Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
File:                     0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json)
Hash identifier:          ngm+dJAf47pBaVCH9B2zTgXrKB6dOgsdi7e9pNW75IU=
Subject key identifier:   AF:7C:4C:47:62:EE:DC:D9:CF:A3:23:FE:A7:D5:09:43:28:80:3B:B9
Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
Certificate issuer:       /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Certificate serial:       218538D1221D58E678539C3D7190B256B7594E99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
Manifest number:          059C
Signing time:             Fri 15 May 2026 23:03:30 +0000
Manifest this update:     Fri 15 May 2026 22:58:30 +0000
Manifest next update:     Sun 17 May 2026 00:19:30 +0000
Files and hashes:         1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: AcPvaK4rmjuYw0RdH19uZyMWwMilKXVDGGJiohEF98U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 00:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:85:38:d1:22:1d:58:e6:78:53:9c:3d:71:90:b2:56:b7:59:4e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
        Validity
            Not Before: May 15 22:58:30 2026 GMT
            Not After : May 17 00:19:30 2026 GMT
        Subject: CN=AF7C4C4762EEDCD9CFA323FEA7D5094328803BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:3a:7f:f0:8a:e4:c9:e9:45:bc:ca:ee:6b:
                    72:aa:b8:85:0f:dd:76:07:22:ac:93:7f:59:db:82:
                    81:85:e3:55:aa:6f:7f:8b:67:5a:8a:59:f1:f9:aa:
                    76:4d:8a:f0:27:e4:cf:e8:9e:5f:57:6e:4d:d5:73:
                    97:ec:a6:3f:73:d7:87:e9:2c:30:4b:4a:ff:e1:f8:
                    bd:47:13:2a:04:d4:5c:9a:e5:cd:82:8f:9e:95:00:
                    10:57:6b:c4:78:25:5f:86:4a:d7:b8:ae:0a:a7:2c:
                    a6:a8:53:c8:b7:cb:00:63:3e:e9:d6:3d:c8:7d:cd:
                    4b:0b:05:13:d5:0f:e7:ee:65:23:33:c0:2c:ed:8d:
                    84:24:33:80:bf:47:3b:08:ea:22:c3:8a:f3:24:a0:
                    2d:84:7d:fb:4f:c5:73:cd:94:49:58:04:6f:24:2f:
                    b2:0d:9f:19:a9:e8:44:98:e3:3d:d4:59:f4:56:45:
                    76:8d:81:e3:d0:8c:da:d7:68:bf:f5:fa:b1:98:10:
                    30:6f:93:97:9b:45:40:35:b6:96:a9:a9:ed:b9:8f:
                    da:f0:9d:70:d3:ac:7e:f5:e3:4f:c5:85:5b:2e:df:
                    d8:42:20:c7:fb:5b:a2:d9:b7:c4:7e:88:6b:b6:e1:
                    45:46:d9:8f:0b:b7:1c:ed:c5:1b:11:23:80:a7:b2:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7C:4C:47:62:EE:DC:D9:CF:A3:23:FE:A7:D5:09:43:28:80:3B:B9
            X509v3 Authority Key Identifier:
                keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f0:7d:a9:26:a9:dc:80:e9:90:5d:a6:58:e2:fd:ef:c2:d6:
         0f:be:b7:34:f4:d8:0d:64:7c:89:c1:1f:34:b9:c5:c5:d1:90:
         37:20:db:ba:c7:58:44:dd:19:09:f2:ee:b1:5a:6d:57:0c:26:
         9a:d7:63:f2:a4:b3:20:f5:02:26:f1:b4:d0:26:72:3f:4b:96:
         35:ab:57:e0:22:9a:09:59:2b:9b:f4:75:bb:57:d6:4e:ef:bf:
         44:f3:dc:60:fe:e3:ec:1b:ab:50:ce:07:c6:5f:26:13:05:3a:
         aa:07:74:5f:3c:ef:3c:9e:6e:38:a8:ac:1c:7a:c0:cc:82:25:
         7f:8b:8d:91:e6:41:63:f4:97:f1:03:96:a8:83:d2:67:55:36:
         7f:a2:76:3a:96:ac:9f:ad:30:2d:c9:71:06:5a:86:a5:53:0e:
         bf:40:b0:ef:b3:ce:d2:15:a0:48:f5:11:2f:dd:3c:42:d1:29:
         58:6b:6f:77:08:a4:6a:92:92:c9:03:4a:4f:e8:1b:bd:de:6b:
         aa:3a:53:d0:5e:8f:cb:04:15:7d:74:41:8d:dd:c3:6a:b5:d4:
         57:c9:6d:a5:8e:d1:0c:45:2d:48:7d:8c:91:21:59:e9:38:0b:
         d9:e3:10:b4:b2:ce:85:a0:71:3c:78:04:a3:15:9c:cf:35:d1:
         ee:01:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:51 2026 by rpki-client