Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/0/5646F781E14ABFFDD67F8ED029A452531C422A83.mft
File:                     5646F781E14ABFFDD67F8ED029A452531C422A83.mft (raw, json)
Hash identifier:          R9nCEQoIuN19AiEeimew1rwBTNLqAV6VMU30qDZxcAw=
Subject key identifier:   F1:2D:D6:B2:02:CE:B1:68:19:97:BA:5A:48:95:5E:79:13:C2:FE:FB
Authority key identifier: 56:46:F7:81:E1:4A:BF:FD:D6:7F:8E:D0:29:A4:52:53:1C:42:2A:83
Certificate issuer:       /CN=5646f781e14abffdd67f8ed029a452531c422a83
Certificate serial:       46504BA5C1FF3ECF43B67CC464C4CD38B4AD1E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vkb3geFKv_3Wf47QKaRSUxxCKoM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/0/5646F781E14ABFFDD67F8ED029A452531C422A83.mft
Manifest number:          1E
Signing time:             Wed 07 Oct 2026 03:12:19 +0000
Manifest this update:     Wed 07 Oct 2026 03:07:19 +0000
Manifest next update:     Thu 08 Oct 2026 06:05:19 +0000
Files and hashes:         1: 5646F781E14ABFFDD67F8ED029A452531C422A83.crl (hash: Od0wwvYn1EUeFuoyUaKBkheW1UTqClIN5eT2A8E8bcI=)
                          2: AS201392.asa (hash: iJPOlzmTyd3CCX3/4uo9thG7eq/b1ea7K7KzlEfx6jQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/0/5646F781E14ABFFDD67F8ED029A452531C422A83.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/0/5646F781E14ABFFDD67F8ED029A452531C422A83.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vkb3geFKv_3Wf47QKaRSUxxCKoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:50:4b:a5:c1:ff:3e:cf:43:b6:7c:c4:64:c4:cd:38:b4:ad:1e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5646f781e14abffdd67f8ed029a452531c422a83
        Validity
            Not Before: Oct  7 03:07:19 2026 GMT
            Not After : Oct  8 06:05:19 2026 GMT
        Subject: CN=F12DD6B202CEB1681997BA5A48955E7913C2FEFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:a7:fb:42:75:94:50:8b:21:52:87:b5:21:
                    b9:0d:96:64:c6:34:05:b3:76:1d:49:d7:f0:a6:66:
                    b6:68:51:fd:19:39:65:a4:43:ea:37:26:7a:69:b9:
                    1d:32:26:ac:3b:04:a0:47:2e:32:c7:94:51:5f:55:
                    54:89:33:4a:9e:da:5f:4e:32:37:31:c9:c1:ae:37:
                    fe:44:b1:5d:5f:0d:83:0e:ad:a5:aa:3f:91:20:9f:
                    e9:84:0e:ed:2a:0d:5b:ab:1f:b4:3a:75:5b:f6:d9:
                    2e:14:d6:8f:61:4f:77:02:50:6e:34:56:51:e4:d6:
                    01:9e:17:5d:17:13:ab:28:20:5c:35:24:b8:af:59:
                    31:81:dc:f0:25:08:ba:cc:02:7d:88:5b:9b:bc:98:
                    bc:86:da:b0:dd:ab:bc:54:0f:c0:45:90:c5:84:3c:
                    1a:7f:d9:9d:53:8e:99:07:db:46:88:c3:4a:d4:36:
                    d9:5d:2d:57:85:0e:0c:53:2f:4a:cf:d3:bc:65:39:
                    ca:53:e9:a5:0d:c8:f1:06:20:82:1d:ed:42:40:57:
                    7b:fb:35:2f:31:ba:d8:a1:9b:7d:4f:01:59:16:a4:
                    21:70:e1:d2:b8:58:c5:65:27:84:f8:8c:ad:80:30:
                    5f:fa:ae:a8:99:ab:e8:63:03:e0:5c:e1:81:04:f6:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2D:D6:B2:02:CE:B1:68:19:97:BA:5A:48:95:5E:79:13:C2:FE:FB
            X509v3 Authority Key Identifier:
                keyid:56:46:F7:81:E1:4A:BF:FD:D6:7F:8E:D0:29:A4:52:53:1C:42:2A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/0/5646F781E14ABFFDD67F8ED029A452531C422A83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkb3geFKv_3Wf47QKaRSUxxCKoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/0/5646F781E14ABFFDD67F8ED029A452531C422A83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:7d:b4:85:94:a9:c2:53:aa:da:66:e2:27:29:d1:16:ab:1b:
         7e:74:f4:ac:c5:be:db:ea:47:f3:6a:d1:86:39:62:49:a0:35:
         dc:3f:d1:5b:e8:ea:3f:2d:54:d6:8a:63:2b:1f:e3:25:14:23:
         d2:7a:52:ed:87:69:14:6e:a3:ed:c2:43:d3:b1:c6:35:83:90:
         b9:cf:4f:a9:d7:73:0d:ed:37:a8:a0:33:c9:0f:a3:48:1a:46:
         a5:48:5c:c5:0d:8a:5f:1f:a0:cc:83:8b:e7:b1:05:a4:ac:83:
         4e:4a:34:96:21:31:cd:97:2d:9e:53:80:90:c5:b6:c0:f5:75:
         19:2b:6f:2b:cd:c5:a5:60:29:2f:93:55:6d:c6:67:2c:d3:2b:
         e7:c7:88:da:d5:54:11:73:db:ca:37:0c:9f:dc:a6:11:54:75:
         36:71:4d:0d:98:bf:dc:c6:52:26:26:04:3f:54:a0:25:b2:95:
         ad:58:83:eb:47:c3:31:66:47:07:53:4d:00:73:0a:78:73:4e:
         f7:f1:3a:62:94:a8:2c:b1:b3:f9:f4:60:6b:b0:dd:52:f8:6c:
         ed:8d:62:fb:05:49:09:da:0b:40:89:26:cf:13:89:6b:c2:e7:
         4b:6f:9f:1d:9d:ad:c8:6c:6b:97:7a:e9:17:43:23:b1:cb:54:
         8b:23:b9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:51:18 2026 by rpki-client