Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
File:                     0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft (raw, json)
Hash identifier:          3cUf6nKcvbMzBAh/z9tgLntnAQnlCgE1O6tLTGRwl2o=
Subject key identifier:   6C:3E:97:A5:7C:4F:56:23:FC:29:CB:33:32:18:13:3D:FE:AC:40:54
Authority key identifier: 0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30
Certificate issuer:       /CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30
Certificate serial:       6E3FE7D4E9037FB188E36BE07504C5B3F5E3F5E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
Manifest number:          0162
Signing time:             Wed 09 Sep 2026 21:47:25 +0000
Manifest this update:     Wed 09 Sep 2026 21:42:25 +0000
Manifest next update:     Thu 10 Sep 2026 22:44:25 +0000
Files and hashes:         1: AS208754.asa (hash: 3EW700VlL7DtTVIyBPhNoXihGyvxiMvZegasaRWzx5c=)
                          2: 0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl (hash: udOejOf5Id4MmwkPEvtnhVmoxuPoW8SzWxFkq0v3uiM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 22:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3f:e7:d4:e9:03:7f:b1:88:e3:6b:e0:75:04:c5:b3:f5:e3:f5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30
        Validity
            Not Before: Sep  9 21:42:25 2026 GMT
            Not After : Sep 10 22:44:25 2026 GMT
        Subject: CN=6C3E97A57C4F5623FC29CB333218133DFEAC4054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cd:48:62:04:aa:0e:03:b2:31:b9:16:57:41:
                    2b:47:b9:1f:84:b5:50:d3:46:63:b6:44:8e:77:45:
                    c6:9b:f2:28:5d:90:f8:39:99:09:47:79:40:cc:76:
                    d8:90:9b:58:e7:e0:99:91:98:82:b5:5e:36:f4:4e:
                    1d:eb:d5:14:1e:41:75:b6:1e:a2:5d:2f:46:4f:33:
                    aa:ab:db:e5:4b:90:41:36:9a:bf:d0:99:4d:36:ab:
                    fc:16:28:a0:4e:de:f4:a5:e0:f6:71:3c:b3:95:a9:
                    35:23:e8:6d:b2:de:72:d8:56:18:9f:c7:9f:59:7b:
                    59:38:58:84:ef:5c:cb:25:f6:21:02:45:ab:a1:22:
                    c6:93:a1:46:04:3f:37:f3:f1:22:c3:e5:8a:29:37:
                    7a:b0:65:d5:0f:b6:97:7f:9c:46:7a:fa:d8:d0:1c:
                    9c:0c:de:3a:c8:d0:f1:06:44:81:88:c1:36:55:e3:
                    d4:83:45:1c:ec:a4:0c:a0:27:06:a5:1a:0f:79:1f:
                    87:2c:53:49:ab:05:e0:b5:d5:85:99:19:50:9d:73:
                    16:67:8a:62:e7:3e:b1:19:5a:75:74:a7:c1:f7:86:
                    ae:b3:e4:39:99:b8:96:ee:75:4c:e9:06:97:7b:f0:
                    c9:31:84:b0:f2:79:96:62:ac:42:3e:32:f0:51:30:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3E:97:A5:7C:4F:56:23:FC:29:CB:33:32:18:13:3D:FE:AC:40:54
            X509v3 Authority Key Identifier:
                keyid:0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:db:4d:b4:5c:b4:7a:84:05:2c:4f:cf:d1:90:59:1b:67:f5:
         76:95:9f:15:c0:3e:d3:2a:ed:d9:d9:59:69:a2:20:b1:3f:0f:
         57:fb:07:b8:34:f2:11:b4:b7:35:1c:fd:31:9c:fb:d6:d0:c3:
         8f:45:7c:26:31:45:c2:d5:0a:6b:55:f8:03:05:37:fc:83:c8:
         39:d8:93:85:dc:0c:2a:3d:73:dc:ca:6b:72:a9:c5:29:94:6f:
         f6:da:57:fe:ac:d7:75:3d:c2:dd:e1:fd:8e:00:f1:82:b2:53:
         88:dc:a7:97:51:dc:76:88:ca:cc:88:dc:f7:76:77:4c:86:7d:
         ab:a9:3a:55:a2:83:58:d0:36:af:6a:46:aa:6d:f4:ea:37:f0:
         ad:3c:d7:1a:53:1e:e9:32:b5:d6:1a:b9:90:33:7c:39:9d:80:
         6a:76:ae:54:49:1a:da:6b:2a:a5:91:e0:c2:43:ab:bd:70:a3:
         26:fb:b9:13:dc:74:58:b9:40:0f:f7:70:f6:f1:4d:c6:7e:86:
         8a:05:ef:f3:3b:93:14:ff:10:37:3e:a9:88:ff:ca:75:86:3f:
         98:77:fd:a8:34:39:0c:72:3b:2f:bc:95:3e:68:02:48:f2:59:
         66:90:cb:ad:c0:30:f3:79:eb:ab:21:53:8a:a8:de:1b:f4:25:
         c7:41:47:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:11:10 2026 by rpki-client