Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.mft
File:                     A465A2ED221B2681A593F3273EC5E73FB69E883D.mft (raw, json)
Hash identifier:          Dxam9KIiGSTZNE2dRcbRATmXFM0uAUnv2X9o0JLasyM=
Subject key identifier:   3D:8D:63:FB:9B:1A:5B:C3:4B:02:2E:BB:7D:53:29:EF:AA:E6:3E:71
Authority key identifier: A4:65:A2:ED:22:1B:26:81:A5:93:F3:27:3E:C5:E7:3F:B6:9E:88:3D
Certificate issuer:       /CN=a465a2ed221b2681a593f3273ec5e73fb69e883d
Certificate serial:       5F26DD58C6D64B6ED34618FDB2F21BE8B4DAA0A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pGWi7SIbJoGlk_MnPsXnP7aeiD0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.mft
Manifest number:          60
Signing time:             Fri 27 Mar 2026 09:28:14 +0000
Manifest this update:     Fri 27 Mar 2026 09:23:14 +0000
Manifest next update:     Sat 28 Mar 2026 12:41:14 +0000
Files and hashes:         1: AS210773.asa (hash: /JteockIlNHN2+cPErXzdclJuRFyUn7Il8RAa/YV9sk=)
                          2: A465A2ED221B2681A593F3273EC5E73FB69E883D.crl (hash: GF2hkEtny0extgXaXlOGvHJ53+UBUcUVy9Mk2EHDZ4I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pGWi7SIbJoGlk_MnPsXnP7aeiD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 12:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:26:dd:58:c6:d6:4b:6e:d3:46:18:fd:b2:f2:1b:e8:b4:da:a0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a465a2ed221b2681a593f3273ec5e73fb69e883d
        Validity
            Not Before: Mar 27 09:23:14 2026 GMT
            Not After : Mar 28 12:41:14 2026 GMT
        Subject: CN=3D8D63FB9B1A5BC34B022EBB7D5329EFAAE63E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:79:fa:ed:4e:14:ab:19:fa:76:d0:5d:26:
                    db:fc:be:56:e4:6f:54:26:3e:3a:7b:94:d3:d7:9e:
                    fb:43:3b:a5:f3:c1:db:3f:7c:54:74:1d:bb:7a:09:
                    b4:7b:52:c3:1e:0d:99:d8:f6:7f:52:6f:98:93:fc:
                    0a:76:ea:5d:a9:76:6b:9f:aa:fd:2d:8f:a0:4d:60:
                    f8:19:d1:b6:91:0b:a4:0e:5c:7b:67:7b:ff:e4:f5:
                    d1:6a:7f:2f:61:30:06:38:a2:b6:23:67:90:e9:cc:
                    79:ba:f0:96:ae:07:e7:33:5b:6e:40:09:77:63:2a:
                    05:5d:ae:1e:71:8e:93:0f:c7:1e:c8:5a:03:a7:79:
                    17:80:bf:04:a6:75:86:02:b4:7d:dc:1a:0a:d9:a7:
                    05:40:22:2d:ff:b8:24:3e:3e:b6:15:3c:82:23:c5:
                    32:39:28:34:35:ed:b0:f6:b8:a2:d3:0c:ce:31:9c:
                    57:42:38:4d:80:1e:a3:33:2d:54:28:4b:fd:9c:e3:
                    46:4b:21:79:36:1c:ae:20:d3:60:38:98:d7:66:d5:
                    1e:6c:e8:b0:da:08:c6:4e:cc:3b:a4:de:a0:f1:c6:
                    10:c4:31:26:8a:9c:f6:63:d5:98:2d:09:25:3e:95:
                    d0:7d:48:b1:fb:69:c7:50:b0:4e:9d:0b:73:5a:b5:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8D:63:FB:9B:1A:5B:C3:4B:02:2E:BB:7D:53:29:EF:AA:E6:3E:71
            X509v3 Authority Key Identifier:
                keyid:A4:65:A2:ED:22:1B:26:81:A5:93:F3:27:3E:C5:E7:3F:B6:9E:88:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pGWi7SIbJoGlk_MnPsXnP7aeiD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:8d:e7:3c:f4:2c:fe:0b:1c:bd:5b:1f:97:b5:f1:3b:e5:7e:
         d6:18:dc:57:64:96:ff:f4:20:6e:ee:ae:29:fd:ff:49:01:57:
         06:93:40:e0:b2:5e:bc:80:8f:da:cb:36:ec:1f:8c:af:d9:fb:
         4c:35:6c:4c:15:5d:7a:d9:86:91:ea:6a:33:a0:7d:d6:2b:bd:
         1c:92:6d:6f:f7:1c:e8:94:7a:6b:e7:28:31:6a:d4:d7:68:c0:
         b4:8e:15:3e:bc:96:0a:33:f4:27:2f:22:3a:f3:c1:87:21:a6:
         b2:c4:40:1f:6d:e7:f7:4f:84:8e:25:97:fa:93:16:f3:cb:0d:
         f3:b1:64:bf:26:f0:90:ce:84:ff:8b:b5:38:b6:ae:b3:2b:a0:
         ec:4e:68:71:25:b3:aa:60:9e:0c:fd:c8:ee:d3:e1:cf:32:fe:
         4c:8e:e1:7c:ab:c3:7d:b4:7e:e7:87:7f:92:ae:d8:6d:69:c4:
         31:88:56:98:7a:24:2e:f7:4a:ec:d8:86:6a:8c:f1:ca:52:51:
         23:36:7e:6f:2c:73:fc:16:94:1b:8c:5d:44:31:15:34:34:55:
         a9:db:41:72:e9:98:9b:9c:de:f3:ce:04:d4:ed:0a:b8:c8:fd:
         42:04:58:34:e4:aa:e2:ed:6c:9c:f6:aa:96:67:95:db:4e:e5:
         ff:e3:cd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 00:02:14 2026 by rpki-client