Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
File:                     06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft (raw, json)
Hash identifier:          esihYpCWu7aAeJxkUR0kkLAQBKY2HkvEFCHGH4ZPkR8=
Subject key identifier:   D8:90:DC:90:09:59:6C:16:6A:0C:B0:DC:84:D9:F6:4D:80:27:41:8C
Authority key identifier: 06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C
Certificate issuer:       /CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
Certificate serial:       4008040A67EA58B3A90BCDBB4D69B01DD55087CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
Manifest number:          0130
Signing time:             Wed 26 Aug 2026 14:51:46 +0000
Manifest this update:     Wed 26 Aug 2026 14:46:46 +0000
Manifest next update:     Thu 27 Aug 2026 15:52:46 +0000
Files and hashes:         1: 06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl (hash: g19Vqcg8gGdabZiif4xmnKlGgHxzLH4CAUTItLTf1E8=)
                          2: AS202782.asa (hash: BUvQaaL6LDCtZinny59vQWt/MEabU/h3KDaRVhwqAQM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 15:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:08:04:0a:67:ea:58:b3:a9:0b:cd:bb:4d:69:b0:1d:d5:50:87:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
        Validity
            Not Before: Aug 26 14:46:46 2026 GMT
            Not After : Aug 27 15:52:46 2026 GMT
        Subject: CN=D890DC9009596C166A0CB0DC84D9F64D8027418C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:ea:ef:88:16:f7:3a:2b:25:7c:4d:f8:aa:
                    ea:dd:b9:b3:ea:de:49:0f:e1:61:be:ac:bb:c9:87:
                    6b:30:20:34:5e:b2:6f:8c:1b:8c:14:f2:d5:9e:ec:
                    36:55:00:fc:b9:ad:5b:2d:cc:41:cc:f0:f2:b6:f9:
                    80:76:db:92:eb:bd:e1:04:ab:4c:3b:60:25:fd:ee:
                    22:2c:6d:b0:3a:45:25:72:5c:77:6d:b0:1b:d3:fa:
                    30:ce:c1:61:82:35:67:69:1d:69:4f:c4:17:28:f9:
                    ce:98:d4:2b:94:08:2b:af:28:d3:2c:44:e1:30:d0:
                    f8:0d:3c:98:0b:b8:c4:52:92:b1:09:ec:07:1d:6c:
                    e0:81:ea:06:dc:69:67:c8:e3:25:e6:c9:f9:40:f7:
                    19:04:60:1c:4c:da:36:4a:64:c6:31:a4:a5:af:04:
                    11:f3:7f:76:f6:ac:08:04:61:f3:1b:e8:44:75:a2:
                    a9:59:f3:f4:9a:38:46:da:8b:4a:7c:bb:8d:0c:ff:
                    7b:3b:83:0f:3e:fc:1f:a0:32:6a:50:66:df:da:60:
                    e8:6c:4a:10:b3:58:b1:fc:ef:bf:be:ea:00:94:0c:
                    b1:66:a7:c2:6c:9a:d0:9c:17:5e:f6:48:d1:22:8c:
                    a6:c8:bb:f9:21:2e:7c:42:7b:60:9a:95:d3:3d:05:
                    d7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:90:DC:90:09:59:6C:16:6A:0C:B0:DC:84:D9:F6:4D:80:27:41:8C
            X509v3 Authority Key Identifier:
                keyid:06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:23:6c:37:41:56:c6:d2:2d:77:a6:83:45:a4:8a:85:7e:74:
         bd:6c:fe:23:1a:d9:54:86:cb:00:07:7a:7d:19:16:fc:bf:ef:
         f8:ee:4e:75:82:52:b1:7f:68:df:d6:d4:14:dd:05:29:03:94:
         17:fb:ac:62:59:3a:df:98:ff:42:a6:40:d4:2c:69:00:0e:7c:
         d6:b5:30:4d:a0:39:08:d7:e2:2a:c9:25:8f:20:fe:f2:55:fd:
         18:09:af:2d:8b:11:7b:d5:af:82:0b:b6:86:af:eb:9e:a3:6a:
         df:d0:0e:5d:a9:61:2d:64:4c:68:fa:34:af:c4:f3:75:9d:0f:
         4c:fe:8c:81:b3:9b:0e:9a:d8:64:7c:67:bf:2f:56:6c:cc:6f:
         97:05:eb:99:b7:59:e2:3a:23:34:f4:19:eb:22:77:6e:ff:ef:
         96:9a:90:35:22:6b:53:e7:77:6e:7c:e7:32:6d:8b:9f:42:3c:
         5e:e2:bc:1d:14:d4:93:a0:24:80:a7:c3:f5:8a:85:cb:ba:d2:
         74:32:f0:2d:da:73:60:23:f1:b1:c0:ef:ed:5c:d4:af:9c:c2:
         d5:d1:7c:53:b1:52:90:a4:9a:cc:a2:29:d7:69:2d:b7:15:56:
         c0:4d:6d:ba:56:71:db:51:5c:99:1d:40:92:b9:11:0c:6e:13:
         3c:c1:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:30 2026 by rpki-client