Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          USEM22BRwAy+gpXigpqY9Xn4PMhRbs3yIJWu/OiVe9E=
Subject key identifier:   9C:8A:24:06:86:27:78:EF:C4:11:A4:B5:DA:CC:21:2D:22:AB:45:10
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       4B32687553ED36A6910833DA541D1D0D93E0A69B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          04DE
Signing time:             Wed 26 Aug 2026 02:03:05 +0000
Manifest this update:     Wed 26 Aug 2026 01:58:05 +0000
Manifest next update:     Fri 28 Aug 2026 05:41:05 +0000
Files and hashes:         1: AS213525.asa (hash: Fq0YNh+tWWvo+GdVGRIwjFZdtE0RP8wN2+bPbK7JSk8=)
                          2: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: 3f1cLeDiLzw+z8oYbXiXO9UNrI+uQpCaIathEafNTxg=)
                          3: AS214498.asa (hash: MXybwtu+5M9CBNDZHODBSDxfP4tk/0gnYAktlZuo6sk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:32:68:75:53:ed:36:a6:91:08:33:da:54:1d:1d:0d:93:e0:a6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Aug 26 01:58:05 2026 GMT
            Not After : Aug 28 05:41:05 2026 GMT
        Subject: CN=9C8A2406862778EFC411A4B5DACC212D22AB4510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:7c:8f:44:d6:12:3d:48:c6:30:44:a5:69:
                    82:ff:fc:89:ef:56:96:a1:6c:69:cb:7e:d1:4e:81:
                    59:c4:b7:df:61:50:10:88:49:03:8c:5f:2d:a9:75:
                    5a:28:cf:72:ee:cd:61:b8:72:12:cd:4a:09:dc:98:
                    ac:9e:d4:f8:98:87:61:69:3f:68:a1:59:62:85:d0:
                    69:64:0b:ea:c8:85:c4:f8:29:3a:67:3c:60:ca:06:
                    0c:a0:de:a2:ba:0f:96:21:0b:f3:f1:7e:1d:d8:9f:
                    08:c3:9b:85:0e:a4:f4:e1:93:76:75:d2:5d:51:e0:
                    ea:89:83:c4:30:aa:29:8b:40:6b:6a:9d:da:37:82:
                    10:98:6f:6f:34:2b:09:1d:7a:8a:44:c2:68:86:f3:
                    43:84:0b:3f:ab:da:8a:de:f8:d6:b3:79:44:7a:58:
                    cb:f6:6d:a8:1d:82:11:f8:4f:dc:15:ac:dd:0e:04:
                    7d:30:28:b3:84:c2:70:21:aa:65:2a:75:da:90:de:
                    e3:5c:e4:84:ac:08:04:34:d6:cf:2a:a0:ef:b7:de:
                    f0:fa:85:f9:b4:f7:cb:e7:d7:c2:cb:54:97:23:f1:
                    b4:f2:dd:45:74:0d:73:a1:a2:1b:03:3c:a0:17:04:
                    21:2d:af:ee:cc:20:65:13:06:7b:22:95:dd:8b:5b:
                    a1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8A:24:06:86:27:78:EF:C4:11:A4:B5:DA:CC:21:2D:22:AB:45:10
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:78:e3:12:e4:b6:55:ed:de:cd:6c:55:dc:c2:4c:9d:29:19:
         35:45:81:67:04:2e:40:cc:c8:94:01:de:bf:5d:e8:e9:72:e2:
         93:13:a8:f4:e1:31:08:47:06:8f:43:28:31:65:4e:c6:db:88:
         cc:bc:a0:f8:25:6f:87:26:91:e2:d3:3c:30:10:ec:49:7d:c6:
         2a:de:1e:28:20:17:01:8f:b9:02:a1:c7:e0:3d:6a:55:7b:58:
         d7:bf:30:37:b2:52:1f:e3:90:ef:96:5a:14:b9:69:d6:9d:88:
         8f:ef:de:fe:69:2d:24:31:de:d4:37:72:cc:e3:b8:45:b5:f2:
         c9:4f:eb:db:35:ac:2d:24:0e:a4:fc:bd:8b:15:61:b8:d6:99:
         db:14:2f:39:58:ae:08:97:4d:c7:86:71:c1:e6:26:1c:a2:b2:
         e1:10:62:3a:ce:aa:00:5f:6c:26:ae:25:cc:fc:30:9e:f9:bb:
         45:f8:5c:b6:4d:27:06:f0:b1:25:6d:d3:a1:1a:25:ea:de:2d:
         72:17:bd:55:a0:98:37:5f:88:2c:ee:c5:8d:a4:25:29:05:13:
         de:d0:c9:38:bb:8e:32:28:fa:95:da:be:ca:67:69:c9:db:8f:
         1a:27:60:91:01:a9:0b:43:1e:36:c1:8d:a1:30:d1:3e:cc:21:
         5a:4d:69:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:09:15 2026 by rpki-client