Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          djNkPqGlFrW2/RdCPrp4L/9ScEbMWBkX0kHi7rC9XIQ=
Subject key identifier:   E3:86:3C:0C:11:E6:F1:73:F5:06:5A:B7:1E:A2:44:25:E8:E7:3C:38
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       5C1969BA8CC3BC8E4678E7D75EB34AB04E85FABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          03CF
Signing time:             Sat 28 Mar 2026 15:08:29 +0000
Manifest this update:     Sat 28 Mar 2026 15:03:29 +0000
Manifest next update:     Mon 30 Mar 2026 18:09:29 +0000
Files and hashes:         1: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: vnS+yaasKKsEJL5lqU5ON8tktTKpk6vbWxvpD2mzi00=)
                          2: AS214498.asa (hash: MXybwtu+5M9CBNDZHODBSDxfP4tk/0gnYAktlZuo6sk=)
                          3: AS213525.asa (hash: Fq0YNh+tWWvo+GdVGRIwjFZdtE0RP8wN2+bPbK7JSk8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:19:69:ba:8c:c3:bc:8e:46:78:e7:d7:5e:b3:4a:b0:4e:85:fa:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Mar 28 15:03:29 2026 GMT
            Not After : Mar 30 18:09:29 2026 GMT
        Subject: CN=E3863C0C11E6F173F5065AB71EA24425E8E73C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d1:51:ab:47:59:82:2b:7d:36:80:99:18:ce:
                    b4:46:62:9f:da:fc:5b:1e:67:1d:86:44:e5:b4:db:
                    19:91:92:4f:43:eb:3a:bd:aa:6f:b9:1d:4f:b3:73:
                    ae:3f:8f:5f:2b:76:dc:ff:dc:06:12:b4:4f:5c:71:
                    f1:ce:d0:a2:de:d2:c6:25:6b:79:3e:24:77:23:21:
                    8b:84:1c:60:ff:2f:20:bb:3d:c8:6f:90:6f:c7:f0:
                    c8:fc:74:f1:18:c7:d4:f6:75:02:94:2f:3c:7c:e2:
                    f0:ec:3d:2e:56:8c:a4:66:a3:7f:f2:68:fd:4c:e1:
                    e6:83:d1:5b:28:7c:c1:10:cd:c8:2f:54:c4:49:4a:
                    bc:bf:9a:4f:6c:27:a4:3d:d5:09:23:b4:43:c3:57:
                    2c:a3:b8:74:04:b3:17:6e:80:07:8e:0d:ba:79:c9:
                    ec:1a:07:96:37:68:92:b7:29:c4:97:c8:d8:4c:a7:
                    13:ce:ce:3d:2f:ac:61:9e:fb:29:02:4b:14:72:84:
                    f3:ed:c6:95:a8:4d:18:7b:3f:92:d6:94:c0:62:72:
                    b6:fe:92:a6:26:72:80:2f:3c:04:78:0e:65:2d:56:
                    01:0b:24:75:9b:1c:98:50:43:81:7d:d5:20:94:33:
                    ed:2b:ef:da:73:ea:ff:99:14:d2:05:b2:e2:2a:66:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:86:3C:0C:11:E6:F1:73:F5:06:5A:B7:1E:A2:44:25:E8:E7:3C:38
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:32:4f:04:1a:34:75:13:82:f6:ac:96:5a:16:d8:58:06:6d:
         e3:c8:39:a1:d1:70:39:f0:e6:10:0b:5f:dd:25:12:18:86:f9:
         f7:58:cf:52:b7:4a:a4:b6:64:43:35:bb:cd:e5:6a:91:71:ae:
         4c:a1:83:27:0d:04:94:36:4d:f8:35:b4:2f:3f:32:be:78:5d:
         24:1b:cc:22:28:10:7f:0d:24:f9:30:0f:63:5a:fa:32:7e:68:
         e3:41:54:a7:29:ab:6c:c3:38:fc:f0:16:41:ff:58:23:e9:2b:
         1b:9e:e9:a8:b8:ab:45:21:81:ca:60:a8:c5:51:c1:2c:8d:3f:
         4b:af:82:5f:3e:10:5e:31:23:3b:19:93:e8:58:6c:c1:4a:01:
         53:52:01:a3:07:a4:fe:e6:c0:40:9e:06:03:36:6a:f5:8f:66:
         b1:24:63:c9:96:75:3b:18:66:e0:1f:c7:70:3b:12:e3:88:a5:
         99:4a:75:92:76:ea:e0:9c:73:34:5f:0f:c9:c8:71:49:30:23:
         2a:bf:ce:8b:7b:66:62:54:73:04:bb:bb:3f:0b:fd:a1:56:f7:
         f7:de:57:9a:51:35:b8:8d:f9:43:bc:20:6f:45:80:bb:a3:e6:
         b1:aa:24:83:4a:3a:c6:fa:a4:f6:f6:fe:86:7f:ed:0e:86:81:
         ca:83:56:3e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUXBlpuozDvI5GeOfXXrNKsE6F+rwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc2MTUwMzFkMGE4ZTAyYmY1OGVmYzdmMjMzMGFmM2Q2
NTk1NGVmYzAeFw0yNjAzMjgxNTAzMjlaFw0yNjAzMzAxODA5MjlaMDMxMTAvBgNV
BAMTKEUzODYzQzBDMTFFNkYxNzNGNTA2NUFCNzFFQTI0NDI1RThFNzNDMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT0VGrR1mCK302gJkYzrRGYp/a
/FseZx2GROW02xmRkk9D6zq9qm+5HU+zc64/j18rdtz/3AYStE9ccfHO0KLe0sYl
a3k+JHcjIYuEHGD/LyC7PchvkG/H8Mj8dPEYx9T2dQKULzx84vDsPS5WjKRmo3/y
aP1M4eaD0VsofMEQzcgvVMRJSry/mk9sJ6Q91QkjtEPDVyyjuHQEsxdugAeODbp5
yewaB5Y3aJK3KcSXyNhMpxPOzj0vrGGe+ykCSxRyhPPtxpWoTRh7P5LWlMBicrb+
kqYmcoAvPAR4DmUtVgELJHWbHJhQQ4F91SCUM+0r79pz6v+ZFNIFsuIqZgUtAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU44Y8DBHm8XP1Blq3HqJEJejnPDgwHwYDVR0j
BBgwFoAUx2FQMdCo4Cv1jvx/IzCvPWWVTvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzEvQzc2MTUwMzFEMEE4RTAyQkY1OEVGQzdGMjMzMEFGM0Q2NTk1NEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gyRlFNZENvNEN2MWp2eF9JekN2UFdX
VlR2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x
OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvMS9DNzYxNTAzMUQwQThFMDJCRjU4
RUZDN0YyMzMwQUYzRDY1OTU0RUZDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDJPBBo0dROC9qyWWhbY
WAZt48g5odFwOfDmEAtf3SUSGIb591jPUrdKpLZkQzW7zeVqkXGuTKGDJw0ElDZN
+DW0Lz8yvnhdJBvMIigQfw0k+TAPY1r6Mn5o40FUpymrbMM4/PAWQf9YI+krG57p
qLirRSGBymCoxVHBLI0/S6+CXz4QXjEjOxmT6FhswUoBU1IBowek/ubAQJ4GAzZq
9Y9msSRjyZZ1Oxhm4B/HcDsS44ilmUp1knbq4JxzNF8PychxSTAjKr/Oi3tmYlRz
BLu7Pwv9oVb3995XmlE1uI35Q7wgb0WAu6Pmsaokg0o6xvqk9vb+hn/tDoaByoNW
Pg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:41 2026 by rpki-client