Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
File:                     D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json)
Hash identifier:          aFl9evh5EoCQh2N/65IW1iHBXhr39ZoSsj7ShQX3RMk=
Subject key identifier:   18:BA:AE:EB:80:EC:6B:2C:F0:24:56:D5:6C:6D:6D:6C:FE:FD:C3:5C
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Certificate issuer:       /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial:       0D3E20E83952D361A5D7BB1CBE6C0EBB176A04C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
Manifest number:          0451
Signing time:             Fri 15 May 2026 02:19:11 +0000
Manifest this update:     Fri 15 May 2026 02:14:11 +0000
Manifest next update:     Sat 16 May 2026 05:15:11 +0000
Files and hashes:         1: AS202881.asa (hash: XHj3wS//oUB0bBxH4kvJ0ulJ7YLDJlbJqdRBWQiQMqk=)
                          2: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: VYIsP1Owo1ZU/nnvHlH0P9E0s6A74/J4WGq7w3LnAmY=)
                          3: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: SVc+06+kSTZLFSZYHt+18ILRTqVegdlc2kojDgxmDjY=)
                          4: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3ZFhB/5ygf5t4lpptEoHt4tGKQVifxYsEJPws7ZipKw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3e:20:e8:39:52:d3:61:a5:d7:bb:1c:be:6c:0e:bb:17:6a:04:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
        Validity
            Not Before: May 15 02:14:11 2026 GMT
            Not After : May 16 05:15:11 2026 GMT
        Subject: CN=18BAAEEB80EC6B2CF02456D56C6D6D6CFEFDC35C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6e:37:67:9c:00:e5:57:e6:09:0d:e6:c2:0b:
                    ae:d6:61:89:e5:b1:75:67:52:13:b6:9c:02:5c:47:
                    3d:a3:b8:9b:ee:28:bc:57:c6:e9:67:f1:2f:37:81:
                    a6:41:8c:13:b1:3d:f3:33:0a:2b:52:b5:14:3f:dc:
                    77:d1:af:57:22:91:ff:bd:19:cc:05:47:57:e5:f7:
                    67:82:b1:02:4f:f2:55:3f:ba:d1:c2:a7:06:f1:5d:
                    ab:ea:05:d6:b6:3c:27:fd:a7:42:7e:fd:d1:35:9f:
                    eb:01:cb:71:41:de:09:ce:3f:cf:25:0f:37:95:6a:
                    8a:37:8c:35:18:f5:1d:36:d5:45:74:5a:45:68:7c:
                    37:00:25:6a:67:55:18:2a:56:2c:1f:cc:5e:49:18:
                    93:ad:57:d1:ce:34:a4:ee:86:c3:dd:98:24:a3:47:
                    39:35:16:e1:02:b4:cf:7c:f7:c1:a1:fa:14:26:3e:
                    f6:9f:7d:72:36:2e:22:18:59:60:22:57:32:2c:b4:
                    6b:65:46:43:c5:80:ef:7a:a5:d3:62:3b:8e:f0:88:
                    63:da:c3:95:2b:1c:c8:9c:37:c3:0d:23:13:b0:90:
                    6b:83:0c:af:2e:b7:70:53:d8:12:aa:7f:c7:31:94:
                    42:cb:e8:f7:e9:c4:b1:23:c9:74:e4:5e:1b:b1:e3:
                    04:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BA:AE:EB:80:EC:6B:2C:F0:24:56:D5:6C:6D:6D:6C:FE:FD:C3:5C
            X509v3 Authority Key Identifier:
                keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a7:b2:e1:96:c1:56:55:24:6c:b0:91:f6:12:3f:60:78:29:
         c5:4d:4c:0a:9f:46:22:01:44:d7:de:66:05:aa:4d:ac:18:22:
         3e:cd:4d:aa:3f:96:98:8b:6b:34:71:af:57:aa:82:d5:88:bd:
         5f:e5:fd:b8:4f:e2:b4:81:82:66:57:41:b0:3b:08:a1:98:6e:
         18:b5:ae:c6:2b:38:7e:82:d5:e7:04:4b:19:d5:83:90:a9:07:
         70:44:25:a6:a0:89:c7:25:14:af:ba:f6:2e:38:5b:37:57:1d:
         3a:50:e3:12:ad:0a:b0:1e:2d:47:b1:2d:60:52:87:b4:c0:ee:
         84:4b:a3:71:9b:de:57:e7:fc:55:6a:4d:45:65:7d:68:0a:ca:
         bd:90:1d:63:2e:82:d4:61:cc:c7:11:5a:fd:f3:8e:86:68:de:
         a9:26:d2:e3:bf:c6:f0:1b:d5:51:75:4a:ba:0f:af:af:f9:18:
         23:8e:8f:a0:34:1d:08:43:4d:eb:dc:6b:af:26:11:ba:61:e5:
         fd:3f:8c:1f:5d:55:02:ca:ad:b6:56:ca:9f:ce:ad:fc:77:c4:
         1b:f3:71:8e:eb:6f:22:9c:66:77:f4:c3:f7:e2:3f:e3:ce:54:
         04:bf:b2:71:f9:4a:49:fa:2b:90:30:61:4d:2b:2a:41:63:b8:
         c2:49:10:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:37:47 2026 by rpki-client