Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
File:                     63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft (raw, json)
Hash identifier:          PXKKg6warSNTuyftk7kq2kTWqIRkkwco2PmoWdW4lK4=
Subject key identifier:   3E:B2:11:3F:1F:A0:02:55:9B:04:13:1B:1C:B7:48:1F:B7:DB:14:4C
Authority key identifier: 63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
Certificate issuer:       /CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Certificate serial:       5DE516415E1C8E7B525BE95F763B6E175A6A526E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
Manifest number:          0385
Signing time:             Sun 01 Mar 2026 22:46:42 +0000
Manifest this update:     Sun 01 Mar 2026 22:41:42 +0000
Manifest next update:     Tue 03 Mar 2026 00:37:42 +0000
Files and hashes:         1: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl (hash: coyG67GZsyFtd3RvLHz1nx5zUO8wwp6055caf0ejrEg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e5:16:41:5e:1c:8e:7b:52:5b:e9:5f:76:3b:6e:17:5a:6a:52:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
        Validity
            Not Before: Mar  1 22:41:42 2026 GMT
            Not After : Mar  3 00:37:42 2026 GMT
        Subject: CN=3EB2113F1FA002559B04131B1CB7481FB7DB144C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a2:a0:fe:21:45:fa:6e:55:20:ac:13:c6:f9:
                    04:e0:62:72:e3:c4:a3:e1:05:50:df:24:95:c9:b4:
                    f7:a1:34:d5:19:ce:e0:2f:e8:fa:a8:de:72:cb:fc:
                    6b:f1:a5:80:93:8f:0d:14:b9:a7:1b:18:0b:be:fb:
                    98:c5:f0:3c:a0:42:49:20:c5:4d:1c:d1:77:24:22:
                    67:69:80:d4:21:d5:7e:ab:3a:35:0e:2c:6e:f3:1e:
                    e0:2d:bf:40:79:e3:ab:26:45:4c:ba:de:19:d5:c6:
                    64:85:e7:2c:e6:41:f5:47:13:ba:a6:61:1a:82:50:
                    4e:4e:8e:ba:d0:a1:95:06:8f:b6:5f:ed:ea:eb:32:
                    1d:ff:0b:b5:79:cb:12:32:cb:58:a7:2c:82:90:34:
                    ca:af:63:31:ce:ad:8d:db:b3:69:c2:36:59:87:25:
                    ba:ab:79:ba:14:88:c3:60:af:52:8f:91:0c:81:a3:
                    c5:25:f3:2f:f7:46:47:1c:01:a4:f4:5f:49:f7:51:
                    ff:5f:de:07:cb:71:2e:1b:8d:1a:75:bf:43:fe:43:
                    43:4a:6e:f1:45:e4:f5:8f:eb:21:50:ac:29:da:0c:
                    1a:94:ce:f2:bf:8e:af:4e:c9:1c:7a:1f:a3:e7:18:
                    c2:93:ca:65:3b:99:3f:d5:1e:98:94:38:90:3b:2f:
                    7b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B2:11:3F:1F:A0:02:55:9B:04:13:1B:1C:B7:48:1F:B7:DB:14:4C
            X509v3 Authority Key Identifier:
                keyid:63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:a5:45:76:0d:40:bf:77:3e:75:73:7a:48:2e:1c:9b:3a:76:
         f5:08:f7:65:08:f0:75:7d:bb:dd:1e:c5:e2:8f:63:d5:0c:23:
         02:15:2a:86:50:0f:0a:5d:b2:2a:bc:f2:b0:f7:07:5d:de:62:
         0f:95:46:75:4d:6d:23:19:1d:6b:96:42:fd:1d:63:c0:d6:0b:
         cf:9a:80:c6:88:17:18:bf:57:8a:c2:d3:5e:8b:d8:a2:4e:b3:
         53:c7:fc:68:4e:67:9a:c7:77:f1:30:9f:4d:ea:29:f4:98:65:
         90:13:56:fa:9f:0c:c9:58:dc:46:2d:d1:3f:63:41:97:8b:8f:
         c8:7c:9c:08:f5:e9:db:3c:14:a0:27:95:a4:1c:6a:60:87:92:
         57:5d:75:0c:2d:09:ca:d6:23:b2:9d:77:6a:77:d1:4e:d0:e8:
         29:e6:79:d3:5b:15:d7:c2:db:f9:22:4c:cb:d4:44:a3:9a:a9:
         19:95:0c:d1:83:b6:7c:d1:e1:56:85:92:00:53:73:97:0d:50:
         ef:11:b0:20:48:8b:21:46:37:7c:31:11:ff:35:f6:09:ed:20:
         59:cd:b7:be:84:73:06:22:21:bf:64:da:3e:98:01:cf:15:cf:
         60:2b:2d:c6:3f:2f:80:03:ed:3b:72:ed:8a:e1:f3:ab:47:a0:
         ce:b1:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:26 2026 by rpki-client