Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
File:                     0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft (raw, json)
Hash identifier:          En5Aixa3l1a+XiC2+vYQrFIHe75JgW8Tvr5WXP97m3I=
Subject key identifier:   12:26:0A:43:9E:0B:68:9B:BA:80:8A:DC:74:20:D9:EE:DC:FB:5A:F9
Authority key identifier: 0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30
Certificate issuer:       /CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30
Certificate serial:       1A8F930BE71BDE7B13E3DF21F2B5D1A14BE28BAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
Manifest number:          D1
Signing time:             Thu 14 May 2026 03:57:25 +0000
Manifest this update:     Thu 14 May 2026 03:52:25 +0000
Manifest next update:     Fri 15 May 2026 07:12:25 +0000
Files and hashes:         1: 0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl (hash: 6VZxHBlFloaHAzlbc84Xri17wELVq8xnom1Xf1rahCU=)
                          2: AS208754.asa (hash: 3EW700VlL7DtTVIyBPhNoXihGyvxiMvZegasaRWzx5c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 07:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8f:93:0b:e7:1b:de:7b:13:e3:df:21:f2:b5:d1:a1:4b:e2:8b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30
        Validity
            Not Before: May 14 03:52:25 2026 GMT
            Not After : May 15 07:12:25 2026 GMT
        Subject: CN=12260A439E0B689BBA808ADC7420D9EEDCFB5AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:f7:45:8d:f6:1d:55:58:53:cf:15:89:27:
                    6b:85:aa:e0:06:e9:99:0a:fe:26:9f:ca:63:2e:55:
                    a0:52:04:25:df:84:a0:87:96:7c:4d:68:46:da:0a:
                    2c:f5:30:a8:e3:e0:62:18:33:eb:37:2e:d0:d5:15:
                    48:09:43:c5:b5:bf:f4:a6:04:6b:b3:de:fb:38:82:
                    8d:28:f5:80:02:c4:94:30:e2:01:19:0e:18:a7:df:
                    f5:7d:7f:3f:16:5b:76:c9:e2:c7:ff:79:8f:5f:35:
                    27:8b:57:b8:a9:f8:70:8a:2c:21:be:6a:27:91:df:
                    09:92:f5:06:69:a7:13:ec:53:0c:ed:3f:49:1b:eb:
                    24:7c:de:ec:a6:0d:a2:84:3c:7a:f3:09:43:70:93:
                    9f:72:45:bb:85:9c:ad:e2:6f:4d:c5:d4:58:79:7b:
                    79:83:6e:b7:f4:69:a0:78:4f:84:ba:5e:5a:13:8e:
                    48:c1:fa:90:84:0d:02:24:28:08:9c:c8:f6:f8:8f:
                    15:e5:16:3e:b3:37:54:2e:72:b0:21:22:48:d7:63:
                    c3:8d:91:ef:f6:b6:7e:fe:5d:50:86:6e:d1:17:2f:
                    13:ce:a8:c1:75:fe:df:0e:ae:d5:f7:0a:bf:fa:d9:
                    70:ad:21:14:06:6a:bd:f4:d4:e4:11:ea:60:7a:58:
                    8d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:26:0A:43:9E:0B:68:9B:BA:80:8A:DC:74:20:D9:EE:DC:FB:5A:F9
            X509v3 Authority Key Identifier:
                keyid:0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:58:d8:fc:12:64:90:ef:5f:1d:3e:bf:c0:6d:7e:06:1e:89:
         89:67:68:10:c0:04:08:41:9e:89:ed:aa:18:7c:9e:6d:35:8d:
         1e:d0:8c:50:dd:b4:14:9d:ea:5e:b0:51:ee:61:f6:1e:3d:9b:
         d3:ff:3d:99:6b:41:87:0c:05:1b:6b:e6:76:5c:99:f7:62:5d:
         0a:6c:b2:29:1c:e6:99:aa:50:0a:0c:8c:be:04:d6:00:eb:20:
         98:45:9c:15:fe:aa:a7:0b:88:ba:53:7b:ec:2b:96:57:ad:cb:
         8d:43:2e:03:c4:f5:db:0d:67:d8:9c:ec:4b:ff:7c:f9:6a:1c:
         f0:2f:e4:a4:29:3f:ed:d7:1c:c7:ed:ca:5a:d0:92:dd:f0:0b:
         56:a6:a3:40:5f:5b:9e:53:ef:54:81:ba:e9:f5:06:3c:ed:cd:
         89:a5:4e:79:17:25:30:ce:bd:54:b7:ff:7a:37:a9:aa:37:9a:
         af:98:e6:5f:8e:0d:ef:79:4a:26:59:1b:b8:4e:93:df:7b:af:
         7c:09:e8:c8:83:26:f4:29:51:d5:e7:5e:a1:ae:24:dc:24:0d:
         47:2f:d8:35:16:42:91:86:04:58:de:ef:5b:1e:cd:10:c9:1d:
         f7:9a:ef:96:d0:1f:d4:6c:19:77:f1:33:ba:b1:37:bc:d7:92:
         69:8e:9d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:27 2026 by rpki-client