Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/0F1E55458927A51BBAEB387F215F753CEDFA946B.mft
File:                     0F1E55458927A51BBAEB387F215F753CEDFA946B.mft (raw, json)
Hash identifier:          xpRcwGHSiToR8uK5U+UExXcxTH24Kl3xsuGlbR69Kdg=
Subject key identifier:   7F:CD:B0:7A:49:09:A9:FA:A4:AB:73:44:87:A1:A5:98:AD:E1:31:F5
Authority key identifier: 0F:1E:55:45:89:27:A5:1B:BA:EB:38:7F:21:5F:75:3C:ED:FA:94:6B
Certificate issuer:       /CN=0f1e55458927a51bbaeb387f215f753cedfa946b
Certificate serial:       7BBBEF78F614D0C8AA07CA344184CB53D07EC8E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dx5VRYknpRu66zh_IV91PO36lGs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/0F1E55458927A51BBAEB387F215F753CEDFA946B.mft
Manifest number:          20
Signing time:             Sat 28 Feb 2026 19:19:51 +0000
Manifest this update:     Sat 28 Feb 2026 19:14:51 +0000
Manifest next update:     Sun 01 Mar 2026 23:05:51 +0000
Files and hashes:         1: AS60742.asa (hash: qe8BdgGJzSp6jBz4nnAO0xY9cxMPKyS7eNNxlBYfKf4=)
                          2: 0F1E55458927A51BBAEB387F215F753CEDFA946B.crl (hash: 09OO28Ogc6IMP2mJxS981krMe5iOZ7tKPcON2ajtlMI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/0F1E55458927A51BBAEB387F215F753CEDFA946B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/0F1E55458927A51BBAEB387F215F753CEDFA946B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dx5VRYknpRu66zh_IV91PO36lGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Mar 2026 23:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bb:ef:78:f6:14:d0:c8:aa:07:ca:34:41:84:cb:53:d0:7e:c8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f1e55458927a51bbaeb387f215f753cedfa946b
        Validity
            Not Before: Feb 28 19:14:51 2026 GMT
            Not After : Mar  1 23:05:51 2026 GMT
        Subject: CN=7FCDB07A4909A9FAA4AB734487A1A598ADE131F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:e4:3a:6d:2a:9c:96:c6:87:e9:fe:6e:d2:
                    21:b8:cd:7a:51:f5:f3:de:43:5c:27:65:32:c4:5b:
                    bf:c0:4b:ec:11:e1:00:11:82:88:17:c3:14:ba:9f:
                    35:25:2d:13:0c:5b:e1:b5:ee:b2:13:41:2e:c8:cd:
                    35:2b:43:7e:d0:fb:6a:81:a9:fe:2d:8a:61:ea:b6:
                    30:1e:3d:2f:2f:02:9d:37:c4:aa:49:63:2d:1c:30:
                    4d:5e:c1:3e:87:d5:d0:fa:f5:ae:e6:8f:52:1c:d3:
                    ea:c3:3d:00:0e:15:0d:d4:fc:3c:ef:54:20:a5:25:
                    b9:3f:bd:5a:f1:6d:03:0e:09:c4:ed:6b:81:1b:8e:
                    25:23:de:71:8a:1b:e6:98:2a:0d:74:36:64:f6:9a:
                    c3:b5:2f:aa:58:dc:3c:ca:12:05:14:30:3a:4a:3b:
                    69:0a:7c:ec:39:03:87:17:89:8f:a5:33:ab:cb:ce:
                    84:32:62:c6:ca:50:70:f8:33:42:9d:72:30:ee:00:
                    e1:09:27:98:60:0a:1f:21:33:5e:db:05:df:05:88:
                    19:8c:77:e7:99:d9:57:d2:19:60:b9:04:c8:2e:c1:
                    f1:5a:44:9d:80:79:06:80:40:1a:90:f3:fb:6f:86:
                    19:07:73:84:48:2e:2a:76:1a:19:39:57:ee:aa:04:
                    69:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CD:B0:7A:49:09:A9:FA:A4:AB:73:44:87:A1:A5:98:AD:E1:31:F5
            X509v3 Authority Key Identifier:
                keyid:0F:1E:55:45:89:27:A5:1B:BA:EB:38:7F:21:5F:75:3C:ED:FA:94:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/0F1E55458927A51BBAEB387F215F753CEDFA946B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx5VRYknpRu66zh_IV91PO36lGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/0F1E55458927A51BBAEB387F215F753CEDFA946B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:25:25:b7:08:bb:1d:39:fe:48:13:48:c5:d7:bd:a2:b8:83:
         3c:06:09:dc:39:8a:b3:e1:9f:1c:f6:da:21:fe:ba:d5:3d:e4:
         8f:92:aa:cf:de:35:1e:a8:3e:d4:3f:84:40:4e:ae:73:a0:ba:
         fc:10:45:b8:2f:30:c6:05:60:e4:e9:79:4a:35:a0:af:c0:b3:
         f9:75:3e:94:4a:a2:2b:83:15:54:83:0f:22:31:0f:61:3d:96:
         00:9f:37:c0:65:a2:68:e0:b9:87:c5:56:9c:3b:63:a5:ce:3a:
         13:fe:76:4f:51:43:17:86:5c:67:31:94:8f:b2:29:38:fd:d6:
         9a:43:42:3b:a9:5a:96:9b:4d:e9:04:bf:b3:c1:ca:b8:b9:e6:
         97:ea:c4:46:6c:8b:27:f8:32:ff:d7:47:e8:bb:12:9b:41:7a:
         26:fe:27:08:66:b0:d9:e3:8d:3c:94:29:61:6a:5b:57:74:e3:
         24:3b:a4:f3:15:fc:02:b5:72:ae:f7:60:c6:e2:d8:5d:f1:dc:
         6b:3e:24:e1:37:cc:5e:97:cc:72:0a:89:71:f1:22:0b:f1:af:
         a9:eb:4e:15:aa:de:8b:d1:d6:d2:61:95:7a:c4:ae:fe:ca:1b:
         6b:98:59:7a:02:6b:1b:b1:df:d3:34:19:0a:b8:14:28:f8:cd:
         3b:e4:8f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:12 2026 by rpki-client