Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
File:                     F7DD807E33980D7322171230874230C1DB2A1A7F.mft (raw, json)
Hash identifier:          HFE8CWbLSZf3Tq7rPi5q9AbAQ1KmQktgoa4ha6ua1+0=
Subject key identifier:   6E:43:4D:5A:42:1F:79:D6:98:22:35:4F:4E:31:F6:9B:6E:86:35:9B
Authority key identifier: F7:DD:80:7E:33:98:0D:73:22:17:12:30:87:42:30:C1:DB:2A:1A:7F
Certificate issuer:       /CN=f7dd807e33980d7322171230874230c1db2a1a7f
Certificate serial:       03593A5689E0668C94F7612B1F524FED2178A21C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
Manifest number:          62
Signing time:             Mon 21 Sep 2026 04:39:20 +0000
Manifest this update:     Mon 21 Sep 2026 04:34:20 +0000
Manifest next update:     Tue 22 Sep 2026 16:40:20 +0000
Files and hashes:         1: AS214344.asa (hash: uariAkNcC7BunX/HDd6SiaYS4ed/MPMzbBuNgQzVolM=)
                          2: F7DD807E33980D7322171230874230C1DB2A1A7F.crl (hash: sNjvncLdMe5x9gngBRLZKlqVqMh9H3yEJUYju2aBhrM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:59:3a:56:89:e0:66:8c:94:f7:61:2b:1f:52:4f:ed:21:78:a2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7dd807e33980d7322171230874230c1db2a1a7f
        Validity
            Not Before: Sep 21 04:34:20 2026 GMT
            Not After : Sep 22 16:40:20 2026 GMT
        Subject: CN=6E434D5A421F79D69822354F4E31F69B6E86359B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:5a:8f:5b:a4:ff:af:42:64:d1:ed:0f:43:
                    44:91:b0:0b:df:5a:ff:ab:bf:61:ae:97:8a:b8:59:
                    92:15:dd:22:f3:02:43:ae:c1:ba:f1:f7:d9:ad:49:
                    80:8f:4e:6d:02:ba:f8:a8:42:48:44:40:7f:cf:c3:
                    be:7c:7c:77:e4:61:4a:9f:a5:66:41:4a:42:6b:79:
                    66:47:5f:7c:7e:da:6d:f1:e0:f7:93:82:c9:65:fd:
                    25:dd:d8:26:37:48:cc:60:f7:21:99:84:57:4b:f3:
                    17:13:50:bc:6e:18:93:d5:c0:2d:be:6a:bc:ba:f5:
                    90:4b:fc:ee:44:22:f8:41:82:68:c9:a7:00:3e:92:
                    3f:31:2c:86:1f:8c:13:47:83:46:0b:df:14:09:5d:
                    38:86:2f:0a:ac:ac:6e:bf:93:d4:84:d2:68:69:0d:
                    0f:fd:95:d1:7d:1c:68:61:fc:8f:23:33:01:d5:b3:
                    18:d7:bd:d1:35:8c:47:c5:09:4f:f5:e1:9c:f1:09:
                    b6:a1:e2:37:35:10:f5:73:06:10:a0:2e:85:14:a9:
                    23:92:05:07:22:0e:7c:9d:89:89:6f:e9:e8:3b:99:
                    9d:43:ed:ea:3b:c0:e4:b3:e2:2f:19:10:d7:66:6d:
                    f7:3b:94:b8:74:bd:1b:3a:e5:2e:6f:2f:d7:5c:e2:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:43:4D:5A:42:1F:79:D6:98:22:35:4F:4E:31:F6:9B:6E:86:35:9B
            X509v3 Authority Key Identifier:
                keyid:F7:DD:80:7E:33:98:0D:73:22:17:12:30:87:42:30:C1:DB:2A:1A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:aa:ff:46:6b:8b:42:7c:3b:33:b2:c7:9a:f0:df:5b:02:af:
         75:2d:95:23:c9:63:12:c9:d2:f0:0c:54:57:2d:c8:b9:a3:00:
         54:2c:fe:60:e5:14:82:40:0b:fa:69:0f:aa:64:b5:89:db:46:
         6e:91:da:e1:31:43:85:e8:5c:fa:e1:ab:ee:31:fa:dc:f9:1c:
         c6:04:8f:93:1d:97:2a:a5:b3:1c:a2:4e:56:8d:fa:30:f0:81:
         55:e0:14:a7:ad:0e:89:4d:df:d9:1a:0c:cd:3c:8f:3e:81:1b:
         c2:5b:1a:e9:d6:78:eb:47:68:57:5f:f3:65:8c:76:9b:0b:59:
         99:7d:4a:8e:f1:8e:70:36:47:f8:55:6a:58:c7:24:ba:94:ee:
         24:34:70:2a:1f:de:4f:0d:c6:b2:7d:a5:05:23:ab:09:cb:96:
         48:27:84:e0:66:cd:cd:75:d8:f5:15:c1:a8:ed:41:df:c4:96:
         59:55:88:ec:3d:d2:48:8e:79:e9:15:cd:30:4b:1f:29:de:e8:
         69:d5:6b:42:16:f6:6c:c9:38:0e:01:45:2c:72:55:b0:89:7d:
         d1:80:8a:2f:f9:65:e4:44:a2:66:b1:59:cd:35:2b:c1:69:bb:
         1e:b6:65:a3:e5:28:ca:ef:6f:1d:9b:97:83:e0:99:88:ee:d4:
         1e:5a:44:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:38:43 2026 by rpki-client