Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File:                     DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier:          wazS8V15OEsgJeb9CqgmmjX4OehrhEK9MeYFIU5IQm4=
Subject key identifier:   C2:55:92:8C:09:E7:09:B3:A1:7A:90:2E:E3:95:13:34:82:2D:87:C9
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer:       /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial:       1266F071FBD0B2FF0F2230DACE76795F15067FD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number:          03E1
Signing time:             Tue 04 Aug 2026 12:46:55 +0000
Manifest this update:     Tue 04 Aug 2026 12:41:55 +0000
Manifest next update:     Wed 05 Aug 2026 13:37:55 +0000
Files and hashes:         1: AS215085.asa (hash: U3O4zRuQeb7MG2IwgLoOGYNSGnZPEXOar9EBCzjvh3o=)
                          2: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: GWzBwczosrw0wDD/n2SeIMcPIHjuIXWF6C1E8I+Wsck=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 13:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:66:f0:71:fb:d0:b2:ff:0f:22:30:da:ce:76:79:5f:15:06:7f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
        Validity
            Not Before: Aug  4 12:41:55 2026 GMT
            Not After : Aug  5 13:37:55 2026 GMT
        Subject: CN=C255928C09E709B3A17A902EE3951334822D87C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:9f:a8:d9:ca:ea:f8:9b:4c:00:55:49:72:
                    1c:b4:d9:15:dc:79:a9:d8:73:b8:96:65:ee:93:15:
                    58:b7:3d:69:d0:c4:7c:bf:9c:aa:54:80:a7:33:9c:
                    70:ba:a2:c5:75:3a:fd:9f:3e:71:08:58:4c:31:65:
                    87:dd:4c:95:63:5d:2e:ab:08:00:13:84:2b:b3:05:
                    c6:14:02:f0:82:69:99:81:4b:ea:31:69:f6:78:cb:
                    e2:01:26:66:91:df:c6:91:ec:72:0e:e2:16:7b:c7:
                    74:8c:cf:30:1e:ae:79:22:f7:c2:bb:7e:34:7a:6b:
                    f8:9b:68:ad:96:56:59:31:34:83:74:8f:82:c8:ad:
                    a1:e2:c8:3c:5b:46:a4:6f:6e:67:09:ca:47:7d:15:
                    4e:25:11:94:52:c3:6f:63:31:fc:6a:49:72:37:7f:
                    07:c8:64:e4:6f:5f:ca:07:ad:c5:15:34:ca:7b:4b:
                    2b:25:00:fd:62:c9:7a:f5:73:a1:4d:ba:8d:3a:bc:
                    55:ab:36:48:af:f0:ed:21:84:c4:d9:0b:71:52:6c:
                    45:09:7e:ce:d7:bf:f8:6b:8b:e1:8b:93:aa:0c:13:
                    3e:ad:b1:27:a0:8a:4c:fc:58:f3:71:d4:60:51:0e:
                    ac:c5:cf:a3:ef:9e:08:31:25:b0:6e:f9:8f:36:e4:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:55:92:8C:09:E7:09:B3:A1:7A:90:2E:E3:95:13:34:82:2D:87:C9
            X509v3 Authority Key Identifier:
                keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:94:c9:17:9a:cf:2d:57:0f:37:5a:bd:c2:36:f1:49:50:ea:
         be:44:19:61:f9:41:2f:52:94:3f:84:79:df:d4:e4:0f:01:c8:
         93:a5:61:86:86:b3:70:b6:30:05:f5:5a:71:7c:56:cb:2e:1c:
         b0:2f:ce:d6:7b:ef:c0:44:eb:8b:ae:04:02:06:f0:36:a3:87:
         7f:c6:26:c3:0d:e1:a2:bc:2a:94:42:c1:1a:14:bb:b0:52:65:
         dc:68:0f:cd:a5:b1:7e:09:72:30:dd:c6:95:98:34:0c:d8:c7:
         86:90:09:b5:66:9b:40:91:85:03:0c:d4:c9:e1:cf:d7:34:8c:
         59:72:5a:e4:14:55:71:b6:da:14:c1:3d:71:9c:2b:85:0c:0e:
         7c:22:94:6d:e9:90:97:16:e1:4e:c5:79:f3:1b:ad:05:22:ed:
         ba:d5:f9:c1:5d:29:84:49:35:11:66:35:b7:8e:2a:03:30:0e:
         18:26:74:5d:6c:59:9a:1c:5b:5f:02:0e:cd:67:80:33:cf:06:
         5b:c8:50:b9:4f:87:d5:4a:ef:30:ad:f4:0b:f5:cc:6a:16:2a:
         c5:2e:de:98:03:5b:90:01:72:68:af:4b:5e:3f:91:cc:75:f7:
         e9:5c:ef:43:11:c4:45:d1:1c:3d:19:55:40:f1:8e:b8:d5:76:
         80:53:7e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 23:47:23 2026 by rpki-client