Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File:                     E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier:          WJTa8QwHIeQelbo/5AvKjBVjqe9ZaedvWz3/sOQnJ8w=
Subject key identifier:   0A:8B:F7:17:87:FC:74:B7:DB:19:BA:E6:67:7E:22:8A:DE:3D:DE:39
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer:       /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial:       6ACD2B0F78E69252D5774DBE1A0F758FD4FFAA17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number:          062F
Signing time:             Fri 14 Aug 2026 20:06:20 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:20 +0000
Manifest next update:     Sat 15 Aug 2026 21:31:20 +0000
Files and hashes:         1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: T+yaSXDuQELxcfn/+y25Up9qoIiUIopa9BaX1CDGY0Q=)
                          2: AS208453.asa (hash: toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:cd:2b:0f:78:e6:92:52:d5:77:4d:be:1a:0f:75:8f:d4:ff:aa:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
        Validity
            Not Before: Aug 14 20:01:20 2026 GMT
            Not After : Aug 15 21:31:20 2026 GMT
        Subject: CN=0A8BF71787FC74B7DB19BAE6677E228ADE3DDE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9c:f5:d2:c2:96:94:4d:a0:20:b8:0f:07:ff:
                    09:bb:a4:63:31:1d:4c:46:6a:0a:39:39:b3:5d:3c:
                    b8:de:41:3c:89:7e:b2:b3:2e:bc:9f:aa:b9:55:ba:
                    c0:37:f5:41:e0:47:cf:7b:fc:73:c5:fb:09:2a:0a:
                    33:13:30:3f:42:5e:c8:90:5e:9c:0c:ec:3c:0e:5e:
                    57:43:00:33:c1:19:18:93:cd:48:fd:81:6a:58:72:
                    0a:af:0f:5d:f0:41:c5:9e:9c:02:6c:30:39:9f:d7:
                    7d:bc:d3:36:ed:e0:bd:52:c3:2b:9d:09:64:c1:de:
                    aa:69:84:59:65:68:dd:0b:7d:1f:a9:57:ac:eb:48:
                    ad:d1:35:12:fc:50:57:29:be:f4:f0:1b:49:dc:9d:
                    08:e5:f7:3a:c5:0b:29:e9:9c:37:2d:9a:c5:3b:11:
                    21:47:26:41:0e:fd:50:b7:8e:e8:68:7c:91:16:14:
                    e3:26:2a:d1:21:f8:de:15:34:ef:12:8f:86:2a:65:
                    da:77:a4:5b:b5:74:c0:fb:e8:4f:5c:51:3f:c2:db:
                    62:97:58:0d:16:6d:f0:7a:e1:4c:5b:dd:1c:c1:13:
                    9d:82:65:c6:52:c2:47:b3:1e:f3:55:b4:c3:78:07:
                    d0:af:8e:ed:15:83:c4:d2:6a:b7:b6:e1:93:08:45:
                    f2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8B:F7:17:87:FC:74:B7:DB:19:BA:E6:67:7E:22:8A:DE:3D:DE:39
            X509v3 Authority Key Identifier:
                keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ec:07:a4:ef:9a:53:e0:d9:19:35:2f:8e:5f:ad:5f:28:6f:
         98:14:d1:5e:c3:ba:aa:89:dd:51:8e:2f:4e:24:a9:ca:0e:58:
         34:b0:b2:f4:06:b9:03:8e:e1:26:35:82:71:1e:3c:8f:e8:bb:
         25:a1:59:24:a0:68:bd:71:43:0e:ae:19:27:0b:ce:3c:bf:5d:
         6a:79:a8:d8:14:1a:2d:86:c2:5c:fa:58:ff:f7:11:20:6b:6b:
         6c:8e:6a:0b:b4:53:7b:1b:1d:0e:39:1f:4e:c7:01:02:a1:b7:
         a5:7c:ba:c7:e7:40:81:50:62:fd:1a:7f:6e:ff:cb:b5:47:20:
         b6:b4:88:d0:25:38:f5:d4:0b:f8:af:e9:d9:dd:36:22:ea:3a:
         3d:49:e5:54:dc:e3:fa:15:56:86:0e:14:94:44:bc:06:fc:c8:
         19:90:6f:92:f2:e9:9c:ec:f7:02:bd:0a:c0:03:8a:76:c4:1e:
         c3:24:b3:d7:fe:d4:1e:66:e2:1f:be:79:0a:4d:31:b9:6e:32:
         60:2a:20:bc:c8:45:74:5e:56:53:ba:08:a8:4d:4d:a0:d1:2c:
         a6:bb:f8:4a:89:ad:af:a5:da:6a:c0:8a:5e:17:7c:dd:be:39:
         a7:9d:de:25:53:17:ca:d8:95:90:b9:b1:99:49:b0:37:64:5f:
         a2:26:b7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:24:01 2026 by rpki-client