Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
File:                     0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft (raw, json)
Hash identifier:          nBXOeTxQhxpqSpp3WI1vN3oXMsXwZPR+3/LOGb3FUfE=
Subject key identifier:   66:3D:CB:FF:B0:94:BB:E9:85:AC:A4:94:D6:2A:B3:C6:EA:E2:0A:72
Authority key identifier: 05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07
Certificate issuer:       /CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07
Certificate serial:       43C4B6704909CAC5682AC2A2E6601742CA460297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
Manifest number:          015D
Signing time:             Wed 26 Aug 2026 16:53:20 +0000
Manifest this update:     Wed 26 Aug 2026 16:48:20 +0000
Manifest next update:     Thu 27 Aug 2026 20:20:20 +0000
Files and hashes:         1: AS210464.asa (hash: kiZfs2DSOzpX/hEwQfyXYmM6Lxpx1hqoRdZ896mQbuo=)
                          2: 0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl (hash: xtGk8c6fw5/qZrOaVxIqwjodF32Fj5LS1OcSYOfYjKI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c4:b6:70:49:09:ca:c5:68:2a:c2:a2:e6:60:17:42:ca:46:02:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07
        Validity
            Not Before: Aug 26 16:48:20 2026 GMT
            Not After : Aug 27 20:20:20 2026 GMT
        Subject: CN=663DCBFFB094BBE985ACA494D62AB3C6EAE20A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:86:f9:6d:1d:70:4f:4f:2b:0d:a3:44:21:
                    49:bd:d1:ae:ae:8f:18:37:7b:6e:be:64:ca:1e:21:
                    6e:98:9f:53:68:13:86:c7:f8:bb:b5:be:7c:02:06:
                    c4:2a:5e:37:a5:1b:b8:93:04:61:aa:39:18:a0:4b:
                    ea:96:60:c9:2b:3f:f1:d0:17:0f:64:68:ef:33:c3:
                    30:71:c3:7e:f8:0a:ca:52:52:a8:ea:d9:ec:66:d8:
                    03:22:66:a0:15:b3:fd:7c:c6:15:a8:fa:74:ac:49:
                    6d:9f:a6:d0:1b:51:61:fb:54:4b:ff:c9:d8:42:15:
                    8c:04:8f:a1:47:e3:69:f2:2b:d0:21:34:8f:20:07:
                    b5:cc:85:5b:3f:bd:ad:af:c7:6d:a1:72:05:a8:41:
                    7a:11:1d:88:1f:88:f7:e2:13:a9:92:43:66:68:51:
                    5c:28:80:0d:07:7a:52:8d:85:67:ed:17:d1:ca:ea:
                    6c:5a:7f:bd:fe:e4:46:f9:88:74:e8:c9:29:15:b8:
                    2e:80:46:ca:c8:6d:30:c1:3a:c5:81:d9:2f:fc:3f:
                    4a:01:f0:77:92:7f:70:e5:8b:43:f8:a6:76:f0:50:
                    fc:dd:77:30:0f:e9:77:26:a4:22:22:76:dd:fa:28:
                    28:d2:50:8f:a3:be:1b:29:ee:f7:b4:0d:7e:bc:a2:
                    40:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3D:CB:FF:B0:94:BB:E9:85:AC:A4:94:D6:2A:B3:C6:EA:E2:0A:72
            X509v3 Authority Key Identifier:
                keyid:05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9e:da:55:e9:dd:a7:9d:ab:44:9f:91:fa:5a:2e:46:34:4f:
         85:bf:b8:9d:0f:8e:23:c5:f1:b6:54:1b:93:2d:13:da:fb:68:
         10:2d:f0:e9:21:66:f8:6e:5a:c7:fd:64:86:81:66:9f:41:40:
         3c:2a:f5:dd:b7:0e:3e:f0:88:80:ca:ce:6b:1d:c4:d7:31:ac:
         17:85:b5:90:0e:83:2f:c1:bf:60:1a:fd:4d:8b:d5:ba:97:80:
         94:62:49:d6:0c:7d:83:96:29:7c:6e:43:31:90:86:e3:27:f0:
         2f:d1:16:ec:f7:6b:0e:0e:c3:21:f2:93:77:ea:a9:97:32:f3:
         7f:4a:ea:34:55:b1:82:01:16:0a:88:e8:6c:90:45:03:4a:8a:
         e5:e1:69:c6:e7:89:49:a0:0d:60:fd:52:9d:28:88:b5:c4:a8:
         b6:fb:60:a1:92:15:55:d2:8f:17:ea:9a:9a:65:a2:c1:25:07:
         e9:1a:7a:58:eb:a2:e2:a2:45:03:60:33:2b:18:7f:23:e2:80:
         59:ea:4d:5f:34:2a:d2:89:1d:33:eb:15:a6:86:f4:00:e5:74:
         a9:7c:a5:45:ab:0f:af:c7:1c:12:cd:3e:81:3e:df:9e:be:d8:
         0b:d6:be:13:71:ba:60:70:14:e6:8d:10:94:d7:94:20:00:2a:
         a1:69:13:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:03:21 2026 by rpki-client