Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
File:                     851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft (raw, json)
Hash identifier:          2QOeG2pf6DWmXkeb/c8Hbak3uQ5kt7z/BDJgpnZGJcc=
Subject key identifier:   8A:15:49:CB:87:27:8B:76:E2:4C:59:DC:FF:96:85:1F:98:A4:EF:0D
Authority key identifier: 85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
Certificate issuer:       /CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Certificate serial:       04B09933FB17C631C522055D5BB61F3845F8B04A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
Manifest number:          013B
Signing time:             Fri 04 Sep 2026 10:37:07 +0000
Manifest this update:     Fri 04 Sep 2026 10:32:07 +0000
Manifest next update:     Sat 05 Sep 2026 11:08:07 +0000
Files and hashes:         1: AS199310.asa (hash: HsjyYaB6+XITG4qMcBoHUioWoHgu/QTQ6Xm/zkvNsJ0=)
                          2: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl (hash: N270WvO8KIfHZIQsBlCYNUL6uW2AJvhmbHVxCGVBELg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 11:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b0:99:33:fb:17:c6:31:c5:22:05:5d:5b:b6:1f:38:45:f8:b0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
        Validity
            Not Before: Sep  4 10:32:07 2026 GMT
            Not After : Sep  5 11:08:07 2026 GMT
        Subject: CN=8A1549CB87278B76E24C59DCFF96851F98A4EF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:d1:24:75:97:b9:ee:2d:aa:5f:cb:3c:c1:
                    df:d8:8e:5c:95:9b:a8:44:09:fa:68:01:aa:dd:f4:
                    62:09:ef:41:b2:48:68:6c:f5:da:78:ba:f2:76:23:
                    e5:37:dc:98:a7:4b:fb:a4:82:08:e1:6c:19:f0:09:
                    83:cc:58:ff:c0:63:ff:6d:01:b6:ee:c5:be:6a:0a:
                    ba:a5:1c:65:35:92:3c:2d:cf:ce:49:50:e8:2d:3e:
                    43:83:a8:85:41:ae:e8:a5:7b:aa:84:35:53:b6:52:
                    b7:ea:05:62:36:16:16:dc:a7:5b:f6:75:04:fb:32:
                    e2:e3:b5:ab:20:d8:da:a0:1a:2c:04:58:43:e2:1a:
                    53:75:c2:fe:98:cc:0a:d7:e9:91:22:87:c5:f8:c3:
                    89:03:1d:69:6a:6b:12:72:c2:92:62:37:97:b2:26:
                    ab:ba:3d:02:a0:6e:25:8e:f3:97:fe:bd:a1:d6:16:
                    f8:a8:46:f8:60:95:f6:0b:94:7a:bf:55:6a:ad:a9:
                    e4:20:7f:64:04:15:74:92:da:d0:b5:fb:24:b4:ba:
                    81:c8:64:56:5e:fe:15:4c:45:db:0d:bd:38:c4:b3:
                    f5:48:c8:e3:82:22:0d:55:13:75:0e:82:a9:da:7d:
                    67:cf:c2:e0:3a:79:d4:14:d8:da:32:15:eb:16:2b:
                    9f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:15:49:CB:87:27:8B:76:E2:4C:59:DC:FF:96:85:1F:98:A4:EF:0D
            X509v3 Authority Key Identifier:
                keyid:85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d1:c0:51:da:74:3f:12:7b:38:54:58:13:b5:71:64:83:79:
         93:20:79:c3:4e:fc:b6:6b:e5:d1:da:bb:45:07:9e:2d:35:38:
         71:af:cb:e2:57:9c:9b:05:48:ff:db:0b:36:a6:0d:56:dc:a2:
         a2:45:17:0c:0f:19:ee:11:4c:ce:1c:78:c5:2c:43:5e:b8:07:
         d7:f4:05:10:ec:1e:2a:62:ef:93:20:f0:3b:93:37:32:06:a0:
         45:f5:aa:79:35:be:13:f5:85:bd:3a:ae:46:a3:0d:98:ac:cb:
         cf:eb:cd:04:0b:59:f0:dc:37:69:14:e7:9a:bd:fe:41:d2:52:
         dd:14:9e:1f:33:54:ee:d5:18:d9:86:8b:5f:1b:30:3a:85:38:
         d1:83:fd:02:71:ea:75:88:ca:77:6d:93:08:6a:a6:e3:6c:fa:
         cd:26:40:90:25:9e:81:fb:9b:1e:dd:33:46:6c:8b:c9:4a:59:
         c4:35:ef:97:48:96:e4:12:16:8a:c3:7a:99:16:a1:eb:54:c9:
         70:7e:f1:79:ef:3f:03:6a:7a:bf:a6:41:18:2c:03:dd:68:a6:
         8a:45:94:ea:21:29:90:eb:3a:3c:ed:c2:3c:41:c9:e8:c2:ef:
         ca:eb:e2:7d:af:00:6e:18:08:0e:00:c1:cf:7e:d0:a7:47:cd:
         f3:8b:df:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:23:03 2026 by rpki-client