Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File:                     7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier:          SIowjMj0RlQQMZwI08qiMFbTJv0acPqeQHi/NHtDbhc=
Subject key identifier:   56:F5:6E:94:37:CE:90:BD:CD:40:D0:C0:E2:5A:F9:5F:84:4F:BF:AF
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer:       /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial:       5406B981434E5CE7B6C074B9A5C55A91CD7E4774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number:          032D
Signing time:             Fri 23 Oct 2026 02:22:24 +0000
Manifest this update:     Fri 23 Oct 2026 02:17:24 +0000
Manifest next update:     Sat 24 Oct 2026 05:39:24 +0000
Files and hashes:         1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: ZY1QVW/3+VCbGNhy63iZbXBK/9C5jWqUNJarOharuag=)
                          2: AS215288.asa (hash: +M2OelxzWMdvs7C8TWLEAVCzoJw+PehI60QsibMmUe0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 19:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:06:b9:81:43:4e:5c:e7:b6:c0:74:b9:a5:c5:5a:91:cd:7e:47:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
        Validity
            Not Before: Oct 23 02:17:24 2026 GMT
            Not After : Oct 24 05:39:24 2026 GMT
        Subject: CN=56F56E9437CE90BDCD40D0C0E25AF95F844FBFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:69:8d:a8:f2:56:89:14:8e:7f:e7:8b:1a:
                    28:22:b7:da:f1:13:51:c9:e0:ce:46:f1:49:0b:fd:
                    51:f4:95:5e:db:99:86:c9:71:73:52:09:7f:3a:f4:
                    ab:67:2f:a1:a9:c2:1b:df:a2:11:32:b6:f6:c6:9c:
                    6c:2c:eb:a0:cc:64:d3:40:bd:b2:06:93:8e:5b:33:
                    26:cc:6e:0c:e3:6b:44:59:92:08:a0:f3:0d:13:cf:
                    8a:54:6c:f8:bb:44:c7:5e:03:7f:06:4d:a1:ef:e7:
                    00:6a:01:df:50:35:8f:de:0a:c2:eb:4d:da:d8:69:
                    1e:7f:82:55:20:a0:8a:8a:1d:46:aa:54:ed:2d:f8:
                    9c:44:4d:58:45:26:e3:41:01:c0:2c:b8:dd:17:00:
                    12:9e:0d:16:70:7c:1e:6d:47:b7:2f:b0:4e:6b:f8:
                    29:f9:56:de:57:f6:01:69:70:81:9b:ad:2f:2f:d4:
                    70:91:24:13:92:fc:db:66:56:1f:f2:22:06:26:37:
                    a6:c7:ff:9f:47:9d:2e:a0:6f:3c:b9:e4:e4:ea:30:
                    21:31:b8:ce:1e:a6:60:7a:31:1f:54:e7:fd:68:ae:
                    e5:c2:54:c0:25:32:7c:b5:0f:13:01:59:16:61:eb:
                    2a:92:41:da:71:9f:29:f6:3f:17:cd:25:db:d3:b9:
                    1d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F5:6E:94:37:CE:90:BD:CD:40:D0:C0:E2:5A:F9:5F:84:4F:BF:AF
            X509v3 Authority Key Identifier:
                keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e4:be:39:e7:b4:3c:ba:f7:b6:4d:96:54:cc:4d:0a:45:5c:
         20:6d:a1:36:f8:95:2f:37:cd:d8:00:5a:08:2d:b4:67:9a:7b:
         ac:b5:9f:49:cf:b1:41:58:a2:54:7f:e2:1c:78:71:8b:7f:77:
         6b:aa:57:04:de:c7:16:89:61:be:c0:32:f1:41:30:6a:f5:a2:
         c5:0e:09:bd:57:11:45:78:25:3e:cc:0c:51:36:df:89:6a:77:
         3f:0f:a2:35:77:c2:38:97:bf:58:98:69:ef:87:b1:50:8e:03:
         b5:27:db:2a:33:2d:7a:95:8c:37:80:27:64:a4:4b:4d:7c:5e:
         a2:3a:ad:4f:e9:24:93:0a:fc:4d:3a:b1:76:2e:06:b2:08:65:
         df:db:28:72:d2:f8:d7:ab:4d:39:53:69:e7:df:a5:10:7f:36:
         7a:7a:f0:ef:7d:56:5b:51:d5:41:a3:d6:d8:60:73:5f:f7:75:
         9b:b2:09:a3:82:81:81:94:74:05:01:b8:00:72:bb:88:48:20:
         b2:5a:a3:96:5b:05:f9:6e:d7:8d:9d:02:51:05:5c:60:7d:0f:
         ca:11:04:3d:ed:25:d2:19:54:fe:57:b8:5b:cb:01:d8:72:2b:
         dc:45:b6:c1:40:0f:44:3c:2d:2e:32:e3:f4:3b:a5:db:c0:19:
         ee:56:98:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:08:27 2026 by rpki-client