Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
File:                     C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft (raw, json)
Hash identifier:          Wwd3eg+BIOppXbhE8hD2qruUJ73hx5YlnV4/A7SbW5I=
Subject key identifier:   A7:C2:29:97:E9:2C:A1:3F:F1:93:45:B1:36:1D:47:C4:D2:96:0A:25
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Certificate issuer:       /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial:       4C616080334505DFC29923CA88B37A2AB61E99EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
Manifest number:          01F7
Signing time:             Tue 28 Jul 2026 04:43:38 +0000
Manifest this update:     Tue 28 Jul 2026 04:38:38 +0000
Manifest next update:     Wed 29 Jul 2026 07:45:38 +0000
Files and hashes:         1: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl (hash: pJlOEFEEKKoT8RjqBhTdgF+OVAQ1UGNhxNB+wjOzJPQ=)
                          2: AS204211.asa (hash: kRr//+r7x6/vuSkVDlS04TJuHGHLTrf1+OU03EGvOcM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:61:60:80:33:45:05:df:c2:99:23:ca:88:b3:7a:2a:b6:1e:99:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
        Validity
            Not Before: Jul 28 04:38:38 2026 GMT
            Not After : Jul 29 07:45:38 2026 GMT
        Subject: CN=A7C22997E92CA13FF19345B1361D47C4D2960A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a0:cd:3e:8d:26:80:e3:08:b9:55:1a:81:20:
                    0a:96:8e:05:2d:b6:a3:93:23:50:73:b4:f9:95:ec:
                    14:65:a2:f4:bb:e7:9d:ea:c5:99:9e:48:a6:6b:12:
                    80:df:6e:6f:6d:ed:10:1a:d1:52:b9:d5:60:28:fa:
                    01:32:ef:37:75:ff:44:f6:06:a7:a3:41:91:f9:f8:
                    a9:75:13:3d:d5:23:37:07:44:34:85:f1:7c:11:1b:
                    98:14:35:b0:35:0f:6e:68:f7:08:d9:e3:d7:39:fe:
                    53:ca:68:6c:d7:11:bf:c9:85:cc:80:b5:9c:9b:9d:
                    ae:f1:a0:0f:64:2e:ce:c7:79:d1:da:df:99:a7:05:
                    ef:d9:3e:55:bc:56:94:86:d7:33:ed:04:61:da:3d:
                    c6:0a:e5:c3:b2:2a:2b:a4:24:9e:fa:6f:7e:c0:c5:
                    b9:5f:d0:b4:54:22:9a:d1:ef:1d:06:f5:19:de:e2:
                    30:d8:83:e5:b8:74:f0:0d:f6:d5:da:d4:b3:8e:d9:
                    ce:be:4e:91:9e:09:d2:0a:57:83:59:cd:e8:b7:5e:
                    27:16:23:eb:d0:c4:af:e1:83:82:cb:b7:6a:3f:2e:
                    f3:f9:06:5d:d6:75:45:8f:1d:85:63:84:c5:85:72:
                    2a:5d:89:90:e4:49:46:3d:09:54:9e:c9:34:c4:21:
                    c1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C2:29:97:E9:2C:A1:3F:F1:93:45:B1:36:1D:47:C4:D2:96:0A:25
            X509v3 Authority Key Identifier:
                keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:90:83:45:e6:7a:17:7c:0c:0c:07:ab:cb:b1:ea:d7:72:01:
         6f:01:d0:c0:b6:1e:95:14:94:a9:09:2f:61:34:9e:b0:75:ad:
         74:ae:58:5a:fe:29:68:0f:1d:61:f4:42:65:a3:0d:64:35:bd:
         fe:1b:8c:db:16:97:7b:4d:ac:e7:43:94:c4:16:a9:51:7e:98:
         25:d2:af:67:59:e1:c1:4b:27:34:34:44:b2:2c:8a:d5:ca:e0:
         4f:d5:55:a1:f0:25:f7:bb:ea:07:96:0a:de:c9:18:37:9c:5f:
         86:ef:fd:15:54:af:9b:b6:3d:71:83:af:8d:e0:e8:f8:6d:aa:
         ba:3a:29:25:85:6c:dd:2d:4a:39:28:6b:02:8f:66:08:8b:3d:
         19:bf:de:28:a7:a3:6a:25:5e:3b:58:ca:0e:12:d1:d0:f6:a6:
         32:ed:c7:be:7a:cb:41:e8:10:c5:14:d3:5e:53:8e:81:3e:21:
         56:2e:54:5a:61:23:b1:4f:77:d8:0b:a7:47:bd:e8:33:27:ac:
         78:11:fa:c7:2f:7c:9a:6d:d4:d2:9f:ce:2b:d7:d6:ce:b1:c5:
         51:3f:a8:5f:ec:8d:a8:cf:53:65:ca:be:a6:1a:24:6c:26:a6:
         8c:90:5f:b7:86:c4:5e:5c:ad:d0:f4:97:d1:ec:ee:41:ba:af:
         de:12:ad:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:06:43 2026 by rpki-client