Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File:                     578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier:          TaVxqnxXhQXiPK4hvRBs9fGH2u32GC1rbaS+CnMpvWo=
Subject key identifier:   1C:8B:2A:65:04:11:D9:63:13:BB:F5:0A:74:E5:DD:4A:96:25:F9:6F
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer:       /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial:       7028E0583E45DC65FB247B0202EBAC93ED9DEA7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number:          02CB
Signing time:             Wed 29 Jul 2026 03:23:50 +0000
Manifest this update:     Wed 29 Jul 2026 03:18:50 +0000
Manifest next update:     Thu 30 Jul 2026 05:11:50 +0000
Files and hashes:         1: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: acySa4hsp02+tA+Lo5+E4r77GWZZyaveq0PCbdQ8ExA=)
                          2: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: RGTgCra6z97DL3zPw+EaFuLG0rQZ9DlytQ3X3ko6llc=)
                          3: AS215296.asa (hash: yH3b51K2REyHiosn6A1Cdqy8Kzj6g5PC130VrBNpKy4=)
                          4: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: O+6twnNOV5ruNsTz6gyqZDCueGHR/39L745XmWi2d5I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:28:e0:58:3e:45:dc:65:fb:24:7b:02:02:eb:ac:93:ed:9d:ea:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
        Validity
            Not Before: Jul 29 03:18:50 2026 GMT
            Not After : Jul 30 05:11:50 2026 GMT
        Subject: CN=1C8B2A650411D96313BBF50A74E5DD4A9625F96F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:a0:fe:aa:2f:42:44:f1:9e:d1:26:5a:a0:
                    2d:12:5f:60:80:76:71:a7:6f:f9:26:1e:fa:86:16:
                    bd:3b:ce:ab:00:df:6e:e0:60:7c:68:cb:65:a3:e9:
                    b3:97:32:f4:fd:2b:76:66:05:09:90:db:2a:1b:d0:
                    fe:af:66:25:20:d4:23:4f:6a:e2:a3:84:fe:6a:9a:
                    ce:ce:3f:81:5d:6a:59:60:d1:c8:7d:14:6b:aa:ff:
                    80:ec:f3:73:a5:33:53:14:37:a5:11:9d:4c:4c:f3:
                    05:99:c6:8d:b9:44:f0:1b:ba:99:de:06:80:4d:61:
                    b4:ce:e5:23:00:fd:78:5b:72:a6:30:e7:29:80:05:
                    e2:38:1d:55:ac:10:39:52:af:4f:77:37:99:22:53:
                    8c:21:94:e7:d8:2b:c5:13:da:fd:7e:f5:37:2e:19:
                    08:4a:8a:e3:db:55:80:15:a0:ea:c4:84:8b:20:ce:
                    58:a9:3d:24:4d:79:87:aa:84:fc:2c:6c:8d:f9:11:
                    dd:d1:14:30:bb:68:26:60:72:00:a4:54:b2:2e:42:
                    c6:4c:89:96:40:61:e8:7f:93:83:e5:78:aa:16:7b:
                    e0:3e:a5:54:09:1e:2b:c8:66:73:f9:f2:7f:67:91:
                    b6:5a:e0:58:44:bb:e8:ac:1c:1a:92:d7:78:72:da:
                    2f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8B:2A:65:04:11:D9:63:13:BB:F5:0A:74:E5:DD:4A:96:25:F9:6F
            X509v3 Authority Key Identifier:
                keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:8f:05:83:10:f0:4b:34:d0:d6:ae:af:2b:d9:45:c9:69:
         bd:e6:d8:85:1f:14:b1:f9:8c:e3:38:3a:ba:75:7f:cd:fc:73:
         60:9f:bf:04:3e:69:5f:6b:6b:40:e1:9c:ae:62:98:b5:69:b7:
         40:d8:74:69:5b:38:71:be:b3:ea:46:b8:8e:49:20:05:dd:9d:
         24:6c:83:7c:38:fd:c0:14:a6:8e:b4:37:da:4b:fa:df:7c:55:
         c2:65:06:7f:54:38:6e:e2:77:83:ca:2f:06:c6:24:05:80:39:
         44:08:f2:4d:a3:a6:2d:54:0e:88:c7:33:65:af:a9:36:65:a6:
         2e:86:e5:3a:c0:7b:1b:e9:3b:9e:cf:fa:56:a5:dd:40:d9:39:
         fa:d0:de:ff:d3:1f:94:16:3b:25:95:aa:14:e9:77:c3:e4:c7:
         fd:60:61:74:85:fd:77:86:46:04:ac:1d:ce:2b:fb:c8:bd:21:
         4d:cc:78:f5:f4:34:ad:42:b3:a2:f1:65:ff:29:38:0e:6b:e2:
         94:d1:8c:67:33:f9:db:3b:33:b1:c2:f2:ad:6e:fd:17:77:74:
         aa:b7:c2:3a:3e:e5:2f:88:86:5b:7e:2e:07:0c:4c:0d:b3:86:
         56:4a:cd:f6:14:f6:cd:0d:24:04:f6:7b:ea:74:60:a0:10:e5:
         d9:f0:7c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:34 2026 by rpki-client