Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
File:                     C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft (raw, json)
Hash identifier:          aBOG528t5trDLRYe39wUU27qGJC2A3RSGNFO/m1y6ec=
Subject key identifier:   16:48:1E:6A:56:D4:2C:D2:24:74:51:5A:6E:D3:8D:53:66:D5:3D:E6
Authority key identifier: C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
Certificate issuer:       /CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Certificate serial:       34E2DF86471996614D9E32008F63B3198B7D3D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
Manifest number:          013B
Signing time:             Sat 15 Aug 2026 02:51:52 +0000
Manifest this update:     Sat 15 Aug 2026 02:46:52 +0000
Manifest next update:     Sun 16 Aug 2026 06:27:52 +0000
Files and hashes:         1: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl (hash: T7g1Izr8kYZk1hSkHcFt3Of6QFKV8oQ4mJ3Bwz/om50=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e2:df:86:47:19:96:61:4d:9e:32:00:8f:63:b3:19:8b:7d:3d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
        Validity
            Not Before: Aug 15 02:46:52 2026 GMT
            Not After : Aug 16 06:27:52 2026 GMT
        Subject: CN=16481E6A56D42CD22474515A6ED38D5366D53DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:52:d7:7f:d6:43:f5:bb:3c:b7:a7:7a:16:
                    6d:6b:71:7d:ca:cd:2a:e8:25:61:5d:70:19:d1:dc:
                    12:a5:a2:6a:43:21:e0:c5:b7:60:21:dd:27:42:43:
                    1c:54:e4:84:34:03:96:34:95:ff:1f:8a:01:99:6f:
                    d7:25:3e:f6:98:34:25:99:69:c6:29:2e:8c:1b:75:
                    2e:36:75:25:95:33:b9:3f:1c:4a:9b:8a:94:a2:65:
                    91:43:89:de:e7:60:7d:22:5b:db:46:88:07:0a:27:
                    36:a6:d8:07:4a:b8:40:14:bc:d9:78:cb:94:a1:36:
                    88:3b:d9:80:ea:26:f1:91:de:7c:dc:63:e1:4d:4a:
                    26:46:0c:b2:cd:4e:6b:dd:26:33:f0:25:fd:f1:52:
                    a5:fa:3d:95:cf:f6:bb:84:6b:03:3f:4b:18:89:7b:
                    db:9f:6f:31:4c:ee:04:3b:67:09:d0:5a:16:69:a9:
                    67:b1:63:cc:9b:38:cb:c4:f3:04:03:47:a8:0f:81:
                    57:64:f2:17:7e:4f:b0:bc:71:d4:51:aa:b4:ac:87:
                    dc:37:43:26:b2:88:10:21:6b:a8:41:f8:51:1f:27:
                    f8:7c:2c:4a:27:72:a8:26:ae:25:f8:b9:57:98:cf:
                    c9:44:97:bb:73:64:62:07:5d:0f:68:dd:5b:fa:7b:
                    22:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:48:1E:6A:56:D4:2C:D2:24:74:51:5A:6E:D3:8D:53:66:D5:3D:E6
            X509v3 Authority Key Identifier:
                keyid:C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d9:66:96:20:25:82:aa:ff:e1:00:0f:1c:68:07:c5:ef:be:
         13:38:b9:15:73:95:06:08:af:e6:e7:83:8a:95:1a:ee:74:d8:
         c2:95:ba:04:11:38:33:2f:75:0b:fc:9d:64:dc:5a:d1:8b:62:
         a1:45:44:4d:27:39:32:01:c1:b5:a1:b3:be:a7:79:97:ab:a2:
         80:bb:27:f6:96:e6:34:c2:a2:63:dc:b5:c0:db:a1:44:4e:ca:
         14:30:1d:e5:19:0e:ff:15:65:34:1f:60:0d:e7:d8:0e:f5:00:
         aa:4d:02:cd:2e:2c:1c:bc:47:cf:91:fa:2c:1b:6a:f3:2d:0b:
         45:28:9b:e4:37:6e:7e:50:0d:90:d2:63:7e:8d:8a:ca:79:2f:
         06:c7:79:45:f0:b8:cd:e9:8f:08:a4:28:31:14:57:18:b6:9c:
         7a:a1:ec:7e:b9:ea:39:f7:12:a4:00:06:fb:15:d7:1f:82:5a:
         31:d7:fe:3f:4a:93:99:08:77:54:02:e8:eb:26:69:3b:00:75:
         cc:1e:af:c8:d0:bf:d3:3a:34:32:99:97:7e:c7:1a:cf:87:a2:
         65:79:8b:8f:5a:e5:31:b3:50:ae:3f:87:20:8d:65:31:32:80:
         44:4d:09:fd:cb:9d:9b:ac:d5:b0:12:b0:da:99:23:cc:2c:54:
         75:65:4b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 11:15:10 2026 by rpki-client