Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
File:                     851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft (raw, json)
Hash identifier:          QSxrkeWvDzcCORT8XpeLmUZ+nB/YdeASZsFvMe/nGJc=
Subject key identifier:   D3:56:3B:EE:78:46:7F:96:42:1A:98:42:7C:48:2A:ED:42:73:C9:D6
Authority key identifier: 85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
Certificate issuer:       /CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Certificate serial:       21A9787938C8CA5283443181FFA1D4EBE3C08572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
Manifest number:          C1
Signing time:             Sat 06 Jun 2026 04:49:37 +0000
Manifest this update:     Sat 06 Jun 2026 04:44:37 +0000
Manifest next update:     Sun 07 Jun 2026 08:46:37 +0000
Files and hashes:         1: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl (hash: JEJi/2/c683SnfGeRTZRWGH16Qrgi3vdJDtUUoTGy2Y=)
                          2: AS199310.asa (hash: LBWamUCbK1O722rXmKftUcs7o+T5UF9gLBEoV0j8QV4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a9:78:79:38:c8:ca:52:83:44:31:81:ff:a1:d4:eb:e3:c0:85:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
        Validity
            Not Before: Jun  6 04:44:37 2026 GMT
            Not After : Jun  7 08:46:37 2026 GMT
        Subject: CN=D3563BEE78467F96421A98427C482AED4273C9D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:70:5f:7c:44:83:ba:5f:2a:95:06:69:68:
                    66:14:91:95:55:a1:ea:f2:f2:ea:cd:e4:ed:dd:b0:
                    56:5d:a5:0b:7e:eb:c7:c3:dd:c5:f5:87:8e:16:e3:
                    77:93:45:b5:a6:c8:d9:86:85:cb:f9:d8:5e:1c:1c:
                    14:bc:43:bd:9e:6e:ed:25:66:6e:a9:9c:cb:67:21:
                    21:71:45:b4:ac:be:f1:8d:9e:26:7e:73:12:de:af:
                    c9:4d:b3:36:63:85:87:5e:a7:cb:26:a2:f6:6a:e4:
                    5f:09:a3:73:21:d9:35:6b:77:ca:6e:5a:1f:16:1a:
                    c3:5b:e8:e7:66:39:98:6d:1d:2d:b1:25:61:76:fa:
                    87:f7:6a:b6:4e:af:78:62:95:b3:8d:d8:30:b1:84:
                    d6:01:91:a6:34:33:f5:e1:29:3a:e0:a0:97:2a:8c:
                    63:7e:25:e1:d3:01:5b:d6:c9:74:a6:c5:6c:af:8b:
                    2f:4a:74:83:c3:ab:95:77:10:72:f3:fa:e3:fd:b3:
                    b0:f5:21:26:63:fe:64:88:33:55:f3:49:91:1c:d0:
                    44:43:31:35:f7:8f:2d:57:53:05:f7:fc:ff:47:c0:
                    1a:28:63:15:40:11:79:3f:94:ec:70:00:3f:56:38:
                    63:c1:d6:31:be:8a:68:59:86:5d:54:5f:c9:23:f4:
                    16:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:56:3B:EE:78:46:7F:96:42:1A:98:42:7C:48:2A:ED:42:73:C9:D6
            X509v3 Authority Key Identifier:
                keyid:85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:71:b0:ff:98:84:96:5f:1e:1e:d8:3c:c4:81:0f:d4:7a:03:
         69:cf:6f:d5:c9:ff:a1:d3:c0:69:46:f9:cc:26:7a:3f:18:e8:
         4e:71:69:11:29:7b:5d:1a:ff:d0:15:35:62:30:e6:c0:62:51:
         87:07:05:c5:26:96:76:2a:68:85:6a:b1:20:99:57:b0:33:fd:
         9f:ce:ac:bb:13:05:86:59:b2:d9:82:05:a4:45:96:cc:3c:d7:
         ed:81:84:9a:c5:bf:f2:60:d0:da:f3:01:23:cf:df:7c:61:d6:
         bd:d2:76:bf:a9:53:66:b8:99:69:2d:4f:da:68:a8:7f:d6:84:
         c5:14:63:39:d8:e9:0e:57:63:59:e4:d8:cc:2c:57:25:d7:15:
         86:f1:b1:21:e0:a4:10:d3:dd:6d:8d:b6:eb:ad:19:4d:4b:4e:
         8b:74:bf:e7:4e:63:b5:86:87:d8:76:7a:a0:a1:a1:23:3f:6a:
         f1:4d:0d:25:c4:0e:f4:d8:e4:68:6d:0d:de:f1:9e:68:6e:53:
         23:88:00:25:28:64:36:cc:17:fb:a8:c6:24:22:1f:dc:0b:bd:
         c1:74:aa:e7:86:86:76:38:f6:b7:53:47:37:b6:d6:be:a1:4b:
         f7:f9:3e:85:99:94:75:9c:f5:2a:13:2c:cb:90:88:02:86:e4:
         9c:87:7c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:05 2026 by rpki-client