Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
File:                     851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft (raw, json)
Hash identifier:          AcNT8I6t0TiZe7X8YnWzyF3Jcq9MAc6cGcSBYzcWcek=
Subject key identifier:   49:8A:BC:41:25:B2:83:E0:0F:76:58:77:17:BB:1C:22:C6:F2:D6:E7
Authority key identifier: 85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
Certificate issuer:       /CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Certificate serial:       21F76A14C68B510DACA328E92DC569AFFC70C8E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
Manifest number:          7C
Signing time:             Sat 18 Apr 2026 17:49:27 +0000
Manifest this update:     Sat 18 Apr 2026 17:44:27 +0000
Manifest next update:     Sun 19 Apr 2026 19:40:27 +0000
Files and hashes:         1: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl (hash: VXBWC2Yj92D1xDL2gq0aQWoiyRPqmcbPxTuM+rKkyfU=)
                          2: AS199310.asa (hash: 3FqcrdmU2NH0lXWEGd1WiUQ2FetGb962pZrI4k3vxWA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 19:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f7:6a:14:c6:8b:51:0d:ac:a3:28:e9:2d:c5:69:af:fc:70:c8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
        Validity
            Not Before: Apr 18 17:44:27 2026 GMT
            Not After : Apr 19 19:40:27 2026 GMT
        Subject: CN=498ABC4125B283E00F76587717BB1C22C6F2D6E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:d0:18:b2:89:da:8f:54:9d:3b:49:55:24:
                    5a:5e:a9:7f:d2:55:b0:30:5d:b1:b2:c0:ee:f5:57:
                    7a:ed:9c:3e:4a:61:31:35:80:6a:03:4a:88:35:f4:
                    00:bc:bd:29:97:65:10:f9:54:ae:2b:67:6f:d7:db:
                    b1:b2:0a:7a:b1:1a:77:40:b2:68:d0:d1:8e:dc:6b:
                    3f:22:9e:f6:ba:23:e5:6e:a9:22:a2:10:85:43:cd:
                    3e:df:d7:69:11:e4:87:24:97:ec:5f:ac:d3:96:3a:
                    81:c5:27:35:40:a6:b8:6f:5e:6c:02:cc:f9:3a:c1:
                    21:16:71:59:ae:ef:49:ce:3c:55:da:79:23:73:58:
                    61:43:43:35:f2:d4:66:8e:f3:21:76:b5:de:35:80:
                    51:72:ac:8a:ae:3c:a1:c8:33:1b:dd:bd:10:38:51:
                    f5:29:d5:d6:6e:61:17:19:cb:69:58:fc:5f:c3:bb:
                    62:d0:8b:34:ec:7a:7e:c1:f7:6f:39:d7:c3:86:65:
                    f9:10:53:c2:f2:96:8c:bb:ba:28:f1:ab:2a:17:6f:
                    26:fa:89:5e:c2:5a:fc:aa:ed:2d:df:48:cf:f7:4f:
                    8b:f8:f6:db:51:23:21:67:e7:55:7a:1f:f7:d3:1e:
                    91:96:7a:10:8d:fb:4a:9a:a0:6d:75:6d:0b:d2:aa:
                    e8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8A:BC:41:25:B2:83:E0:0F:76:58:77:17:BB:1C:22:C6:F2:D6:E7
            X509v3 Authority Key Identifier:
                keyid:85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8f:e5:5f:49:4a:3e:c7:4c:12:b2:88:e5:ed:e4:3d:54:7b:
         8f:cb:b7:c9:7a:5c:74:5e:34:20:3a:2c:4c:d8:0a:30:0d:ed:
         60:13:ac:96:02:57:37:94:45:74:9a:74:7a:70:7a:b4:c8:fb:
         37:3c:7f:37:7a:bf:58:09:07:23:e5:f5:35:19:2b:62:2c:d0:
         2f:06:99:ff:4f:5c:46:b3:b1:8a:a4:f1:7d:ae:7e:35:72:4a:
         9f:d7:f0:ee:15:1b:d5:5f:12:13:c7:9a:a6:69:e4:3f:7b:96:
         be:4f:5e:6e:8c:09:0a:eb:83:f2:38:81:48:69:ce:80:9e:dc:
         39:48:79:33:50:52:a7:ff:e4:cd:b5:83:47:68:59:b2:61:3e:
         20:1f:43:ad:37:24:6c:85:9a:55:aa:5b:34:7e:78:5c:cb:05:
         f7:b7:42:71:bd:fd:15:3a:be:b6:65:e0:4d:14:3f:6a:58:25:
         8d:2c:a8:c2:c9:a0:2d:c0:b9:cc:16:90:c7:d8:2e:1d:47:5a:
         02:08:03:ee:65:0a:66:6b:44:62:0c:2a:eb:cb:fa:5d:09:e3:
         3e:03:7d:66:3d:85:0d:d5:3d:ca:68:48:d9:31:f8:2d:30:86:
         b1:5a:ac:e6:01:0f:7e:81:5f:83:ac:6c:f2:d4:1a:55:12:eb:
         b4:f2:a7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 07:09:35 2026 by rpki-client