Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File:                     D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier:          K7Q1PMa6zWaXA4ZqkeXNsr5l90Fpb56qFr1i1biI/j0=
Subject key identifier:   22:8B:16:EE:2E:6E:4E:FB:E5:BD:2D:52:FD:98:70:C3:02:36:7B:7B
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer:       /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial:       30AB32C5AB26381F4EA490159BBBAD9CF493785C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number:          018F
Signing time:             Fri 17 Jul 2026 16:19:33 +0000
Manifest this update:     Fri 17 Jul 2026 16:14:33 +0000
Manifest next update:     Sat 18 Jul 2026 19:19:33 +0000
Files and hashes:         1: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: wrO9GC+SGWrnmg4/Kxb7RP5nt8s8fk8tJEI/zk24tKU=)
                          2: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: XTrRc7BvhR1v4bi5yv/rUwu+Cr89uiOaZylHW/FtRgY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ab:32:c5:ab:26:38:1f:4e:a4:90:15:9b:bb:ad:9c:f4:93:78:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
        Validity
            Not Before: Jul 17 16:14:33 2026 GMT
            Not After : Jul 18 19:19:33 2026 GMT
        Subject: CN=228B16EE2E6E4EFBE5BD2D52FD9870C302367B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:72:e4:05:dd:21:cc:d3:8e:1a:27:8c:fc:b2:
                    24:00:87:bf:54:2e:b3:68:a0:c9:8c:56:44:75:79:
                    e0:e3:9f:1f:d4:fd:4b:78:c3:40:1d:88:20:b3:ca:
                    1a:a9:78:a4:9a:bb:36:e8:36:59:52:a0:18:0d:38:
                    3b:f7:de:87:69:7e:24:89:30:af:fe:bb:15:6a:31:
                    c3:a7:03:43:8e:64:04:e3:8f:8a:f5:ef:21:26:ad:
                    39:88:4d:e9:fd:8e:bf:46:f3:78:1a:a7:c0:7d:e9:
                    27:02:36:df:af:5c:91:e0:58:76:eb:29:e6:97:01:
                    24:9d:b6:3f:df:af:a3:92:f4:01:31:e9:ce:92:fa:
                    db:8f:eb:89:a3:00:8d:94:28:2d:4d:08:43:c6:74:
                    af:8a:e2:5f:c6:fb:de:e9:f1:95:58:cd:22:4f:54:
                    67:90:c6:ce:07:46:58:1f:84:28:7a:1c:7b:91:61:
                    74:d8:4c:f5:f6:cf:42:c6:a9:9f:98:88:57:9e:6b:
                    d0:03:0e:04:fa:58:e0:8b:65:b7:38:74:4e:bb:42:
                    4e:17:ef:d7:93:60:1d:80:2a:fc:aa:e4:57:49:f9:
                    ff:0f:22:1f:b7:88:14:a1:a0:07:0e:16:b2:19:1b:
                    46:e6:e4:2e:ef:95:19:ee:00:da:39:ae:80:32:45:
                    7f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8B:16:EE:2E:6E:4E:FB:E5:BD:2D:52:FD:98:70:C3:02:36:7B:7B
            X509v3 Authority Key Identifier:
                keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:cf:f7:b5:50:ed:8a:2f:cd:e3:8e:e9:98:7e:07:39:a9:9d:
         c2:a3:46:e6:cd:62:1e:8c:ea:04:65:5e:b9:07:93:64:59:1e:
         b3:f0:21:48:ac:35:ff:9b:41:02:38:de:1c:3a:14:ae:26:b0:
         ff:5a:de:6d:cd:ef:6f:85:2a:29:1d:fb:b8:63:cd:63:09:b9:
         bd:c4:e6:d4:4c:f6:1e:84:81:19:97:8e:07:76:5e:47:ac:57:
         40:de:ab:e0:38:82:57:95:fe:36:ab:ad:03:d9:eb:bf:dd:8b:
         2f:9d:29:c7:96:33:41:be:1e:6b:4c:2b:a6:99:9a:3b:ea:8b:
         77:cd:e8:99:00:f5:1f:84:f5:77:bb:f6:3e:ee:b0:ef:0b:b6:
         ef:db:ed:c9:1a:16:aa:14:f2:8c:ae:03:cc:16:f1:3e:7f:00:
         02:a6:58:fb:e7:7b:06:43:4d:4a:ec:34:41:1a:d5:1c:1d:f8:
         0f:bb:b5:4a:8b:11:7b:b9:ae:e1:98:dc:54:cd:52:77:64:46:
         31:ad:40:f2:87:bf:4c:bf:bf:43:cf:16:41:c5:ec:33:e9:05:
         15:e8:8d:00:4f:86:36:b7:7d:eb:2a:cd:fe:d8:fa:90:5b:9d:
         ad:4c:3a:91:53:de:d6:5a:04:49:1e:33:21:8c:b2:76:44:3c:
         6b:e2:22:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:22 2026 by rpki-client