Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
File:                     A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft (raw, json)
Hash identifier:          48TN394Ix818IdnllZSWThzHn7ug/Cbo/r+sJcH06pA=
Subject key identifier:   D6:B9:5D:D4:2B:BD:B8:16:BE:66:EE:8E:18:BB:33:DE:28:7A:F8:D9
Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
Certificate issuer:       /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Certificate serial:       07ED06477216257F4F3768A77455C2DAC049A121
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
Manifest number:          017F
Signing time:             Mon 29 Jun 2026 00:55:03 +0000
Manifest this update:     Mon 29 Jun 2026 00:50:03 +0000
Manifest next update:     Tue 30 Jun 2026 04:10:03 +0000
Files and hashes:         1: AS214757.asa (hash: TEIuogg7LAcwTAI83OksNpDoanJJoxteeeanxJZlbRY=)
                          2: A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl (hash: 0UKjbNwbm8ACwymKrRWd5jkr/zOe8HsZXy5GhN3z/dU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ed:06:47:72:16:25:7f:4f:37:68:a7:74:55:c2:da:c0:49:a1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
        Validity
            Not Before: Jun 29 00:50:03 2026 GMT
            Not After : Jun 30 04:10:03 2026 GMT
        Subject: CN=D6B95DD42BBDB816BE66EE8E18BB33DE287AF8D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:65:e5:3a:0c:73:65:48:af:4a:80:f9:c8:
                    9e:d7:fc:34:76:5e:70:8f:59:f6:8a:d0:6b:cb:3a:
                    72:b4:71:29:73:3d:ac:7e:93:ca:06:52:9f:51:5e:
                    0d:87:1c:b6:6d:b6:c5:de:2a:b1:41:13:a9:88:95:
                    70:5a:03:25:f5:77:32:ad:90:2e:5e:7f:d4:b7:4f:
                    61:7d:44:ca:74:81:6f:18:72:ed:bc:b8:1f:37:72:
                    e9:9c:9b:c3:40:83:fc:dc:79:76:53:fb:16:0d:4d:
                    00:d6:40:2c:3d:db:8a:e2:63:78:3b:b1:8c:8f:f7:
                    a3:55:67:e6:43:b7:cd:ad:5f:b8:e7:6f:66:63:69:
                    0c:dd:bf:5c:da:61:7b:23:e2:ff:9b:e4:50:40:41:
                    99:1e:7b:07:1a:7e:fc:6a:7f:2b:2c:40:87:3c:83:
                    de:6d:b4:6d:a9:17:58:3e:e3:30:82:a1:ff:b3:f6:
                    00:bb:ad:b4:d1:d7:b9:cc:c7:30:28:ee:98:98:b8:
                    0d:55:36:03:f9:60:e6:38:b0:c9:6e:d2:df:84:5e:
                    17:ef:93:dd:92:06:99:be:27:f8:97:be:b2:ca:c1:
                    77:93:75:bc:b2:20:45:56:f2:d1:ce:1f:4e:ec:50:
                    65:d7:48:38:a1:e4:54:ab:1e:7b:56:50:84:ee:6a:
                    4f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B9:5D:D4:2B:BD:B8:16:BE:66:EE:8E:18:BB:33:DE:28:7A:F8:D9
            X509v3 Authority Key Identifier:
                keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:54:f7:f0:07:3c:ce:7e:4a:db:ca:e9:e5:05:87:eb:61:74:
         80:15:09:50:fd:70:4f:1e:81:6f:03:35:85:87:db:7a:8a:d0:
         56:e4:1e:ac:87:7d:03:08:c8:e8:8a:48:14:55:d6:f6:9e:0a:
         c9:98:b8:f6:e0:f9:e7:94:98:d9:28:40:35:2b:26:85:3b:3c:
         95:93:73:9d:9d:d4:02:5c:ba:8e:3e:1a:73:06:de:6f:6a:1b:
         6e:3d:36:29:2e:b5:5a:97:b4:4e:d3:bf:9e:17:33:64:2d:a1:
         d4:2c:be:e1:fa:0a:e9:00:d2:78:6b:a0:b5:e1:85:96:e0:a6:
         5d:83:15:18:08:29:99:d2:dd:44:92:f8:85:d2:44:e1:44:62:
         9c:a3:f4:92:b7:99:6a:79:f4:ea:3f:a2:45:70:df:aa:79:72:
         c2:39:f3:9c:15:83:67:6c:a6:8a:42:9e:df:14:b3:79:96:48:
         ef:76:33:88:c8:73:e2:2a:e5:29:18:7c:e8:b1:5a:64:bc:67:
         f5:5b:26:6e:1b:58:fa:62:1f:a8:b5:cf:7b:81:09:88:59:77:
         ec:c9:50:87:22:99:6a:37:5e:81:86:4f:9e:70:c2:bf:79:0e:
         12:15:d3:61:7c:48:2c:0b:05:91:27:06:d8:26:65:f2:f9:85:
         94:e8:9a:1c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUB+0GR3IWJX9PN2indFXC2sBJoSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTBiYmI5NTQ1NzBjZmE2ZTg1NjkzNzA0M2RkMmMxNzQ1
YTBhMDVjMjAeFw0yNjA2MjkwMDUwMDNaFw0yNjA2MzAwNDEwMDNaMDMxMTAvBgNV
BAMTKEQ2Qjk1REQ0MkJCREI4MTZCRTY2RUU4RTE4QkIzM0RFMjg3QUY4RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBGXlOgxzZUivSoD5yJ7X/DR2
XnCPWfaK0GvLOnK0cSlzPax+k8oGUp9RXg2HHLZttsXeKrFBE6mIlXBaAyX1dzKt
kC5ef9S3T2F9RMp0gW8Ycu28uB83cumcm8NAg/zceXZT+xYNTQDWQCw924riY3g7
sYyP96NVZ+ZDt82tX7jnb2ZjaQzdv1zaYXsj4v+b5FBAQZkeewcafvxqfyssQIc8
g95ttG2pF1g+4zCCof+z9gC7rbTR17nMxzAo7piYuA1VNgP5YOY4sMlu0t+EXhfv
k92SBpm+J/iXvrLKwXeTdbyyIEVW8tHOH07sUGXXSDih5FSrHntWUITuak/JAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU1rld1Cu9uBa+Zu6OGLsz3ih6+NkwHwYDVR0j
BBgwFoAUoLu5VFcM+m6FaTcEPdLBdFoKBcIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTdiNWY2ZjQtMjRiZS00YWUwLTgyYTgtZTVkODI4NDJl
MjI5LzAvQTBCQkI5NTQ1NzBDRkE2RTg1NjkzNzA0M0REMkMxNzQ1QTBBMDVDMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29MdTVWRmNNLW02RmFUY0VQZExCZEZv
S0JjSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85N2I1ZjZmNC0y
NGJlLTRhZTAtODJhOC1lNWQ4Mjg0MmUyMjkvMC9BMEJCQjk1NDU3MENGQTZFODU2
OTM3MDQzREQyQzE3NDVBMEEwNUMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5VT38Ac8zn5K28rp5QWH
62F0gBUJUP1wTx6BbwM1hYfbeorQVuQerId9AwjI6IpIFFXW9p4KyZi49uD555SY
2ShANSsmhTs8lZNznZ3UAly6jj4acwbeb2obbj02KS61Wpe0TtO/nhczZC2h1Cy+
4foK6QDSeGugteGFluCmXYMVGAgpmdLdRJL4hdJE4URinKP0kreZann06j+iRXDf
qnlywjnznBWDZ2ymikKe3xSzeZZI73YziMhz4irlKRh86LFaZLxn9VsmbhtY+mIf
qLXPe4EJiFl37MlQhyKZajdegYZPnnDCv3kOEhXTYXxILAsFkScG2CZl8vmFlOia
HA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:08 2026 by rpki-client