Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
File:                     42629F1567D74FB19EFF142C6A6F5F93F3086333.mft (raw, json)
Hash identifier:          z7o4jAC5hV9CEQl/CuuYbFpljmnKbuA/ELb+Wk5i7aA=
Subject key identifier:   BB:5F:0D:43:74:86:FC:BA:35:53:5A:60:2C:62:D6:75:87:35:24:A1
Authority key identifier: 42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33
Certificate issuer:       /CN=42629f1567d74fb19eff142c6a6f5f93f3086333
Certificate serial:       58C4A59F50534246A81E75DE5ABD39BE0B0F85FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
Manifest number:          C0
Signing time:             Mon 31 Aug 2026 18:44:00 +0000
Manifest this update:     Mon 31 Aug 2026 18:39:00 +0000
Manifest next update:     Tue 01 Sep 2026 22:36:00 +0000
Files and hashes:         1: 42629F1567D74FB19EFF142C6A6F5F93F3086333.crl (hash: Q9UwjdNmsxjr0ITz7SnYOlXhWJKjYgTCxFC9rrtPpJ4=)
                          2: AS205941.asa (hash: RSQS4jpSR851Ak6RhtcwU5FcZaXidS/C/rK6Y6TFzRQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c4:a5:9f:50:53:42:46:a8:1e:75:de:5a:bd:39:be:0b:0f:85:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42629f1567d74fb19eff142c6a6f5f93f3086333
        Validity
            Not Before: Aug 31 18:39:00 2026 GMT
            Not After : Sep  1 22:36:00 2026 GMT
        Subject: CN=BB5F0D437486FCBA35535A602C62D675873524A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3e:ef:dc:b1:1d:88:fe:51:01:14:d9:2b:14:
                    4d:82:12:80:e2:f1:e6:2d:71:b1:81:a0:e1:59:7d:
                    e9:03:09:92:e4:e1:08:2e:c0:2f:a4:d8:84:57:e7:
                    8f:c6:18:f5:43:63:ca:b7:62:6a:d8:76:f5:a8:0c:
                    41:5b:81:9d:3f:39:5c:a0:6f:f2:2f:eb:2c:e2:56:
                    e1:e6:54:03:0f:0d:e6:f8:68:64:92:99:d8:64:00:
                    75:16:2a:f5:21:91:9c:83:e6:8f:a5:bc:f3:6e:98:
                    b3:41:4e:1e:82:49:3e:28:47:a4:87:38:8a:5c:c2:
                    0b:df:bc:fc:09:4b:4d:74:e9:15:4f:46:dc:b4:ca:
                    09:10:0f:9c:b1:ee:51:53:ee:cb:b9:bd:90:4e:44:
                    c1:4f:92:5e:e5:f1:47:91:fa:3f:40:f3:67:bd:85:
                    40:73:1e:9b:d1:4c:16:9a:03:5a:81:4a:1c:2c:b1:
                    d8:08:07:d5:d5:c4:d3:86:65:67:f7:74:87:81:5a:
                    84:37:9d:fe:e4:ea:e5:2c:ce:3f:82:d7:69:8e:68:
                    9e:85:2f:de:17:5b:66:65:8c:36:e7:77:43:2c:1d:
                    e2:db:65:33:c4:6f:65:34:e2:7b:ab:18:49:6b:f2:
                    28:3f:c8:c3:7a:c5:0d:26:99:3e:2a:ff:60:98:bf:
                    d7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5F:0D:43:74:86:FC:BA:35:53:5A:60:2C:62:D6:75:87:35:24:A1
            X509v3 Authority Key Identifier:
                keyid:42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c4:72:df:80:ce:1f:bc:92:fb:35:c9:85:5e:a6:80:33:f5:
         d0:d8:00:ec:d9:1d:7c:b8:79:33:46:4b:d8:7b:46:07:fa:37:
         ea:b7:47:10:52:94:98:3d:6a:c0:e1:d8:d3:46:70:26:a9:4b:
         64:cb:39:a0:f1:2b:d1:cd:f1:1e:e0:4a:cb:2a:2a:df:d0:8a:
         1d:6e:74:44:d7:e0:11:5e:6b:0a:a0:77:e8:d5:f6:7f:06:34:
         e5:7d:2b:90:64:c5:25:6a:0d:25:58:75:07:dc:68:d5:49:9b:
         e9:94:1b:94:0f:1e:20:6e:70:bf:1f:f1:2a:b1:82:14:ee:19:
         87:ae:67:b4:5d:36:62:b2:74:f2:c8:ce:72:c2:99:be:1f:3f:
         df:3f:30:af:78:f7:b9:b7:27:0a:72:eb:1e:92:13:ef:ec:de:
         7f:84:5d:9b:96:04:9a:34:be:d4:de:f9:17:2e:02:c5:bb:79:
         ac:b8:ef:89:2a:48:5f:77:9e:17:7c:d1:72:d8:26:ea:ce:95:
         42:0c:67:f7:32:99:95:73:74:8f:34:f4:0d:e7:cf:44:12:22:
         5e:2d:13:ca:bf:a0:9a:52:35:9a:08:fb:29:93:6b:73:9b:b1:
         d3:28:40:5b:68:d9:72:b2:72:e2:d9:60:8e:4b:bb:5b:32:30:
         e1:be:b0:cd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWMSln1BTQkaoHnXeWr05vgsPhfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI2MjlmMTU2N2Q3NGZiMTllZmYxNDJjNmE2ZjVmOTNm
MzA4NjMzMzAeFw0yNjA4MzExODM5MDBaFw0yNjA5MDEyMjM2MDBaMDMxMTAvBgNV
BAMTKEJCNUYwRDQzNzQ4NkZDQkEzNTUzNUE2MDJDNjJENjc1ODczNTI0QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTPu/csR2I/lEBFNkrFE2CEoDi
8eYtcbGBoOFZfekDCZLk4QguwC+k2IRX54/GGPVDY8q3YmrYdvWoDEFbgZ0/OVyg
b/Iv6yziVuHmVAMPDeb4aGSSmdhkAHUWKvUhkZyD5o+lvPNumLNBTh6CST4oR6SH
OIpcwgvfvPwJS0106RVPRty0ygkQD5yx7lFT7su5vZBORMFPkl7l8UeR+j9A82e9
hUBzHpvRTBaaA1qBShwssdgIB9XVxNOGZWf3dIeBWoQ3nf7k6uUszj+C12mOaJ6F
L94XW2ZljDbnd0MsHeLbZTPEb2U04nurGElr8ig/yMN6xQ0mmT4q/2CYv9dDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUu18NQ3SG/Lo1U1pgLGLWdYc1JKEwHwYDVR0j
BBgwFoAUQmKfFWfXT7Ge/xQsam9fk/MIYzMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5
NzVjLzAvNDI2MjlGMTU2N0Q3NEZCMTlFRkYxNDJDNkE2RjVGOTNGMzA4NjMzMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FtS2ZGV2ZYVDdHZV94UXNhbTlma19N
SVl6TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1h
YmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMC80MjYyOUYxNTY3RDc0RkIxOUVG
RjE0MkM2QTZGNUY5M0YzMDg2MzMzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcRy34DOH7yS+zXJhV6m
gDP10NgA7NkdfLh5M0ZL2HtGB/o36rdHEFKUmD1qwOHY00ZwJqlLZMs5oPEr0c3x
HuBKyyoq39CKHW50RNfgEV5rCqB36NX2fwY05X0rkGTFJWoNJVh1B9xo1Umb6ZQb
lA8eIG5wvx/xKrGCFO4Zh65ntF02YrJ08sjOcsKZvh8/3z8wr3j3ubcnCnLrHpIT
7+zef4Rdm5YEmjS+1N75Fy4Cxbt5rLjviSpIX3eeF3zRctgm6s6VQgxn9zKZlXN0
jzT0DefPRBIiXi0Tyr+gmlI1mgj7KZNrc5ux0yhAW2jZcrJy4tlgjku7WzIw4b6w
zQ==
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:41:18 2026 by rpki-client