Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
File:                     D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json)
Hash identifier:          cXfwIN/QKsYjcet8iwmFCmu+Uumb9dsYwsAEBDw5xuo=
Subject key identifier:   36:D1:9E:1E:A2:6F:56:63:DB:01:E9:3E:A8:A1:06:A2:15:F0:8F:90
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Certificate issuer:       /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial:       6D85D5D62F1A11A8A39F7F23F14E6C7B8FAB449F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
Manifest number:          050E
Signing time:             Sun 04 Oct 2026 02:18:32 +0000
Manifest this update:     Sun 04 Oct 2026 02:13:32 +0000
Manifest next update:     Mon 05 Oct 2026 05:36:32 +0000
Files and hashes:         1: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: piVsv4CF2nKL5St6qGNM2mMZBtptQUEvUHjlBqHgKzk=)
                          2: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: r9IpgUJObA8nr7EulKLzOsEZibFRlyCDE79MY0ENB+c=)
                          3: AS202881.asa (hash: XHj3wS//oUB0bBxH4kvJ0ulJ7YLDJlbJqdRBWQiQMqk=)
                          4: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: WprHHCDYBsr5/f+ehFAWoktEYhynGEu2h7Y0/TFJt8c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:85:d5:d6:2f:1a:11:a8:a3:9f:7f:23:f1:4e:6c:7b:8f:ab:44:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
        Validity
            Not Before: Oct  4 02:13:32 2026 GMT
            Not After : Oct  5 05:36:32 2026 GMT
        Subject: CN=36D19E1EA26F5663DB01E93EA8A106A215F08F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f4:f1:ae:c9:5a:f1:06:ca:6b:a0:84:e0:5a:
                    02:39:79:c9:e5:a1:98:87:47:b6:cc:45:b6:7d:8b:
                    59:df:d5:0d:93:97:91:4d:bb:50:aa:39:32:8a:c9:
                    14:02:8c:e6:44:74:99:7d:70:78:70:83:d5:3b:cc:
                    f8:4e:52:45:45:f4:a2:2f:f8:0d:6b:0d:22:4f:48:
                    84:60:28:71:f8:d7:c6:07:f3:0a:3c:9c:98:e8:71:
                    89:f7:33:c4:fb:c1:c3:19:04:0e:4d:bd:03:bd:f5:
                    91:8a:5f:67:1b:da:3f:9a:92:7c:1c:a4:3b:1d:81:
                    da:b7:de:a8:65:71:b5:0a:96:3f:3a:3f:f2:71:98:
                    62:f6:47:94:4f:7c:e1:85:b8:b3:de:37:35:b0:8b:
                    80:a8:75:49:36:6c:4b:57:90:53:b5:5c:56:1a:06:
                    35:e7:4f:6e:16:80:40:3b:e2:d8:8d:6c:16:89:c4:
                    51:02:49:e7:13:64:b0:3c:07:3b:7f:0d:20:77:f3:
                    53:f2:ee:82:23:ad:ba:37:ea:d3:42:45:17:47:5d:
                    1a:ab:f8:97:3e:c0:b5:69:dd:14:f5:3c:d7:d5:b6:
                    ba:8c:07:4f:21:97:37:c4:07:10:53:a1:e2:b3:9e:
                    a8:46:17:59:eb:27:0b:a6:3c:ea:28:33:97:83:d1:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D1:9E:1E:A2:6F:56:63:DB:01:E9:3E:A8:A1:06:A2:15:F0:8F:90
            X509v3 Authority Key Identifier:
                keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:db:59:11:2d:83:2b:ee:f5:fc:18:a9:d5:aa:91:d0:c8:d8:
         ed:29:00:4a:a0:d4:7c:b3:97:83:11:fb:15:73:11:a5:52:2a:
         52:98:44:0d:2c:45:1d:06:0f:44:ee:68:8a:d3:f3:00:97:15:
         6a:60:b2:33:03:5b:3d:66:d6:d2:b8:db:66:3a:9c:a6:a5:bb:
         95:bc:fe:b2:3d:d3:d6:7c:20:78:70:02:52:e9:a7:b0:3f:08:
         61:ed:1e:dc:5e:83:d5:a7:d9:fe:30:00:60:9c:c9:5e:a3:46:
         3b:98:63:d8:7b:51:8c:bf:97:32:2e:c3:d7:eb:51:f0:92:6f:
         5a:1e:bd:21:ec:61:a0:c6:50:ce:c7:b9:1b:ef:22:5b:a6:d5:
         2f:eb:80:06:4e:02:6a:de:f9:a1:9f:6e:b3:06:c2:b5:d5:9f:
         24:b8:ab:98:82:4c:e1:d2:be:db:cf:3d:0b:28:35:07:57:9d:
         af:1e:99:52:b3:d7:fb:65:72:6c:90:a6:aa:c9:15:aa:52:05:
         7b:87:5a:7b:d0:e2:ea:19:a2:d6:c8:aa:7b:f8:5d:9a:60:97:
         e9:e0:31:bf:a6:55:19:72:69:31:10:20:cc:b3:e0:f8:e4:50:
         c1:57:78:a5:31:9e:48:3d:3f:35:be:d0:aa:1d:c1:d1:e5:01:
         b3:dc:65:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:51:20 2026 by rpki-client