Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
File:                     64742A2EF43282A0509E6A31574C96C8006ECCD5.mft (raw, json)
Hash identifier:          liltbzT9YRjdaBiULFYoqMT0h9RKhlnkjkcLpL/iUGA=
Subject key identifier:   0B:DB:CD:67:66:C7:05:1C:BD:83:FC:58:4A:7C:D7:48:0D:0A:0C:CE
Authority key identifier: 64:74:2A:2E:F4:32:82:A0:50:9E:6A:31:57:4C:96:C8:00:6E:CC:D5
Certificate issuer:       /CN=64742a2ef43282a0509e6a31574c96c8006eccd5
Certificate serial:       2B7F89AD7CC8E3A03F6C0424BF99802B917A0035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
Manifest number:          0140
Signing time:             Sun 29 Mar 2026 02:19:30 +0000
Manifest this update:     Sun 29 Mar 2026 02:14:30 +0000
Manifest next update:     Mon 30 Mar 2026 05:20:30 +0000
Files and hashes:         1: 64742A2EF43282A0509E6A31574C96C8006ECCD5.crl (hash: yYgYmKg1kNY0tfGp1i+ByOcVV1b5XZ3OXhNPNl+JinQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7f:89:ad:7c:c8:e3:a0:3f:6c:04:24:bf:99:80:2b:91:7a:00:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64742a2ef43282a0509e6a31574c96c8006eccd5
        Validity
            Not Before: Mar 29 02:14:30 2026 GMT
            Not After : Mar 30 05:20:30 2026 GMT
        Subject: CN=0BDBCD6766C7051CBD83FC584A7CD7480D0A0CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:16:70:50:33:e3:3a:d6:bf:3a:62:2b:a7:
                    22:bc:3d:e9:ea:07:0d:18:52:6b:68:57:38:c9:a3:
                    91:e0:d7:85:55:29:1f:02:39:60:e3:e9:48:da:ae:
                    7d:d8:74:fc:05:f3:7f:6b:91:d8:65:3a:42:5c:a2:
                    4e:e5:92:51:72:3e:66:58:b4:68:3a:c2:95:30:dc:
                    ac:6c:6b:f0:86:1c:49:06:d1:f7:e5:3b:e7:34:66:
                    c0:2d:02:7d:8d:4f:81:73:de:72:00:00:01:e2:07:
                    40:04:33:38:54:a9:52:59:23:22:a7:05:98:a6:bb:
                    09:fb:ac:50:e0:d5:4e:ea:9a:01:3a:9e:40:91:f3:
                    9c:c7:d3:ff:5d:a6:b3:d0:17:a0:99:0b:e6:69:ac:
                    f7:37:4d:78:d3:86:0d:0d:03:da:ad:71:be:f6:de:
                    d2:5b:e7:3f:17:07:25:7c:48:90:6a:88:60:61:e5:
                    f8:55:dc:a9:72:b6:35:bd:63:9a:2c:46:c7:ea:2f:
                    ad:76:ee:75:e6:d5:a4:f8:c5:d7:72:50:71:2c:f1:
                    22:3e:2c:df:87:18:63:b9:05:8a:77:38:77:f3:ca:
                    ad:37:17:26:a0:e3:e3:d7:60:92:0a:35:04:3a:cc:
                    41:4d:c7:b2:c0:4c:7c:34:c6:89:a9:e9:c7:48:67:
                    c6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DB:CD:67:66:C7:05:1C:BD:83:FC:58:4A:7C:D7:48:0D:0A:0C:CE
            X509v3 Authority Key Identifier:
                keyid:64:74:2A:2E:F4:32:82:A0:50:9E:6A:31:57:4C:96:C8:00:6E:CC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ad:ab:3a:48:07:41:9f:fb:5b:2f:cb:c5:e1:94:ef:cf:61:
         2f:94:df:12:dc:2d:af:b2:2f:e3:95:79:eb:f9:30:bd:c5:17:
         67:2d:70:96:cd:4f:de:80:69:58:58:b1:4c:f5:a2:b6:f6:bc:
         ac:53:1c:e4:1c:c7:23:98:7e:72:86:8d:9c:7a:ad:81:a5:62:
         3a:e6:c5:87:5c:cc:5a:ad:f8:c1:a7:64:67:84:28:47:ea:6c:
         bb:fa:bb:f6:52:18:1c:9a:c6:1d:98:11:1c:68:d0:bf:0e:63:
         05:20:5d:d7:91:79:2d:77:57:bb:8e:67:58:96:c0:9b:13:de:
         47:c8:d1:dd:c7:da:54:07:47:ca:e1:5e:07:58:a5:a3:a6:36:
         6d:00:a3:3b:63:48:68:c4:fa:60:68:c0:3d:da:2d:66:65:f1:
         b1:b0:5b:9c:15:e5:62:fb:16:5c:ab:11:e9:d4:0e:06:2e:d7:
         f3:95:eb:00:bf:de:d0:96:9c:7a:d6:30:3b:d1:00:a9:93:bb:
         dd:b0:26:28:94:11:4b:c9:dd:53:c9:24:a5:38:83:18:ad:1d:
         80:00:38:db:08:7c:b5:04:98:8d:c5:42:4f:3d:65:95:3d:03:
         21:e2:c9:e3:bd:cd:c1:d6:90:39:33:8f:15:92:a2:d3:a4:90:
         e4:3d:a9:81
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUK3+JrXzI46A/bAQkv5mAK5F6ADUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ3NDJhMmVmNDMyODJhMDUwOWU2YTMxNTc0Yzk2Yzgw
MDZlY2NkNTAeFw0yNjAzMjkwMjE0MzBaFw0yNjAzMzAwNTIwMzBaMDMxMTAvBgNV
BAMTKDBCREJDRDY3NjZDNzA1MUNCRDgzRkM1ODRBN0NENzQ4MEQwQTBDQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjgRZwUDPjOta/OmIrpyK8Penq
Bw0YUmtoVzjJo5Hg14VVKR8COWDj6Ujarn3YdPwF839rkdhlOkJcok7lklFyPmZY
tGg6wpUw3Kxsa/CGHEkG0fflO+c0ZsAtAn2NT4Fz3nIAAAHiB0AEMzhUqVJZIyKn
BZimuwn7rFDg1U7qmgE6nkCR85zH0/9dprPQF6CZC+ZprPc3TXjThg0NA9qtcb72
3tJb5z8XByV8SJBqiGBh5fhV3KlytjW9Y5osRsfqL6127nXm1aT4xddyUHEs8SI+
LN+HGGO5BYp3OHfzyq03Fyag4+PXYJIKNQQ6zEFNx7LATHw0xomp6cdIZ8b3AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUC9vNZ2bHBRy9g/xYSnzXSA0KDM4wHwYDVR0j
BBgwFoAUZHQqLvQygqBQnmoxV0yWyABuzNUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz
N2ZjLzAvNjQ3NDJBMkVGNDMyODJBMDUwOUU2QTMxNTc0Qzk2QzgwMDZFQ0NENS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pIUXFMdlF5Z3FCUW5tb3hWMHlXeUFC
dXpOVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iN2EwYWE1Ni00
YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMC82NDc0MkEyRUY0MzI4MkEwNTA5
RTZBMzE1NzRDOTZDODAwNkVDQ0Q1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhq2rOkgHQZ/7Wy/LxeGU
789hL5TfEtwtr7Iv45V56/kwvcUXZy1wls1P3oBpWFixTPWitva8rFMc5BzHI5h+
coaNnHqtgaViOubFh1zMWq34wadkZ4QoR+psu/q79lIYHJrGHZgRHGjQvw5jBSBd
15F5LXdXu45nWJbAmxPeR8jR3cfaVAdHyuFeB1ilo6Y2bQCjO2NIaMT6YGjAPdot
ZmXxsbBbnBXlYvsWXKsR6dQOBi7X85XrAL/e0JacetYwO9EAqZO73bAmKJQRS8nd
U8kkpTiDGK0dgAA42wh8tQSYjcVCTz1llT0DIeLJ473NwdaQOTOPFZKi06SQ5D2p
gQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:02 2026 by rpki-client