Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
File:                     6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft (raw, json)
Hash identifier:          VZi8Lm9PK92q+IyzVL2R1DPvmUo8TjLdh10+PJp6JsY=
Subject key identifier:   22:DF:93:97:E6:91:71:FF:71:96:5C:6A:17:F8:49:7C:8A:4F:A3:40
Authority key identifier: 64:41:DD:2D:A2:14:77:EC:8B:F2:77:D3:3B:E9:07:2C:E8:5F:92:A8
Certificate issuer:       /CN=6441dd2da21477ec8bf277d33be9072ce85f92a8
Certificate serial:       1B954D3F52CABBC059D48F60D3C1F4BCC8FF6683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
Manifest number:          85
Signing time:             Sat 03 Oct 2026 01:55:00 +0000
Manifest this update:     Sat 03 Oct 2026 01:50:00 +0000
Manifest next update:     Sun 04 Oct 2026 04:21:00 +0000
Files and hashes:         1: 6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl (hash: jxcCtiRN2aMie326I599yJwX0+lr6edwrG5uXS5vajk=)
                          2: AS219458.asa (hash: GU61pR45wu8HIE8dLfaSZA9t9gnGAcZbJ0fm1zAhAoE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 04:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:95:4d:3f:52:ca:bb:c0:59:d4:8f:60:d3:c1:f4:bc:c8:ff:66:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6441dd2da21477ec8bf277d33be9072ce85f92a8
        Validity
            Not Before: Oct  3 01:50:00 2026 GMT
            Not After : Oct  4 04:21:00 2026 GMT
        Subject: CN=22DF9397E69171FF71965C6A17F8497C8A4FA340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dd:d1:03:31:b2:ab:50:a6:ac:ce:ef:66:ec:
                    db:ee:cc:ff:ae:0f:fa:2f:ab:b1:95:1e:bd:cd:89:
                    90:97:6f:6f:69:f8:33:d6:79:4d:8a:de:9c:53:b7:
                    ba:4e:cb:ed:d1:e2:1b:b7:5d:59:46:00:2f:e5:1a:
                    c9:37:3a:c6:0b:7f:c0:01:06:65:e0:41:f7:d0:5d:
                    24:24:f5:29:ba:f9:73:07:0e:2e:19:0b:d4:ce:70:
                    eb:d8:ff:4f:e8:1f:ce:b0:fe:8d:6c:6d:74:8d:df:
                    12:54:99:7c:22:80:07:8f:e9:0d:16:c3:01:22:5f:
                    a0:95:62:1b:7f:52:da:bb:08:4d:ed:1a:d8:8c:e9:
                    7b:bc:6d:d4:10:6a:74:df:88:8d:1d:9a:8a:48:13:
                    91:c4:b0:46:16:da:35:dc:e8:bf:89:3f:63:96:00:
                    43:db:1d:3c:06:da:c3:11:43:3a:bc:da:89:86:6d:
                    cc:3b:dc:56:a5:5e:e5:45:90:5b:d6:f3:64:33:35:
                    ac:d1:5a:1a:a9:f1:c3:2d:2f:eb:2c:92:ae:e6:f0:
                    6f:d0:d3:ae:d2:a7:cf:57:33:68:c0:32:85:2a:d0:
                    1c:8a:3f:73:9f:a8:98:f5:5f:b1:7a:97:9a:cd:fa:
                    30:59:b5:f9:22:d2:56:01:4a:6f:61:e5:13:b4:86:
                    86:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DF:93:97:E6:91:71:FF:71:96:5C:6A:17:F8:49:7C:8A:4F:A3:40
            X509v3 Authority Key Identifier:
                keyid:64:41:DD:2D:A2:14:77:EC:8B:F2:77:D3:3B:E9:07:2C:E8:5F:92:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:de:32:6b:2f:7a:a6:b6:af:8d:23:08:9a:d9:f5:ee:24:0d:
         ef:ee:11:68:9e:c6:10:08:05:72:a9:be:c4:11:a3:25:2b:5b:
         32:e7:8a:43:21:16:8b:63:dd:b4:35:f7:75:a6:71:cd:84:da:
         f0:d3:8c:96:25:79:bd:4e:82:2f:be:fa:9e:03:b9:e3:4b:f8:
         60:f3:bd:0d:ec:b6:c4:b2:b9:85:43:c0:31:e6:69:b8:7b:fe:
         7d:ba:16:6a:dc:8a:9b:59:ba:be:35:c6:62:01:c4:b2:d6:63:
         52:21:86:91:8f:82:fa:56:3b:44:38:7a:9f:38:55:12:f9:6f:
         d5:86:6a:91:c2:cc:79:82:f4:7f:30:29:ba:2f:1c:1a:a1:e1:
         cb:e5:9f:e6:1a:55:7f:eb:3e:94:4b:f7:df:4f:f6:73:55:98:
         b7:5d:d8:ae:72:35:84:f8:05:04:70:e4:4e:26:d4:f9:13:77:
         7c:8d:94:43:36:0c:cc:75:3d:46:58:a1:fa:5c:e7:55:8f:67:
         1b:a6:a7:88:7f:26:62:d3:26:75:e2:49:87:3b:8e:a9:32:52:
         63:b3:0b:7e:a0:47:15:1c:f7:47:d3:a0:ef:3b:77:30:4d:37:
         f1:72:f4:68:13:83:30:cc:1e:57:b6:a0:03:0e:a2:e4:c1:e1:
         a5:53:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:33:21 2026 by rpki-client