Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File:                     C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier:          G3XKsxuJ6sS+wTAHrSvlzgvmL6dJF55egC4jE+DIP+Y=
Subject key identifier:   85:2B:DF:46:F2:00:1B:FA:59:75:FA:2C:CE:55:27:24:AC:E6:90:72
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer:       /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial:       3DD853175241C2BAC236A3916045E44F7511FDF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number:          0412
Signing time:             Tue 04 Aug 2026 22:26:03 +0000
Manifest this update:     Tue 04 Aug 2026 22:21:03 +0000
Manifest next update:     Thu 06 Aug 2026 00:19:03 +0000
Files and hashes:         1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: dLEFh5jeDkzEo54iege7TU7EKZw5gupnPdL678kYPeM=)
                          2: AS214723.asa (hash: rkKLIM3Jzl++4c/N1MAbX2VnZd8jPZSTe5gZ4DgYJLI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d8:53:17:52:41:c2:ba:c2:36:a3:91:60:45:e4:4f:75:11:fd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
        Validity
            Not Before: Aug  4 22:21:03 2026 GMT
            Not After : Aug  6 00:19:03 2026 GMT
        Subject: CN=852BDF46F2001BFA5975FA2CCE552724ACE69072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:49:85:7f:4e:15:65:64:73:3f:99:08:21:86:
                    a0:e7:f5:77:52:9e:b5:13:7a:21:d0:a6:4a:af:45:
                    a1:c2:9c:13:d7:ea:c2:79:60:81:69:cc:5b:d6:12:
                    9c:ac:47:bb:bf:69:c5:90:e9:aa:da:28:fa:2a:5a:
                    d3:d6:25:19:8b:5a:e1:77:31:19:f6:34:eb:3c:62:
                    2c:ce:17:4b:e1:12:0b:45:57:3b:a9:87:e8:96:48:
                    91:d1:3e:e2:c4:52:74:8f:d1:88:4a:e3:9e:a2:ee:
                    f4:85:12:69:68:c2:29:40:e6:4f:4a:da:e7:11:25:
                    ee:ee:99:27:dd:17:8a:a0:6c:78:91:5c:76:c8:99:
                    11:0d:7c:9a:5b:0b:e7:51:71:93:3d:bf:13:5f:66:
                    3a:90:18:99:7e:44:98:3c:92:1d:68:82:cb:1e:29:
                    e9:07:20:aa:65:ba:06:eb:00:02:b2:f6:76:e0:33:
                    1d:49:8b:8b:e1:dd:40:fc:17:6c:ec:ad:b6:8d:86:
                    da:d7:af:b0:f4:00:d2:44:b4:e6:40:aa:d0:61:b4:
                    0f:ea:7e:d8:a8:f2:c0:d8:1f:aa:9a:1c:68:15:d9:
                    3a:cc:31:3f:0d:3f:b0:a5:bf:58:8e:e4:15:ce:ee:
                    4c:d3:f1:b9:27:0f:b8:f8:0a:96:4c:51:c9:f4:44:
                    c6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2B:DF:46:F2:00:1B:FA:59:75:FA:2C:CE:55:27:24:AC:E6:90:72
            X509v3 Authority Key Identifier:
                keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:89:3d:02:34:d2:c5:78:f9:0b:33:1d:fb:6e:d8:df:ee:29:
         64:9d:f9:c4:b7:23:45:b4:d8:22:25:e2:2c:d0:f2:ad:7e:6a:
         b2:f4:b3:18:1e:a7:9d:b5:9c:e2:d2:84:38:ea:51:47:cd:35:
         08:37:4f:85:84:57:40:38:79:58:e2:9b:21:ce:96:ca:ee:63:
         f5:f4:0b:f6:57:2f:46:2c:9f:35:b3:12:31:3f:79:85:99:60:
         e3:f9:a6:6e:d0:2c:e4:99:8e:88:0d:44:cc:d1:7c:33:d7:7d:
         e8:67:b0:81:e4:51:71:bb:90:d1:be:7d:d9:f8:e6:b2:2e:92:
         fa:dd:ad:15:98:a8:9f:1b:ad:df:16:ee:bf:50:4c:10:d8:9e:
         1b:c3:d3:7e:ba:2b:e6:53:0d:e6:9a:6a:9e:e3:54:fa:e1:92:
         9e:9d:83:16:62:3e:1b:36:ae:d3:de:2f:e8:15:67:7c:67:c8:
         4d:db:4e:ab:31:75:46:9e:55:4e:1f:87:ce:1e:c5:ee:db:de:
         e1:3e:03:aa:ff:f9:57:06:5d:4a:54:00:d2:65:68:12:04:41:
         a8:24:95:39:9d:e2:d6:eb:cf:40:bf:cd:7f:7a:2a:67:dd:69:
         dd:e3:2c:18:17:cd:dc:04:82:b5:7d:3b:6b:cd:39:62:47:31:
         ef:7b:f0:8e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUPdhTF1JBwrrCNqORYEXkT3UR/fcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjYWQwZWZjYmUzMDViNDQ5NGVkMjc0N2JiNGY4MmY0
M2FjOGM4MTAeFw0yNjA4MDQyMjIxMDNaFw0yNjA4MDYwMDE5MDNaMDMxMTAvBgNV
BAMTKDg1MkJERjQ2RjIwMDFCRkE1OTc1RkEyQ0NFNTUyNzI0QUNFNjkwNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPSYV/ThVlZHM/mQghhqDn9XdS
nrUTeiHQpkqvRaHCnBPX6sJ5YIFpzFvWEpysR7u/acWQ6araKPoqWtPWJRmLWuF3
MRn2NOs8YizOF0vhEgtFVzuph+iWSJHRPuLEUnSP0YhK456i7vSFEmlowilA5k9K
2ucRJe7umSfdF4qgbHiRXHbImRENfJpbC+dRcZM9vxNfZjqQGJl+RJg8kh1ogsse
KekHIKplugbrAAKy9nbgMx1Ji4vh3UD8F2zsrbaNhtrXr7D0ANJEtOZAqtBhtA/q
ftio8sDYH6qaHGgV2TrMMT8NP7Clv1iO5BXO7kzT8bknD7j4CpZMUcn0RMbxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUhSvfRvIAG/pZdfoszlUnJKzmkHIwHwYDVR0j
BBgwFoAUxMrQ78vjBbRJTtJ0e7T4L0OsjIEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4
M2U3LzAvQzRDQUQwRUZDQkUzMDVCNDQ5NEVEMjc0N0JCNEY4MkY0M0FDOEM4MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNclE3OHZqQmJSSlR0SjBlN1Q0TDBP
c2pJRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kN2U0NTkyZS0y
M2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcvMC9DNENBRDBFRkNCRTMwNUI0NDk0
RUQyNzQ3QkI0RjgyRjQzQUM4QzgxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIk9AjTSxXj5CzMd+27Y
3+4pZJ35xLcjRbTYIiXiLNDyrX5qsvSzGB6nnbWc4tKEOOpRR801CDdPhYRXQDh5
WOKbIc6Wyu5j9fQL9lcvRiyfNbMSMT95hZlg4/mmbtAs5JmOiA1EzNF8M9d96Gew
geRRcbuQ0b592fjmsi6S+t2tFZionxut3xbuv1BMENieG8PTfror5lMN5ppqnuNU
+uGSnp2DFmI+Gzau094v6BVnfGfITdtOqzF1Rp5VTh+Hzh7F7tve4T4Dqv/5VwZd
SlQA0mVoEgRBqCSVOZ3i1uvPQL/Nf3oqZ91p3eMsGBfN3ASCtX07a805Ykcx73vw
jg==
-----END CERTIFICATE-----
Generated at Wed Aug 5 02:22:54 2026 by rpki-client