Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
File:                     851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft (raw, json)
Hash identifier:          mG604y4fG7EnzpHVWqAom/VYwXzqdlVuAWHXuddfBt4=
Subject key identifier:   D9:9C:6B:A0:0C:3B:D6:EC:61:DA:74:6D:66:6E:EF:3C:21:0C:6E:42
Authority key identifier: 85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
Certificate issuer:       /CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Certificate serial:       204350A3149601E0D1C1DE681D7776646A8642DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
Manifest number:          017C
Signing time:             Thu 22 Oct 2026 17:43:14 +0000
Manifest this update:     Thu 22 Oct 2026 17:38:14 +0000
Manifest next update:     Fri 23 Oct 2026 20:21:14 +0000
Files and hashes:         1: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl (hash: GDoh3HPughBGgEuvNOSmK1y1SNhpILPcxzT+raXQNMs=)
                          2: AS199310.asa (hash: HsjyYaB6+XITG4qMcBoHUioWoHgu/QTQ6Xm/zkvNsJ0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 17:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:43:50:a3:14:96:01:e0:d1:c1:de:68:1d:77:76:64:6a:86:42:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
        Validity
            Not Before: Oct 22 17:38:14 2026 GMT
            Not After : Oct 23 20:21:14 2026 GMT
        Subject: CN=D99C6BA00C3BD6EC61DA746D666EEF3C210C6E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:20:3a:4b:11:02:1b:bd:6e:ed:70:b5:be:
                    3a:32:34:4b:23:e7:f0:b4:24:55:3a:12:6b:7f:58:
                    95:42:f6:8b:1c:a6:7a:35:d9:29:e2:bb:e9:62:fd:
                    0c:40:34:99:90:f5:7b:cb:86:72:f2:8f:51:96:f3:
                    8c:54:41:31:84:2c:e2:cf:02:1f:6b:dc:ed:00:8e:
                    9e:33:ef:61:f6:20:3c:46:5e:e2:1b:50:39:38:32:
                    3f:24:ad:9d:9d:30:13:f5:ab:58:92:54:26:d7:5a:
                    15:ff:31:76:63:1b:f2:60:56:9f:7d:ba:5e:31:01:
                    1d:93:73:74:48:2b:60:fe:5f:5b:71:ff:e1:65:5b:
                    61:c6:01:fd:22:8b:cb:7c:dd:cf:a9:d5:14:23:8f:
                    96:2c:e8:91:55:b9:8a:f4:10:54:f5:b2:c7:ba:d0:
                    b1:ae:7c:f1:74:1a:f8:55:4c:a3:57:ef:81:dd:e7:
                    b6:cf:67:ab:4f:d4:0d:ce:9e:45:47:ed:82:8d:05:
                    0e:ae:e6:03:60:e5:1a:88:40:55:3c:1a:97:c7:32:
                    ff:2b:fa:2b:1a:df:b3:b6:51:df:7e:02:2a:6f:36:
                    12:9d:63:6a:ba:68:78:68:54:ca:97:a1:0e:e5:65:
                    36:0b:73:d1:7a:4c:c9:a3:01:84:45:29:30:49:b4:
                    ee:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9C:6B:A0:0C:3B:D6:EC:61:DA:74:6D:66:6E:EF:3C:21:0C:6E:42
            X509v3 Authority Key Identifier:
                keyid:85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:dd:c5:98:89:97:76:65:4e:4b:40:2e:c0:6b:e4:64:30:27:
         91:c8:f0:18:95:4d:a9:11:bc:8d:7b:3e:6b:db:36:b1:b9:cc:
         e6:ad:69:d6:bb:5e:f2:d0:87:3c:36:c9:e9:66:41:bb:94:b8:
         0f:46:fd:d6:a3:49:f6:6a:69:19:fb:fc:91:1d:92:ec:0e:fb:
         73:a0:c9:5b:f5:21:18:ff:6a:db:90:96:97:e5:92:74:ec:7d:
         36:5c:be:a5:62:03:ac:d2:d3:65:7d:e4:2a:87:9d:a1:68:aa:
         28:17:cd:55:34:88:ce:17:d4:70:31:6c:dd:49:c7:9a:65:05:
         e0:6d:b1:16:8c:3b:5b:57:cb:cc:30:12:7a:1f:ee:61:e8:91:
         f1:70:b3:ba:78:bb:1f:89:74:d8:3a:7d:9f:ea:1d:8e:02:10:
         e0:10:5f:fd:43:b4:ee:42:40:50:42:f8:e8:62:fe:b0:1b:b4:
         b7:48:f2:bd:59:65:77:77:98:13:3b:c5:b9:65:86:e9:d0:61:
         fe:ac:95:8c:6f:01:1b:1c:ff:07:70:94:21:ab:f0:95:60:c8:
         61:a3:5b:8a:e2:6e:16:6c:21:76:c9:a8:01:08:fe:c8:98:4f:
         44:0c:a3:83:60:ca:1a:d3:0c:07:ab:3a:58:95:ec:e7:b9:11:
         46:79:53:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 00:28:01 2026 by rpki-client