Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
File:                     06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft (raw, json)
Hash identifier:          q4ZiFxqnJHgRTVaVJXfHE1t/CeM1+anGhVw45aQrZDc=
Subject key identifier:   BD:37:31:40:C4:97:2F:4B:FD:16:C7:38:BE:76:17:B4:65:E5:86:CA
Authority key identifier: 06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C
Certificate issuer:       /CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
Certificate serial:       609B5EF406E5EEAFE14EF5C5CD6E70F971896EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
Manifest number:          A4
Signing time:             Thu 14 May 2026 21:13:29 +0000
Manifest this update:     Thu 14 May 2026 21:08:29 +0000
Manifest next update:     Sat 16 May 2026 00:39:29 +0000
Files and hashes:         1: AS202782.asa (hash: BUvQaaL6LDCtZinny59vQWt/MEabU/h3KDaRVhwqAQM=)
                          2: 06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl (hash: RbkmwJF5qQCIc1/6sBmTHo70JetYbXUj7u87mOFYcgE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 00:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9b:5e:f4:06:e5:ee:af:e1:4e:f5:c5:cd:6e:70:f9:71:89:6e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
        Validity
            Not Before: May 14 21:08:29 2026 GMT
            Not After : May 16 00:39:29 2026 GMT
        Subject: CN=BD373140C4972F4BFD16C738BE7617B465E586CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:f3:2f:d5:1d:e0:d3:0d:28:2b:d9:1d:c4:
                    24:89:5b:a2:b6:94:cb:5d:15:d7:b8:f7:74:fe:9e:
                    9b:26:8c:a6:6f:47:bf:80:59:0c:76:71:c1:73:8b:
                    92:1b:12:00:c9:95:2d:7c:ba:4b:9f:ae:9b:b3:fc:
                    5e:2d:bc:93:8c:7c:b0:1e:0e:65:24:17:6a:80:0f:
                    2b:bb:5b:0e:51:cf:2d:7a:a7:81:29:83:c0:15:3e:
                    65:32:84:3e:cc:52:9b:81:b4:5b:23:6b:3e:de:3a:
                    12:13:60:98:e5:9f:37:59:a1:83:cd:d9:35:6c:0d:
                    ff:a4:4b:84:a6:7c:16:5d:88:0e:3c:8c:57:cb:d6:
                    b2:4a:4a:78:8e:b1:4d:c5:47:76:ba:35:19:03:ce:
                    48:39:22:f1:75:94:40:75:38:8a:b9:f0:c5:32:8f:
                    59:0f:1c:bc:c2:13:e7:cf:fb:91:18:84:5c:80:a9:
                    f7:bb:08:fe:56:05:96:e2:93:8b:5c:c3:75:a8:94:
                    04:ad:42:04:eb:49:7c:79:2f:fa:ff:42:29:db:4e:
                    0b:b5:02:dd:26:52:05:49:7b:3b:5c:ca:22:c6:f6:
                    ba:2e:db:34:ae:16:ac:44:73:a4:cf:3d:11:4f:73:
                    52:66:7a:86:5b:07:ae:75:52:77:19:aa:6a:ce:87:
                    b1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:37:31:40:C4:97:2F:4B:FD:16:C7:38:BE:76:17:B4:65:E5:86:CA
            X509v3 Authority Key Identifier:
                keyid:06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5f:43:a7:90:ef:be:9c:1d:f4:dd:61:7a:5d:4a:8d:55:72:
         7b:a5:c4:01:d7:1d:17:ba:fa:9d:3d:95:5c:db:30:7a:83:58:
         e1:a5:68:af:c4:66:c9:9d:ef:ac:bf:10:b2:ca:41:0c:ec:c6:
         39:2b:d9:42:43:ed:1f:37:b8:2a:ad:b8:d4:19:28:76:d5:44:
         8d:3a:26:be:de:7d:da:85:5c:36:90:79:19:40:7b:c5:b8:b0:
         cd:a5:1e:62:d7:65:8f:bc:5b:f2:e2:fd:2f:9a:b4:7c:01:6b:
         4d:da:f8:46:54:05:79:46:d8:a7:11:0e:21:65:e0:e9:ab:bc:
         c9:44:8e:bb:50:c8:a5:75:de:0d:eb:33:5c:11:f5:e6:6f:20:
         22:6d:40:13:9e:f7:6a:4f:51:22:10:21:69:7f:ad:42:f4:0e:
         bb:0d:82:0a:c8:95:74:a8:9b:99:fa:eb:93:33:67:68:ec:19:
         a6:39:ce:d3:98:02:ba:f9:0b:d3:b7:2d:b3:f7:81:fd:e6:0d:
         91:bd:59:f2:aa:6b:1c:f3:e4:ed:94:48:e5:bb:54:f2:73:2f:
         41:63:3a:82:c4:f7:eb:b5:d9:e9:c4:03:cd:93:ad:fb:7c:09:
         a5:77:ce:68:fd:27:f4:c9:23:67:b2:4e:e3:cf:ea:8c:f7:eb:
         55:10:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:28 2026 by rpki-client