Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft
File:                     E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft (raw, json)
Hash identifier:          bINaKDuYsA8Tzp+zm5SskNYQOGL88TWYbyjaCZGnr3s=
Subject key identifier:   82:59:84:B1:D3:E7:8B:5F:86:7D:16:C7:F3:BC:48:78:4B:E1:63:10
Authority key identifier: E1:45:6D:78:8F:E9:48:66:C9:FE:0B:87:75:8A:8A:B1:E2:21:E8:DB
Certificate issuer:       /CN=e1456d788fe94866c9fe0b87758a8ab1e221e8db
Certificate serial:       044DCAE775A048751170C8E7813A6B41BEB73E01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UVteI_pSGbJ_guHdYqKseIh6Ns.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft
Manifest number:          A3
Signing time:             Wed 04 Mar 2026 20:12:24 +0000
Manifest this update:     Wed 04 Mar 2026 20:07:24 +0000
Manifest next update:     Thu 05 Mar 2026 23:00:24 +0000
Files and hashes:         1: E1456D788FE94866C9FE0B87758A8AB1E221E8DB.crl (hash: qu4M/W0NBYQpx0hKWYwJgojpHG0avDgk0choNCmfOx8=)
                          2: AS210796.asa (hash: UUIMqt8ZmaK9oM2cGglTc+0B5+iNW+0belJbJzZMcCg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UVteI_pSGbJ_guHdYqKseIh6Ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 19:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4d:ca:e7:75:a0:48:75:11:70:c8:e7:81:3a:6b:41:be:b7:3e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1456d788fe94866c9fe0b87758a8ab1e221e8db
        Validity
            Not Before: Mar  4 20:07:24 2026 GMT
            Not After : Mar  5 23:00:24 2026 GMT
        Subject: CN=825984B1D3E78B5F867D16C7F3BC48784BE16310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:38:5c:9f:91:fe:09:91:1c:89:74:93:ae:
                    1a:ba:fe:ae:f1:ab:8c:44:cf:d5:99:8e:75:ce:59:
                    17:73:3d:98:a4:24:46:0b:85:08:e9:77:f5:43:1c:
                    f9:d7:54:a7:5d:bd:3f:57:a5:ef:dd:fe:54:70:5b:
                    e7:d5:2a:4a:cc:03:2b:26:80:11:c2:70:8c:49:50:
                    71:73:11:e0:94:6b:00:12:a2:3e:ee:49:17:37:a7:
                    5b:41:a2:84:dd:ec:51:54:c2:1f:db:bb:8a:7f:0f:
                    75:34:35:9b:c4:06:3a:25:55:3f:ec:54:48:42:21:
                    36:b3:d7:93:0d:26:a0:a7:86:1e:f9:50:90:3f:b0:
                    3a:c6:5d:1e:96:12:a8:61:df:a2:1b:d5:58:f9:80:
                    61:34:a5:92:2b:d5:c2:77:e7:08:70:57:0f:ad:4e:
                    0f:b7:0a:2d:37:fa:ba:19:0e:00:23:6b:f8:0e:8f:
                    6d:30:6a:cd:29:bb:49:3f:3e:9c:39:30:e5:99:a4:
                    da:55:3f:3a:b6:1e:5c:76:4c:0d:0c:bf:83:e9:aa:
                    23:5e:23:9f:98:37:f5:af:62:ba:26:dc:cf:5b:50:
                    33:e2:ab:a2:62:13:12:3c:f2:60:fd:42:3c:fa:ec:
                    27:35:44:80:b6:5e:3d:9c:1a:49:36:e9:42:c3:99:
                    a8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:59:84:B1:D3:E7:8B:5F:86:7D:16:C7:F3:BC:48:78:4B:E1:63:10
            X509v3 Authority Key Identifier:
                keyid:E1:45:6D:78:8F:E9:48:66:C9:FE:0B:87:75:8A:8A:B1:E2:21:E8:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UVteI_pSGbJ_guHdYqKseIh6Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b6:c5:6e:1e:e8:0f:72:2b:62:75:8b:55:7b:97:d7:1f:f4:
         b1:e9:f7:4d:b1:71:bf:8d:77:8d:bf:a4:56:dc:31:7c:93:c1:
         db:e8:85:d8:eb:fb:9b:83:fe:81:40:9b:03:f4:0c:9d:b1:4f:
         2d:5f:4c:2d:71:5b:66:1b:22:e1:98:b8:3b:fe:e5:ac:b9:2c:
         54:9d:78:a3:9b:14:9a:98:d8:4b:8c:bc:5e:6d:f4:67:45:c0:
         f0:2a:f4:8b:39:5b:22:12:6b:c6:99:48:88:8d:dc:50:5e:2b:
         93:0e:25:6b:2e:fc:1a:a3:9f:c1:98:6c:9a:89:64:eb:16:4e:
         17:df:a8:8d:dc:3a:6d:a5:8a:40:b0:94:9f:66:1a:6f:10:92:
         12:72:5a:ff:18:68:d6:e9:8a:70:e7:a0:e8:f6:65:90:b8:c5:
         a5:91:e0:4d:fb:a7:fd:4f:00:a6:b0:d0:eb:34:71:1b:af:ff:
         43:df:66:16:da:ec:a4:91:6e:04:61:a9:ea:8e:0d:fd:91:7c:
         18:55:dc:55:26:b0:17:c1:70:43:28:9a:c2:15:b1:16:18:d3:
         b4:2b:ec:9c:09:c9:7a:c2:05:0a:19:a2:13:05:8f:e5:4a:94:
         80:aa:bf:9a:0c:fc:35:80:f8:98:db:73:af:f4:3e:1f:74:8e:
         c3:bf:36:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 01:39:34 2026 by rpki-client