Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
File:                     D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json)
Hash identifier:          uUxTs77FCjGXppJPSaqVWkYW4sKhTm5CEBmMwHY/cAE=
Subject key identifier:   0F:4D:EC:22:5D:3B:21:55:91:DC:66:B2:30:EE:0B:AA:3F:EA:48:52
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Certificate issuer:       /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial:       60A45C699E255F5E76C7A87DBD08B87D27FE405C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
Manifest number:          04CA
Signing time:             Fri 14 Aug 2026 13:23:32 +0000
Manifest this update:     Fri 14 Aug 2026 13:18:32 +0000
Manifest next update:     Sat 15 Aug 2026 13:52:32 +0000
Files and hashes:         1: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: c+5JW7tfT0ktLiA6EA2i+YF+EYX3+HbX8wsPkjhiJ+4=)
                          2: AS202881.asa (hash: XHj3wS//oUB0bBxH4kvJ0ulJ7YLDJlbJqdRBWQiQMqk=)
                          3: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3ZFhB/5ygf5t4lpptEoHt4tGKQVifxYsEJPws7ZipKw=)
                          4: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: WprHHCDYBsr5/f+ehFAWoktEYhynGEu2h7Y0/TFJt8c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a4:5c:69:9e:25:5f:5e:76:c7:a8:7d:bd:08:b8:7d:27:fe:40:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
        Validity
            Not Before: Aug 14 13:18:32 2026 GMT
            Not After : Aug 15 13:52:32 2026 GMT
        Subject: CN=0F4DEC225D3B215591DC66B230EE0BAA3FEA4852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:5c:e1:7c:f3:8c:21:b3:78:d8:58:19:55:
                    89:c7:16:f8:eb:6d:8d:3d:a6:fe:9c:20:79:5c:c7:
                    6e:4f:54:dc:d4:1c:90:63:39:6c:55:e5:74:fa:21:
                    ae:0e:9e:ad:9f:db:a0:a8:e3:25:e0:24:82:2f:bd:
                    80:a4:d7:55:af:5b:5d:e6:b2:07:ae:6e:ef:34:b9:
                    03:60:1f:01:52:eb:bb:50:bd:92:e1:9f:15:98:05:
                    f6:68:6f:47:bc:6a:8d:c5:76:0d:6b:47:f0:9e:08:
                    68:41:78:2a:a5:c4:47:fd:21:9c:bb:bc:a7:65:74:
                    d5:10:a4:31:2e:a3:74:4b:ab:4d:b3:a3:34:ec:48:
                    25:40:79:88:92:5c:b2:3a:c7:48:69:9b:26:7f:23:
                    1d:26:a4:f0:f1:64:1d:64:35:fd:77:be:ae:67:7d:
                    74:ab:f3:25:88:74:ce:af:01:bc:00:29:ef:0d:5a:
                    f4:2f:e9:2d:c1:cf:11:fd:3c:be:cd:d9:bb:13:d2:
                    e1:b1:24:49:66:f5:67:43:49:ad:90:ad:02:54:ae:
                    b8:18:75:63:75:ce:a1:8f:b4:e9:c2:da:98:5c:f2:
                    1f:ae:c1:30:04:fc:ef:d3:0e:3e:53:8b:1e:d0:4a:
                    9e:7c:bc:76:30:ad:4a:07:fc:5b:f0:00:94:c0:6f:
                    d4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4D:EC:22:5D:3B:21:55:91:DC:66:B2:30:EE:0B:AA:3F:EA:48:52
            X509v3 Authority Key Identifier:
                keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:2b:4a:84:f8:04:14:5a:54:01:18:85:29:15:a8:2c:71:5e:
         eb:e2:42:3d:d6:80:1d:cb:8c:11:a1:70:9b:9e:97:aa:a2:13:
         73:5c:bf:6b:c2:63:5c:5d:45:4b:23:1a:26:61:be:0d:19:4a:
         30:3b:8a:bf:8a:70:ad:6a:b7:ec:85:f8:af:5d:b7:f9:89:d8:
         11:8b:e0:78:e8:c7:e7:43:af:01:a0:b3:6e:0a:f9:07:95:a2:
         b3:bd:36:d8:91:36:3e:c3:b6:ab:fd:38:58:b2:16:df:3a:8d:
         ad:ef:0e:b8:5b:b3:8b:02:15:dd:a9:1b:17:1b:26:6b:f6:1c:
         f1:ac:c5:7c:ee:51:b6:38:0b:e7:c3:cd:2c:7c:bc:b4:5c:bf:
         c8:08:44:7a:2b:af:5e:00:b2:77:2b:fa:b8:ee:2c:df:60:73:
         55:ca:58:99:42:0b:23:0b:8f:67:b7:41:e3:46:71:68:5c:08:
         93:83:2c:11:63:de:6b:70:e4:57:87:b1:ef:e2:af:3f:c7:82:
         6b:f8:03:1c:d0:0d:69:86:7c:af:3c:c4:b1:5b:72:99:5d:e7:
         19:28:f7:5a:79:61:64:09:a6:51:2f:c8:72:4f:90:10:dd:6c:
         d6:8a:c4:4f:30:48:e5:52:25:4b:b3:e1:fe:6a:61:68:af:c4:
         30:02:82:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:57 2026 by rpki-client