Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File:                     D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier:          y7TQbcnQAM3oy9J52vlev/EHlOBlCm2j66wzQqDh2YY=
Subject key identifier:   8F:3A:B5:89:0B:0C:04:C2:67:81:E8:47:B9:2F:75:4E:F8:1E:83:E9
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer:       /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial:       735AC7CAA6BF1244F97650AECE9C692FA6C34FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number:          0480
Signing time:             Fri 14 Aug 2026 10:55:57 +0000
Manifest this update:     Fri 14 Aug 2026 10:50:57 +0000
Manifest next update:     Sat 15 Aug 2026 12:18:57 +0000
Files and hashes:         1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: pDaUbauzD2JmfI78GBYMmTsju0XU6O7oe9cdJh5ThCI=)
                          2: AS215828.asa (hash: aLfEnni+8YGsFkiwicZpetRmsooIvHjNGHfRPX60CaA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 12:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5a:c7:ca:a6:bf:12:44:f9:76:50:ae:ce:9c:69:2f:a6:c3:4f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
        Validity
            Not Before: Aug 14 10:50:57 2026 GMT
            Not After : Aug 15 12:18:57 2026 GMT
        Subject: CN=8F3AB5890B0C04C26781E847B92F754EF81E83E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6a:6f:8c:6a:8d:e0:6b:28:95:62:d4:71:22:
                    6d:02:cf:02:b0:8d:33:04:ac:25:94:75:9a:d9:6b:
                    f4:c4:e2:65:7d:4d:e1:a6:f9:9b:7d:7d:cd:3f:34:
                    72:c6:31:8e:1f:ee:cf:03:c7:c6:43:f3:d5:dc:63:
                    57:ad:84:cc:ba:7c:75:da:b3:12:b0:7f:42:cf:43:
                    e4:5c:08:21:f6:8a:0c:07:8c:b2:9c:a7:cb:fa:fa:
                    cd:92:80:16:0d:b0:69:05:29:4f:a9:5f:f5:5c:55:
                    e1:1d:41:39:bd:5c:07:73:32:7a:6e:22:81:5e:6c:
                    9a:b3:29:d8:72:18:d8:d8:70:36:dd:e4:70:98:e3:
                    99:81:ef:5a:85:55:69:28:f9:41:f3:54:b3:6e:e3:
                    f9:fd:63:61:78:5b:f0:b9:ab:bf:ba:82:23:25:70:
                    23:f0:93:d5:ba:aa:b9:7a:a3:f0:18:81:03:3c:8c:
                    e7:44:1d:00:20:8d:e9:f7:f2:f2:69:f1:fd:6f:2c:
                    5d:14:0e:66:ff:6d:59:3e:c0:86:ca:e4:20:b7:d3:
                    81:9c:86:74:db:61:3c:bc:98:12:37:e7:5b:61:6f:
                    e8:7e:81:08:07:8d:74:37:e8:eb:ab:74:6e:af:5b:
                    cd:34:17:cc:28:39:b5:e0:54:47:9d:9a:d5:87:2c:
                    4d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3A:B5:89:0B:0C:04:C2:67:81:E8:47:B9:2F:75:4E:F8:1E:83:E9
            X509v3 Authority Key Identifier:
                keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6e:41:4e:30:f6:b9:64:53:57:28:77:d0:a7:2a:81:39:24:
         42:d6:65:2c:dc:dd:9c:05:0f:a0:73:ef:a1:74:78:5c:8c:8f:
         9f:50:ed:44:cb:24:16:04:7e:87:da:5a:90:ed:f0:65:a9:c8:
         ad:67:00:17:83:97:a8:b2:bd:93:b8:4e:e4:fd:a0:3c:a3:77:
         f4:45:9b:d1:cd:37:cf:20:da:a4:70:6f:4f:4f:ad:89:73:1b:
         23:14:dc:a4:ac:63:ff:1a:d8:f4:ef:d9:10:14:47:e3:3b:ff:
         eb:0f:a3:41:39:90:5f:60:08:51:2a:36:ab:4d:8d:10:25:eb:
         a8:35:0e:70:58:7d:34:93:b5:eb:14:23:69:39:d6:a1:a2:a2:
         5a:83:f7:09:82:39:56:30:8d:7d:5d:9f:d1:5b:ac:da:24:09:
         14:67:39:9e:cc:c1:f2:01:07:46:28:08:d9:9a:5c:33:e8:90:
         e9:0b:63:4e:0f:0d:df:73:df:71:7e:3f:fd:e8:79:1b:31:2e:
         36:44:1b:7d:1b:05:9a:8b:2a:b6:2f:ff:ed:e2:b2:50:47:f0:
         c8:5f:8c:fc:81:c3:c6:5b:6a:c0:7e:1c:06:07:1e:60:dc:13:
         54:f2:39:7a:84:33:ec:ae:2d:da:2f:f2:7a:61:42:50:8e:b0:
         77:66:dd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:43 2026 by rpki-client