Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
File:                     13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft (raw, json)
Hash identifier:          61VFKQB/rtJw+m+OYVVytS84LPAWaRH6HcHG8vhkn88=
Subject key identifier:   9C:03:A9:AB:54:B2:B8:25:7F:DA:F4:99:85:1B:3A:F8:55:E5:38:EF
Authority key identifier: 13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42
Certificate issuer:       /CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
Certificate serial:       2418946450F96812992BC334C6D0BFEC52C27DBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
Manifest number:          6C
Signing time:             Sun 29 Mar 2026 06:20:34 +0000
Manifest this update:     Sun 29 Mar 2026 06:15:34 +0000
Manifest next update:     Mon 30 Mar 2026 09:55:34 +0000
Files and hashes:         1: AS202335.asa (hash: 0NdiPm1MTZqzdzR4lGr6HP2lgZbomN/E7sx//bw33I0=)
                          2: 13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl (hash: 0GaZ4pXDt2+np4ZRUHm51JxOCoq3Dl/ygs0R7PqbVac=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:18:94:64:50:f9:68:12:99:2b:c3:34:c6:d0:bf:ec:52:c2:7d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
        Validity
            Not Before: Mar 29 06:15:34 2026 GMT
            Not After : Mar 30 09:55:34 2026 GMT
        Subject: CN=9C03A9AB54B2B8257FDAF499851B3AF855E538EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a7:c6:49:b0:37:da:25:ab:ad:a3:82:4a:fe:
                    89:29:ce:9b:72:7e:ce:6b:26:72:9d:16:1b:c4:a9:
                    3d:f8:f9:da:e4:49:22:51:95:d8:4b:4d:23:96:01:
                    ad:a0:97:af:3e:83:d7:a9:d1:4b:9e:62:d1:6e:36:
                    a9:b7:2f:79:e6:94:1c:58:4d:d0:5c:c4:bb:8f:52:
                    a6:6b:a0:8d:f5:dd:1a:2e:28:b6:2b:56:12:cd:73:
                    d6:6d:74:e7:ae:fd:02:00:6c:7c:c2:11:09:37:3e:
                    17:f4:d3:f4:dc:a1:fa:9f:8f:9d:16:7c:af:03:32:
                    89:e8:04:51:98:47:62:cf:14:ca:8d:a4:86:89:71:
                    4e:a3:22:63:44:c0:ef:8d:ac:e6:c8:eb:80:4f:62:
                    ca:df:f0:ac:d5:4b:b0:f6:31:7e:80:39:6c:4a:1f:
                    e1:0d:1e:31:17:4c:c5:ee:51:9a:16:f1:f8:12:3a:
                    1f:26:9a:a4:db:e1:12:c7:ff:77:60:74:e7:6f:e1:
                    ae:e3:5c:ad:3d:9e:3f:e5:3e:81:78:21:b2:10:52:
                    bd:f6:3d:29:5d:c3:8a:c6:f8:ac:12:31:00:b0:48:
                    52:2a:96:13:74:1d:e0:6a:53:84:2d:6c:fa:9d:59:
                    db:da:24:ea:3a:52:21:82:70:8f:ab:e5:f7:f7:c5:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:03:A9:AB:54:B2:B8:25:7F:DA:F4:99:85:1B:3A:F8:55:E5:38:EF
            X509v3 Authority Key Identifier:
                keyid:13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:90:27:74:4c:76:d4:de:38:be:7f:a7:bf:6d:4b:1f:4a:5e:
         bd:fa:47:f6:1f:5c:28:52:f1:e2:ae:6f:1c:e1:9b:25:94:cf:
         8d:a6:60:45:8b:0b:ea:24:3d:8d:5b:eb:c0:fa:2e:1d:4e:68:
         ae:91:6f:f5:10:69:dc:5f:c7:66:c6:a5:6e:78:23:0e:58:1f:
         76:2f:b6:62:42:31:e0:70:02:00:1d:5a:c2:2e:86:58:b4:95:
         19:ad:9f:9d:75:4c:55:cd:96:c7:f2:f7:0b:23:f0:84:d5:ce:
         a9:98:3f:2f:07:c6:77:39:45:7b:d6:d8:8e:85:2f:ea:c4:6d:
         9d:77:45:31:57:72:37:61:24:2b:e1:f3:8e:36:d1:0f:45:1a:
         42:39:63:1a:3e:59:73:91:60:6f:82:8d:39:19:fd:ce:50:05:
         0c:a9:cc:51:2d:02:ea:dd:60:ab:13:6f:5b:9e:17:c9:85:04:
         ff:e7:cb:ae:f0:f0:09:f7:a4:39:22:d0:c1:62:76:5b:cd:e6:
         88:ef:87:12:fa:a0:4c:a4:be:42:f6:ed:a6:71:42:97:de:52:
         7b:96:9a:9c:55:f5:3f:7e:31:71:05:36:cd:bb:36:47:70:46:
         54:3f:86:16:34:34:38:cd:c7:34:cf:af:ff:20:d9:27:4e:e6:
         18:37:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:27 2026 by rpki-client