Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
File:                     25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json)
Hash identifier:          hKSCRu6DmRxkMOmHXPRG/IvfE4FayLYMIMjbnZJ1ASA=
Subject key identifier:   AE:3A:4D:34:9C:20:0E:35:64:6A:5A:11:DC:4E:5D:AE:A3:3C:D7:B9
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Certificate issuer:       /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial:       297530539F98BAED83316336A485FCA46D3BC5B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
Manifest number:          03B1
Signing time:             Thu 14 May 2026 13:48:17 +0000
Manifest this update:     Thu 14 May 2026 13:43:17 +0000
Manifest next update:     Fri 15 May 2026 13:51:17 +0000
Files and hashes:         1: AS207487.asa (hash: s3p6b4UEGWgtzDLFmXDHf89hF7XtnQxEviO1lAFHwO4=)
                          2: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=)
                          3: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=)
                          4: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=)
                          5: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: sOjomXLjsVA+A2o7Bydg0hlybdsNzwX0ufyXza36nXE=)
                          6: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=)
                          7: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: dHA6HLPOR3IQCPs+KBxka5EoTXTVzS3+Rk/fPIxN15o=)
                          8: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: NlN3fbd4xPs8oXDjI1+pTaPhc7vLifacDO0nMI7gkYc=)
                          9: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 13:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:75:30:53:9f:98:ba:ed:83:31:63:36:a4:85:fc:a4:6d:3b:c5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
        Validity
            Not Before: May 14 13:43:17 2026 GMT
            Not After : May 15 13:51:17 2026 GMT
        Subject: CN=AE3A4D349C200E35646A5A11DC4E5DAEA33CD7B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:94:b3:f7:29:f7:64:8e:03:bb:48:e7:a5:18:
                    2f:ce:25:72:19:bd:a9:2d:03:15:0a:73:21:10:40:
                    a1:dc:e6:de:c2:52:84:db:2c:d3:5f:1b:f6:b7:41:
                    b8:6c:fb:81:69:b3:94:fc:39:8b:10:dd:0d:9c:6e:
                    1a:68:75:2a:64:61:69:9b:cc:e0:87:89:7f:9f:da:
                    f5:bf:52:d1:fe:e2:62:25:ff:2e:57:ae:4e:f1:d6:
                    d7:75:c9:ce:38:a6:f2:a2:f7:b9:ad:41:4d:02:86:
                    6a:f2:37:70:a8:c7:3c:34:a4:c7:b8:94:cf:4d:90:
                    27:7e:60:89:85:5d:c7:57:7d:81:52:30:43:cf:cc:
                    96:6e:71:65:17:16:b5:74:5e:f8:69:41:78:a3:9a:
                    f2:fe:e7:55:e1:50:b2:09:d4:0f:68:59:60:ca:8e:
                    27:80:6b:b2:15:ca:f5:8c:5b:02:f9:a0:84:64:76:
                    c9:e6:e6:03:cc:86:a3:99:50:b7:c0:9b:34:22:bc:
                    4f:22:eb:13:07:0e:52:8b:1d:03:05:3a:10:b4:f5:
                    a6:9f:c0:46:8a:79:81:59:22:cc:af:d0:07:e6:b9:
                    f4:da:cb:35:83:db:6a:01:d8:13:1d:13:71:15:d7:
                    be:a2:2d:59:47:bc:41:c1:a7:55:c2:9f:ce:ce:67:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3A:4D:34:9C:20:0E:35:64:6A:5A:11:DC:4E:5D:AE:A3:3C:D7:B9
            X509v3 Authority Key Identifier:
                keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:6f:e5:3c:30:36:6a:73:e3:9a:21:1a:2e:86:71:8a:e1:49:
         42:f3:e1:fe:92:72:31:36:62:78:f8:d0:77:8b:d7:51:03:f5:
         98:fe:76:d9:a8:15:1b:71:c5:8c:e4:0b:dc:b5:ec:92:e5:6a:
         24:97:97:4e:89:9f:6a:ee:26:98:33:28:21:7c:72:03:5b:a3:
         6b:a4:5a:c7:2c:69:ab:6a:31:58:a1:49:bf:ed:bf:33:b1:e7:
         f6:76:c0:29:49:24:4d:8e:de:96:af:96:8d:f3:87:69:b9:f7:
         2f:22:25:30:10:60:d3:b5:fe:b3:a8:41:40:26:de:92:c6:ea:
         70:22:ee:67:46:90:c9:c4:d6:2f:19:a6:1e:b5:2c:44:81:88:
         e4:02:a3:20:49:e0:62:3d:e9:1e:7e:77:32:9f:66:e6:6a:82:
         06:59:15:e5:4e:5f:c3:cb:90:2d:e0:ec:94:ee:50:c0:75:dd:
         d8:85:b0:75:db:9d:3b:4e:67:3f:4a:ba:b4:cb:fe:95:be:11:
         35:5b:65:50:f5:93:17:c4:67:2c:d1:fa:ce:b1:b6:8e:37:fb:
         24:5f:5f:8f:b5:5e:1f:53:c1:ec:96:46:90:cd:fc:86:c7:a9:
         da:d4:ae:fe:22:20:38:27:fb:62:ad:84:8c:84:88:9e:27:25:
         75:fe:90:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:48 2026 by rpki-client