Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File:                     A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier:          ZsLzn6K+F9D+kd96U9yThFpnQ3aAYFFNHhDXWhsuXy4=
Subject key identifier:   16:0E:3C:4D:FC:64:C0:A5:D2:5E:CD:DC:14:4E:D5:51:DB:CD:72:E4
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer:       /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial:       3FF0AAEDC66CF957D28C710BCD03E0E93F957715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number:          06EB
Signing time:             Mon 31 Aug 2026 13:43:44 +0000
Manifest this update:     Mon 31 Aug 2026 13:38:44 +0000
Manifest next update:     Tue 01 Sep 2026 14:49:44 +0000
Files and hashes:         1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: ZJgUFAnWosDPRwDlJbYnVyhyA89Dn1BHn7yD0Gzd5rA=)
                          2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 14:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f0:aa:ed:c6:6c:f9:57:d2:8c:71:0b:cd:03:e0:e9:3f:95:77:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
        Validity
            Not Before: Aug 31 13:38:44 2026 GMT
            Not After : Sep  1 14:49:44 2026 GMT
        Subject: CN=160E3C4DFC64C0A5D25ECDDC144ED551DBCD72E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c8:b7:4c:ff:ac:89:90:af:35:ee:50:2e:4b:
                    04:4b:d8:7a:dc:bd:c5:7d:74:cf:e6:4a:22:ab:a8:
                    2e:fe:72:64:1e:38:45:a8:3b:01:d7:fe:b6:1c:74:
                    f2:5d:8c:e3:ad:31:10:5d:33:70:af:0f:6d:b9:55:
                    a5:14:8d:5f:33:69:ba:5d:fc:45:ad:b2:1b:a1:73:
                    64:60:12:ad:4a:e9:21:81:e2:4f:3d:a6:87:1b:88:
                    17:97:39:0b:18:05:2e:40:1e:c8:5f:71:f7:0b:99:
                    65:79:b4:37:12:8f:c3:ef:58:d1:ee:8c:d4:35:c2:
                    86:ee:31:e4:74:67:bb:df:b6:33:fb:f3:6a:af:4c:
                    42:89:1d:98:cc:d6:43:12:d1:05:5d:c5:ed:d4:ab:
                    3d:17:20:5b:3a:70:2b:7f:7b:a4:06:27:1c:a4:ed:
                    be:cc:72:d0:3c:e6:40:47:0c:74:52:c6:60:45:fd:
                    a4:0d:fe:35:8d:18:38:f3:53:af:12:20:cf:ee:4a:
                    5c:0c:64:ab:8f:82:66:06:f6:73:97:c4:d5:2f:b4:
                    b2:3c:6b:77:90:50:17:26:96:d9:a1:5b:e5:26:d4:
                    32:9d:c4:ad:3b:6e:0b:31:f1:8d:da:20:bd:d5:fd:
                    99:53:4f:b3:b1:f8:39:1b:5a:0f:d9:95:f9:f9:85:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0E:3C:4D:FC:64:C0:A5:D2:5E:CD:DC:14:4E:D5:51:DB:CD:72:E4
            X509v3 Authority Key Identifier:
                keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2f:73:84:b1:66:dc:86:d6:51:1f:40:21:f7:59:af:50:2a:
         76:61:cc:a0:c8:8c:09:c1:6f:81:85:80:7d:8e:3e:6d:31:cf:
         e7:c0:e1:68:09:c5:57:25:48:7e:66:fb:cc:12:2c:27:62:b9:
         5b:64:aa:44:b5:36:dd:16:e1:d5:32:bd:b7:8a:c2:68:64:ae:
         28:31:77:90:4a:68:94:7f:81:da:2e:f3:39:bf:5d:9e:01:4e:
         4d:93:f0:8d:cd:7f:41:8b:4f:c2:90:b9:49:96:97:3e:22:63:
         da:2d:45:56:a3:42:f1:df:af:88:ed:79:9e:ba:37:6c:e4:93:
         1d:3c:38:fe:b8:50:8d:d1:23:82:61:a0:eb:9a:50:32:95:b6:
         65:34:c1:2d:64:de:70:c8:a8:8f:f6:1d:76:29:7e:9a:73:43:
         37:8a:a8:e4:b9:58:24:66:5e:83:aa:e5:dd:08:eb:97:d4:3b:
         ef:16:4f:64:f2:87:c3:3b:f3:7b:b5:30:27:3b:b2:8d:ba:a5:
         f2:25:2f:d8:52:24:d4:3a:f0:aa:1a:0e:0c:20:88:22:9f:76:
         d6:7f:4a:a3:ae:65:a3:ac:a4:5d:03:b8:dd:4d:de:78:1d:be:
         20:a9:c8:7d:3a:51:fa:d3:65:57:3f:bd:31:80:22:3a:b1:f0:
         97:41:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:33:01 2026 by rpki-client