Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File:                     D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier:          5p+Q5hwHQIX7W8wPZZcvO6vYY1mAp2iFZYB0qDG0qFE=
Subject key identifier:   33:A0:43:96:48:AE:86:2E:32:43:4C:1D:CE:EB:95:16:51:9B:C7:4F
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer:       /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial:       635165E64EA97A870C6C91C581434D0AFC6D1BEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number:          05C9
Signing time:             Thu 15 Oct 2026 07:19:24 +0000
Manifest this update:     Thu 15 Oct 2026 07:14:24 +0000
Manifest next update:     Fri 16 Oct 2026 10:40:24 +0000
Files and hashes:         1: AS203843.asa (hash: V8ALni8uGvnQlob1ieX97WK3dqsrOaJM1khRqBJJdKg=)
                          2: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: 67p5glbKEota5m4aw5CfEg4jvvn9GAjz8xynhouKFM4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 10:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:51:65:e6:4e:a9:7a:87:0c:6c:91:c5:81:43:4d:0a:fc:6d:1b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
        Validity
            Not Before: Oct 15 07:14:24 2026 GMT
            Not After : Oct 16 10:40:24 2026 GMT
        Subject: CN=33A0439648AE862E32434C1DCEEB9516519BC74F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:29:62:74:85:24:6f:75:94:1d:6b:9b:14:cf:
                    57:85:4a:fc:f5:50:0c:c7:a4:e7:e8:4a:e7:17:cd:
                    77:ff:2a:db:f1:fb:35:a7:44:70:b3:a4:d1:51:55:
                    db:77:3e:4d:99:f6:11:4c:d0:8f:f4:e1:cf:76:80:
                    81:c2:30:11:d0:b6:19:7a:49:81:0e:b3:6f:99:54:
                    16:8b:89:c2:d5:64:6b:55:df:be:45:e6:de:9d:46:
                    19:cb:9c:2d:8a:8e:7d:03:e2:8e:61:74:d2:79:68:
                    d8:73:ce:12:14:4c:06:ac:2d:37:18:7b:9a:15:fc:
                    d8:8b:d4:a2:7a:78:e2:46:18:34:29:58:54:8f:73:
                    4f:7c:1d:9c:e7:31:8f:00:72:1d:63:2e:15:1d:ac:
                    f1:9c:5f:2e:f4:b2:95:ec:80:08:fe:24:32:54:8e:
                    69:4c:a9:99:c0:82:3f:bd:df:03:06:ec:78:8c:57:
                    fb:2a:08:35:98:dc:f2:43:cb:eb:20:b5:67:fc:fc:
                    91:b7:b5:25:76:66:1f:0c:a7:a3:b7:1e:dc:0d:33:
                    27:5a:00:47:3a:a5:e1:15:a7:35:49:bb:4e:a2:f4:
                    e7:cd:fa:6d:63:31:2c:6c:cd:c7:ca:c0:5f:dd:f1:
                    a7:03:45:ba:f5:43:6e:e9:06:60:ef:ec:a6:80:d8:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A0:43:96:48:AE:86:2E:32:43:4C:1D:CE:EB:95:16:51:9B:C7:4F
            X509v3 Authority Key Identifier:
                keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:77:f0:63:d3:66:c1:b8:9c:4c:cc:41:f7:8b:95:81:e9:b4:
         fd:f3:7d:de:73:6a:69:92:a9:b0:b0:7d:e9:e2:75:b2:d2:76:
         6f:6d:c2:de:08:17:37:65:88:ae:f0:55:0c:4c:25:23:5e:ec:
         5d:37:aa:af:8c:f4:f6:e0:76:f7:01:1e:01:6f:83:e3:b1:23:
         30:68:5b:bf:1c:65:53:64:40:b9:cf:b2:d1:9e:26:41:b7:fa:
         ea:a3:60:76:95:6d:0b:50:e8:ba:ad:99:2d:e5:31:7f:71:a7:
         c1:ad:10:bb:43:0d:70:ad:88:3c:33:3a:56:5f:4a:d9:17:b6:
         5b:6e:a2:98:62:b5:d9:e5:fe:11:a4:34:0b:18:aa:2b:10:9d:
         d7:a4:ae:8e:26:fd:1f:dc:34:2f:4d:76:df:e6:ee:a6:44:a9:
         d5:85:ea:67:65:4c:ca:f6:20:0d:36:96:c2:44:1d:a9:cd:e4:
         90:7d:85:97:99:2d:de:ec:2f:8e:f3:ce:12:2c:cc:18:d8:69:
         a4:9b:12:93:4c:d8:8d:03:b3:93:d3:a8:7c:dd:a4:07:a6:5c:
         29:15:ea:78:99:24:83:56:4a:d3:63:4c:5f:72:1f:cd:9c:81:
         a1:11:06:f2:e7:fc:46:dc:3c:09:8d:9d:50:cc:91:66:4b:31:
         ca:1e:9c:6d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUY1Fl5k6peocMbJHFgUNNCvxtG+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDAyYmJiNDQwYjlkZDQ0MDg4ZGI2ODRlZTgyZmEyYTdk
YTA2ZmNmNjAeFw0yNjEwMTUwNzE0MjRaFw0yNjEwMTYxMDQwMjRaMDMxMTAvBgNV
BAMTKDMzQTA0Mzk2NDhBRTg2MkUzMjQzNEMxRENFRUI5NTE2NTE5QkM3NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVKWJ0hSRvdZQda5sUz1eFSvz1
UAzHpOfoSucXzXf/Ktvx+zWnRHCzpNFRVdt3Pk2Z9hFM0I/04c92gIHCMBHQthl6
SYEOs2+ZVBaLicLVZGtV375F5t6dRhnLnC2Kjn0D4o5hdNJ5aNhzzhIUTAasLTcY
e5oV/NiL1KJ6eOJGGDQpWFSPc098HZznMY8Ach1jLhUdrPGcXy70spXsgAj+JDJU
jmlMqZnAgj+93wMG7HiMV/sqCDWY3PJDy+sgtWf8/JG3tSV2Zh8Mp6O3HtwNMyda
AEc6peEVpzVJu06i9OfN+m1jMSxszcfKwF/d8acDRbr1Q27pBmDv7KaA2PA9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUM6BDlkiuhi4yQ0wdzuuVFlGbx08wHwYDVR0j
BBgwFoAU0Cu7RAud1ECI22hO6C+ip9oG/PYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4
ZWI4LzEvRDAyQkJCNDQwQjlERDQ0MDg4REI2ODRFRTgyRkEyQTdEQTA2RkNGNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBDdTdSQXVkMUVDSTIyaE82Qy1pcDlv
R19QWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2Y2ODU2MS0w
YTc0LTRjY2EtYmY4Zi0xMmZhYWFmYzhlYjgvMS9EMDJCQkI0NDBCOURENDQwODhE
QjY4NEVFODJGQTJBN0RBMDZGQ0Y2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyHfwY9NmwbicTMxB94uV
gem0/fN93nNqaZKpsLB96eJ1stJ2b23C3ggXN2WIrvBVDEwlI17sXTeqr4z09uB2
9wEeAW+D47EjMGhbvxxlU2RAuc+y0Z4mQbf66qNgdpVtC1Douq2ZLeUxf3Gnwa0Q
u0MNcK2IPDM6Vl9K2Re2W26imGK12eX+EaQ0CxiqKxCd16Sujib9H9w0L0123+bu
pkSp1YXqZ2VMyvYgDTaWwkQdqc3kkH2Fl5kt3uwvjvPOEizMGNhppJsSk0zYjQOz
k9OofN2kB6ZcKRXqeJkkg1ZK02NMX3IfzZyBoREG8uf8Rtw8CY2dUMyRZksxyh6c
bQ==
-----END CERTIFICATE-----
Generated at Fri Oct 16 00:17:35 2026 by rpki-client