d:8f:c5:a1:
                    a9:18:62:cb:49:10:25:76:53:b9:45:3a:95:e6:08:
                    05:02:18:70:70:dd:e3:f8:b0:74:ab:4c:b0:e4:8e:
                    22:4f:b7:a5:ce:7b:24:fc:7c:28:cf:88:0f:0f:ca:
                    a6:33:a8:d3:83:5a:12:9d:bf:d3:e3:65:57:05:e4:
                    55:38:3c:42:81:01:0f:64:c1:47:e9:6d:ff:a7:a0:
                    d2:4a:ea:0b:79:da:bb:ce:1d:ec:64:a7:e7:53:2c:
                    ba:7e:21:86:17:7c:ed:12:85:7d:e2:1b:2d:3d:02:
                    07:4d:7d:64:eb:81:eb:00:19:96:c2:06:7c:ce:d8:
                    06:bf:c1:75:ca:65:1d:d7:3d:70:6e:3b:ef:7d:de:
                    91:4b:e5:4c:0d:d5:8c:6e:ce:4d:d9:ca:9d:20:3e:
                    fb:9b:ba:b8:35:a9:da:35:7f:67:95:c2:2c:f5:8f:
                    65:c9:ab:0e:70:a7:57:c9:ae:85:f6:08:47:34:c7:
                    c1:a9:3e:47:97:b1:ed:78:c3:09:01:8d:94:e4:47:
                    69:b8:0a:d5:7b:ad:7c:22:97:81:06:14:33:ff:75:
                    ba:05:b0:3d:55:51:1d:55:35:be:eb:8b:3f:4f:54:
                    79:4b:6a:c2:ff:68:7b:64:6a:60:f7:e5:ab:52:2f:
                    db:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BE:B5:F4:E0:65:44:63:78:D1:01:D3:D9:5A:3D:59:AE:5D:8F:D2
            X509v3 Authority Key Identifier:
                keyid:F7:DD:80:7E:33:98:0D:73:22:17:12:30:87:42:30:C1:DB:2A:1A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:79:d3:76:96:ca:49:8e:99:8b:82:fb:33:20:f3:3c:4e:74:
         68:38:50:aa:03:61:fe:87:9c:7b:f0:ef:9d:2c:e0:28:fa:d6:
         cb:13:82:f4:c4:82:46:aa:1f:24:db:37:fe:48:f0:28:39:ac:
         0a:db:dc:c6:9f:43:72:b7:27:3d:ad:37:6c:a5:1e:f9:df:ec:
         03:97:62:59:08:43:33:63:67:66:09:71:c6:11:c4:bf:51:ce:
         90:68:aa:e8:dd:f3:a4:c6:7c:28:fe:2f:55:84:69:92:b2:c5:
         02:a3:47:84:4c:3e:ed:6c:f6:14:9b:4c:cb:54:2d:0f:88:1f:
         1d:bd:3d:10:ec:35:d9:f9:a1:2c:71:30:e1:9a:87:80:73:2b:
         25:e8:ab:e7:fe:24:6a:6d:45:c3:ec:33:67:94:07:9a:2c:58:
         d5:07:fe:92:c6:40:59:2d:c4:8b:9f:43:35:27:9f:11:e6:ec:
         18:32:1f:81:f6:0d:82:d3:36:dd:b3:2a:00:f8:67:71:6e:4b:
         8a:56:ac:f2:fd:53:48:50:1c:41:35:c0:cc:fc:04:aa:08:92:
         cc:ea:47:ed:e6:69:9f:f1:32:51:47:29:6c:e6:45:71:82:44:
         41:6d:30:11:c0:08:80:93:f4:30:be:35:e7:bb:00:5e:6a:e0:
         6f:e9:57:62
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHM/EtQkCsgH0RtdZBBWRxqSt/QowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjdkZDgwN2UzMzk4MGQ3MzIyMTcxMjMwODc0MjMwYzFk
YjJhMWE3ZjAeFw0yNjExMTUxMjE5NTRaFw0yNjExMTcwMjQyNTRaMDMxMTAvBgNV
BAMTKEVBQkVCNUY0RTA2NTQ0NjM3OEQxMDFEM0Q5NUEzRDU5QUU1RDhGRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtngCDssf1KMRvnY/FoakYYstJ
ECV2U7lFOpXmCAUCGHBw3eP4sHSrTLDkjiJPt6XOeyT8fCjPiA8PyqYzqNODWhKd
v9PjZVcF5FU4PEKBAQ9kwUfpbf+noNJK6gt52rvOHexkp+dTLLp+IYYXfO0ShX3i
Gy09AgdNfWTrgesAGZbCBnzO2Aa/wXXKZR3XPXBuO+993pFL5UwN1Yxuzk3Zyp0g
Pvuburg1qdo1f2eVwiz1j2XJqw5wp1fJroX2CEc0x8GpPkeXse14wwkBjZTkR2m4
CtV7rXwil4EGFDP/dboFsD1VUR1VNb7riz9PVHlLasL/aHtkamD35atSL9uLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU6r619OBlRGN40QHT2Vo9Wa5dj9IwHwYDVR0j
BBgwFoAU992AfjOYDXMiFxIwh0IwwdsqGn8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1
MjMyLzAvRjdERDgwN0UzMzk4MEQ3MzIyMTcxMjMwODc0MjMwQzFEQjJBMUE3Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5MkFmak9ZRFhNaUZ4SXdoMEl3d2Rz
cUduOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hMmUyNTdkZi05
OTMwLTQ0ZTYtODY2ZS00MWE0ODk4NjUyMzIvMC9GN0REODA3RTMzOTgwRDczMjIx
NzEyMzA4NzQyMzBDMURCMkExQTdGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3nTdpbKSY6Zi4L7MyDz
PE50aDhQqgNh/oece/DvnSzgKPrWyxOC9MSCRqofJNs3/kjwKDmsCtvcxp9Dcrcn
Pa03bKUe+d/sA5diWQhDM2NnZglxxhHEv1HOkGiq6N3zpMZ8KP4vVYRpkrLFAqNH
hEw+7Wz2FJtMy1QtD4gfHb09EOw12fmhLHEw4ZqHgHMrJeir5/4kam1Fw+wzZ5QH
mixY1Qf+ksZAWS3Ei59DNSefEebsGDIfgfYNgtM23bMqAPhncW5Lilas8v1TSFAc
QTXAzPwEqgiSzOpH7eZpn/EyUUcpbOZFcYJEQW0wEcAIgJP0ML4157sAXmrgb+lX
Yg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:46:13 2026 by rpki-client