Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
File:                     E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft (raw, json)
Hash identifier:          l8b6Y+eT5V5ga4c6UY9D50QFX5ocjSfdH81i9SVg9I0=
Subject key identifier:   07:58:23:58:5F:10:56:CA:A4:38:32:04:AB:C8:83:7D:B2:3E:F2:F9
Authority key identifier: E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95
Certificate issuer:       /CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
Certificate serial:       345653EC32E8C9CBC46DB12AFD8F0EF576556090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
Manifest number:          72
Signing time:             Sun 15 Mar 2026 18:38:54 +0000
Manifest this update:     Sun 15 Mar 2026 18:33:54 +0000
Manifest next update:     Mon 16 Mar 2026 20:49:54 +0000
Files and hashes:         1: AS214976.asa (hash: v5lBSdK131Etk8q/qrO2YWGrpYrwgCaCsAichEGY55Y=)
                          2: E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl (hash: h5jMXbcSod0bsYPdsv3GD45SVHoFCIC0bRJanq1+/zc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 20:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:56:53:ec:32:e8:c9:cb:c4:6d:b1:2a:fd:8f:0e:f5:76:55:60:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
        Validity
            Not Before: Mar 15 18:33:54 2026 GMT
            Not After : Mar 16 20:49:54 2026 GMT
        Subject: CN=075823585F1056CAA4383204ABC8837DB23EF2F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9f:18:70:6e:20:da:66:c8:3d:be:c1:02:e3:
                    c8:76:10:e1:17:29:72:33:85:af:2d:55:ed:2d:52:
                    5d:83:d9:17:77:56:d6:03:19:06:a9:23:0f:3a:65:
                    68:c5:f5:40:1d:a8:84:b8:4b:d4:b5:2d:77:8a:c3:
                    e7:be:97:c1:29:37:ed:07:97:fb:b2:12:3e:4e:07:
                    59:2a:ab:1d:c6:91:0d:db:8b:86:0b:96:3f:67:46:
                    c2:fc:8a:32:07:94:c4:5b:ff:3e:fb:d3:6b:8a:05:
                    25:00:22:23:0f:ba:5d:13:86:d7:d9:c2:f3:b1:95:
                    c8:86:1c:9b:fa:0c:4a:25:bf:67:86:81:38:ac:ef:
                    89:69:24:4d:48:87:b7:c9:b9:cd:f4:14:91:e0:a5:
                    f8:43:69:ce:32:e3:af:87:43:f7:29:67:3a:5d:7a:
                    4a:8d:b8:38:a5:2b:68:99:be:06:59:eb:a2:29:45:
                    fd:10:d7:e7:34:43:07:0e:7b:3f:c5:17:cc:60:4a:
                    a0:51:1f:16:cb:c0:23:53:78:10:c4:fb:d0:0d:b0:
                    f9:33:73:3d:96:83:17:e2:f0:97:89:d1:f5:6d:70:
                    ca:1f:9c:89:21:b7:b6:c1:0e:c3:48:48:53:10:57:
                    e1:75:f4:7f:08:a0:26:9f:5a:91:e3:32:a4:31:01:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:58:23:58:5F:10:56:CA:A4:38:32:04:AB:C8:83:7D:B2:3E:F2:F9
            X509v3 Authority Key Identifier:
                keyid:E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e0:d8:b1:53:bd:9f:11:b1:dc:a6:f7:4b:66:b6:3d:dc:64:
         67:e1:bb:60:c5:80:e4:bb:26:c2:68:9c:b7:7b:b7:4f:6d:27:
         0b:42:e1:21:0e:20:24:83:e3:18:82:b6:68:8e:a9:8a:49:96:
         7d:bc:93:dd:45:2b:e0:f0:74:3f:a8:22:1b:c2:11:6c:cf:a2:
         15:af:32:9d:45:8b:67:4e:7f:de:f7:3f:25:87:32:6b:be:5e:
         3f:06:80:7e:33:67:f9:dc:19:89:90:4b:99:4e:7b:ff:89:e4:
         77:be:d4:b8:b3:e5:de:6c:fa:cd:92:c9:f6:50:32:51:7b:93:
         24:3c:78:e4:7a:ea:1f:a6:1a:b0:00:94:75:38:fc:24:8e:00:
         02:3c:3a:a6:52:20:e1:71:0c:6d:1b:24:c2:f3:72:33:3a:19:
         ce:f7:97:a3:2a:3e:a7:4f:24:50:ee:03:4f:60:c2:ec:dd:2e:
         e8:f0:ba:72:31:ba:1f:fa:9b:92:86:1f:be:eb:89:2a:6e:a6:
         21:31:4c:3c:56:7b:50:0d:b9:de:4c:9e:8b:38:50:08:ed:f1:
         76:7f:72:0d:f8:b2:de:d2:9a:c7:ca:ad:89:b1:d8:23:3c:c5:
         e0:00:6a:0f:58:1d:15:96:fe:a2:ca:57:ac:7b:a4:0a:f5:b9:
         c5:e2:34:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:04:28 2026 by rpki-client