Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File:                     2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier:          0zCRWFULhRSosdNCZMd0zYVTfBjn8JPq2JEPZ55wohk=
Subject key identifier:   3F:61:F9:A0:01:4C:3E:4A:F5:02:32:C5:96:9E:68:C6:24:8D:30:7B
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer:       /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial:       6A4F96E460F9DD4BEEA542EBB2605512CA594419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number:          04C9
Signing time:             Thu 13 Aug 2026 00:13:32 +0000
Manifest this update:     Thu 13 Aug 2026 00:08:32 +0000
Manifest next update:     Fri 14 Aug 2026 03:18:32 +0000
Files and hashes:         1: AS205329.asa (hash: D7v68W1jFkdHMUdFoafa1ip0HB/iYsJ/PoPFEmKh9to=)
                          2: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: PwxcX4B9xj7J2wFnkGEI48r6Csw6eA1wHkgXWL4wYG4=)
                          3: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: MA6NPPoujdiQWojyCVLJyxDFh4C42V7H1GeWERt+WOo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 03:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4f:96:e4:60:f9:dd:4b:ee:a5:42:eb:b2:60:55:12:ca:59:44:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
        Validity
            Not Before: Aug 13 00:08:32 2026 GMT
            Not After : Aug 14 03:18:32 2026 GMT
        Subject: CN=3F61F9A0014C3E4AF50232C5969E68C6248D307B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:6d:29:b2:8a:d4:0d:2d:62:bb:9c:d1:cc:
                    34:64:63:94:d6:d8:7d:38:ac:36:9c:00:c1:ca:d9:
                    ca:d0:b0:44:89:a3:c1:f3:24:8d:04:39:3a:fa:98:
                    e2:2b:55:82:3a:d8:23:7f:f0:df:b3:2b:bf:d5:ab:
                    a1:2b:7d:38:af:57:49:7c:5b:7d:90:2e:ae:47:1c:
                    1f:29:2f:78:00:f8:b8:f4:cd:c0:bf:b2:b5:93:54:
                    05:f5:6e:75:f5:4e:81:4a:00:4c:84:4c:b9:fd:82:
                    a9:12:42:f5:b3:37:cb:96:0a:ff:9b:63:41:05:1c:
                    7b:45:3a:d6:f2:38:b6:50:46:85:b4:47:a2:cd:50:
                    6f:5f:f6:a3:98:0f:fb:5b:75:ad:c7:45:b1:e8:0b:
                    a6:8a:a4:2b:5e:8a:20:46:11:26:d1:12:c0:f4:62:
                    92:fd:77:dc:e7:e6:3a:27:82:85:65:29:d2:54:80:
                    ee:09:3d:9d:23:0d:bc:f4:c4:49:e4:fd:6c:c3:72:
                    50:8d:63:36:9c:ec:24:03:ec:09:67:bb:72:1a:e8:
                    e9:cf:66:2d:a5:eb:9f:32:52:56:eb:db:3f:2b:a0:
                    0e:f3:5a:37:4e:18:dc:e2:a9:53:96:1a:b7:9d:82:
                    11:3f:91:b1:a3:2e:1e:e8:df:38:4a:ac:1f:70:10:
                    23:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:61:F9:A0:01:4C:3E:4A:F5:02:32:C5:96:9E:68:C6:24:8D:30:7B
            X509v3 Authority Key Identifier:
                keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ae:bb:40:47:63:32:fd:84:0f:e5:31:56:4e:1b:53:41:7d:
         63:11:f8:ed:d0:8e:ee:5f:c8:a3:38:c9:cc:84:4c:f5:dc:03:
         3f:62:fd:76:10:2a:6b:06:00:5d:ba:07:07:f3:e5:08:a7:f3:
         b9:b4:dc:38:42:7c:8f:17:cc:74:92:20:92:2c:04:30:3c:f6:
         a6:86:17:f0:a7:58:90:49:1f:09:f0:2a:d3:0d:db:96:12:eb:
         71:3b:30:c1:df:66:0e:b9:07:b5:63:ad:1d:63:0c:df:4e:2c:
         e2:3b:a6:93:35:1b:2f:85:de:4c:32:08:43:21:dc:fc:f2:a8:
         36:8f:82:ac:78:ef:26:4c:15:73:f3:10:05:16:51:f7:ec:73:
         90:ea:34:5a:eb:b8:65:45:e0:75:3c:5b:4b:d4:24:a5:17:f0:
         ba:4e:d4:1a:84:db:79:83:b4:79:e2:07:cd:a5:cf:a8:85:b2:
         8a:ab:43:22:35:71:cd:14:36:97:32:7f:c1:2c:64:34:1b:88:
         26:b7:66:90:79:1a:11:01:bc:77:b1:22:34:7b:f0:08:69:ec:
         45:27:ab:22:45:df:aa:56:18:e7:8b:28:ab:72:85:c2:11:33:
         93:ec:5f:be:65:b6:aa:0d:61:d1:46:91:3b:88:73:a8:0b:6d:
         37:4a:9f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:23:27 2026 by rpki-client