Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.mft
File:                     559992E9723DF6CBA0618FF60190728D55026CCA.mft (raw, json)
Hash identifier:          O2jRCCWYCX1ROdkqaV6F1ayptZbkvfM7fzjVt323sLc=
Subject key identifier:   BE:0F:1B:1F:DD:A8:BD:CC:2C:93:49:D2:B8:12:7A:48:20:B7:30:9C
Authority key identifier: 55:99:92:E9:72:3D:F6:CB:A0:61:8F:F6:01:90:72:8D:55:02:6C:CA
Certificate issuer:       /CN=559992e9723df6cba0618ff60190728d55026cca
Certificate serial:       445C1143414A6E0A0FAED11DBF765E0D084320B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZmS6XI99sugYY_2AZByjVUCbMo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.mft
Manifest number:          5B
Signing time:             Sun 26 Jul 2026 18:54:05 +0000
Manifest this update:     Sun 26 Jul 2026 18:49:05 +0000
Manifest next update:     Mon 27 Jul 2026 22:40:05 +0000
Files and hashes:         1: 559992E9723DF6CBA0618FF60190728D55026CCA.crl (hash: dGm7srdEopZ+DRKcsTKDZt2nojlHdq3/cmikjw9JjTU=)
                          2: AS198078.asa (hash: fDa05p/Agsdsrc9Fnyp/NPUFhpGq6mLJCII8lchSl+U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZmS6XI99sugYY_2AZByjVUCbMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5c:11:43:41:4a:6e:0a:0f:ae:d1:1d:bf:76:5e:0d:08:43:20:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559992e9723df6cba0618ff60190728d55026cca
        Validity
            Not Before: Jul 26 18:49:05 2026 GMT
            Not After : Jul 27 22:40:05 2026 GMT
        Subject: CN=BE0F1B1FDDA8BDCC2C9349D2B8127A4820B7309C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:7a:f9:e8:65:e3:b9:51:85:b2:7e:6d:45:
                    d9:d2:f9:29:bb:7f:f8:b5:fe:e1:a0:80:3d:e0:7d:
                    af:9c:1a:80:3e:fa:18:e0:33:80:10:b9:0d:9a:e4:
                    ea:77:cf:86:ac:27:20:d3:e8:46:fd:9a:85:e9:92:
                    65:4f:01:48:b9:c8:b5:df:ba:f1:af:07:93:f0:c2:
                    46:76:80:9b:97:d6:8a:9c:1d:c3:30:d9:36:d2:68:
                    75:64:08:1f:bd:ca:ed:30:37:98:92:0a:3c:18:70:
                    1c:ea:86:e0:94:4b:f6:54:76:ff:d9:5c:4c:ee:57:
                    e0:a3:54:c9:0f:78:ed:18:ce:9c:7e:d6:f0:3e:2c:
                    01:29:6e:e6:61:44:26:bc:15:c2:39:ac:fc:82:42:
                    1b:5a:82:1b:51:fb:e8:ee:49:7a:ba:5b:03:a9:10:
                    1f:2b:18:d3:b3:1c:51:72:76:7f:82:08:6d:6e:45:
                    5f:54:6e:c7:91:bf:d4:28:f1:94:98:9b:98:db:90:
                    aa:1a:b3:96:9e:4d:a8:8d:0c:b6:6e:14:c8:e0:61:
                    e3:9a:c9:f6:45:c3:3a:ef:f1:9a:ff:b9:f7:71:1e:
                    9c:b7:a6:ea:5e:b2:7a:be:c9:9f:d3:16:2f:44:cf:
                    68:f6:82:6d:b5:23:cd:8c:1d:5b:0a:72:95:fc:3f:
                    4e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0F:1B:1F:DD:A8:BD:CC:2C:93:49:D2:B8:12:7A:48:20:B7:30:9C
            X509v3 Authority Key Identifier:
                keyid:55:99:92:E9:72:3D:F6:CB:A0:61:8F:F6:01:90:72:8D:55:02:6C:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZmS6XI99sugYY_2AZByjVUCbMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:40:4b:a8:fb:82:6c:cd:cc:41:bb:87:61:58:af:18:a2:86:
         93:7b:ae:61:cc:ce:7e:ff:fc:46:40:57:18:d8:1e:58:f8:b2:
         cb:c2:88:e0:fc:02:3a:ed:98:10:aa:5a:74:d7:f3:46:e2:b0:
         de:fd:39:7c:ca:f3:7b:25:1a:37:d4:19:cc:2f:75:8a:c4:5b:
         14:2d:ec:e4:eb:42:3d:b7:1a:ee:0a:b6:3b:a9:79:af:09:1e:
         bc:ad:78:f9:4d:15:15:ab:9e:59:b6:50:51:6e:88:a1:8c:28:
         6c:e1:2d:da:8f:c6:92:50:c8:55:09:f9:c8:47:6d:f1:19:78:
         71:c5:dc:05:ec:f3:8d:7c:fb:63:a8:34:73:da:9b:eb:12:ee:
         21:fc:f8:b7:60:6b:c8:35:34:40:ce:5b:cf:95:b5:39:de:0d:
         d0:32:14:8e:f4:46:3b:7f:e1:e8:91:11:9c:2c:3f:82:46:a8:
         e9:c8:98:fa:47:88:5f:cc:f8:6e:be:d7:e9:a3:58:41:09:d0:
         1c:6d:8a:97:e8:8b:ba:87:01:e2:b5:9a:a3:71:32:01:f6:87:
         e6:4d:bb:6f:55:e9:d0:8f:aa:11:cf:b4:5e:a5:7d:23:dd:13:
         00:4c:99:43:fc:a4:ab:cf:ef:5b:f9:06:b7:51:e9:c1:dd:5e:
         66:f8:2b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:32:03 2026 by rpki-client