Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File:                     578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier:          HG7HE8hE8+Kw+69xjJ+lzC+hUneC8DK0ba1MXIc62yY=
Subject key identifier:   9E:6F:32:68:BF:54:82:86:6B:16:C9:3F:CC:23:FD:3A:4A:37:10:7D
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer:       /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial:       11324A33B8F36A007837C3B8452B45F05B68E0D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number:          0241
Signing time:             Fri 17 Apr 2026 03:03:32 +0000
Manifest this update:     Fri 17 Apr 2026 02:58:32 +0000
Manifest next update:     Sat 18 Apr 2026 03:59:32 +0000
Files and hashes:         1: AS215296.asa (hash: l7QnDI/OpnY5Yq7b4HfqMZZEDw/6Wh6mqj/BM8KgG/E=)
                          2: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: 7z1JPAX6cUFRlEdphuOC+RQV0YseWimtds28/2hYeFw=)
                          3: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: O+6twnNOV5ruNsTz6gyqZDCueGHR/39L745XmWi2d5I=)
                          4: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: RGTgCra6z97DL3zPw+EaFuLG0rQZ9DlytQ3X3ko6llc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:32:4a:33:b8:f3:6a:00:78:37:c3:b8:45:2b:45:f0:5b:68:e0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
        Validity
            Not Before: Apr 17 02:58:32 2026 GMT
            Not After : Apr 18 03:59:32 2026 GMT
        Subject: CN=9E6F3268BF5482866B16C93FCC23FD3A4A37107D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:68:3d:8d:aa:b2:cf:75:79:22:86:9b:92:
                    a5:0c:ea:1a:ef:69:d1:62:e9:89:91:15:26:fc:ed:
                    9a:4a:cc:d4:4f:1d:08:3b:50:b9:bb:d1:1c:ad:d5:
                    ff:33:9b:b1:a3:ef:ad:d2:69:51:f9:44:bb:72:a5:
                    05:4c:c4:9d:1c:23:d6:45:e2:87:f4:62:4c:47:d4:
                    39:ec:c4:14:ef:67:55:89:be:79:b0:fd:32:48:ee:
                    2d:9c:9a:84:69:60:03:2c:4a:41:61:78:2c:11:12:
                    e5:2a:ac:06:44:27:f0:45:e3:de:9c:c3:38:75:8a:
                    f5:24:b8:f8:5a:c0:2d:17:d5:c5:ca:80:08:c6:fe:
                    82:d8:b7:25:1e:9a:dd:37:8b:aa:b2:b0:36:20:dd:
                    53:98:dc:9b:8c:29:0c:6e:ad:c0:3a:79:17:dc:b1:
                    d9:65:64:35:51:e0:5b:00:98:5c:a1:df:a3:9e:06:
                    a1:7a:8f:35:2d:47:b3:58:5f:5d:50:7f:20:a1:4b:
                    b3:cb:db:d4:ea:a2:0b:e5:00:aa:38:f7:b6:88:15:
                    c9:5f:3f:dd:20:14:09:72:31:dd:94:2b:5b:53:4c:
                    ac:64:1c:da:77:3d:f9:a4:bf:09:5b:14:9b:16:cb:
                    7f:b2:c8:1e:71:df:3b:82:df:11:ba:e3:cf:80:a9:
                    94:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6F:32:68:BF:54:82:86:6B:16:C9:3F:CC:23:FD:3A:4A:37:10:7D
            X509v3 Authority Key Identifier:
                keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:f3:73:c3:0e:8d:26:12:d7:dd:f7:2a:ce:6c:05:1e:70:1a:
         e4:7d:9e:89:9a:c2:bd:4d:6a:b9:80:2a:8d:0a:68:a2:f3:93:
         34:fa:93:11:d3:5b:fb:fc:33:0a:2e:0c:86:ab:51:00:06:a1:
         5f:94:e1:cb:f1:90:8c:94:73:a1:3a:9b:84:c6:26:b1:8c:75:
         14:6f:23:f6:50:d9:5c:bd:84:b8:eb:f1:6a:60:77:fa:37:fb:
         06:a7:31:b1:fe:ee:a1:5a:24:69:75:9d:a2:aa:57:cd:03:45:
         6f:95:25:79:92:54:0d:1d:23:2b:ba:02:8b:4d:2f:a0:c9:d1:
         65:9b:25:02:25:36:c5:d1:56:81:69:db:64:8e:89:45:fe:24:
         ab:2f:2a:c4:8b:c4:e1:03:54:e5:cf:c8:13:58:7a:2f:d0:5f:
         e6:57:ee:e3:7a:2e:4d:6d:85:79:5c:d3:05:67:ad:46:ce:5a:
         5c:ee:c6:16:87:37:72:d2:89:5b:fd:34:1a:29:c7:16:ae:30:
         c7:76:24:b0:0a:b6:07:c4:fe:5a:8f:2e:b0:c8:15:6e:b0:2e:
         c3:92:06:e6:b4:98:ee:60:4b:db:f7:69:7c:69:88:84:7f:c7:
         9b:fb:cb:28:e7:73:75:bb:e9:52:27:f8:8f:97:26:4e:e4:79:
         c1:11:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:46:34 2026 by rpki-client