Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
File:                     6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft (raw, json)
Hash identifier:          XDAJtaVxM4tje/yJFO0dJgyDVTVqCP12P1+yHwHX3BE=
Subject key identifier:   E3:6D:85:25:F2:62:65:EB:4D:2F:75:15:A4:01:50:74:40:C7:C8:57
Authority key identifier: 64:41:DD:2D:A2:14:77:EC:8B:F2:77:D3:3B:E9:07:2C:E8:5F:92:A8
Certificate issuer:       /CN=6441dd2da21477ec8bf277d33be9072ce85f92a8
Certificate serial:       14666C96F4827F1142CEE57F318CBD9D2203DA55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
Manifest number:          76
Signing time:             Mon 21 Sep 2026 13:44:56 +0000
Manifest this update:     Mon 21 Sep 2026 13:39:56 +0000
Manifest next update:     Tue 22 Sep 2026 17:02:56 +0000
Files and hashes:         1: AS219458.asa (hash: GU61pR45wu8HIE8dLfaSZA9t9gnGAcZbJ0fm1zAhAoE=)
                          2: 6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl (hash: B5Q/97OEUS7d34IgoLSOT+CQmb0JwZho0m5MbG70VPA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:66:6c:96:f4:82:7f:11:42:ce:e5:7f:31:8c:bd:9d:22:03:da:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6441dd2da21477ec8bf277d33be9072ce85f92a8
        Validity
            Not Before: Sep 21 13:39:56 2026 GMT
            Not After : Sep 22 17:02:56 2026 GMT
        Subject: CN=E36D8525F26265EB4D2F7515A401507440C7C857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:f2:e6:3b:11:2f:91:26:0f:28:59:11:61:
                    00:66:70:6b:5d:bb:b6:79:fd:03:04:8a:d3:66:11:
                    46:46:0a:74:6d:1b:07:e5:e5:1d:73:3b:df:de:26:
                    55:28:9a:7a:41:04:5e:77:5d:0f:36:c8:7b:3f:a2:
                    eb:59:d2:f4:24:7e:65:9d:a7:f3:21:ea:66:d4:ab:
                    94:12:1c:bf:9d:dd:4d:0b:99:9c:78:d6:60:59:c0:
                    5c:6e:37:1e:a6:b9:bf:52:b6:58:91:e7:b3:11:35:
                    29:9e:26:29:8a:9a:c0:c7:d7:23:da:5c:68:a5:ff:
                    97:f6:4e:9a:6b:30:ed:02:ed:00:18:f0:47:47:0a:
                    3f:f3:38:da:c5:84:1e:6d:67:06:ec:7b:ef:84:36:
                    7a:4d:4b:23:2b:1e:8a:20:59:08:3a:d4:3e:48:59:
                    83:a3:d1:f8:29:33:41:23:5a:7d:8e:ff:5d:16:a8:
                    a7:7d:ca:a1:96:0c:10:32:21:79:6c:57:9d:0a:34:
                    0a:69:e1:84:e0:84:ae:c2:c7:05:7c:61:14:74:85:
                    46:c3:22:23:33:da:27:28:18:f1:46:23:5a:fd:62:
                    ac:ab:b8:e1:8c:88:5d:4f:a6:2a:2e:81:fd:5e:f5:
                    38:d6:b4:f1:43:fb:82:05:23:9c:2b:e1:b1:d1:55:
                    e9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6D:85:25:F2:62:65:EB:4D:2F:75:15:A4:01:50:74:40:C7:C8:57
            X509v3 Authority Key Identifier:
                keyid:64:41:DD:2D:A2:14:77:EC:8B:F2:77:D3:3B:E9:07:2C:E8:5F:92:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:69:3f:74:27:8a:09:bd:92:ed:21:4b:58:98:46:2b:11:2d:
         f9:2e:be:61:1b:b9:b4:61:5c:df:52:88:67:aa:20:fb:71:9f:
         ac:44:a6:5b:de:36:69:1e:a4:5e:c4:0f:3a:78:2f:96:f7:53:
         99:7f:7d:3e:39:d1:46:ab:51:78:94:da:df:27:ff:5a:d8:02:
         d1:b1:8b:72:c5:5b:47:0b:d0:3c:49:9a:73:d3:50:4a:9b:e4:
         6e:27:35:a8:4c:3a:c2:a1:c9:7b:a9:be:77:84:36:dc:a3:90:
         16:c5:f3:47:b6:fc:1b:8a:88:72:ed:2e:3a:ab:fd:48:3d:e5:
         a4:73:6b:e5:21:60:04:76:70:cd:d9:9a:2b:7c:1d:8b:40:ca:
         ad:47:16:f2:a7:c3:d8:3b:ad:bd:ec:2c:fb:11:80:44:80:3f:
         89:26:57:91:68:d6:17:40:c7:7a:8c:42:9c:c4:13:09:2b:d3:
         2c:8f:4c:b5:65:d5:39:b6:0b:7b:89:80:7e:3d:9b:e9:4a:00:
         cf:80:16:2d:69:c1:67:a9:22:1c:b9:74:61:ad:ce:34:1a:30:
         2b:0f:b3:1b:bc:bc:43:d1:0d:df:c6:fa:ad:ee:94:20:1b:36:
         a6:5d:06:67:24:a3:43:6e:8f:10:6c:32:ca:1e:f4:7d:57:1b:
         bc:43:93:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:22:58 2026 by rpki-client