Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.mft
File:                     98165AF0CD51351CC539A608989BE422E50AAA19.mft (raw, json)
Hash identifier:          wUlh6iMv+vZEAoWUyjJybqkivPO+XZKWclyu8vdSzSk=
Subject key identifier:   AD:A2:AB:4D:BE:69:49:CC:4C:3F:D1:66:9C:37:89:F4:3E:03:A0:93
Authority key identifier: 98:16:5A:F0:CD:51:35:1C:C5:39:A6:08:98:9B:E4:22:E5:0A:AA:19
Certificate issuer:       /CN=98165af0cd51351cc539a608989be422e50aaa19
Certificate serial:       1CA6CDE6047B4470AF7A1B4FCD997B15EA6DB405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBZa8M1RNRzFOaYImJvkIuUKqhk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.mft
Manifest number:          62
Signing time:             Wed 12 Aug 2026 06:37:39 +0000
Manifest this update:     Wed 12 Aug 2026 06:32:39 +0000
Manifest next update:     Thu 13 Aug 2026 07:12:39 +0000
Files and hashes:         1: AS204464.asa (hash: m9n4pADRRzw8oSJp3j07ZMwUfU03I+MSwlkL3cYdAWY=)
                          2: 98165AF0CD51351CC539A608989BE422E50AAA19.crl (hash: mIXle22xZYKdBbNf7ZoJQmENLIijg09rxKtSQ9clg0I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBZa8M1RNRzFOaYImJvkIuUKqhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 07:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a6:cd:e6:04:7b:44:70:af:7a:1b:4f:cd:99:7b:15:ea:6d:b4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98165af0cd51351cc539a608989be422e50aaa19
        Validity
            Not Before: Aug 12 06:32:39 2026 GMT
            Not After : Aug 13 07:12:39 2026 GMT
        Subject: CN=ADA2AB4DBE6949CC4C3FD1669C3789F43E03A093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:18:ae:a1:03:bb:af:c5:ca:d9:bc:a1:b4:98:
                    80:3f:bc:d2:66:78:0b:7d:76:4b:32:52:36:ad:e1:
                    17:7d:15:f6:af:8b:9c:cb:a3:ed:52:10:3e:15:38:
                    dc:d1:78:22:87:ce:3e:79:09:78:4f:c8:1d:21:4a:
                    74:fd:c4:e4:2c:1d:83:ba:ae:77:e1:d0:8b:9e:4f:
                    6f:6d:59:0d:df:77:66:a4:ca:61:71:b1:e4:24:50:
                    a1:9b:95:69:fa:c5:60:e9:d4:84:9c:2f:0d:f3:ba:
                    00:c6:bc:33:ba:da:af:f8:44:9c:4c:89:30:e6:12:
                    7e:e7:ef:43:ec:16:68:b2:22:70:a3:24:08:c0:03:
                    bb:c8:83:bd:d9:75:d5:ae:63:5c:03:92:99:41:97:
                    08:d3:b9:99:dd:17:52:f1:d8:04:6d:4b:4d:45:a3:
                    b7:82:f0:21:f3:e7:e1:97:a0:ad:f7:44:0d:63:e8:
                    ec:f2:f8:28:10:39:76:7c:40:ad:c3:23:8c:1e:59:
                    e4:5c:19:fb:a5:21:be:bb:39:2d:da:44:7e:03:ce:
                    75:f0:e2:46:57:c8:7d:c9:f0:ea:f1:2c:90:28:bb:
                    de:0d:c1:d1:85:ed:5b:23:bb:8a:a6:fc:7a:9f:d3:
                    26:cb:30:86:6e:bc:e4:15:60:a7:1c:70:63:58:e5:
                    4b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A2:AB:4D:BE:69:49:CC:4C:3F:D1:66:9C:37:89:F4:3E:03:A0:93
            X509v3 Authority Key Identifier:
                keyid:98:16:5A:F0:CD:51:35:1C:C5:39:A6:08:98:9B:E4:22:E5:0A:AA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBZa8M1RNRzFOaYImJvkIuUKqhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:17:62:91:62:da:65:b7:05:8d:f3:67:34:34:9c:e0:ad:53:
         b5:ce:5a:58:3a:9e:7d:7e:5a:5c:07:9d:8f:e3:f1:cf:73:27:
         53:7a:a4:2b:db:f3:38:94:6b:54:f1:9c:11:c5:bf:81:9e:56:
         c4:d0:4f:19:a1:23:80:73:45:92:1b:80:c4:6e:d3:8d:03:5a:
         07:9c:79:4d:8b:e0:f1:66:21:b0:7a:12:48:4e:56:98:cf:4d:
         73:31:4e:6c:c7:d4:6f:24:80:91:dc:a4:36:a8:b4:36:55:d7:
         00:c5:dd:5e:50:ee:bf:f3:d8:15:01:ac:a8:1e:4f:ef:e3:f2:
         5e:40:06:f9:e7:0a:7a:6b:1c:94:df:a7:e8:bf:8b:00:28:6f:
         03:dc:d5:ef:ae:16:a4:ea:c2:ff:79:d2:49:20:02:3d:9b:fb:
         fd:f4:38:29:f2:13:18:8c:c2:c4:2c:12:9d:0b:c5:13:11:59:
         99:09:42:d8:b8:50:07:fd:8c:a7:98:c2:7e:b7:00:ab:28:44:
         cc:5c:ca:54:31:3f:3c:18:ab:c9:c1:50:2c:eb:03:d0:39:dd:
         20:1a:95:f7:ef:b3:b8:1f:f9:50:79:26:dc:93:d5:10:af:dc:
         57:2e:c1:3d:b3:e1:cb:6f:8c:3c:c4:96:7d:5d:fa:29:10:55:
         fb:21:c6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:33:19 2026 by rpki-client