Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File:                     578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier:          HSbE6ckvV4OYfLFhVxDrSlIKEbl77lIfY0FVDqoWB8I=
Subject key identifier:   5F:45:8C:08:1D:A9:48:F1:ED:D7:92:C2:9A:F9:B4:53:CD:43:71:EE
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer:       /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial:       3DE47A5F289C25FF6DA46340C2381E66443F5283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number:          0316
Signing time:             Tue 22 Sep 2026 20:08:46 +0000
Manifest this update:     Tue 22 Sep 2026 20:03:46 +0000
Manifest next update:     Wed 23 Sep 2026 23:23:46 +0000
Files and hashes:         1: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: 3kZfFBWGJ4zb+Y+WNWh2ZElNuvjsoztgXemCwS2RRF4=)
                          2: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: RGTgCra6z97DL3zPw+EaFuLG0rQZ9DlytQ3X3ko6llc=)
                          3: AS215296.asa (hash: wFA1y8Mnf5Ci0ZKEZzVCDvQGgcyuEtOYdw3YOSL1sk0=)
                          4: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: O+6twnNOV5ruNsTz6gyqZDCueGHR/39L745XmWi2d5I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e4:7a:5f:28:9c:25:ff:6d:a4:63:40:c2:38:1e:66:44:3f:52:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
        Validity
            Not Before: Sep 22 20:03:46 2026 GMT
            Not After : Sep 23 23:23:46 2026 GMT
        Subject: CN=5F458C081DA948F1EDD792C29AF9B453CD4371EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:83:44:01:7a:8f:96:65:9f:91:12:a3:29:
                    87:10:88:ef:d9:55:a7:73:00:09:1a:0c:85:6f:03:
                    b7:07:00:5e:f2:28:af:42:e6:af:4c:c6:51:a3:28:
                    ff:1d:57:7c:b0:33:38:de:d6:ae:a5:6a:33:bb:a4:
                    05:bd:c8:25:1c:31:5d:8f:b4:a0:ef:99:82:ef:3c:
                    af:34:0c:17:7b:15:07:1d:23:74:96:e8:91:d4:17:
                    0d:28:37:d2:0d:8c:2f:32:63:a0:80:ae:6d:f5:b1:
                    ba:ae:a0:1f:2e:59:4b:f2:0e:06:b6:d8:db:f6:4d:
                    11:98:00:f2:a9:0c:f3:8d:5b:23:45:9b:61:80:e3:
                    d5:c2:80:57:fd:db:7c:8d:1f:dc:84:06:88:d7:63:
                    c7:33:8f:5a:88:a4:de:8e:3e:9e:99:76:ec:89:76:
                    64:58:bc:a5:75:13:8d:36:8b:e7:df:4f:d7:1d:b4:
                    cb:c4:9e:d5:cf:48:9a:41:eb:56:a3:14:6e:bc:3b:
                    d7:fe:05:80:e7:dd:31:f9:c9:1f:50:68:e5:1e:80:
                    40:84:1a:6a:00:c1:d0:5d:50:fd:6e:d3:de:da:22:
                    53:06:1d:b7:3b:f3:d0:27:f6:22:38:f7:83:17:e7:
                    bd:d7:2f:72:67:66:4e:44:28:37:91:c4:56:11:3e:
                    b9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:45:8C:08:1D:A9:48:F1:ED:D7:92:C2:9A:F9:B4:53:CD:43:71:EE
            X509v3 Authority Key Identifier:
                keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:86:96:d7:1b:70:dc:8c:f1:5b:27:f2:cf:ba:a9:4b:e7:c7:
         e6:72:f3:0a:3b:ac:b9:12:6d:7b:50:b6:29:bb:9d:72:e2:ed:
         67:11:24:04:06:9a:59:72:b0:30:67:3f:9b:aa:5d:83:50:68:
         d6:09:ce:ab:13:a1:e2:85:2c:dd:47:2a:f3:86:7a:1b:3c:46:
         45:8e:51:6c:7a:7e:4d:d1:19:a4:4e:dc:f7:25:11:ef:cf:d3:
         ae:fe:bc:3d:79:2c:7b:b3:f3:b8:5d:59:d1:97:28:d7:c0:53:
         b6:ce:9d:34:d3:4f:2e:81:6b:8c:3c:78:8a:fe:be:24:a6:fb:
         6d:b9:d5:19:8a:52:d3:34:58:f6:e2:e4:7e:5c:a0:e3:d3:75:
         cc:45:a5:e4:1f:5f:85:08:9a:d4:78:6e:67:1b:f8:8c:f4:d3:
         18:c5:4e:ee:d7:f3:5e:00:fd:63:6f:67:72:e7:f3:38:75:03:
         6f:e9:c1:14:8a:98:c8:e9:f4:ef:0c:32:94:49:9b:ac:d2:2d:
         44:f4:f2:9e:91:36:7d:f9:38:68:30:6a:f1:1b:4b:4a:f3:f3:
         d0:3f:bf:de:de:66:5f:fc:9f:14:36:7c:4c:c2:84:f4:ba:15:
         c4:9f:5a:32:67:5a:cf:49:b8:4f:26:f9:99:6e:06:5e:a7:19:
         44:34:e4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:47:58 2026 by rpki-client