Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
File:                     13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft (raw, json)
Hash identifier:          BrI3L7Y54ZRUHge7r9Qd7XC0yQ9ctzWWRgwXvtT1QRE=
Subject key identifier:   00:D3:79:E7:A2:37:2E:81:A8:60:DF:F9:1F:89:9E:02:8E:A7:0D:15
Authority key identifier: 13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42
Certificate issuer:       /CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
Certificate serial:       504B04B836198A3027108827DDACB1AD0EC0080B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
Manifest number:          AA
Signing time:             Thu 14 May 2026 15:19:38 +0000
Manifest this update:     Thu 14 May 2026 15:14:38 +0000
Manifest next update:     Fri 15 May 2026 18:11:38 +0000
Files and hashes:         1: AS202335.asa (hash: 0NdiPm1MTZqzdzR4lGr6HP2lgZbomN/E7sx//bw33I0=)
                          2: 13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl (hash: jE1rXjHr2BuZY7Ee2f7KDsk1KbQhb6vJ7wcW4NxJL28=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 18:11:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4b:04:b8:36:19:8a:30:27:10:88:27:dd:ac:b1:ad:0e:c0:08:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
        Validity
            Not Before: May 14 15:14:38 2026 GMT
            Not After : May 15 18:11:38 2026 GMT
        Subject: CN=00D379E7A2372E81A860DFF91F899E028EA70D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:d4:ec:84:37:f7:c9:52:6b:59:74:9a:2a:
                    65:73:ff:b1:ed:b5:28:b4:b7:24:9b:e8:f3:bb:d3:
                    13:71:13:ef:f2:e6:f7:25:79:7c:74:68:d0:b1:5f:
                    19:f6:08:fc:8f:2c:f4:b2:fb:29:f7:2c:88:25:bc:
                    bb:7d:62:a5:f6:bf:40:6d:43:1a:9a:37:2f:ea:bc:
                    0c:48:5c:da:42:f2:b6:9d:8e:a3:fb:17:68:d7:c9:
                    f9:42:80:bd:5b:f4:c5:dc:ae:5f:36:5c:ba:c0:b6:
                    e7:7b:48:8c:81:7d:25:ed:0b:8e:a5:0f:04:96:90:
                    03:13:4b:ee:2d:da:bf:4a:ab:60:20:f1:af:61:9e:
                    47:e2:c4:71:d5:69:99:3b:62:4d:d5:f5:0a:b0:a1:
                    d8:fd:8f:2a:1d:b7:8d:ae:42:6e:db:d8:c3:10:18:
                    18:88:2e:cb:66:bf:e7:43:c0:5c:d3:38:fc:bb:ca:
                    f2:df:58:1a:9b:d1:71:60:82:fc:54:e7:09:46:5e:
                    b3:0c:6a:15:0b:e4:a0:0d:f1:50:55:8d:c4:d0:8d:
                    d6:37:5e:f0:69:74:c3:55:13:f4:a8:ef:12:93:25:
                    7a:23:63:9b:d9:df:72:77:d0:02:db:ec:d4:f7:ed:
                    e7:fd:df:dc:54:6d:bf:2f:44:d3:f3:a8:3c:8e:72:
                    b8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D3:79:E7:A2:37:2E:81:A8:60:DF:F9:1F:89:9E:02:8E:A7:0D:15
            X509v3 Authority Key Identifier:
                keyid:13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:04:49:ab:60:a9:13:80:91:04:9a:5b:01:6c:37:fb:1a:9d:
         c9:29:dd:37:ab:50:dc:87:0b:b6:0f:7b:d8:fe:1e:42:cc:4b:
         5d:5b:64:db:a5:a4:17:ca:08:14:cc:24:23:99:0c:ab:d2:e7:
         65:8f:67:e5:4f:d6:4a:1f:50:21:28:da:2d:3c:c3:d3:01:5c:
         35:20:66:46:e7:5b:50:e7:27:ee:51:f4:f2:4c:93:c7:b8:c9:
         ac:c1:e5:cf:86:53:8b:49:cc:74:8c:1a:0a:07:6a:8d:54:14:
         0d:68:85:22:9a:e6:bc:40:d4:40:e3:99:ff:97:e7:f2:0d:be:
         7b:54:d6:ba:8e:4f:c8:8a:49:57:7f:95:b8:f9:32:d8:47:97:
         60:ac:78:0b:41:73:54:7d:bb:7d:86:ec:b4:9a:c6:3e:af:a4:
         c0:58:39:78:b8:44:e4:31:a4:07:e9:03:6b:4d:ca:47:3c:21:
         e7:9d:d4:e2:87:d5:f0:8e:cc:ff:f6:9a:a7:87:46:ec:f3:74:
         fa:48:a7:7b:75:bc:8e:37:c8:70:3e:fd:0f:61:be:35:b8:a4:
         81:79:af:34:88:ab:39:7b:94:65:e6:e7:05:c2:f3:ef:60:0f:
         a9:a9:e2:94:dd:cc:9b:a1:93:eb:3c:4f:40:74:61:88:a4:9e:
         92:c5:d9:17
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUEsEuDYZijAnEIgn3ayxrQ7ACAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNlZDI3ZWJmNzQ0NTEyYmI3YzQzMDNmZDJmZThiOTRl
NDQ4NjI0MjAeFw0yNjA1MTQxNTE0MzhaFw0yNjA1MTUxODExMzhaMDMxMTAvBgNV
BAMTKDAwRDM3OUU3QTIzNzJFODFBODYwREZGOTFGODk5RTAyOEVBNzBEMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHg9TshDf3yVJrWXSaKmVz/7Ht
tSi0tySb6PO70xNxE+/y5vcleXx0aNCxXxn2CPyPLPSy+yn3LIglvLt9YqX2v0Bt
QxqaNy/qvAxIXNpC8radjqP7F2jXyflCgL1b9MXcrl82XLrAtud7SIyBfSXtC46l
DwSWkAMTS+4t2r9Kq2Ag8a9hnkfixHHVaZk7Yk3V9Qqwodj9jyodt42uQm7b2MMQ
GBiILstmv+dDwFzTOPy7yvLfWBqb0XFggvxU5wlGXrMMahUL5KAN8VBVjcTQjdY3
XvBpdMNVE/So7xKTJXojY5vZ33J30ALb7NT37ef939xUbb8vRNPzqDyOcrgJAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUANN556I3LoGoYN/5H4meAo6nDRUwHwYDVR0j
BBgwFoAUE+0n6/dEUSu3xDA/0v6LlORIYkIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw
ZGM5LzAvMTNFRDI3RUJGNzQ0NTEyQkI3QzQzMDNGRDJGRThCOTRFNDQ4NjI0Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0UtMG42X2RFVVN1M3hEQV8wdjZMbE9S
SVlrSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80MGNiYTYxZC00
MDU2LTQ2YTktOTM5Mi1hNjFkZmM1MDBkYzkvMC8xM0VEMjdFQkY3NDQ1MTJCQjdD
NDMwM0ZEMkZFOEI5NEU0NDg2MjQyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQRJq2CpE4CRBJpbAWw3
+xqdySndN6tQ3IcLtg972P4eQsxLXVtk26WkF8oIFMwkI5kMq9LnZY9n5U/WSh9Q
ISjaLTzD0wFcNSBmRudbUOcn7lH08kyTx7jJrMHlz4ZTi0nMdIwaCgdqjVQUDWiF
IprmvEDUQOOZ/5fn8g2+e1TWuo5PyIpJV3+VuPky2EeXYKx4C0FzVH27fYbstJrG
Pq+kwFg5eLhE5DGkB+kDa03KRzwh553U4ofV8I7M//aap4dG7PN0+kine3W8jjfI
cD79D2G+NbikgXmvNIirOXuUZebnBcLz72APqanilN3Mm6GT6zxPQHRhiKSeksXZ
Fw==
-----END CERTIFICATE-----
Generated at Fri May 15 06:20:48 2026 by rpki-client