Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
File:                     BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft (raw, json)
Hash identifier:          zmCnnJ2/RONCgR3r/5LZbyec7w+lcBd813p6kPP6p6E=
Subject key identifier:   33:08:31:96:D0:08:FC:21:4D:AF:7C:11:1F:41:0E:1F:3C:05:B2:58
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Certificate issuer:       /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial:       235166F0B7A1E56AA36C3798E18EA1B73A226BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
Manifest number:          0152
Signing time:             Sun 30 Aug 2026 21:52:21 +0000
Manifest this update:     Sun 30 Aug 2026 21:47:21 +0000
Manifest next update:     Mon 31 Aug 2026 23:28:21 +0000
Files and hashes:         1: AS210352.asa (hash: x0Mzp9uNbhYBNVbao9h99kMNB+s8WR3cShhsKi7t0Wk=)
                          2: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl (hash: QOUmUNox5/avYKjSivOrcBbHcDB6GxnuJxzcPVfUjt4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 31 Aug 2026 23:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:51:66:f0:b7:a1:e5:6a:a3:6c:37:98:e1:8e:a1:b7:3a:22:6b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
        Validity
            Not Before: Aug 30 21:47:21 2026 GMT
            Not After : Aug 31 23:28:21 2026 GMT
        Subject: CN=33083196D008FC214DAF7C111F410E1F3C05B258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:9b:74:a6:44:4b:bd:c4:da:e1:96:17:f9:
                    b8:f3:8b:fb:9e:c8:79:9f:fd:3f:6b:c6:fc:ef:70:
                    b7:4e:61:40:5a:7c:ed:5a:18:45:7f:10:e3:0e:e7:
                    cc:67:19:cc:80:6f:06:b1:d1:98:52:49:5b:93:ba:
                    ce:ca:d5:e4:52:4a:51:d6:e0:e0:49:47:0a:89:17:
                    1a:3f:64:ea:14:ea:d6:83:44:6c:5d:80:f0:da:24:
                    cc:fa:d5:76:c1:61:ad:3b:7a:77:09:dd:1f:3f:ed:
                    67:89:23:66:e8:4e:40:90:8e:f8:8e:66:10:10:3f:
                    72:01:14:23:90:00:25:f6:77:2a:09:24:35:f6:8d:
                    e3:c4:c9:51:44:47:40:9b:8a:9c:1a:b7:6e:29:52:
                    17:75:7a:5a:53:51:18:83:d0:7d:fc:c0:fa:0a:cb:
                    7f:63:d0:47:bc:92:94:8e:28:34:22:7d:60:7b:92:
                    bf:63:77:7c:e0:24:0d:53:ac:43:34:b3:8b:90:ee:
                    78:98:98:95:1e:06:bc:83:a3:0a:93:6f:f7:a8:15:
                    e4:5f:68:d1:7e:2b:62:61:2d:37:c2:6b:ba:aa:6b:
                    90:bc:2c:9c:a9:51:c9:19:bc:d0:6a:f5:ee:3b:04:
                    43:72:ac:52:17:3e:a8:61:fa:44:d1:91:75:5d:e8:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:08:31:96:D0:08:FC:21:4D:AF:7C:11:1F:41:0E:1F:3C:05:B2:58
            X509v3 Authority Key Identifier:
                keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:48:d7:f3:a0:d4:c1:0c:b1:fd:4f:57:94:bc:57:34:2c:89:
         74:34:f1:34:8b:39:0c:41:dd:73:b2:e2:75:e8:5e:d8:f2:c9:
         a0:07:b1:e1:43:15:e1:cc:08:ee:2e:58:43:d2:d7:59:64:42:
         44:73:2a:86:0c:93:b2:04:e7:4d:f4:80:32:ec:d1:99:0f:da:
         4c:d0:ba:6c:c9:55:f0:b5:9e:fa:40:87:da:d2:1d:00:6c:d5:
         18:99:59:aa:f3:d2:e0:0b:9a:2f:26:4f:19:ba:2c:92:59:44:
         5c:28:ee:60:ac:35:cf:05:70:bf:81:5a:8f:e4:e7:95:75:f7:
         97:69:c6:60:f2:c6:75:3e:cc:a3:a1:cb:44:20:64:a6:56:84:
         71:51:98:19:7e:20:d6:ec:f9:40:e7:a4:19:99:ed:34:29:6d:
         33:1d:22:84:16:11:da:c4:96:6c:05:ff:98:81:43:f8:04:34:
         2b:a6:30:25:ec:71:9a:d4:1c:09:a6:1c:17:40:83:59:00:50:
         65:2c:48:1d:d2:1c:5a:c6:45:5d:74:cb:27:3c:e0:42:d2:00:
         48:1a:29:49:73:25:37:24:be:f6:6b:fd:6f:51:3d:ec:46:a7:
         00:5f:0f:2b:72:4b:a8:0c:f2:75:0d:5e:63:e5:6d:1d:15:91:
         aa:a1:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:11:26 2026 by rpki-client