Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File:                     C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier:          qls7jmGhj1Lskz1O9dWRW7gQSiMxz5k1BGHk6Nx03Yc=
Subject key identifier:   A4:4C:54:F7:BE:CE:AF:4F:F4:AF:FA:05:27:92:86:AA:BF:49:5B:B7
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer:       /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial:       629CAC18925F48D915C6739C769D7D2D9478FDBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number:          037E
Signing time:             Thu 16 Apr 2026 16:54:45 +0000
Manifest this update:     Thu 16 Apr 2026 16:49:45 +0000
Manifest next update:     Fri 17 Apr 2026 17:50:45 +0000
Files and hashes:         1: AS214723.asa (hash: rkKLIM3Jzl++4c/N1MAbX2VnZd8jPZSTe5gZ4DgYJLI=)
                          2: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: j8nww55zW7iGtfwGuSDGIv5tpH0+tkjzTxoxovwC0zY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 17:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9c:ac:18:92:5f:48:d9:15:c6:73:9c:76:9d:7d:2d:94:78:fd:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
        Validity
            Not Before: Apr 16 16:49:45 2026 GMT
            Not After : Apr 17 17:50:45 2026 GMT
        Subject: CN=A44C54F7BECEAF4FF4AFFA05279286AABF495BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:22:28:3c:9c:51:65:6c:79:d2:83:cb:46:
                    19:7b:d5:e0:b8:bc:3f:22:84:3d:29:87:6b:68:03:
                    ee:dd:e6:2f:5d:f1:34:7a:2e:07:e7:e4:d5:e1:d3:
                    ba:fd:ca:b9:84:56:6c:91:71:5c:43:0e:b0:53:2f:
                    05:22:c2:4d:f0:c1:b5:b6:af:ea:7d:98:f5:88:87:
                    20:bf:9f:96:1c:dd:55:14:3e:dd:a4:e5:7c:2d:d5:
                    ed:4c:e7:c6:db:98:24:b1:36:8a:04:91:b3:f5:74:
                    15:31:49:16:bf:34:93:07:da:17:01:3a:3b:c1:03:
                    9c:be:eb:38:bf:09:15:0b:aa:6b:b8:8f:8d:ae:3e:
                    d4:89:8a:26:14:32:19:a2:b8:99:30:07:fc:dc:6b:
                    da:f5:fe:eb:ba:4c:65:51:e6:39:e8:e6:e2:50:61:
                    cd:3c:bd:b1:e1:32:ec:cb:90:1e:f2:fa:c0:1a:06:
                    a9:8f:f2:1c:9c:48:b1:54:1c:01:67:54:b1:1c:4b:
                    63:2a:4a:5b:79:a5:45:74:34:57:9c:1a:79:9d:01:
                    18:db:cc:b2:43:56:a0:27:95:5e:7f:6f:4a:a7:90:
                    a4:35:0c:39:4c:f1:a7:8f:6d:ef:b5:41:a1:16:88:
                    fc:fc:29:35:3f:2e:11:92:f3:a6:fd:25:3b:52:0b:
                    39:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4C:54:F7:BE:CE:AF:4F:F4:AF:FA:05:27:92:86:AA:BF:49:5B:B7
            X509v3 Authority Key Identifier:
                keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:96:dc:ab:f9:af:17:e0:7e:75:f3:ad:86:01:e8:b3:a3:1c:
         53:d5:59:b7:87:e0:fe:96:9e:73:e2:89:a1:7f:a0:d8:5f:08:
         57:b5:dd:ca:3d:3f:1f:31:2d:95:1e:82:d6:a4:dc:32:8a:74:
         78:85:58:da:fe:bd:3a:6f:9c:15:24:66:1d:47:ed:05:5d:cc:
         0f:64:b0:d1:c4:b2:34:bc:51:f5:93:46:78:d1:43:a8:28:5d:
         8d:c8:96:84:dc:9c:36:04:79:4b:b0:fe:3b:60:db:55:a0:23:
         37:a4:55:64:3b:de:07:24:6e:ca:06:95:b9:07:a7:0d:da:fa:
         70:09:e0:d0:e6:c6:54:76:28:dd:dc:5d:11:36:a8:90:8e:ed:
         a9:1e:48:d6:b2:64:bb:c5:35:97:fd:7d:48:b9:71:d6:e3:52:
         1d:8a:84:46:91:5b:1c:fb:cb:81:bb:26:ac:f0:9d:4a:30:d3:
         33:f6:ea:a8:4e:3d:f8:9d:1b:53:a3:28:2b:61:35:96:70:61:
         77:eb:de:7e:04:37:df:b5:35:55:a1:fe:ba:48:6c:7b:c9:ab:
         e1:dc:15:0c:ac:73:ab:37:60:5a:15:0b:0b:e2:49:fe:c8:98:
         18:64:ff:ac:22:ca:4c:17:37:9a:50:51:7f:35:86:70:fa:0e:
         8d:a6:d6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:58:31 2026 by rpki-client