Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
File:                     439CED080CC8B076E557B02CC83D8768D27D56A4.mft (raw, json)
Hash identifier:          si6EoejjKdxy9J8KAfbd6GP5TLEZwYPKXk2ZH0b+HgI=
Subject key identifier:   7A:58:BF:A3:D5:24:16:7E:94:B5:82:B8:31:DD:56:AD:2D:EE:F5:DA
Authority key identifier: 43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
Certificate issuer:       /CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Certificate serial:       606B098EF7C8686497450708F6BB3146A9255DED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
Manifest number:          87
Signing time:             Mon 29 Jun 2026 07:32:49 +0000
Manifest this update:     Mon 29 Jun 2026 07:27:49 +0000
Manifest next update:     Tue 30 Jun 2026 09:24:49 +0000
Files and hashes:         1: AS216455.asa (hash: 3Hj6soP0mHi9tW3tH3/uigxupFi1xIZySq2M9PB9CK0=)
                          2: 439CED080CC8B076E557B02CC83D8768D27D56A4.crl (hash: o3pwYZj4KJlufEAUKf106SxReAQRZWxSWTDEDMkAieE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6b:09:8e:f7:c8:68:64:97:45:07:08:f6:bb:31:46:a9:25:5d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439ced080cc8b076e557b02cc83d8768d27d56a4
        Validity
            Not Before: Jun 29 07:27:49 2026 GMT
            Not After : Jun 30 09:24:49 2026 GMT
        Subject: CN=7A58BFA3D524167E94B582B831DD56AD2DEEF5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:78:b3:46:57:97:5c:f5:0c:a5:79:eb:fe:
                    43:36:aa:25:18:06:43:9e:5b:53:22:68:11:21:66:
                    ba:72:e0:5a:0f:e1:3a:af:81:71:a8:f7:c2:04:dd:
                    a9:db:6b:9e:52:d0:b1:b2:b0:18:1c:68:d8:12:b5:
                    84:4f:f8:86:f6:29:7c:3c:62:0a:e8:2c:af:52:05:
                    36:ef:a3:c7:c4:8f:8f:e7:ee:2c:27:54:43:4f:a8:
                    c6:a1:c0:a5:b1:57:a7:20:6d:15:5b:0d:59:b2:02:
                    72:6d:15:01:dc:8e:67:2e:66:6a:8a:19:50:95:29:
                    7d:79:e9:57:b9:95:15:d0:a3:4d:a3:dc:f0:af:2f:
                    75:f2:ae:d5:45:49:a4:2c:34:db:66:e0:3b:9d:27:
                    b8:48:2a:6b:f1:8e:fc:b6:86:30:fb:b4:a3:fd:1b:
                    bb:d1:06:09:20:33:98:8d:03:47:9f:21:6c:9f:0d:
                    e2:bc:ed:1b:39:bf:c1:99:d4:f0:41:d2:63:81:39:
                    23:50:e1:ce:db:46:68:8c:07:49:10:f0:4d:08:d1:
                    72:17:69:84:6b:80:a8:0c:51:ec:31:5c:b7:52:7a:
                    3a:ce:e1:12:65:65:3e:b2:c7:1a:00:ca:e6:79:6d:
                    71:d3:ca:e1:6f:bd:07:86:43:8b:23:f8:ef:1a:eb:
                    0c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:58:BF:A3:D5:24:16:7E:94:B5:82:B8:31:DD:56:AD:2D:EE:F5:DA
            X509v3 Authority Key Identifier:
                keyid:43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a9:e0:49:2b:da:db:8f:8f:b9:80:aa:e4:6d:ef:41:f9:db:
         0f:8c:b2:66:be:70:f6:c1:d6:3d:16:98:48:41:2d:9e:e3:bd:
         08:60:62:22:e7:c0:dc:4f:01:4b:a7:a6:dd:16:99:cf:d8:87:
         ae:b8:31:28:10:64:83:81:50:9f:5c:64:b2:a5:52:b4:14:d5:
         12:27:7a:64:39:c6:f7:ad:65:5a:74:b1:df:5a:91:7a:1b:74:
         34:2a:b4:0e:83:93:4e:35:70:dd:cf:d1:e1:39:7c:93:9f:9a:
         72:b3:a3:49:6e:87:83:10:64:11:b4:d0:76:76:60:8c:d8:49:
         c8:af:bb:be:74:b0:59:60:2a:9e:62:05:3a:41:03:75:31:d6:
         6d:cf:30:d6:b5:fb:e8:dd:10:27:d4:85:10:d6:0a:08:e7:7e:
         cd:92:f0:2d:72:a2:08:29:ad:ca:a7:ad:b1:f9:6f:93:c3:a2:
         45:b6:26:e3:41:9e:60:72:90:18:b2:52:43:18:7a:f4:e4:1b:
         13:cb:bf:14:8a:15:9f:1b:00:82:d0:68:0f:99:a4:55:de:92:
         9d:1a:74:f9:45:66:9e:db:06:e2:1d:de:e4:cb:ab:c3:5f:87:
         c0:4e:d1:82:3f:17:c9:7e:6d:3d:a4:d5:d0:a5:a8:1b:87:94:
         f3:2d:37:22
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYGsJjvfIaGSXRQcI9rsxRqklXe0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM5Y2VkMDgwY2M4YjA3NmU1NTdiMDJjYzgzZDg3Njhk
MjdkNTZhNDAeFw0yNjA2MjkwNzI3NDlaFw0yNjA2MzAwOTI0NDlaMDMxMTAvBgNV
BAMTKDdBNThCRkEzRDUyNDE2N0U5NEI1ODJCODMxREQ1NkFEMkRFRUY1REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0L3izRleXXPUMpXnr/kM2qiUY
BkOeW1MiaBEhZrpy4FoP4TqvgXGo98IE3anba55S0LGysBgcaNgStYRP+Ib2KXw8
YgroLK9SBTbvo8fEj4/n7iwnVENPqMahwKWxV6cgbRVbDVmyAnJtFQHcjmcuZmqK
GVCVKX156Ve5lRXQo02j3PCvL3XyrtVFSaQsNNtm4DudJ7hIKmvxjvy2hjD7tKP9
G7vRBgkgM5iNA0efIWyfDeK87Rs5v8GZ1PBB0mOBOSNQ4c7bRmiMB0kQ8E0I0XIX
aYRrgKgMUewxXLdSejrO4RJlZT6yxxoAyuZ5bXHTyuFvvQeGQ4sj+O8a6wzTAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUeli/o9UkFn6UtYK4Md1WrS3u9dowHwYDVR0j
BBgwFoAUQ5ztCAzIsHblV7AsyD2HaNJ9VqQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1
NjRhLzQvNDM5Q0VEMDgwQ0M4QjA3NkU1NTdCMDJDQzgzRDg3NjhEMjdENTZBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1E1enRDQXpJc0hibFY3QXN5RDJIYU5K
OVZxUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81ODIxYzQ3ZS1l
ODE1LTQyZGUtYmQ2Yi0xOWEyZTFhZTU2NGEvNC80MzlDRUQwODBDQzhCMDc2RTU1
N0IwMkNDODNEODc2OEQyN0Q1NkE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqngSSva24+PuYCq5G3v
QfnbD4yyZr5w9sHWPRaYSEEtnuO9CGBiIufA3E8BS6em3RaZz9iHrrgxKBBkg4FQ
n1xksqVStBTVEid6ZDnG961lWnSx31qReht0NCq0DoOTTjVw3c/R4Tl8k5+acrOj
SW6HgxBkEbTQdnZgjNhJyK+7vnSwWWAqnmIFOkEDdTHWbc8w1rX76N0QJ9SFENYK
COd+zZLwLXKiCCmtyqetsflvk8OiRbYm40GeYHKQGLJSQxh69OQbE8u/FIoVnxsA
gtBoD5mkVd6SnRp0+UVmntsG4h3e5Murw1+HwE7Rgj8XyX5tPaTV0KWoG4eU8y03
Ig==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:48 2026 by rpki-client