Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
File:                     439CED080CC8B076E557B02CC83D8768D27D56A4.mft (raw, json)
Hash identifier:          aLO5wch0XnUWwX2jBoPCTP8LIK59CutzMyaFtt9Ojc8=
Subject key identifier:   AD:82:14:E4:54:18:AD:7D:47:6A:64:8B:17:9A:48:86:87:2C:C6:74
Authority key identifier: 43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
Certificate issuer:       /CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Certificate serial:       43F208819683730AB6CF58E819413D467FBF03C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
Manifest number:          4A
Signing time:             Thu 14 May 2026 22:06:36 +0000
Manifest this update:     Thu 14 May 2026 22:01:36 +0000
Manifest next update:     Sat 16 May 2026 00:56:36 +0000
Files and hashes:         1: AS216455.asa (hash: 3Hj6soP0mHi9tW3tH3/uigxupFi1xIZySq2M9PB9CK0=)
                          2: 439CED080CC8B076E557B02CC83D8768D27D56A4.crl (hash: wxIpiwp0bEjsXUxElV9VFCQC2OYn1CGvzszLu+wtWMU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 00:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f2:08:81:96:83:73:0a:b6:cf:58:e8:19:41:3d:46:7f:bf:03:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439ced080cc8b076e557b02cc83d8768d27d56a4
        Validity
            Not Before: May 14 22:01:36 2026 GMT
            Not After : May 16 00:56:36 2026 GMT
        Subject: CN=AD8214E45418AD7D476A648B179A4886872CC674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c4:26:48:94:1d:8a:62:3e:2e:6b:4c:35:d8:
                    0c:7b:f5:b0:5f:85:c3:19:36:76:6b:5f:f4:e5:b3:
                    e3:15:fa:28:5f:87:38:df:db:aa:d5:8c:e1:f8:59:
                    75:70:d7:9e:0e:a3:1a:b0:3d:07:20:7c:0a:44:3c:
                    1d:0f:dd:2a:88:c9:9e:99:55:76:e7:34:81:b7:97:
                    9e:fa:ca:b4:96:16:e5:3c:c9:31:ec:fd:4c:ea:72:
                    86:ad:43:e2:49:ce:fb:c0:18:ac:7a:a8:7f:58:eb:
                    7c:28:0d:40:da:14:80:e1:cf:b0:8a:8e:70:fe:cb:
                    c0:02:4d:38:66:69:a0:d5:d8:c9:d9:c2:d8:b5:5f:
                    e6:ce:4f:64:76:ab:57:57:fe:b2:25:6d:08:fa:34:
                    ce:b3:d5:b4:00:46:11:8f:9b:98:d6:ef:27:93:f9:
                    8a:a9:2b:d1:18:36:6a:bf:81:fd:0b:f1:2b:51:6a:
                    5d:e0:52:74:04:de:25:f8:8f:87:08:8b:f7:14:7f:
                    fc:a9:10:c3:f4:a2:3c:af:3e:d3:9b:c6:11:3d:4f:
                    41:67:bd:0d:74:63:82:55:e3:f7:0b:6e:66:2f:92:
                    07:d6:53:eb:fc:08:96:c9:21:4f:0c:e1:a8:83:2f:
                    5c:c0:65:b5:1c:de:76:a5:3e:25:33:6d:ad:78:2f:
                    5a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:82:14:E4:54:18:AD:7D:47:6A:64:8B:17:9A:48:86:87:2C:C6:74
            X509v3 Authority Key Identifier:
                keyid:43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d8:da:94:1f:94:8d:09:bb:8d:11:1a:32:d6:53:8e:38:1c:
         7d:d4:01:92:ce:29:fe:77:f3:c1:c1:44:0c:40:f0:7c:88:c9:
         44:32:8e:3f:be:b0:e8:77:45:67:c0:e5:08:5d:60:bc:8f:73:
         a9:d5:03:5f:4e:13:94:63:f3:98:ff:09:e9:5f:75:a9:f5:00:
         74:14:c4:68:68:59:ca:ae:59:aa:37:83:04:0b:48:f2:17:c7:
         b1:80:b7:16:8b:ec:0f:b0:58:68:7b:74:bd:d6:9b:e2:c2:4a:
         1c:ae:60:dd:62:2a:35:3a:66:c6:0a:08:e4:47:63:4b:69:ac:
         41:1e:5e:dd:2a:98:97:ed:af:53:75:a9:30:0d:f0:74:fe:03:
         ca:38:70:0a:2f:f0:10:b6:72:ba:b0:48:3b:38:e0:ee:2a:d1:
         06:c3:e9:08:b3:3c:da:19:5d:57:3d:d4:16:6d:b3:f8:f6:54:
         78:ef:54:87:be:3b:fe:e7:65:89:9d:56:24:fb:92:c8:6a:1c:
         a7:ce:50:2b:97:9c:e3:76:92:84:1f:25:b0:ba:3d:e7:69:d3:
         2a:d6:36:ab:0e:d3:11:8f:13:43:6b:c5:dc:bb:e7:d7:4a:e1:
         a1:5c:d5:90:cc:7b:20:05:19:9d:14:a2:7f:f8:71:f2:68:e7:
         bf:6d:d5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:45 2026 by rpki-client