Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.mft
File:                     827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.mft (raw, json)
Hash identifier:          cD+woXK6OSX6gg21Dpqo0QMSfePIwE8rd9h7y7htIHI=
Subject key identifier:   D0:21:B3:4C:BE:9F:71:E1:0B:D2:E1:EB:AE:40:91:65:63:80:AB:15
Authority key identifier: 82:7A:5B:DF:8A:CA:A1:E6:16:F6:21:3D:1C:DC:BE:18:7B:FE:06:05
Certificate issuer:       /CN=827a5bdf8acaa1e616f6213d1cdcbe187bfe0605
Certificate serial:       744F0D0C13BFECFA04F170570CFED1865C6C393B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnpb34rKoeYW9iE9HNy-GHv-BgU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.mft
Manifest number:          8C
Signing time:             Sun 29 Mar 2026 10:01:16 +0000
Manifest this update:     Sun 29 Mar 2026 09:56:16 +0000
Manifest next update:     Mon 30 Mar 2026 10:31:16 +0000
Files and hashes:         1: 323030313a3637633a3563303a3a2f34382d3438203d3e20323135373630.roa (hash: kIRA//Sw9bWgaot2FQ6UbnKhzjLroyGFy2eWLT662TU=)
                          2: AS215760.asa (hash: xqE//y5boND4ShwDQloZzLqK25w0wkiRcz5KJD4IcG0=)
                          3: 827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.crl (hash: 1iMHaokCb+NzSjjhmtvnsOrIu6X5Fji5sm9lTDn8GDI=)
                          4: AS204085.asa (hash: iztSLVQk+XR8pLrWzZlwTsOawmKl8SCAVbYpnDsF7Xg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnpb34rKoeYW9iE9HNy-GHv-BgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4f:0d:0c:13:bf:ec:fa:04:f1:70:57:0c:fe:d1:86:5c:6c:39:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827a5bdf8acaa1e616f6213d1cdcbe187bfe0605
        Validity
            Not Before: Mar 29 09:56:16 2026 GMT
            Not After : Mar 30 10:31:16 2026 GMT
        Subject: CN=D021B34CBE9F71E10BD2E1EBAE4091656380AB15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:51:36:61:2d:6b:77:ca:b2:66:7b:c4:90:0b:
                    24:dd:ee:db:f9:9b:c6:25:1b:be:f9:62:fc:ad:6f:
                    6e:49:bd:e3:00:e8:34:39:be:3a:f5:d6:7f:46:96:
                    0d:96:bc:f2:6f:aa:97:c2:fd:48:3b:05:98:72:c4:
                    04:93:9e:e6:4b:dd:9c:fd:c9:12:3a:0f:82:15:28:
                    95:ad:cb:08:d4:5d:5e:59:fd:c3:de:2e:da:2d:6f:
                    dc:ff:46:b3:a2:ab:77:ea:10:70:02:39:ca:8f:90:
                    60:e8:bf:4a:60:b7:f4:75:ea:cf:3c:e0:73:08:1d:
                    a8:8e:0b:dc:d1:91:36:56:c0:c0:94:1b:c5:50:63:
                    0c:cc:b3:e6:36:0f:a7:1d:02:4e:d7:45:d3:20:75:
                    68:3b:23:c8:75:98:82:75:62:8c:76:fa:2e:d0:2c:
                    03:71:de:2e:ef:ef:88:9e:f2:53:69:30:e9:75:70:
                    7f:98:00:27:47:29:c0:7d:6a:6f:13:2d:19:be:59:
                    50:9a:78:38:6d:83:19:05:e0:ba:04:77:57:52:c5:
                    75:87:bc:a7:a6:4b:33:ef:53:d4:c3:45:40:50:8d:
                    ba:ef:08:d5:f4:c0:7d:78:51:da:0e:9d:61:f8:f3:
                    68:de:8d:19:c7:5e:e0:19:ff:37:cb:df:4e:5f:62:
                    b8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:21:B3:4C:BE:9F:71:E1:0B:D2:E1:EB:AE:40:91:65:63:80:AB:15
            X509v3 Authority Key Identifier:
                keyid:82:7A:5B:DF:8A:CA:A1:E6:16:F6:21:3D:1C:DC:BE:18:7B:FE:06:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnpb34rKoeYW9iE9HNy-GHv-BgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ce:2e:df:9f:1f:32:b2:16:23:3f:ba:4c:d6:9b:5a:3a:9d:
         39:b9:38:7e:ca:30:26:d5:5a:74:09:39:fe:8c:cf:0c:6d:37:
         c8:d5:26:a6:af:fb:46:3f:2a:fd:97:24:f0:ba:0b:a9:f2:28:
         03:6c:5d:94:7b:21:5e:f6:eb:1d:cb:45:9a:ca:37:b6:5e:05:
         b5:4d:5d:ee:40:f8:7f:ed:7f:13:8a:12:2d:93:83:72:15:d0:
         a2:80:aa:72:b6:ba:fd:08:84:3b:a0:1f:5e:ed:c9:f1:3d:c4:
         62:94:90:fd:28:c2:ab:86:f9:e9:eb:cc:20:49:f2:49:b8:50:
         50:18:ce:7e:88:b9:f4:24:0d:2d:e2:d2:09:d8:4e:02:03:fd:
         43:1e:c0:f4:93:27:17:7c:a7:72:89:ad:ef:4d:56:44:c2:a0:
         2c:c5:47:c4:7d:9a:db:21:f2:4b:bf:d1:f2:ea:65:6a:39:f0:
         82:dc:d0:00:8b:f8:ad:1c:a0:98:77:d2:f3:19:cb:30:fb:ee:
         63:c8:a4:2d:2e:6e:6d:7a:97:b9:52:4a:88:3d:67:f8:ee:0e:
         b7:17:e0:04:40:0f:6b:dd:a4:08:7c:48:c1:d7:0e:78:8a:5c:
         96:3b:ad:12:8f:07:8b:bc:2d:67:b9:5d:2d:25:1a:3a:17:37:
         6d:06:1c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:25 2026 by rpki-client