Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft
File:                     59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft (raw, json)
Hash identifier:          24SPDuYVZs4ZyOXx9U1s/ljHQ4QmBM1jlcB5/mTPpxw=
Subject key identifier:   E6:B0:17:EE:17:7F:00:10:F6:DA:39:26:FA:FD:8A:D1:09:41:97:34
Authority key identifier: 59:90:6C:43:E7:E7:D1:04:C7:C8:42:32:EF:2B:9C:DD:BD:72:90:A4
Certificate issuer:       /CN=59906c43e7e7d104c7c84232ef2b9cddbd7290a4
Certificate serial:       5A2DBCAAAF99B42E06D3D37D1D315884352CD75E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft
Manifest number:          D1
Signing time:             Sun 29 Mar 2026 04:24:26 +0000
Manifest this update:     Sun 29 Mar 2026 04:19:26 +0000
Manifest next update:     Mon 30 Mar 2026 07:31:26 +0000
Files and hashes:         1: 59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl (hash: s8R7sAWLfMMxB82b6t2iCb/ljePpEJYSAHuL0exS3eI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2d:bc:aa:af:99:b4:2e:06:d3:d3:7d:1d:31:58:84:35:2c:d7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59906c43e7e7d104c7c84232ef2b9cddbd7290a4
        Validity
            Not Before: Mar 29 04:19:26 2026 GMT
            Not After : Mar 30 07:31:26 2026 GMT
        Subject: CN=E6B017EE177F0010F6DA3926FAFD8AD109419734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:31:c6:d2:41:0c:df:c6:05:ab:ad:35:47:
                    e0:30:03:ec:38:d6:98:fa:19:1c:67:b2:2f:9d:c2:
                    14:2d:c0:6f:b4:15:35:65:da:3f:2a:20:74:95:f3:
                    c5:d0:e9:68:f9:56:42:da:17:4e:45:ff:07:28:71:
                    7b:ff:da:2a:9c:8d:71:8c:12:dc:6f:66:12:31:22:
                    74:6c:79:9a:9d:b4:5a:31:db:f8:44:be:06:c5:9c:
                    b2:bc:ce:c7:6d:0c:e0:81:23:d0:90:39:74:7e:e1:
                    6a:af:f0:3e:cb:2f:a0:55:ef:30:bd:f3:45:87:83:
                    53:60:aa:e8:1f:5c:12:f4:79:c2:15:77:bd:89:6d:
                    0f:32:86:8a:e1:9c:3e:d8:27:b7:41:d9:53:4c:02:
                    26:14:de:63:55:9d:32:00:d1:83:01:c4:fe:f1:8e:
                    c5:71:88:63:d3:25:c3:5b:92:35:69:5c:6e:4e:51:
                    91:12:b9:af:4b:cb:46:25:14:34:22:da:cd:3b:9a:
                    92:60:af:38:87:ce:98:29:a9:37:90:7c:85:9b:34:
                    85:30:6a:ec:a3:37:c2:6b:a9:4d:fa:59:c4:60:78:
                    14:a8:0c:6a:77:84:c4:e9:dd:36:b9:64:c8:9d:df:
                    b9:1f:04:04:c6:8f:99:4c:74:83:54:f2:ce:ea:98:
                    62:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B0:17:EE:17:7F:00:10:F6:DA:39:26:FA:FD:8A:D1:09:41:97:34
            X509v3 Authority Key Identifier:
                keyid:59:90:6C:43:E7:E7:D1:04:C7:C8:42:32:EF:2B:9C:DD:BD:72:90:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:96:7f:45:6d:8a:3a:f0:1e:8d:03:7c:2e:93:8c:a4:d8:c4:
         f7:90:6e:e8:fd:e3:75:4c:fc:97:50:9c:24:93:ae:04:71:da:
         f5:37:97:84:d3:3f:1e:bc:62:ad:2a:d5:8e:f0:26:11:23:99:
         f2:72:e5:e4:39:1a:2d:c8:54:82:b3:f4:ec:70:ea:29:50:d9:
         73:80:93:5e:aa:4a:f7:0f:29:08:fc:7d:29:8f:88:bf:d1:93:
         aa:3b:3f:5b:3f:c9:a4:ec:79:0d:11:70:be:85:fc:ac:f6:92:
         e3:9c:a5:13:a1:32:56:0e:91:1d:62:d8:a7:c1:46:8c:df:61:
         d2:ee:42:1d:9e:db:2d:f0:84:69:68:2f:a8:54:a7:f1:f3:3b:
         8d:c1:cc:4c:a4:40:69:88:dc:84:59:ff:58:9d:44:62:87:1a:
         a6:b6:19:6a:4b:3b:85:2d:4f:95:d7:de:21:0a:9c:aa:fb:45:
         e1:55:48:15:7a:47:5b:3f:34:c3:b7:6f:f8:e8:1d:cf:f3:31:
         4b:3f:b9:ca:bf:e2:41:f2:6a:95:31:41:cc:8b:85:e0:15:71:
         23:4e:71:5b:da:06:35:4e:0e:36:09:46:7d:c5:e9:62:39:77:
         b9:c0:bd:8d:38:47:c5:d2:48:1a:a5:60:4e:81:05:2f:cc:ef:
         53:b4:95:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:28 2026 by rpki-client