Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File:                     A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier:          6C+zgNNY04ufOG3syorR4VGpnQtCPbdqS2YImpHu8+s=
Subject key identifier:   EE:B2:45:DC:3E:8C:2C:56:62:8F:5C:E3:E6:02:D2:9F:C3:72:9A:17
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer:       /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial:       4715FACBA76DE4ADC7528516737AB4AF32541F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number:          072C
Signing time:             Mon 19 Oct 2026 05:36:33 +0000
Manifest this update:     Mon 19 Oct 2026 05:31:33 +0000
Manifest next update:     Tue 20 Oct 2026 08:01:33 +0000
Files and hashes:         1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: bet2spWSiXb4dKvhbsaJEnKhl3N/7kqy/ObaJglBCZs=)
                          2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: BuhfFgtRTp/LhChrJJ7gXGS5nezfXNeNFzgZfKbE68g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 08:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:15:fa:cb:a7:6d:e4:ad:c7:52:85:16:73:7a:b4:af:32:54:1f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
        Validity
            Not Before: Oct 19 05:31:33 2026 GMT
            Not After : Oct 20 08:01:33 2026 GMT
        Subject: CN=EEB245DC3E8C2C56628F5CE3E602D29FC3729A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:bf:3c:27:8c:2b:a3:4b:3f:46:2b:81:91:
                    78:a2:f3:a0:94:0d:ed:62:71:fe:1e:e0:75:ba:9b:
                    97:67:b5:20:9d:87:11:1f:a5:69:6c:36:ad:6f:ca:
                    28:68:80:53:73:16:50:2f:25:c2:97:66:05:8f:41:
                    5a:fd:0a:e7:a6:49:1f:4d:ed:cc:ae:e8:1b:dd:4b:
                    db:de:82:57:f7:d8:fa:8b:1e:18:1c:b9:07:72:57:
                    b0:d5:4c:67:62:88:8c:70:ff:e2:75:ce:2a:c8:82:
                    0b:93:4e:21:4a:86:84:a8:e4:88:45:bf:0d:8a:ce:
                    08:99:80:de:39:fa:89:2c:3e:4d:04:ec:e5:2b:15:
                    0b:8c:75:55:de:ef:45:2f:a5:3d:ec:f3:5f:2c:29:
                    ed:ae:4d:24:20:6b:79:74:5c:5f:a3:8a:93:f9:c8:
                    ce:00:e2:52:d3:c1:87:b5:9a:5e:c2:89:ed:08:b3:
                    f1:fa:3d:6a:6f:08:4c:b3:a1:fe:44:82:54:d4:a1:
                    07:2e:97:e2:0f:13:6f:b6:1a:21:42:5d:60:ab:cd:
                    0e:77:3a:14:1c:ab:c9:a2:00:96:98:37:51:32:76:
                    f2:aa:f2:01:19:ef:3b:e2:f7:ce:b5:e6:0f:cb:71:
                    5e:bb:82:1d:b2:aa:16:7d:5f:f8:2f:71:d6:69:57:
                    01:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B2:45:DC:3E:8C:2C:56:62:8F:5C:E3:E6:02:D2:9F:C3:72:9A:17
            X509v3 Authority Key Identifier:
                keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:50:22:85:89:87:d2:60:d9:9c:ef:12:7e:bf:54:68:fd:14:
         96:63:11:44:a7:a9:f9:69:01:fc:d2:8b:80:bf:87:56:7f:ca:
         da:59:21:e0:00:16:47:70:ce:04:55:d1:11:17:44:c2:78:fb:
         a9:eb:92:18:98:45:22:80:2a:63:76:c2:65:a7:e7:39:94:42:
         48:15:15:5b:7e:56:20:75:8e:fa:07:f7:bc:0e:cc:09:e5:fc:
         36:1d:89:03:fb:71:61:99:49:b3:f5:a3:e2:4c:8c:6c:52:6c:
         a8:12:c1:8b:e8:ca:e7:82:7a:d8:2d:e2:88:bc:58:25:1e:52:
         70:60:b8:14:83:48:66:45:db:b1:87:e1:cf:af:d9:42:fb:b1:
         4b:61:6b:b9:e0:57:16:8b:93:b1:1e:7e:6a:fc:fa:97:08:36:
         55:83:bf:ba:db:5b:00:f2:b3:2d:9e:a1:23:a7:27:24:f9:c3:
         40:d6:bd:de:4c:5b:ed:aa:71:7c:62:5b:d0:89:cd:07:f5:e5:
         2f:b1:da:35:b5:4d:ef:cf:07:28:02:03:ba:7a:80:f7:c0:79:
         bf:80:e4:f6:9d:74:d0:69:b3:b5:fa:02:cb:1e:2d:d0:17:86:
         a9:c3:d4:33:a1:34:3e:e7:4c:46:62:a3:7a:84:f9:c6:10:b7:
         f4:9b:7d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:18:46 2026 by rpki-client