Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File:                     A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier:          uwuXbMT3Ft26KixMeCJ7qorZl49YutXb+ElAVn20K3Y=
Subject key identifier:   10:65:A4:A8:B6:E6:E5:32:6B:16:F6:72:AA:7E:C5:9C:C0:C0:D4:28
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer:       /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial:       0D12E10FC7BD6F76F00F1F8657821687A6B4B6D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number:          06B1
Signing time:             Sun 29 Mar 2026 09:43:22 +0000
Manifest this update:     Sun 29 Mar 2026 09:38:22 +0000
Manifest next update:     Mon 30 Mar 2026 13:42:22 +0000
Files and hashes:         1: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
                          2: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: UzDRuPx3YBz08i7pVPFNDkEFbzgYZNAm26FT9v/MMOc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:12:e1:0f:c7:bd:6f:76:f0:0f:1f:86:57:82:16:87:a6:b4:b6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
        Validity
            Not Before: Mar 29 09:38:22 2026 GMT
            Not After : Mar 30 13:42:22 2026 GMT
        Subject: CN=1065A4A8B6E6E5326B16F672AA7EC59CC0C0D428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:7d:94:17:bf:c7:56:d2:19:69:73:21:80:
                    0c:db:fd:36:3c:13:28:6c:99:a4:01:ed:ec:b3:1f:
                    0f:8e:88:eb:a0:51:68:27:f0:eb:2b:25:d3:a0:4b:
                    4b:09:59:48:f8:a9:93:df:38:ac:ff:e8:fd:b0:a4:
                    d4:d9:1b:0c:7f:d6:be:eb:a6:1b:26:9d:d6:ef:33:
                    12:c4:43:5d:8e:13:b4:26:f7:fa:20:17:4c:31:f2:
                    61:14:e1:25:85:eb:52:e9:d9:af:22:1b:84:c3:87:
                    b4:6b:d7:1e:33:f0:a7:d6:89:5e:76:08:c4:cf:b1:
                    5f:fd:8f:df:39:cd:cd:6d:86:11:e2:20:93:2c:65:
                    14:35:f7:a6:34:88:3c:95:f2:66:49:a9:d9:d7:81:
                    e9:0e:f7:13:29:17:6e:b4:08:75:e9:47:3d:84:b3:
                    45:47:bb:c1:b8:7b:22:94:66:a4:b6:0e:e9:07:2c:
                    c1:36:a5:67:6f:80:40:0f:11:60:b5:6f:bb:7a:68:
                    97:10:52:6f:35:80:86:4a:4b:7f:ac:31:e9:c4:c3:
                    09:66:18:e3:7a:9b:65:18:a3:82:da:7e:17:99:a7:
                    96:a3:d8:7d:f4:38:af:40:bb:c6:c9:a2:17:c2:c2:
                    d2:c3:c1:d1:33:56:67:8b:54:09:27:c9:42:99:b9:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:65:A4:A8:B6:E6:E5:32:6B:16:F6:72:AA:7E:C5:9C:C0:C0:D4:28
            X509v3 Authority Key Identifier:
                keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e2:de:79:4b:bd:87:83:7d:00:6b:14:87:c6:fd:e4:25:0e:
         84:6b:68:6c:5a:1c:b3:5d:70:96:c3:60:92:6d:03:ef:dc:31:
         c8:83:56:33:8b:c4:4b:bf:40:ec:d5:97:cd:21:df:76:65:2e:
         c6:9e:38:c9:38:ef:ea:d5:d7:fc:c0:51:43:42:9a:aa:9f:d4:
         a2:c8:c7:ee:5a:c3:cf:c2:a7:67:3d:ff:7c:8a:4f:4f:c5:e3:
         f5:49:32:2d:0f:40:41:f3:c5:03:25:3a:cc:30:3d:46:aa:12:
         37:db:83:60:cd:b1:4b:ac:8d:78:fc:70:59:fe:75:5c:12:08:
         9a:e7:14:c5:6e:b3:df:36:e7:a1:bc:08:9e:25:e8:d9:94:dc:
         43:8f:81:ad:79:49:fe:3a:93:8d:96:ac:d0:00:86:e2:7f:f0:
         d5:b9:99:50:fd:7c:c6:09:af:94:8e:f2:eb:6a:13:8b:3f:52:
         e6:57:6e:f3:74:2c:7e:79:12:15:85:ad:42:9a:ee:32:4d:5f:
         ee:0d:f1:02:4a:10:24:82:3a:6f:dc:fc:5b:cf:24:61:34:ca:
         3b:47:e0:90:aa:af:96:ad:cd:0e:bc:cf:4d:79:bf:b9:4c:8c:
         d0:6f:ba:82:54:a6:da:4e:cc:d3:0c:a4:31:a3:76:8d:31:99:
         bc:5c:43:8e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUDRLhD8e9b3bwDx+GV4IWh6a0ttEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTcxNWE3YzQyNDNkZmQ1NjA4YWM3YzU5NjIwNTUxMjVi
OTRkMTc2MzAeFw0yNjAzMjkwOTM4MjJaFw0yNjAzMzAxMzQyMjJaMDMxMTAvBgNV
BAMTKDEwNjVBNEE4QjZFNkU1MzI2QjE2RjY3MkFBN0VDNTlDQzBDMEQ0MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzX2UF7/HVtIZaXMhgAzb/TY8
EyhsmaQB7eyzHw+OiOugUWgn8OsrJdOgS0sJWUj4qZPfOKz/6P2wpNTZGwx/1r7r
phsmndbvMxLEQ12OE7Qm9/ogF0wx8mEU4SWF61Lp2a8iG4TDh7Rr1x4z8KfWiV52
CMTPsV/9j985zc1thhHiIJMsZRQ196Y0iDyV8mZJqdnXgekO9xMpF260CHXpRz2E
s0VHu8G4eyKUZqS2DukHLME2pWdvgEAPEWC1b7t6aJcQUm81gIZKS3+sMenEwwlm
GON6m2UYo4LafheZp5aj2H30OK9Au8bJohfCwtLDwdEzVmeLVAknyUKZuaF1AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUEGWkqLbm5TJrFvZyqn7FnMDA1CgwHwYDVR0j
BBgwFoAUpxWnxCQ9/VYIrHxZYgVRJblNF2MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzEvQTcxNUE3QzQyNDNERkQ1NjA4QUM3QzU5NjIwNTUxMjVCOTREMTc2My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3B4V254Q1E5X1ZZSXJIeFpZZ1ZSSmJs
TkYyTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMS9BNzE1QTdDNDI0M0RGRDU2MDhB
QzdDNTk2MjA1NTEyNUI5NEQxNzYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuLeeUu9h4N9AGsUh8b9
5CUOhGtobFocs11wlsNgkm0D79wxyINWM4vES79A7NWXzSHfdmUuxp44yTjv6tXX
/MBRQ0Kaqp/UosjH7lrDz8KnZz3/fIpPT8Xj9UkyLQ9AQfPFAyU6zDA9RqoSN9uD
YM2xS6yNePxwWf51XBIImucUxW6z3zbnobwIniXo2ZTcQ4+BrXlJ/jqTjZas0ACG
4n/w1bmZUP18xgmvlI7y62oTiz9S5ldu83QsfnkSFYWtQpruMk1f7g3xAkoQJII6
b9z8W88kYTTKO0fgkKqvlq3NDrzPTXm/uUyM0G+6glSm2k7M0wykMaN2jTGZvFxD
jg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:30 2026 by rpki-client