Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft
File:                     315EC08E540BCBC870FEB38832274E048E2E1F80.mft (raw, json)
Hash identifier:          C2Kg+xLnhsxnHhm7N0KyYgGO1MOJR+RojCMs0dYWKvw=
Subject key identifier:   EB:E6:DA:0E:67:97:DF:65:60:1B:D9:7D:B9:B2:CD:A5:D9:9C:7D:D6
Authority key identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80
Certificate issuer:       /CN=315EC08E540BCBC870FEB38832274E048E2E1F80
Certificate serial:       1EFA880D2ED3DA9C744D417E6473A70647FAAA24
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft
Manifest number:          48
Signing time:             Tue 28 Jul 2026 21:27:10 +0000
Manifest this update:     Tue 28 Jul 2026 21:22:10 +0000
Manifest next update:     Wed 29 Jul 2026 21:45:10 +0000
Files and hashes:         1: 315EC08E540BCBC870FEB38832274E048E2E1F80.crl (hash: DeNfFm+SLQQUnsB74XDhQC99GL2rtl1IjSXQeFWMRGQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fa:88:0d:2e:d3:da:9c:74:4d:41:7e:64:73:a7:06:47:fa:aa:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315EC08E540BCBC870FEB38832274E048E2E1F80
        Validity
            Not Before: Jul 28 21:22:10 2026 GMT
            Not After : Jul 29 21:45:10 2026 GMT
        Subject: CN=EBE6DA0E6797DF65601BD97DB9B2CDA5D99C7DD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1c:51:bb:09:f3:65:49:c4:17:80:d7:11:a4:
                    3f:cd:9c:64:5c:e4:70:73:6a:c7:76:0a:b2:22:2d:
                    29:b6:e7:d2:e5:bf:23:87:61:d5:a9:a3:ef:ef:1c:
                    62:32:82:ea:26:ea:21:e8:78:61:16:d9:f2:69:13:
                    e1:f3:8e:30:e2:70:aa:80:73:f7:bb:e9:93:bc:3a:
                    71:63:3f:5b:24:48:db:30:19:62:7b:73:13:d1:80:
                    fb:f6:c4:01:ad:01:03:ee:fd:4a:e4:0d:fa:53:82:
                    49:ba:38:c9:3c:35:ae:b9:9a:68:e6:ad:ca:8f:dc:
                    c0:ad:ae:4d:e3:24:f7:2d:b8:53:f1:d8:53:0b:af:
                    be:d8:e2:5f:09:f4:be:06:86:be:f0:43:ff:d2:51:
                    a7:9c:16:5a:88:d3:57:73:e5:57:68:3a:63:de:06:
                    92:be:a7:81:53:de:1d:af:be:b3:3f:7a:60:ac:33:
                    6b:c9:6b:af:cd:b1:35:47:db:50:47:db:41:91:25:
                    c1:3f:bb:6d:b2:ea:d4:d8:77:69:fd:71:7d:ce:5d:
                    f1:b3:34:0a:b9:1f:63:be:2d:fb:10:48:35:b6:34:
                    4e:b8:1c:ce:28:69:9e:0c:c9:78:a7:29:2b:d6:69:
                    22:bd:01:36:ce:d8:8f:c9:27:a6:fb:93:51:f9:82:
                    62:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E6:DA:0E:67:97:DF:65:60:1B:D9:7D:B9:B2:CD:A5:D9:9C:7D:D6
            X509v3 Authority Key Identifier:
                keyid:31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ab:8a:fb:d3:be:e7:5f:91:3c:23:a7:94:34:69:97:1f:23:
         3e:0e:20:73:36:4c:3f:c8:37:c3:29:9a:eb:01:d4:a6:fd:ea:
         4a:72:50:e4:5e:0a:ad:0d:92:24:76:6d:e9:36:94:39:cf:cf:
         4a:8f:d5:ec:8d:f6:19:1d:71:b1:24:9d:d7:a5:30:46:d8:18:
         7a:e1:fa:42:81:c5:de:d5:9d:42:54:b3:1c:66:2a:1b:c9:7d:
         54:b8:94:85:0c:96:00:f4:1b:4b:93:8f:fc:92:1c:95:99:1c:
         45:07:bc:51:32:37:e2:17:36:bb:93:f0:16:bf:97:aa:b6:b7:
         41:04:40:d3:6c:fd:38:be:4c:ba:5c:ba:4b:83:70:0c:af:ae:
         73:ee:60:31:58:ef:4c:3e:39:bf:d6:07:f4:16:9e:79:ac:f0:
         b8:37:a3:2b:50:cf:5b:c8:09:72:79:3e:f5:e3:00:d3:23:06:
         d9:74:5d:8f:0a:b5:9f:f9:1f:10:24:fe:d0:65:b5:ac:d4:e6:
         97:28:aa:9d:2e:1b:82:6a:ed:b0:a6:61:2a:41:a3:8f:97:01:
         53:f3:6c:2f:8d:78:74:b5:2a:0b:66:18:97:7a:6d:a3:22:e3:
         88:62:31:54:d2:4c:78:74:6b:f1:68:a1:44:2c:40:20:19:2e:
         75:24:c8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:22:05 2026 by rpki-client