Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File:                     C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier:          rs/wds8/ZQgXBjR+GT7vlgw1EMSZQ30cdk4L3dIWw5M=
Subject key identifier:   F9:E8:3E:1C:1C:5F:E9:73:8F:A8:17:69:FF:A9:C3:E5:6F:12:CC:F6
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer:       /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial:       32061C45E085F97E9FBEFA2F6B1E8D3578839865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number:          03D6
Signing time:             Sat 20 Jun 2026 14:43:23 +0000
Manifest this update:     Sat 20 Jun 2026 14:38:23 +0000
Manifest next update:     Sun 21 Jun 2026 16:17:23 +0000
Files and hashes:         1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: iJYjxaSSvI9Vbar9mOF6OLDJPn24/Z04Cm5dCKz8Kr4=)
                          2: AS214723.asa (hash: rkKLIM3Jzl++4c/N1MAbX2VnZd8jPZSTe5gZ4DgYJLI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:06:1c:45:e0:85:f9:7e:9f:be:fa:2f:6b:1e:8d:35:78:83:98:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
        Validity
            Not Before: Jun 20 14:38:23 2026 GMT
            Not After : Jun 21 16:17:23 2026 GMT
        Subject: CN=F9E83E1C1C5FE9738FA81769FFA9C3E56F12CCF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:27:a7:18:02:80:af:68:b9:34:b1:c2:6e:5b:
                    e4:2b:40:66:c0:c2:dd:d3:c7:0c:e9:de:e9:dd:4c:
                    c0:c5:e3:78:c9:43:87:53:cc:75:90:ca:8b:a4:28:
                    87:61:1c:7a:cc:1d:bc:71:7f:a1:6c:27:3e:b0:cd:
                    2e:21:95:6b:d6:23:c3:d7:14:16:b9:53:67:5b:c3:
                    d5:6a:bd:66:f1:18:7f:46:0d:29:e7:8e:78:8d:83:
                    de:01:f3:89:7b:9d:90:66:95:ec:27:af:e7:90:77:
                    7e:58:bd:12:3e:dd:e3:2a:90:7a:0d:dd:3e:70:c9:
                    51:20:8c:4a:71:7b:c3:e4:82:f6:65:f6:46:9f:d6:
                    05:4f:96:f7:b9:4c:e8:81:6a:d8:bf:20:f4:ea:8a:
                    9f:0b:48:01:d7:2b:5d:b4:83:b5:91:07:5e:64:a2:
                    0f:f3:7f:9a:01:52:0e:39:9f:ba:43:7d:f5:86:b0:
                    db:fe:8f:62:45:5f:61:08:6e:e8:e9:be:69:8a:ed:
                    af:55:0c:30:c3:4e:d3:19:c1:6e:8a:0f:14:4f:38:
                    f9:45:5a:65:03:62:99:0d:a7:9b:1c:0a:61:f4:63:
                    fa:e8:13:19:70:63:ee:2a:03:2e:50:2e:d4:9b:be:
                    0e:42:38:11:19:d0:50:e0:fb:2b:83:8a:66:9a:c7:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E8:3E:1C:1C:5F:E9:73:8F:A8:17:69:FF:A9:C3:E5:6F:12:CC:F6
            X509v3 Authority Key Identifier:
                keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:2f:ea:fd:54:97:5a:a7:ed:a8:a8:3b:27:13:34:be:a7:37:
         7a:7e:ce:9d:65:65:0f:83:c7:d1:0d:21:c8:d8:9b:f9:76:ad:
         a9:19:bf:96:3b:93:a3:78:c8:3d:70:42:56:06:f4:55:4f:a0:
         b5:f5:48:c6:23:37:31:b1:72:09:a0:6c:fa:89:6b:e6:23:91:
         ac:7d:13:3c:45:c9:9e:0a:54:91:d6:a1:fb:ad:4e:9c:d9:b7:
         4b:af:7d:d6:d0:5c:51:58:24:0f:d2:09:4a:18:b9:ce:24:d4:
         47:4f:00:34:43:f9:c4:f3:0c:29:b9:31:af:5a:f2:59:75:3d:
         29:b2:ad:1c:e7:1a:3f:37:df:b2:30:75:6a:42:16:7a:c2:85:
         0d:c4:3c:16:da:d1:1a:57:c2:3b:a5:3e:07:c1:ee:60:98:a6:
         f2:99:05:a4:00:f3:9d:04:9e:32:25:4d:ae:08:a3:81:ec:3d:
         a7:e0:19:b2:44:01:30:d8:e6:28:d9:34:46:81:2d:1a:84:41:
         d5:70:22:8c:e5:0a:dd:9f:7c:64:04:cc:a4:c7:4d:1f:1b:20:
         cd:bd:99:c3:4a:86:12:b0:dc:15:80:f2:b3:5e:9d:d7:02:2e:
         dd:14:54:e1:2e:9a:b1:e0:8d:22:18:f8:51:c4:e9:3f:fc:53:
         e7:dc:ff:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 18:33:51 2026 by rpki-client