Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
File:                     0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft (raw, json)
Hash identifier:          oPvjE6p8PkFmas8ZOYDZj5r+Yg8LuEKRxiSNuyCSedY=
Subject key identifier:   BB:F6:00:FD:68:87:56:E0:A4:93:05:95:E9:E3:27:40:0D:22:D1:4C
Authority key identifier: 05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07
Certificate issuer:       /CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07
Certificate serial:       5AE1C71D1B01E7EABD6B029877669C163CA19AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
Manifest number:          C9
Signing time:             Thu 14 May 2026 20:44:04 +0000
Manifest this update:     Thu 14 May 2026 20:39:04 +0000
Manifest next update:     Fri 15 May 2026 20:55:04 +0000
Files and hashes:         1: AS210464.asa (hash: BsM2n0ijdTHGobLkP/hPCvpVs4JovwChkcG8WwAkUDo=)
                          2: 0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl (hash: QOLpBdRgcg+WeR3pvtbl+qbdYb8KN+K+nWCPiDAVJug=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 20:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e1:c7:1d:1b:01:e7:ea:bd:6b:02:98:77:66:9c:16:3c:a1:9a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07
        Validity
            Not Before: May 14 20:39:04 2026 GMT
            Not After : May 15 20:55:04 2026 GMT
        Subject: CN=BBF600FD688756E0A4930595E9E327400D22D14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:64:ba:29:d3:06:f9:22:f5:9d:b4:7c:bf:
                    39:41:d4:1f:64:c7:c5:96:28:1f:16:b6:32:ec:47:
                    d3:19:94:e1:74:54:9b:bf:7e:0a:84:34:f6:69:30:
                    fc:36:d5:36:62:dc:ed:13:58:dc:a9:69:04:4c:74:
                    ba:a5:09:95:ca:a2:19:cf:5f:c6:49:77:c3:05:8d:
                    82:44:5e:06:19:a8:b4:78:db:fa:62:a2:14:b4:d9:
                    51:ff:65:89:9a:16:2b:4a:65:59:79:83:1e:f4:48:
                    b8:79:cb:50:69:ea:14:e8:b6:a7:e4:84:62:4a:4e:
                    6b:56:95:57:d0:85:c4:10:32:28:c8:8e:8b:2a:24:
                    d9:81:47:2d:96:e7:0b:06:78:8c:aa:d5:08:70:f0:
                    4e:13:d0:40:00:6a:b1:37:a8:80:d9:76:54:20:c0:
                    ba:8a:ff:75:cd:63:70:79:d2:95:63:95:9f:ea:e1:
                    3f:ba:c7:6d:18:39:8f:70:bf:54:1c:60:c8:80:cc:
                    61:c0:41:09:72:eb:3f:ee:05:62:7b:6c:26:96:f6:
                    93:44:a8:7b:90:ae:6f:07:40:ad:55:c4:de:ba:35:
                    02:34:ae:57:12:86:50:c8:7a:89:40:81:24:c6:38:
                    71:1c:fe:75:63:56:99:39:8e:f1:bd:20:6d:0d:03:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F6:00:FD:68:87:56:E0:A4:93:05:95:E9:E3:27:40:0D:22:D1:4C
            X509v3 Authority Key Identifier:
                keyid:05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f0:ab:35:d7:f2:ef:c0:dc:5d:f9:56:a4:82:30:9e:66:12:
         87:0e:2a:ca:16:8c:9a:40:74:54:31:9b:61:b5:cb:65:9c:15:
         f3:f8:13:c1:74:ae:8d:dc:bb:35:57:25:d3:6e:02:de:b3:96:
         d7:43:2b:c7:62:63:7c:a3:2a:ec:1c:0e:a9:42:1c:8a:63:39:
         64:20:3e:9a:1f:4a:99:f7:ab:fa:a1:62:09:b4:64:ef:7c:20:
         fe:c7:c1:bc:56:48:22:4d:16:09:db:72:08:e9:95:fd:9b:86:
         43:5e:ce:2c:03:bd:fc:c1:24:d4:8e:64:0b:58:3e:62:ca:2c:
         3e:d1:68:dc:ba:b0:54:38:c6:bf:a5:18:68:05:1b:5b:05:60:
         f6:12:5a:6b:10:3d:52:25:82:7a:33:80:1a:9e:3d:09:38:c2:
         c2:66:93:99:11:13:57:52:eb:be:4d:26:9b:6e:0c:89:3f:c5:
         39:ea:51:a5:80:22:51:64:92:2b:b4:1d:a7:3d:46:3e:05:3e:
         7e:2d:00:96:3c:1a:f8:6e:75:5c:9d:2b:6b:d3:a8:c8:e3:17:
         a0:5b:28:55:15:6b:8a:69:a6:44:58:02:f2:b8:c0:2c:87:3e:
         f3:8e:bc:92:89:e8:82:2c:c8:ed:68:21:8a:50:5a:cc:c1:fe:
         ae:a8:18:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:06 2026 by rpki-client