Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
File:                     13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft (raw, json)
Hash identifier:          mIHMNOjzs0AwWUIGP53c+mlMW3UVbyWmmEDkRtklJjY=
Subject key identifier:   3C:7C:8E:E7:CB:40:D7:F4:98:16:63:85:4A:1A:9D:08:D2:5F:C2:0E
Authority key identifier: 13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42
Certificate issuer:       /CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
Certificate serial:       6A97245902B7148751D1416249AC2AA3332E880B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
Manifest number:          018A
Signing time:             Sun 25 Oct 2026 11:05:26 +0000
Manifest this update:     Sun 25 Oct 2026 11:00:26 +0000
Manifest next update:     Mon 26 Oct 2026 14:24:26 +0000
Files and hashes:         1: AS202335.asa (hash: pJv971xBmEmLRhfH+BEyF/6d128LBhL48wYLWwj2ir8=)
                          2: 13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl (hash: Cb9QWK3C1WyC8JilnTNKd8vNC2ZcmLg1d8hWfB7MzW8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:97:24:59:02:b7:14:87:51:d1:41:62:49:ac:2a:a3:33:2e:88:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
        Validity
            Not Before: Oct 25 11:00:26 2026 GMT
            Not After : Oct 26 14:24:26 2026 GMT
        Subject: CN=3C7C8EE7CB40D7F4981663854A1A9D08D25FC20E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e6:c3:82:04:bb:93:78:b1:f6:89:c5:40:da:
                    6b:61:cc:24:9a:c0:81:54:70:04:f0:b7:d9:90:c6:
                    32:2c:0a:98:1c:7e:4a:8d:2c:8a:30:76:34:41:51:
                    99:10:2a:e1:dd:b6:5a:0b:b7:a3:ac:96:2e:85:4b:
                    a8:75:f2:ac:6b:84:ab:2b:3e:39:22:35:be:3f:84:
                    b7:43:8a:c4:07:6f:18:99:f6:8a:85:50:da:e4:70:
                    e7:c0:bb:b0:77:1f:5b:14:71:46:c4:3c:d5:0e:f5:
                    db:c3:2d:0d:78:13:5c:9c:4c:f7:87:f6:d7:d7:4d:
                    49:aa:1d:42:d4:68:02:12:6d:dd:86:cd:47:69:0b:
                    60:49:b5:de:06:da:d3:a0:1d:c4:c7:4b:dd:8d:a7:
                    ed:e0:e7:95:89:95:ac:b3:de:5b:ef:23:0e:2e:a1:
                    40:2c:52:05:06:81:1c:6a:64:4d:58:77:59:79:1f:
                    0a:b7:b6:67:5a:3a:79:b8:6f:00:d5:90:4e:7a:78:
                    b5:7a:6d:be:5a:56:b1:74:66:74:07:49:e5:90:52:
                    47:b3:9e:3e:4d:47:c9:74:28:ec:03:6b:83:56:da:
                    6b:c8:bb:b5:f2:bb:d4:71:56:2f:19:84:3c:03:97:
                    56:77:6f:da:0b:83:76:b6:0a:69:da:45:e6:3a:71:
                    51:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7C:8E:E7:CB:40:D7:F4:98:16:63:85:4A:1A:9D:08:D2:5F:C2:0E
            X509v3 Authority Key Identifier:
                keyid:13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:31:f7:55:df:75:15:b6:a0:c5:e2:bc:3f:f7:3a:4e:ac:51:
         86:18:d3:45:76:12:5b:89:fb:c2:06:58:32:3e:17:a0:07:e5:
         8e:a2:1d:b5:cc:7f:10:71:5a:b5:56:0d:b7:1d:1a:2a:7a:84:
         dc:7e:e6:57:5b:20:40:e6:d9:c8:a4:87:77:7f:fd:ee:b4:0a:
         e0:8b:01:2e:f5:9f:0d:42:fb:5d:15:15:6f:7e:c6:7c:cf:e2:
         f1:35:c1:2f:bb:ae:34:ad:31:44:be:7e:97:d1:61:e9:22:aa:
         5f:6e:62:62:7f:2d:8e:1f:64:98:ac:3e:25:ea:00:65:18:29:
         8d:ee:01:97:99:f8:18:54:2c:23:c5:85:62:5d:d3:cc:02:19:
         c2:3a:d5:c9:5d:80:2f:95:13:12:31:9d:eb:b9:22:a3:a8:09:
         66:d6:76:e7:c6:b3:68:59:de:27:b6:94:a0:61:9f:ee:52:8c:
         84:d4:5a:69:0b:70:db:e5:53:07:f2:2d:12:17:07:74:5f:b5:
         c7:8d:7f:89:6a:56:9f:ff:c6:fb:95:dd:57:bd:8f:e3:91:ff:
         bc:d9:ef:ec:ca:3a:2c:32:1f:4b:7c:27:13:57:78:4a:54:f3:
         e9:69:22:9e:f5:a2:af:9b:7c:6a:18:26:d6:ea:95:c4:13:af:
         3d:41:85:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:06:59 2026 by rpki-client