Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
File:                     0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft (raw, json)
Hash identifier:          tEtnyBD2OrSxjWncg9KB/PedTD0WAU/E2KMcZpz80Sg=
Subject key identifier:   BA:C8:4A:A4:4C:39:61:EA:5F:18:6B:0B:FF:3C:FD:0D:61:11:D5:81
Authority key identifier: 0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30
Certificate issuer:       /CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30
Certificate serial:       7C4CA4F084794BC05DF85C71AA85DCEC3009B0E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
Manifest number:          012B
Signing time:             Wed 29 Jul 2026 01:40:26 +0000
Manifest this update:     Wed 29 Jul 2026 01:35:26 +0000
Manifest next update:     Thu 30 Jul 2026 04:26:26 +0000
Files and hashes:         1: AS208754.asa (hash: 3EW700VlL7DtTVIyBPhNoXihGyvxiMvZegasaRWzx5c=)
                          2: 0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl (hash: ATCkbeB+NrJCvUmVX2zz0P+yvfgFcOvrznoe23j2nUE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4c:a4:f0:84:79:4b:c0:5d:f8:5c:71:aa:85:dc:ec:30:09:b0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30
        Validity
            Not Before: Jul 29 01:35:26 2026 GMT
            Not After : Jul 30 04:26:26 2026 GMT
        Subject: CN=BAC84AA44C3961EA5F186B0BFF3CFD0D6111D581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e6:6d:25:bb:c5:70:0a:d3:18:c4:f9:c3:03:
                    9f:2b:49:c0:02:00:72:34:7a:5b:b7:29:01:c1:49:
                    be:54:9f:2d:59:1e:fa:49:f8:bf:83:66:76:2f:1b:
                    7f:21:4a:d2:f5:72:13:7c:a6:70:c2:63:54:60:89:
                    09:81:a2:db:a1:5a:f5:5b:05:1c:dc:a9:e5:4e:5e:
                    e3:a9:a4:08:b8:76:dd:ec:39:61:25:b1:78:aa:25:
                    33:42:59:5a:30:b2:63:25:28:ab:dc:e4:cc:bc:df:
                    fd:f6:8c:0d:27:46:9c:d0:fe:66:e1:ac:10:eb:ff:
                    96:49:59:3d:e2:b1:56:d5:a9:d2:22:10:5e:4f:41:
                    c2:96:dd:4c:f4:24:14:a3:98:7b:d4:90:30:0f:7f:
                    2f:4a:2e:2f:ed:4e:91:62:ee:a8:28:15:8c:7b:be:
                    a7:a3:ca:ba:16:c1:fe:5a:49:fa:64:80:8d:7e:45:
                    8f:18:fe:ad:d4:6f:b1:d5:3e:41:88:49:6c:67:02:
                    72:9c:c3:a5:bf:41:a7:cc:6e:57:13:ce:22:fa:c5:
                    6a:e8:f4:4e:6d:15:1b:ce:eb:7e:ff:31:58:c1:c4:
                    ac:56:14:96:f6:5f:ff:69:a5:a3:6e:af:d1:80:3f:
                    ae:a6:05:45:ea:e9:48:03:c0:08:8d:a8:93:c7:21:
                    d9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C8:4A:A4:4C:39:61:EA:5F:18:6B:0B:FF:3C:FD:0D:61:11:D5:81
            X509v3 Authority Key Identifier:
                keyid:0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ae:9e:e0:d9:62:25:a4:04:88:06:db:2e:a7:57:58:ae:bb:
         f0:9b:01:af:34:fd:78:34:c8:ba:99:25:6a:b8:72:c1:79:cb:
         fc:f0:08:1d:49:ff:2f:04:7f:46:01:a2:a5:d8:c6:ee:41:fb:
         08:c0:a4:10:a1:b5:9e:b8:d7:ee:af:1c:63:2a:ee:73:c1:90:
         78:99:48:ca:ad:a0:65:48:3e:4c:26:c7:04:5d:58:55:b8:69:
         2c:3a:63:59:dd:cf:b8:d1:b3:a1:9a:a9:41:37:4f:35:1c:c7:
         e1:3e:4a:0d:b7:b1:40:8c:3a:0c:4e:58:63:ba:7f:c5:87:c6:
         b4:c9:4e:fe:1a:32:92:9e:b3:de:16:45:79:c5:6a:66:0c:6f:
         66:c5:8e:3f:e8:ef:28:81:34:59:15:ee:f3:b9:f4:5b:4b:3c:
         0a:10:05:84:ec:88:4e:aa:f0:a0:52:b7:df:83:79:f0:f5:57:
         5b:d3:f4:05:a6:df:7d:68:da:6f:e5:f7:f8:3f:5d:09:5a:9d:
         45:c7:c7:c1:b7:6c:f5:db:7b:38:3d:8a:51:1e:fd:20:ad:a5:
         7f:e6:d6:ff:3e:3e:07:18:e1:8b:6a:27:23:79:d1:3a:d8:5b:
         01:2d:8e:84:97:4c:43:1d:d2:c7:ce:dc:b7:cd:0e:25:50:b2:
         7c:26:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:47:50 2026 by rpki-client