Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
File:                     42629F1567D74FB19EFF142C6A6F5F93F3086333.mft (raw, json)
Hash identifier:          xO9DrTrgGTanfsIpL+SOMTwahBAuXr7seC70NtWAADA=
Subject key identifier:   93:88:27:6B:AA:AB:D6:FB:CF:5A:5F:D7:F9:4C:A1:86:DB:4B:D0:90
Authority key identifier: 42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33
Certificate issuer:       /CN=42629f1567d74fb19eff142c6a6f5f93f3086333
Certificate serial:       47A477C9053A906FE41559BE80FF7BCE72AABBB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
Manifest number:          8A
Signing time:             Thu 23 Jul 2026 10:18:50 +0000
Manifest this update:     Thu 23 Jul 2026 10:13:50 +0000
Manifest next update:     Fri 24 Jul 2026 12:47:50 +0000
Files and hashes:         1: 42629F1567D74FB19EFF142C6A6F5F93F3086333.crl (hash: q/tGtQC7MWY5cBeG+KIL3bj/CSRQX8yN7xh87AFlzy4=)
                          2: AS205941.asa (hash: FTih/Kh++TajY3NChXxDrcn99BAFK9SR2OLJgJfJVV0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:47:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a4:77:c9:05:3a:90:6f:e4:15:59:be:80:ff:7b:ce:72:aa:bb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42629f1567d74fb19eff142c6a6f5f93f3086333
        Validity
            Not Before: Jul 23 10:13:50 2026 GMT
            Not After : Jul 24 12:47:50 2026 GMT
        Subject: CN=9388276BAAABD6FBCF5A5FD7F94CA186DB4BD090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:69:d3:4f:0c:51:5e:db:8e:15:cc:64:fb:34:
                    fb:31:0f:3d:70:8f:2f:a5:62:ba:0f:07:97:bf:89:
                    d3:1e:c8:9e:d8:f0:1d:21:e3:c0:5c:11:0c:1d:f2:
                    fc:ac:3b:97:18:28:da:13:da:1b:7b:45:50:5b:ca:
                    a7:bb:0e:e0:f0:72:79:75:16:e3:6c:83:6e:b1:1b:
                    54:5a:14:fb:dd:83:25:91:17:7c:16:33:7a:ab:00:
                    17:8b:0a:a2:90:a5:30:61:0e:ee:33:9a:ac:ea:41:
                    d3:97:77:a9:c4:81:05:0e:9f:3c:b9:91:e5:d6:01:
                    fa:a9:81:b8:1e:6f:38:5e:40:48:04:16:e7:cf:7d:
                    ab:42:d6:9f:ad:62:2c:26:98:3b:ca:1f:ea:9a:21:
                    80:2f:20:90:03:6e:34:e6:0a:71:1f:67:ed:3a:57:
                    a2:a8:b2:d1:d8:23:df:d7:80:ad:4d:44:07:4d:91:
                    17:c7:44:7f:20:e1:64:8c:b4:96:94:09:b5:88:a7:
                    20:43:8e:f6:2a:89:57:69:1c:e7:c6:6c:30:eb:7f:
                    76:48:07:bc:78:10:28:51:76:01:86:d6:38:98:25:
                    b1:d2:ea:3f:72:7b:bb:4c:84:36:73:f1:c5:1f:24:
                    3c:d7:d3:0d:b7:9b:f2:a3:35:b8:ed:90:a2:98:dd:
                    df:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:88:27:6B:AA:AB:D6:FB:CF:5A:5F:D7:F9:4C:A1:86:DB:4B:D0:90
            X509v3 Authority Key Identifier:
                keyid:42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:38:7a:6c:2c:0d:ed:e2:67:0b:95:5a:a1:3f:19:fe:c6:85:
         07:45:d7:2d:44:94:b0:e2:70:93:e0:5b:e1:73:b2:60:0c:1f:
         7b:d6:9b:f5:e0:73:e2:a6:0e:2c:0e:5b:62:23:e9:c5:a9:1e:
         01:36:5a:c3:59:98:1d:7b:71:08:57:af:46:a7:fc:e2:6b:d3:
         03:81:57:74:d7:83:26:73:f8:cf:73:e1:b0:f0:62:20:b9:0d:
         d3:0d:c8:f1:a4:fd:ff:de:35:bb:c0:46:fd:6d:d2:ab:c9:95:
         d0:76:d1:33:11:d8:8f:8b:09:f7:69:3a:37:05:35:8e:ea:5d:
         a3:ab:0c:4b:c9:d8:42:a4:37:2e:74:c6:c3:2b:64:cd:1d:27:
         e2:ce:22:f0:fa:94:f6:fc:ca:48:db:f3:5d:c9:d2:d9:ac:22:
         5e:40:38:60:bb:ae:55:05:7e:43:41:9e:b3:bc:bd:bd:ea:75:
         39:ed:03:68:21:c4:78:86:30:bb:61:39:b6:68:5f:6e:89:21:
         4f:4f:65:bd:c8:8e:8f:9a:a5:34:4e:b2:82:42:ff:94:4e:45:
         49:e2:b7:8d:2c:a9:46:64:6e:fa:21:47:8f:96:b1:dc:64:51:
         6d:49:2c:ee:55:29:99:1c:ef:e1:53:00:b4:60:ce:c2:72:8e:
         a8:d6:f4:2e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUR6R3yQU6kG/kFVm+gP97znKqu7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI2MjlmMTU2N2Q3NGZiMTllZmYxNDJjNmE2ZjVmOTNm
MzA4NjMzMzAeFw0yNjA3MjMxMDEzNTBaFw0yNjA3MjQxMjQ3NTBaMDMxMTAvBgNV
BAMTKDkzODgyNzZCQUFBQkQ2RkJDRjVBNUZEN0Y5NENBMTg2REI0QkQwOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUadNPDFFe244VzGT7NPsxDz1w
jy+lYroPB5e/idMeyJ7Y8B0h48BcEQwd8vysO5cYKNoT2ht7RVBbyqe7DuDwcnl1
FuNsg26xG1RaFPvdgyWRF3wWM3qrABeLCqKQpTBhDu4zmqzqQdOXd6nEgQUOnzy5
keXWAfqpgbgebzheQEgEFufPfatC1p+tYiwmmDvKH+qaIYAvIJADbjTmCnEfZ+06
V6KostHYI9/XgK1NRAdNkRfHRH8g4WSMtJaUCbWIpyBDjvYqiVdpHOfGbDDrf3ZI
B7x4EChRdgGG1jiYJbHS6j9ye7tMhDZz8cUfJDzX0w23m/KjNbjtkKKY3d9jAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUk4gna6qr1vvPWl/X+UyhhttL0JAwHwYDVR0j
BBgwFoAUQmKfFWfXT7Ge/xQsam9fk/MIYzMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5
NzVjLzAvNDI2MjlGMTU2N0Q3NEZCMTlFRkYxNDJDNkE2RjVGOTNGMzA4NjMzMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FtS2ZGV2ZYVDdHZV94UXNhbTlma19N
SVl6TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1h
YmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMC80MjYyOUYxNTY3RDc0RkIxOUVG
RjE0MkM2QTZGNUY5M0YzMDg2MzMzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDh6bCwN7eJnC5VaoT8Z
/saFB0XXLUSUsOJwk+Bb4XOyYAwfe9ab9eBz4qYOLA5bYiPpxakeATZaw1mYHXtx
CFevRqf84mvTA4FXdNeDJnP4z3PhsPBiILkN0w3I8aT9/941u8BG/W3Sq8mV0HbR
MxHYj4sJ92k6NwU1jupdo6sMS8nYQqQ3LnTGwytkzR0n4s4i8PqU9vzKSNvzXcnS
2awiXkA4YLuuVQV+Q0Ges7y9vep1Oe0DaCHEeIYwu2E5tmhfbokhT09lvciOj5ql
NE6ygkL/lE5FSeK3jSypRmRu+iFHj5ax3GRRbUks7lUpmRzv4VMAtGDOwnKOqNb0
Lg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:03 2026 by rpki-client