Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft
File:                     315EC08E540BCBC870FEB38832274E048E2E1F80.mft (raw, json)
Hash identifier:          Gu5/wNt5Uvp6PcncfbDfnad+5MNIxR7YWgPDj0wPGRo=
Subject key identifier:   A1:EB:47:EB:E5:3C:B3:0A:52:3D:58:24:57:59:BE:3B:A5:37:AF:1E
Authority key identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80
Certificate issuer:       /CN=315EC08E540BCBC870FEB38832274E048E2E1F80
Certificate serial:       490288015B141FEF5FD201E532445BB02EDD85A8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft
Manifest number:          3E
Signing time:             Tue 21 Jul 2026 10:12:06 +0000
Manifest this update:     Tue 21 Jul 2026 10:07:06 +0000
Manifest next update:     Wed 22 Jul 2026 12:45:06 +0000
Files and hashes:         1: 315EC08E540BCBC870FEB38832274E048E2E1F80.crl (hash: sJ88tiWOQcbsQYJZS0beIc6X299MzxCIScZ3HxZcWik=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:02:88:01:5b:14:1f:ef:5f:d2:01:e5:32:44:5b:b0:2e:dd:85:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315EC08E540BCBC870FEB38832274E048E2E1F80
        Validity
            Not Before: Jul 21 10:07:06 2026 GMT
            Not After : Jul 22 12:45:06 2026 GMT
        Subject: CN=A1EB47EBE53CB30A523D58245759BE3BA537AF1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f7:86:20:a0:1f:f7:36:a6:0e:e3:b3:7c:36:
                    2d:a3:10:d5:28:6c:8b:b3:fe:7d:4a:07:d9:92:c2:
                    12:61:a0:39:6c:fd:1f:e5:7b:4f:3f:7a:92:dd:23:
                    3c:13:19:41:67:89:ac:64:0f:03:e8:e4:5a:b9:84:
                    e7:0b:74:ec:5f:45:cb:4e:b0:b0:10:d5:68:ed:7c:
                    e6:a9:22:40:c1:04:1c:32:05:cd:26:40:3a:8d:a3:
                    bd:32:c3:c9:92:6d:6d:21:d7:ef:1e:06:f9:4e:2f:
                    8b:96:c6:e3:09:c7:0c:96:7c:1e:8e:ad:ee:7d:18:
                    8d:fb:2a:08:b2:7c:6d:51:23:59:76:9a:de:cb:4a:
                    b5:45:c1:9f:07:55:e3:56:e6:ab:78:ef:aa:a1:8f:
                    61:e2:56:0e:fa:97:83:5a:9c:d3:34:50:26:a3:53:
                    60:91:c1:db:1f:3f:30:ea:c3:d6:f2:ab:41:47:95:
                    cd:b5:da:18:07:55:82:8d:e1:36:32:44:3d:ab:c7:
                    50:8e:36:98:41:b5:aa:93:48:7c:21:78:41:23:a9:
                    2e:9a:35:bc:92:11:0a:a1:7b:7d:a2:00:46:f5:25:
                    ff:69:09:f9:08:30:a9:8c:17:63:ba:45:56:a5:c1:
                    2a:17:de:fa:8d:ad:d6:01:46:01:d6:ae:79:17:98:
                    cd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EB:47:EB:E5:3C:B3:0A:52:3D:58:24:57:59:BE:3B:A5:37:AF:1E
            X509v3 Authority Key Identifier:
                keyid:31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ac:18:2e:3f:40:7d:d3:3c:1f:bf:10:2a:70:53:9d:e4:32:
         fa:70:c0:02:68:03:d2:e6:15:99:61:b2:93:41:c7:50:01:42:
         1b:8b:ab:0f:bd:ac:0c:c9:d4:d1:f7:5c:7e:14:4b:47:0e:b6:
         40:c8:e8:2d:4e:02:33:60:2f:0b:bc:ba:10:42:7e:c2:03:b8:
         b4:40:8b:a6:6f:2b:26:db:67:f1:76:3d:71:c2:d0:1c:40:72:
         69:20:1a:92:0c:fc:93:22:92:1a:ea:3a:6b:c7:a7:84:60:26:
         23:59:2f:2f:0c:46:e1:62:30:38:73:4d:0b:d6:d6:82:73:26:
         b5:24:13:2f:74:6d:14:67:25:5b:04:7b:9b:59:3e:a9:d7:0e:
         ba:49:6a:61:6e:d2:85:03:6c:db:11:a7:80:57:63:23:ad:6f:
         ca:81:6a:38:48:16:15:01:26:f5:b8:1b:38:4b:60:33:18:8c:
         71:78:21:ea:de:9d:36:8a:6e:cd:5e:9b:86:2b:56:da:a1:5d:
         21:b0:44:ec:39:4f:a2:cb:8f:48:da:19:b0:c7:e9:08:05:e6:
         cd:a8:0e:1b:4b:13:9d:37:af:f6:40:f1:5a:57:66:4b:bf:09:
         ac:5c:58:97:55:9c:b8:a8:18:36:55:b8:eb:f5:6a:7c:82:ba:
         f4:6f:97:36
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUSQKIAVsUH+9f0gHlMkRbsC7dhagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE1RUMwOEU1NDBCQ0JDODcwRkVCMzg4MzIyNzRFMDQ4
RTJFMUY4MDAeFw0yNjA3MjExMDA3MDZaFw0yNjA3MjIxMjQ1MDZaMDMxMTAvBgNV
BAMTKEExRUI0N0VCRTUzQ0IzMEE1MjNENTgyNDU3NTlCRTNCQTUzN0FGMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv94YgoB/3NqYO47N8Ni2jENUo
bIuz/n1KB9mSwhJhoDls/R/le08/epLdIzwTGUFniaxkDwPo5Fq5hOcLdOxfRctO
sLAQ1WjtfOapIkDBBBwyBc0mQDqNo70yw8mSbW0h1+8eBvlOL4uWxuMJxwyWfB6O
re59GI37KgiyfG1RI1l2mt7LSrVFwZ8HVeNW5qt476qhj2HiVg76l4NanNM0UCaj
U2CRwdsfPzDqw9byq0FHlc212hgHVYKN4TYyRD2rx1CONphBtaqTSHwheEEjqS6a
NbySEQqhe32iAEb1Jf9pCfkIMKmMF2O6RValwSoX3vqNrdYBRgHWrnkXmM0lAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUoetH6+U8swpSPVgkV1m+O6U3rx4wHwYDVR0j
BBgwFoAUMV7AjlQLy8hw/rOIMidOBI4uH4AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1
N2JiLzIvMzE1RUMwOEU1NDBCQ0JDODcwRkVCMzg4MzIyNzRFMDQ4RTJFMUY4MC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4
YTgtOTc5My0zM2VlYzA2N2NlMzkvNS8zMTVFQzA4RTU0MEJDQkM4NzBGRUIzODgz
MjI3NEUwNDhFMkUxRjgwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8yLzMxNUVDMDhF
NTQwQkNCQzg3MEZFQjM4ODMyMjc0RTA0OEUyRTFGODAubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCqrBgu
P0B90zwfvxAqcFOd5DL6cMACaAPS5hWZYbKTQcdQAUIbi6sPvawMydTR91x+FEtH
DrZAyOgtTgIzYC8LvLoQQn7CA7i0QIumbysm22fxdj1xwtAcQHJpIBqSDPyTIpIa
6jprx6eEYCYjWS8vDEbhYjA4c00L1taCcya1JBMvdG0UZyVbBHubWT6p1w66SWph
btKFA2zbEaeAV2MjrW/KgWo4SBYVASb1uBs4S2AzGIxxeCHq3p02im7NXpuGK1ba
oV0hsETsOU+iy49I2hmwx+kIBebNqA4bSxOdN6/2QPFaV2ZLvwmsXFiXVZy4qBg2
Vbjr9Wp8grr0b5c2
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:03:01 2026 by rpki-client