Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
File:                     06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft (raw, json)
Hash identifier:          J+YUXDiGDLOKHwqyPyMrFGvVvDbEov73W7EssaKTIdo=
Subject key identifier:   BF:2C:30:BA:AC:56:E2:30:1F:49:BE:94:5B:5A:FE:81:25:97:97:5D
Authority key identifier: 06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C
Certificate issuer:       /CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
Certificate serial:       55EE6000968AA366B53C72FB24B423FADAF87EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
Manifest number:          60
Signing time:             Sat 28 Mar 2026 17:43:07 +0000
Manifest this update:     Sat 28 Mar 2026 17:38:07 +0000
Manifest next update:     Sun 29 Mar 2026 19:35:07 +0000
Files and hashes:         1: AS202782.asa (hash: BUvQaaL6LDCtZinny59vQWt/MEabU/h3KDaRVhwqAQM=)
                          2: 06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl (hash: NGXWKhhDjaHPyu2YwL8O8NjECNJdW6X6Co2TfQ/wusc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 19:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ee:60:00:96:8a:a3:66:b5:3c:72:fb:24:b4:23:fa:da:f8:7e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
        Validity
            Not Before: Mar 28 17:38:07 2026 GMT
            Not After : Mar 29 19:35:07 2026 GMT
        Subject: CN=BF2C30BAAC56E2301F49BE945B5AFE812597975D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:86:67:67:46:f6:6e:6e:d6:f3:39:ef:b1:
                    d0:53:2b:32:03:2f:1d:85:ce:de:aa:80:65:17:9f:
                    df:c4:90:6c:8c:bf:de:7b:0a:41:09:18:bd:28:ee:
                    fb:00:ec:4b:70:8b:99:a8:13:ff:a6:f7:3a:4f:28:
                    57:d2:76:3f:23:a9:76:a6:e7:97:65:9e:b4:98:db:
                    5b:b9:09:01:77:ef:9b:b5:9d:66:7a:45:ff:e8:31:
                    ff:01:fb:c1:cf:85:f3:68:c3:8e:66:15:3a:8b:da:
                    6b:80:e7:e4:b2:ad:1d:98:5a:75:78:e2:c0:66:29:
                    44:a1:00:20:87:24:62:de:c7:fe:f5:a9:de:19:d5:
                    e4:b6:63:92:ae:50:1e:ca:96:71:16:d6:fc:17:fc:
                    4b:9a:c4:fb:91:6a:2f:b2:3b:d8:2a:b1:cc:d8:73:
                    cb:c5:f7:ea:97:e9:56:a8:61:41:b1:c2:28:ae:ff:
                    e6:1b:b5:41:db:4a:f4:d4:83:c3:2e:86:f9:dd:12:
                    f9:7d:98:8f:d2:d4:04:ed:fe:d4:64:c2:bc:a4:80:
                    4a:62:6f:1c:33:08:02:e7:75:b4:9b:f6:d0:da:87:
                    c4:2f:72:c0:11:22:eb:86:ac:7d:63:0a:be:3d:99:
                    77:62:ed:04:ed:2b:81:3a:cf:cf:b5:a2:07:ae:f0:
                    fd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2C:30:BA:AC:56:E2:30:1F:49:BE:94:5B:5A:FE:81:25:97:97:5D
            X509v3 Authority Key Identifier:
                keyid:06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4c:cd:17:d0:7a:50:23:be:d9:e0:2a:45:48:bb:2e:e2:5b:
         2a:58:fa:61:ec:7f:e0:96:dc:f8:eb:72:8d:78:34:12:8a:61:
         c1:25:ee:3f:38:3b:4c:9f:1c:62:59:ad:02:ad:ca:96:76:e5:
         a2:be:ba:2a:45:d3:3a:d9:07:7d:b2:af:32:85:94:0b:54:05:
         64:c5:14:9b:d6:39:56:bf:10:b0:4b:02:df:01:ac:5d:d2:e4:
         f2:97:87:09:06:8c:ed:71:a1:4b:de:4a:9b:5f:ae:c6:45:bd:
         8f:bc:35:b8:61:0d:8e:c9:27:3b:79:b8:77:7d:99:fa:90:a5:
         3a:5b:e5:24:d9:0e:38:72:ea:95:ff:12:ea:b8:d6:bd:24:e2:
         e5:ed:8f:29:1a:84:1b:ff:0f:dd:39:89:83:f1:41:53:6f:5a:
         36:f1:6f:60:dc:b9:f0:f5:b1:1f:dc:64:b9:60:df:5c:5e:be:
         34:78:19:79:1d:f6:9b:46:09:20:2a:2d:35:4d:b1:3d:13:b3:
         83:58:e3:1c:6f:87:9d:93:25:c3:54:18:55:75:44:35:fa:e7:
         31:78:28:46:e4:e3:46:3a:75:84:e8:5c:ea:bb:78:aa:f6:d3:
         47:bb:24:af:0b:5a:99:12:4f:96:52:ee:fa:8e:16:75:84:c4:
         ab:74:bd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:45 2026 by rpki-client