Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
File:                     883931AAB8B1363015BC8FDDF0B582321767440A.mft (raw, json)
Hash identifier:          z9Mx26DHB80Y4ARN0g0f34efI+Xy5aMVLKF/01IDQJA=
Subject key identifier:   DC:44:16:34:97:61:9B:AC:1C:6A:C3:BE:85:BD:72:09:05:FC:DB:EA
Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
Certificate issuer:       /CN=883931aab8b1363015bc8fddf0b582321767440a
Certificate serial:       779BFE4BDFD54CBB9754683796CB56AE983E0D77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
Manifest number:          0129
Signing time:             Sun 26 Jul 2026 23:33:54 +0000
Manifest this update:     Sun 26 Jul 2026 23:28:54 +0000
Manifest next update:     Tue 28 Jul 2026 01:25:54 +0000
Files and hashes:         1: AS213605.asa (hash: /VNMUci42IHQGokYnePPu+nWfjn6z+W+mTSXWO4Akec=)
                          2: 323030313a3637383a3533633a3a2f34382d3438203d3e20313534313835.roa (hash: ToBUFvUom+h4rbM7uZ7L3aEUItGSsZaFzls2rQ5hJzY=)
                          3: 883931AAB8B1363015BC8FDDF0B582321767440A.crl (hash: z1BcJ50cHJUD4CvWlKDLqtAShB0GiBuCkP1a6oli1qA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9b:fe:4b:df:d5:4c:bb:97:54:68:37:96:cb:56:ae:98:3e:0d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a
        Validity
            Not Before: Jul 26 23:28:54 2026 GMT
            Not After : Jul 28 01:25:54 2026 GMT
        Subject: CN=DC44163497619BAC1C6AC3BE85BD720905FCDBEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:4e:07:c5:da:8f:7c:6b:8b:b4:cd:68:04:
                    5b:8a:07:f7:5c:2f:88:f8:99:0f:3b:cd:dd:23:a8:
                    98:9f:b1:bd:25:a8:cb:d1:0a:0f:54:9e:a1:e3:a6:
                    90:2b:fc:ac:5a:10:53:4b:62:d1:96:eb:c2:f0:88:
                    1c:02:69:2d:96:88:77:f3:6e:47:c7:80:10:bb:69:
                    d0:e9:b5:52:47:45:30:3e:b3:c3:24:c9:ef:33:71:
                    5c:c6:a1:19:5a:60:46:8c:d5:de:d8:41:5b:03:fd:
                    e1:a5:c6:4b:87:dd:c8:b0:8f:c0:0c:e9:16:19:9a:
                    58:b8:5e:13:d8:95:47:11:86:1d:45:16:38:b4:f3:
                    7b:d4:31:07:1b:9f:4a:ee:0e:f8:ef:e7:4c:01:9c:
                    bd:40:c3:e6:26:6f:10:21:cb:60:94:4c:72:50:38:
                    eb:a0:ee:fd:dc:5e:4e:15:1a:ac:48:19:c0:2d:db:
                    91:ab:e3:e6:61:70:1e:7c:4e:0e:1c:56:7a:a0:f5:
                    f4:62:b0:ae:00:83:b5:1c:d9:8d:49:29:e2:58:3b:
                    16:44:16:bf:e4:50:bc:a4:f1:99:73:a9:60:c3:5a:
                    32:21:c8:bf:6a:64:7f:c4:07:24:6e:06:14:10:7d:
                    5c:81:71:64:60:ed:a2:72:c3:96:d3:44:e4:bc:a6:
                    d7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:44:16:34:97:61:9B:AC:1C:6A:C3:BE:85:BD:72:09:05:FC:DB:EA
            X509v3 Authority Key Identifier:
                keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:40:4f:58:c4:39:b2:32:16:53:02:3a:aa:a6:b4:af:23:75:
         c6:41:6b:c4:d5:45:55:ff:b5:a6:62:c9:6d:67:44:3f:1a:f4:
         66:79:fa:57:11:99:55:07:d0:80:dc:07:70:07:05:1f:0e:3e:
         b0:88:f0:67:a2:0b:8d:66:7a:f3:eb:fd:4b:85:6a:5d:c8:09:
         2d:b1:0d:d8:d0:04:71:09:23:ae:4c:b1:74:af:4c:93:40:56:
         dd:64:ae:2c:46:43:35:35:72:5c:7b:3b:ac:28:d0:24:58:e9:
         fe:de:8e:6c:f3:6c:37:7a:b8:98:8b:d5:b0:cf:95:cd:be:d0:
         d0:1c:96:36:d3:51:e6:9f:fa:d6:51:e6:6a:b5:b8:d4:94:37:
         51:8b:01:ef:62:2c:c3:b3:c8:4f:94:b9:36:29:af:76:fd:a1:
         9b:a9:51:6c:93:4f:29:b9:97:53:ce:cd:ac:0c:38:be:80:f6:
         2c:0a:ae:a7:85:9d:04:67:6c:f9:a5:d4:5a:98:68:5b:7b:ae:
         d8:fd:8b:db:d6:f7:42:1c:23:f2:02:f8:21:ed:93:1a:df:8d:
         6c:fd:a9:78:58:c0:e4:50:bf:05:ec:be:da:f1:05:e3:3b:29:
         4d:2f:ea:ee:e4:76:70:aa:de:21:d7:f6:29:c4:3c:d8:76:f9:
         b7:3b:2e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:27:34 2026 by rpki-client