Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
File:                     6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft (raw, json)
Hash identifier:          Bl8L1enmVCQsQ9CXQFSHzs1HDyPucsydvZ+/Ht/rgW4=
Subject key identifier:   B5:05:CB:00:16:F7:73:96:3F:3A:73:42:02:84:07:1D:83:19:59:A6
Authority key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
Certificate issuer:       /CN=6a3130acfbfba9017addef637acd312fc763829a
Certificate serial:       74663376EF88BD6D72E1885123B8A8B3F19A4B7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
Manifest number:          0386
Signing time:             Sat 15 Aug 2026 02:11:16 +0000
Manifest this update:     Sat 15 Aug 2026 02:06:16 +0000
Manifest next update:     Sun 16 Aug 2026 06:07:16 +0000
Files and hashes:         1: AS211562.asa (hash: 8C3+cv4Ox/77O136RcP0jRWcrYpRs3rcK+fBYsAe678=)
                          2: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl (hash: 6EMxCjn4v+DqaVpyHyXxbENwtHgEXXeUwtc3UVY3wP8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:66:33:76:ef:88:bd:6d:72:e1:88:51:23:b8:a8:b3:f1:9a:4b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a3130acfbfba9017addef637acd312fc763829a
        Validity
            Not Before: Aug 15 02:06:16 2026 GMT
            Not After : Aug 16 06:07:16 2026 GMT
        Subject: CN=B505CB0016F773963F3A73420284071D831959A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:61:c4:f0:14:fb:29:bd:69:79:27:9f:2e:
                    f2:e6:4e:63:b2:f1:a1:a1:31:13:ed:53:ff:7b:6d:
                    36:63:6f:41:1e:b3:4b:2d:02:80:c2:4b:88:e2:c9:
                    9b:33:74:00:80:7f:34:2b:10:c2:52:17:16:56:81:
                    75:1c:d3:c6:ff:93:0f:35:30:29:fa:5f:4c:b2:ba:
                    37:f5:47:b5:0e:15:41:72:13:cd:ab:25:33:a8:63:
                    ed:ff:14:0e:6e:1c:f5:6b:91:d3:e7:e5:4e:35:d2:
                    dc:dc:e5:7d:ae:5f:fa:07:5a:13:c9:8c:ff:a1:12:
                    fb:32:c8:ed:f6:fb:3a:a3:91:a0:28:b9:d5:b5:6e:
                    bf:f9:20:9e:0c:6f:5e:2f:74:8d:5d:ed:ba:6e:82:
                    77:5b:6f:0a:2f:11:ab:76:ac:f5:aa:a9:ef:5e:c0:
                    da:6b:ae:d6:03:d9:89:8c:fd:fe:cf:6a:21:c1:49:
                    ed:37:e4:7e:3b:bb:aa:3e:9f:01:6a:cf:be:e7:91:
                    f6:a4:0a:42:86:91:67:3f:95:b0:21:e7:c3:25:b2:
                    d5:24:2e:a5:7b:c0:56:8d:a3:42:e7:45:41:8b:fc:
                    28:22:ef:6c:72:d2:69:ea:d2:06:da:03:90:46:e0:
                    0d:c1:78:81:cb:38:8b:8b:de:66:48:2b:21:5f:27:
                    84:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:05:CB:00:16:F7:73:96:3F:3A:73:42:02:84:07:1D:83:19:59:A6
            X509v3 Authority Key Identifier:
                keyid:6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:0f:e0:75:07:0b:8b:0b:73:27:e6:72:81:4d:8c:58:26:37:
         e6:a9:14:47:9f:00:e5:78:9c:e6:dc:34:54:12:a6:67:2f:03:
         74:ea:fa:63:ba:a3:63:c4:42:24:68:a1:a9:65:7d:2a:f6:39:
         2a:28:c8:49:5b:c8:df:14:3f:6a:98:d9:31:ae:c4:64:cb:a4:
         c6:05:7f:d6:7c:5d:98:ea:23:33:ea:47:6a:34:2b:7b:dd:35:
         de:c4:19:7d:93:21:7d:c0:f9:5d:6a:18:4d:e7:c8:ba:70:c6:
         87:57:32:08:7c:de:f6:e3:45:0a:02:76:29:d4:bf:af:e6:15:
         57:04:27:9a:c2:bd:52:b4:0e:d4:4b:98:1c:ba:5b:3c:76:02:
         f7:64:d7:d2:58:54:c2:85:12:c4:3a:4d:83:b0:4e:fd:cf:7d:
         5c:46:d4:c7:9d:77:ff:38:2b:93:91:f3:81:75:08:6a:3b:af:
         cf:d4:81:b1:4f:2e:24:fd:fc:f9:ce:b0:d4:6f:b1:d3:14:ad:
         b9:5b:a8:63:6a:e3:6c:43:a2:9a:3f:d7:24:60:23:f7:0d:aa:
         6a:5f:21:4f:02:be:b1:f6:5c:24:9e:a0:cd:b9:23:39:62:88:
         45:4a:ac:45:50:3d:e9:c1:72:47:45:61:ac:b6:4e:20:65:da:
         f8:41:a2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 11:15:12 2026 by rpki-client