Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
File:                     0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json)
Hash identifier:          pUMjXAkNi+chdVqcY15ohknUv1exsXQBxdcOVO619oU=
Subject key identifier:   1D:03:0F:78:D7:E7:69:19:3B:F7:97:EC:83:E7:BE:C5:CC:19:89:2B
Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
Certificate issuer:       /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Certificate serial:       02B9E68A878CB03917E1791E4FEF1E1B36D9890D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
Manifest number:          0612
Signing time:             Mon 29 Jun 2026 02:29:53 +0000
Manifest this update:     Mon 29 Jun 2026 02:24:53 +0000
Manifest next update:     Tue 30 Jun 2026 04:32:53 +0000
Files and hashes:         1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: IMnniPIY6X5azrPbaU90wKqgUnjw0IdH6XHNG/Yy7Qs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 20:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b9:e6:8a:87:8c:b0:39:17:e1:79:1e:4f:ef:1e:1b:36:d9:89:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
        Validity
            Not Before: Jun 29 02:24:53 2026 GMT
            Not After : Jun 30 04:32:53 2026 GMT
        Subject: CN=1D030F78D7E769193BF797EC83E7BEC5CC19892B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:0d:46:eb:88:de:1b:a7:da:3b:66:d8:7f:
                    39:02:9c:27:01:8a:c4:33:d9:e6:5a:cb:3a:0f:46:
                    1e:40:fc:62:0f:35:6d:a2:2c:c3:c6:1e:46:87:a4:
                    99:e0:fe:b1:1a:e6:1b:61:11:73:ed:ae:d2:a5:11:
                    98:43:31:dd:32:d0:cd:b3:03:0d:a7:50:9e:00:09:
                    c6:de:56:c6:20:1d:c5:87:7f:5b:0f:be:29:90:0c:
                    bd:66:8e:d8:f7:0f:81:f6:a5:c5:e6:11:5f:36:9f:
                    10:39:e3:68:b0:e7:b9:06:1e:28:07:56:2e:fd:cc:
                    b6:d3:7d:a3:f1:c1:fc:db:91:45:67:ff:b9:00:e9:
                    5c:f7:8c:95:0e:9d:ad:4b:3f:39:7f:18:32:e2:33:
                    29:16:b1:e1:7f:d6:d0:d3:2f:22:a9:32:fd:c2:36:
                    02:aa:ae:88:44:6b:2b:dc:d4:58:83:a7:ae:86:88:
                    94:13:5d:73:6c:c6:28:85:d7:df:25:b5:3c:b3:93:
                    67:ab:6c:d4:bb:94:fe:ba:ec:23:ea:42:38:55:d4:
                    54:4d:38:e3:ca:02:c1:65:b8:b4:da:e9:f8:11:ab:
                    65:80:25:f2:d6:a2:b4:06:4e:a2:6f:e6:84:fb:d8:
                    99:87:fe:7d:bc:3d:99:75:24:9a:e6:a5:bf:42:1c:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:03:0F:78:D7:E7:69:19:3B:F7:97:EC:83:E7:BE:C5:CC:19:89:2B
            X509v3 Authority Key Identifier:
                keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e8:1f:b2:58:b1:f3:9f:b8:ec:32:d6:01:af:04:2f:82:c2:
         63:32:d5:2d:86:71:f9:30:d9:16:96:c0:2e:4a:6b:d9:b7:2f:
         7a:be:9e:96:5a:85:3f:0d:6b:2b:42:a5:96:1c:dc:0a:fd:8b:
         9f:cb:d1:7a:86:9f:87:99:18:24:8f:46:c2:45:ec:d1:f4:9c:
         9b:76:cd:28:52:62:b2:9e:a1:68:4a:e5:f0:f0:29:53:b9:a9:
         61:25:e3:d1:bd:83:69:a7:3e:5b:69:d6:d8:aa:fd:30:63:b8:
         80:da:db:10:c5:9f:2d:a1:14:91:8b:28:41:92:3e:70:df:29:
         e8:95:c5:62:94:6d:42:05:56:c6:d3:dc:ad:71:8a:ac:6c:50:
         c5:1d:d3:bd:18:a8:46:8e:b0:af:5b:9d:24:e4:4b:39:88:7c:
         71:e2:63:20:3e:35:86:1e:18:68:22:5a:ad:99:c4:ea:a8:97:
         f0:e0:0f:ca:81:87:44:11:1e:ab:d5:52:56:2b:62:c3:bf:9e:
         47:b8:33:20:ab:b2:8e:42:eb:23:83:ab:ad:03:13:a0:35:c1:
         8d:61:20:18:2a:c5:39:fb:af:c4:d5:43:37:67:73:e5:a2:12:
         74:91:82:f0:39:c0:fe:c8:ba:4b:c6:c4:cb:28:ac:d8:63:5e:
         28:6f:f3:ab
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUArnmioeMsDkX4XkeT+8eGzbZiQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx
RDA0MEEzMDAeFw0yNjA2MjkwMjI0NTNaFw0yNjA2MzAwNDMyNTNaMDMxMTAvBgNV
BAMTKDFEMDMwRjc4RDdFNzY5MTkzQkY3OTdFQzgzRTdCRUM1Q0MxOTg5MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuA1G64jeG6faO2bYfzkCnCcB
isQz2eZayzoPRh5A/GIPNW2iLMPGHkaHpJng/rEa5hthEXPtrtKlEZhDMd0y0M2z
Aw2nUJ4ACcbeVsYgHcWHf1sPvimQDL1mjtj3D4H2pcXmEV82nxA542iw57kGHigH
Vi79zLbTfaPxwfzbkUVn/7kA6Vz3jJUOna1LPzl/GDLiMykWseF/1tDTLyKpMv3C
NgKqrohEayvc1FiDp66GiJQTXXNsxiiF198ltTyzk2erbNS7lP667CPqQjhV1FRN
OOPKAsFluLTa6fgRq2WAJfLWorQGTqJv5oT72JmH/n28PZl1JJrmpb9CHHUzAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUHQMPeNfnaRk795fsg+e+xcwZiSswHwYDVR0j
BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2
ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4
MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz
MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC26B+y
WLHzn7jsMtYBrwQvgsJjMtUthnH5MNkWlsAuSmvZty96vp6WWoU/DWsrQqWWHNwK
/Yufy9F6hp+HmRgkj0bCRezR9Jybds0oUmKynqFoSuXw8ClTualhJePRvYNppz5b
adbYqv0wY7iA2tsQxZ8toRSRiyhBkj5w3ynolcVilG1CBVbG09ytcYqsbFDFHdO9
GKhGjrCvW50k5Es5iHxx4mMgPjWGHhhoIlqtmcTqqJfw4A/KgYdEER6r1VJWK2LD
v55HuDMgq7KOQusjg6utAxOgNcGNYSAYKsU5+6/E1UM3Z3PlohJ0kYLwOcD+yLpL
xsTLKKzYY14ob/Or
-----END CERTIFICATE-----
Generated at Mon Jun 29 13:44:16 2026 by rpki-client