Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File:                     C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier:          vRXx2hihWoWKT3aDXeSrQwTScPT8jbN80XPXJidbaRA=
Subject key identifier:   99:E0:54:47:50:FE:0F:C3:28:84:E8:0B:61:79:22:37:BF:26:16:5A
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer:       /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial:       52853E498969DA6A337843C8B9FB6798CCC47361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number:          03CC
Signing time:             Sat 13 Jun 2026 01:23:13 +0000
Manifest this update:     Sat 13 Jun 2026 01:18:13 +0000
Manifest next update:     Sun 14 Jun 2026 04:20:13 +0000
Files and hashes:         1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: qgyHNzP0hPQcLPbUtcOko4e2m8g7Vikz6JEO8L3pLTM=)
                          2: AS214723.asa (hash: rkKLIM3Jzl++4c/N1MAbX2VnZd8jPZSTe5gZ4DgYJLI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:85:3e:49:89:69:da:6a:33:78:43:c8:b9:fb:67:98:cc:c4:73:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
        Validity
            Not Before: Jun 13 01:18:13 2026 GMT
            Not After : Jun 14 04:20:13 2026 GMT
        Subject: CN=99E0544750FE0FC32884E80B61792237BF26165A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:f3:32:93:4e:a4:45:37:09:02:cf:77:83:
                    96:20:db:8d:00:4c:9e:f7:c0:93:be:44:84:51:bf:
                    3e:02:73:d3:32:6e:f9:a4:ae:ca:cf:d2:b9:04:a8:
                    bd:92:de:14:fe:4f:2c:c0:7b:70:2b:c5:f1:72:7b:
                    54:f8:01:aa:f1:24:de:ce:b0:47:1e:14:46:72:25:
                    e2:02:d7:3f:f0:c5:75:f9:5c:5f:11:cc:a5:63:44:
                    52:bc:21:a1:e0:eb:80:7b:8b:11:f4:44:6e:59:d0:
                    6e:84:c1:33:d8:05:d4:e1:96:f4:10:69:e1:84:a5:
                    6c:48:b5:e0:1a:c0:4a:c2:c8:9f:66:47:e4:21:95:
                    d5:9d:69:dd:1e:d9:46:e6:e7:f1:72:2a:88:e3:7b:
                    60:19:7c:51:88:7c:78:75:5a:19:2c:2d:82:f9:ad:
                    2b:29:e4:04:38:ea:29:55:bd:0c:49:f0:0a:7d:ff:
                    a1:a7:a8:c8:67:f1:6c:8e:6c:14:a7:c7:3d:f4:a1:
                    85:28:43:51:14:6a:b1:15:c8:34:49:04:89:12:f0:
                    a1:02:fb:ad:f6:38:40:5c:38:67:d1:01:a5:b4:dd:
                    f1:9f:11:3c:b1:65:60:e7:e4:b5:0c:63:4e:56:39:
                    d0:18:bb:52:f4:94:12:8c:4d:32:2a:ca:8c:6d:6c:
                    5f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E0:54:47:50:FE:0F:C3:28:84:E8:0B:61:79:22:37:BF:26:16:5A
            X509v3 Authority Key Identifier:
                keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:32:73:33:26:db:07:91:b7:4b:43:d8:b2:8a:fb:2b:b8:2b:
         3d:e0:c2:62:cf:bf:8a:61:ae:fa:38:61:be:88:d8:50:da:c7:
         ea:72:d4:8f:11:48:17:35:0e:ee:45:04:ee:03:7f:57:34:d1:
         53:0a:27:71:dc:0c:ac:1c:64:e1:ab:ab:75:48:7b:1b:51:c9:
         f6:d6:1e:22:68:3e:0b:5e:73:67:bd:14:73:cb:d1:f5:69:5e:
         12:26:1d:90:3f:a0:93:37:48:f3:0f:9e:a1:52:7a:b6:81:38:
         17:e8:bc:a4:7a:6e:01:8a:b5:8b:86:38:a5:a3:be:dd:13:0b:
         61:6a:48:08:45:2e:6c:98:d1:07:6d:2e:26:1a:d1:37:c6:46:
         aa:86:30:eb:f9:ff:65:8c:af:da:74:a1:94:a4:9b:36:24:71:
         1a:f8:d8:a6:d8:89:81:b8:0e:54:a1:c0:c1:4d:77:9c:19:b2:
         bd:de:15:93:88:12:36:d6:cc:ea:d7:84:90:8a:c6:e6:34:7e:
         41:07:6e:fb:ca:2b:17:81:69:c4:63:51:f9:a0:dc:19:aa:d0:
         fc:68:47:3c:ba:c7:62:ec:8a:46:51:59:3d:a1:36:96:5f:a2:
         32:df:d8:d3:38:e7:e4:70:e1:97:6f:1a:de:ee:b2:21:3a:97:
         61:ab:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:19 2026 by rpki-client