Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/0/1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.mft
File:                     1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.mft (raw, json)
Hash identifier:          1MLz4q20U7MCjFo/VJGbz0aLNgd1SyyvyZL+A2nlwOk=
Subject key identifier:   71:4A:47:05:9B:10:58:C2:7C:FF:27:4A:5E:CE:FE:01:7F:19:33:71
Authority key identifier: 1B:61:48:C8:27:B5:EF:75:B0:E9:4E:FB:CA:4D:8F:40:86:12:BD:C9
Certificate issuer:       /CN=1b6148c827b5ef75b0e94efbca4d8f408612bdc9
Certificate serial:       56D74F84A999DB48AEC38FC1B131344FADB1C0C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2FIyCe173Ww6U77yk2PQIYSvck.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/0/1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.mft
Manifest number:          9E
Signing time:             Sun 11 Oct 2026 03:02:40 +0000
Manifest this update:     Sun 11 Oct 2026 02:57:40 +0000
Manifest next update:     Mon 12 Oct 2026 04:54:40 +0000
Files and hashes:         1: 1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.crl (hash: mVRdYclm2xmRLFhDzL2qxP1rWGOSVFMK8+9ErF6jWL4=)
                          2: AS197806.asa (hash: TmlJ5jfTmSy1qvh9L0WOvSANMOJUfbztJb65PNgU+Gs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/0/1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/0/1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2FIyCe173Ww6U77yk2PQIYSvck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d7:4f:84:a9:99:db:48:ae:c3:8f:c1:b1:31:34:4f:ad:b1:c0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6148c827b5ef75b0e94efbca4d8f408612bdc9
        Validity
            Not Before: Oct 11 02:57:40 2026 GMT
            Not After : Oct 12 04:54:40 2026 GMT
        Subject: CN=714A47059B1058C27CFF274A5ECEFE017F193371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4c:ae:ce:72:31:94:41:35:71:fb:78:2c:4a:
                    d6:eb:7f:ab:ee:d2:da:c8:80:e6:18:c5:82:11:de:
                    55:de:69:72:71:d0:72:73:fa:c6:a8:98:bb:3a:2c:
                    b7:5a:1f:35:27:2e:93:5d:a5:0f:56:4c:9a:4b:e7:
                    38:a6:de:8f:50:ef:90:2f:b3:4c:83:d6:d2:5e:e7:
                    a6:a0:ce:1b:16:a7:24:43:50:21:c8:a4:89:b6:ea:
                    bf:28:82:d7:c2:f9:e1:4e:1e:35:95:ef:3c:1f:9a:
                    9d:0c:60:7c:5f:ad:15:6b:96:b4:1d:ba:d2:02:f1:
                    e6:f5:81:0c:a9:b7:ce:eb:0c:b0:a1:3a:13:b2:02:
                    c9:08:68:73:8d:40:82:3e:98:f6:48:0d:65:24:c8:
                    12:c0:f6:e4:76:07:3a:02:76:9e:7e:cb:93:58:34:
                    ad:96:dc:99:e9:26:a2:f9:c3:5f:8a:54:f9:c0:9a:
                    e2:6a:9b:8a:00:b2:02:60:7c:8b:99:f5:e3:8d:53:
                    90:d2:cc:8a:0e:ba:c8:de:f4:65:21:e6:9e:ca:6e:
                    ec:74:01:e0:bb:9f:ba:88:3b:41:39:07:ca:af:7f:
                    cd:75:b2:1c:25:0d:c5:f2:2b:c2:37:9c:9d:c8:45:
                    4f:8f:19:02:ff:14:2e:89:df:b3:03:92:8f:20:a4:
                    9d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4A:47:05:9B:10:58:C2:7C:FF:27:4A:5E:CE:FE:01:7F:19:33:71
            X509v3 Authority Key Identifier:
                keyid:1B:61:48:C8:27:B5:EF:75:B0:E9:4E:FB:CA:4D:8F:40:86:12:BD:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/0/1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2FIyCe173Ww6U77yk2PQIYSvck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/0/1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ef:be:de:73:03:71:97:b5:30:8e:17:f7:9f:0d:da:08:24:
         1f:a5:62:4e:7b:57:0a:eb:44:e6:ae:56:0a:a0:d0:af:3c:b7:
         fb:dc:b2:ea:bb:9f:7f:5f:fd:46:5d:7c:44:36:f6:0a:b2:52:
         19:d5:23:da:6f:19:c6:ce:c3:aa:48:15:9e:75:e9:bc:e4:ba:
         98:33:a0:b4:bf:5c:44:09:48:b1:e1:00:75:e6:d0:ef:4c:c4:
         c5:6c:18:b1:ea:5b:00:d2:7b:5d:b7:1a:92:80:55:3e:cf:5c:
         9d:d7:8c:3e:f6:f7:a2:bd:41:ac:85:d2:ba:4b:d7:4e:c9:e2:
         57:3a:38:10:4f:54:36:80:fe:0f:9e:e6:42:f8:2a:d6:2f:7d:
         5b:f1:9c:81:fc:cb:ba:35:58:bf:be:74:5a:0c:7e:d4:35:d9:
         c3:65:ab:c9:6f:7c:b0:50:84:78:c8:cd:b6:9b:c5:ba:b5:b2:
         7a:8e:7f:36:46:d0:5a:1d:8d:10:be:32:7f:06:a0:38:2b:65:
         95:c8:96:98:75:42:65:3f:c3:8f:27:4d:73:dc:9d:75:b2:25:
         ab:42:8e:ad:c9:4b:85:23:6b:b3:32:e3:6b:7b:15:9c:e3:36:
         59:ce:c0:7d:c6:e6:44:02:54:c0:42:4f:4f:ca:55:0b:b4:cb:
         6c:b1:40:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:43:18 2026 by rpki-client