Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
File:                     C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft (raw, json)
Hash identifier:          8wQQ38c9MYG8u7xrYn3kGqkzrJymBxxGD39sscAxAXU=
Subject key identifier:   05:81:07:23:EC:64:8D:BE:4D:A2:FC:BB:71:FA:F1:F1:A4:53:98:D9
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Certificate issuer:       /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial:       5EF58940C5C8D6D11C05E3C607745A443CC478E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
Manifest number:          01EA
Signing time:             Tue 21 Jul 2026 05:28:04 +0000
Manifest this update:     Tue 21 Jul 2026 05:23:04 +0000
Manifest next update:     Wed 22 Jul 2026 05:36:04 +0000
Files and hashes:         1: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl (hash: //M9wdg/uUWuevigLlh787AU8v3PeeXHfrOMRBc7yaw=)
                          2: AS204211.asa (hash: 8DiImPpLo4EdjD5KWkZvz4rtarScRcwpm9BUyiTCXqc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 05:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f5:89:40:c5:c8:d6:d1:1c:05:e3:c6:07:74:5a:44:3c:c4:78:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
        Validity
            Not Before: Jul 21 05:23:04 2026 GMT
            Not After : Jul 22 05:36:04 2026 GMT
        Subject: CN=05810723EC648DBE4DA2FCBB71FAF1F1A45398D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:03:f1:39:7b:ab:79:ee:35:2d:59:e7:1d:
                    b6:f4:83:95:a6:77:c7:af:8e:ba:1b:74:fa:36:6a:
                    dd:fc:66:63:44:78:e1:35:b8:2e:74:00:b2:fb:74:
                    3c:6c:d5:3c:8a:7e:5f:d8:3f:91:a2:4f:07:ad:e9:
                    47:56:cf:22:60:83:e3:a0:f2:cf:36:c9:54:3f:12:
                    81:f0:49:bb:7a:39:38:9e:18:b3:9a:be:8c:df:c9:
                    7c:11:73:f0:15:dc:75:16:f8:57:9f:dd:8d:37:9e:
                    83:d0:9e:b7:a8:b8:d9:b7:19:8c:14:fc:02:ee:d9:
                    fd:de:b4:3f:d2:50:68:69:94:a1:ec:97:ce:d2:6a:
                    11:bc:12:40:56:cb:d4:d5:3f:ba:51:cc:2b:a6:1c:
                    13:3c:0c:bb:d9:f0:1d:0f:dc:39:94:ac:c8:8a:52:
                    37:2d:f0:56:d4:0f:ef:96:25:df:f6:ad:0b:f6:6f:
                    68:0d:67:21:91:9f:23:a6:e6:ec:f3:db:3d:3b:40:
                    62:85:66:2a:a3:b8:f9:8c:2c:4a:0d:fc:cd:25:02:
                    f3:b8:99:49:5a:94:8e:d7:81:c0:3a:e0:78:eb:c9:
                    b8:6b:84:99:f4:73:36:df:f8:04:f1:52:c4:12:ff:
                    b9:ca:36:62:81:01:38:a9:cb:5b:56:02:d9:63:b6:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:81:07:23:EC:64:8D:BE:4D:A2:FC:BB:71:FA:F1:F1:A4:53:98:D9
            X509v3 Authority Key Identifier:
                keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:13:45:39:70:de:33:2f:21:58:b4:4e:ec:66:c9:4c:9a:78:
         92:a3:5c:b3:e3:4d:9b:22:96:50:2a:76:1b:f7:7c:f2:1a:18:
         d6:88:a6:f3:7d:f7:30:09:1a:2f:9d:77:1d:fa:26:de:76:e2:
         14:5a:86:8c:51:77:f9:fb:41:7c:b2:c4:81:58:5f:ac:5c:2d:
         e7:47:07:ba:c1:b8:04:3c:39:9a:32:20:2f:f2:09:d4:0a:1c:
         75:62:c1:b7:b7:91:e2:8c:58:aa:8d:11:f1:a2:85:08:97:2c:
         15:58:97:c9:92:d1:81:50:28:1c:da:cf:d1:cc:fc:46:d8:a6:
         de:3e:81:6c:c5:86:15:95:ab:a1:ba:1b:ba:ec:30:07:b2:83:
         f4:15:a0:71:c9:4e:c7:24:fd:0e:24:af:83:b5:e7:00:77:52:
         dc:d5:64:1d:ee:75:4f:f8:f2:e8:3b:28:7d:92:68:07:2e:a1:
         2a:52:76:5e:2d:36:c2:24:6d:de:f7:ea:13:21:35:b7:b1:c5:
         79:c3:e6:db:5b:35:5b:33:de:f2:f9:af:0a:09:11:da:c9:96:
         c2:bf:15:4d:03:df:09:1e:28:f7:67:68:72:f6:1b:e0:09:68:
         91:65:f0:d1:45:9f:64:13:f8:7e:29:7c:ee:0b:24:e1:c4:7b:
         ac:c9:16:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:10:33 2026 by rpki-client