Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File:                     578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier:          eBslk2alRsb+Ld1AxHmbrKx2JkSh6tdh1pGbuCDTRsU=
Subject key identifier:   C7:4B:59:98:BE:BB:70:1B:EC:51:84:D3:A0:A1:50:BD:DA:83:F0:17
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer:       /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial:       1FCEAC889588B28F84E4D5D9F0E4770AF9755E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number:          02A6
Signing time:             Wed 01 Jul 2026 00:28:36 +0000
Manifest this update:     Wed 01 Jul 2026 00:23:36 +0000
Manifest next update:     Thu 02 Jul 2026 03:51:36 +0000
Files and hashes:         1: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: O+6twnNOV5ruNsTz6gyqZDCueGHR/39L745XmWi2d5I=)
                          2: AS215296.asa (hash: yH3b51K2REyHiosn6A1Cdqy8Kzj6g5PC130VrBNpKy4=)
                          3: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: XVnMY5gLY6Cko63+3s5uvJG2kEcBlly3fxCV0RxV8w0=)
                          4: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: RGTgCra6z97DL3zPw+EaFuLG0rQZ9DlytQ3X3ko6llc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 Jul 2026 03:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ce:ac:88:95:88:b2:8f:84:e4:d5:d9:f0:e4:77:0a:f9:75:5e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
        Validity
            Not Before: Jul  1 00:23:36 2026 GMT
            Not After : Jul  2 03:51:36 2026 GMT
        Subject: CN=C74B5998BEBB701BEC5184D3A0A150BDDA83F017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:47:70:e2:e1:5f:6f:1d:ee:a7:cd:d2:d5:f6:
                    e6:9b:1b:8f:71:75:c4:b9:88:81:de:cc:03:4a:36:
                    a5:e7:cf:38:6f:62:13:ca:6a:c8:f9:4d:a6:1a:0c:
                    31:52:fd:48:12:bf:16:64:0a:cb:af:57:62:93:e5:
                    b0:c3:72:f4:00:85:9f:c3:70:50:78:75:71:dd:82:
                    38:3f:ca:0c:94:87:e8:ec:c3:fa:9c:10:0f:61:be:
                    a7:b6:3c:94:da:c0:c5:a5:57:44:c1:38:24:15:c7:
                    83:92:f9:a8:34:06:30:64:bb:95:da:e7:ec:8a:86:
                    c3:fd:0c:95:4a:5a:08:c6:f6:74:43:79:67:fc:e0:
                    3c:19:da:b2:23:61:a3:25:0e:6c:14:dd:4c:e3:c6:
                    c5:1e:68:78:83:55:ce:a0:07:ba:03:01:b2:68:98:
                    ac:08:fc:72:bc:a9:16:f1:a5:ad:47:84:54:ce:a3:
                    05:b5:e5:55:15:d8:6c:db:75:03:88:35:d6:25:2f:
                    07:1a:e3:d2:5c:68:a1:0f:e0:c7:f2:c9:16:ad:2c:
                    dd:a8:74:23:7c:62:5a:71:33:80:84:c2:bc:30:6a:
                    9f:a7:e9:2c:37:fc:f3:af:21:7b:3a:8e:ae:2a:97:
                    0b:a7:85:43:1b:d3:de:c8:17:64:ea:f9:00:8b:ab:
                    df:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4B:59:98:BE:BB:70:1B:EC:51:84:D3:A0:A1:50:BD:DA:83:F0:17
            X509v3 Authority Key Identifier:
                keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4c:89:74:a4:be:4a:60:9b:25:4d:ef:c0:eb:fc:3a:93:2f:
         7d:58:03:9b:95:82:8a:28:76:40:0a:d3:6b:b6:48:9c:4d:c0:
         30:20:ae:50:7d:20:8c:d1:60:74:2b:c5:7a:59:03:78:18:00:
         87:40:2b:34:71:52:21:8f:96:e7:0d:bc:ac:66:ea:d0:0a:ad:
         ce:29:34:28:f3:99:f1:54:6c:a4:36:55:9c:0a:dd:b3:77:d6:
         af:a8:0f:df:f3:16:14:96:41:a3:6d:e2:b8:ff:63:2e:55:20:
         80:4c:02:45:95:bd:73:52:4b:5b:e2:13:2f:4c:6b:00:aa:31:
         7c:c1:e3:e3:59:dc:5b:b5:03:45:ee:5f:9a:45:1c:b9:a7:c2:
         ca:e4:11:38:b6:22:79:e2:cd:b9:9f:f9:da:fb:20:5b:b4:81:
         08:7c:01:7d:a3:06:93:ef:cf:49:b1:79:cc:f2:61:eb:9d:f3:
         9c:99:cd:56:a4:c7:2f:14:8b:39:77:b9:4e:6e:e1:90:ec:9f:
         d6:3e:b2:ee:50:31:89:12:77:d5:41:00:73:37:ff:f8:ed:fc:
         ad:75:d8:e6:39:77:5f:25:ea:c6:7a:d0:7a:48:6a:59:ba:b0:
         1e:3a:67:fb:ec:14:66:45:4e:fb:cd:4c:58:18:6d:30:c0:e7:
         60:43:1f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 10:55:06 2026 by rpki-client