Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
File:                     E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft (raw, json)
Hash identifier:          8wve5lmS1AeXIcAlUzquAMZZw0FYVBtAAXUdF1t7O8s=
Subject key identifier:   8E:69:C3:D2:F5:07:C2:7D:EE:80:2C:AD:F5:A4:3D:8D:7C:3B:D9:24
Authority key identifier: E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95
Certificate issuer:       /CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
Certificate serial:       1CC3C2B0A1831C50CDC9F4E739D50C8E8082264E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
Manifest number:          01A7
Signing time:             Thu 22 Oct 2026 03:36:53 +0000
Manifest this update:     Thu 22 Oct 2026 03:31:53 +0000
Manifest next update:     Fri 23 Oct 2026 06:13:53 +0000
Files and hashes:         1: AS214976.asa (hash: v5lBSdK131Etk8q/qrO2YWGrpYrwgCaCsAichEGY55Y=)
                          2: E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl (hash: uowRy/UDVhuICI4GCN4komURs1LYVRZ/vUTtysx8dv0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 06:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c3:c2:b0:a1:83:1c:50:cd:c9:f4:e7:39:d5:0c:8e:80:82:26:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
        Validity
            Not Before: Oct 22 03:31:53 2026 GMT
            Not After : Oct 23 06:13:53 2026 GMT
        Subject: CN=8E69C3D2F507C27DEE802CADF5A43D8D7C3BD924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:7e:01:74:73:d5:76:7b:f9:a3:96:b3:fe:
                    88:29:c8:71:4e:f2:28:2d:e1:72:99:01:b8:d4:c7:
                    a8:cd:b2:d8:b8:82:c3:6b:ec:50:00:b1:c9:ba:dc:
                    37:f2:87:3a:1b:11:b8:f2:a1:40:5f:0b:db:7f:70:
                    df:18:89:1f:cd:f5:fc:6f:1e:1c:0e:2c:44:69:a6:
                    3c:40:a6:f3:0b:92:fa:63:aa:de:3f:b1:ec:e1:09:
                    3a:76:16:f8:1b:a9:1f:a4:27:a2:99:74:5c:8c:9d:
                    c5:8c:0d:0b:70:81:a8:83:59:46:1b:4d:37:68:44:
                    ea:3c:9a:26:a7:42:a4:31:6b:5a:de:73:75:2e:a2:
                    17:b3:f3:a4:1d:29:68:6a:23:25:a6:2a:c2:59:0f:
                    31:e3:d8:9c:c5:f7:6a:48:11:f8:c5:ed:d0:04:1c:
                    38:91:1d:2d:36:d1:b8:f2:9d:a8:a4:de:49:f6:c3:
                    fd:31:70:62:43:6d:40:37:e1:c9:a4:04:56:dd:45:
                    69:1e:c7:01:b2:0f:28:1b:79:12:b7:8c:e9:2b:44:
                    57:05:30:c0:fa:08:66:ef:ad:12:7d:f2:b4:49:7f:
                    d8:4b:96:ab:41:e9:6d:b8:93:bb:9e:a4:0d:a5:83:
                    15:ca:2b:8c:71:18:df:a3:32:ea:d2:d6:90:ac:23:
                    65:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:69:C3:D2:F5:07:C2:7D:EE:80:2C:AD:F5:A4:3D:8D:7C:3B:D9:24
            X509v3 Authority Key Identifier:
                keyid:E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ea:b4:72:74:7f:4f:31:aa:bb:e7:16:6c:92:0f:b8:95:44:
         b7:28:49:e2:07:00:25:57:e1:e0:a8:1b:a8:a8:8c:1c:31:6c:
         5d:d3:41:e1:82:e3:2c:d1:a3:e7:db:ff:06:18:ab:c9:e7:51:
         17:cc:d7:b8:0f:6e:62:76:a6:aa:46:47:d9:40:72:27:90:c6:
         19:55:50:47:95:2c:e5:44:50:aa:99:33:4c:7f:71:74:97:2b:
         3c:ad:80:90:ba:17:6e:57:19:74:5f:fd:ec:11:82:23:d8:0c:
         3a:65:f9:95:7a:6f:eb:51:69:62:22:bc:6b:59:8b:89:ec:59:
         13:69:9e:20:b3:9f:1b:64:24:91:15:26:f0:e5:ec:5c:16:8c:
         40:55:f1:29:4b:f5:d9:b5:c1:1a:92:7b:1b:4a:66:9f:85:88:
         df:74:14:d9:64:b6:7b:1c:7b:f0:07:5e:09:5f:c2:71:52:d7:
         ea:c3:5c:d0:c9:9b:13:0e:51:f8:63:27:b1:54:b9:5a:20:c6:
         d9:4f:ba:ad:f7:a3:fd:91:06:24:6a:cd:73:da:73:f7:51:07:
         d3:0f:92:0a:e8:d7:65:3d:d5:0c:d4:14:39:4c:32:56:ab:dd:
         83:a8:67:ed:86:8d:16:f2:fd:34:6b:da:2f:c4:83:da:95:5d:
         79:00:88:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:52:27 2026 by rpki-client