Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
File:                     851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft (raw, json)
Hash identifier:          oYb0aG+imBYMYEspds3IUgw2YEZmvF9MInlGd9M1rww=
Subject key identifier:   C3:2C:26:0C:39:F6:17:5E:6A:8F:FF:A9:32:BC:83:EB:4D:6B:00:51
Authority key identifier: 85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
Certificate issuer:       /CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Certificate serial:       61B7C52A36FFE9F81B7149F7B4B2B2B7CDDDA7BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
Manifest number:          0157
Signing time:             Fri 25 Sep 2026 10:12:50 +0000
Manifest this update:     Fri 25 Sep 2026 10:07:50 +0000
Manifest next update:     Sat 26 Sep 2026 12:40:50 +0000
Files and hashes:         1: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl (hash: 7ZmmTBkaU406mU2tPC0N6cR7SvVcBAllJUDI4P/Oycc=)
                          2: AS199310.asa (hash: HsjyYaB6+XITG4qMcBoHUioWoHgu/QTQ6Xm/zkvNsJ0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b7:c5:2a:36:ff:e9:f8:1b:71:49:f7:b4:b2:b2:b7:cd:dd:a7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
        Validity
            Not Before: Sep 25 10:07:50 2026 GMT
            Not After : Sep 26 12:40:50 2026 GMT
        Subject: CN=C32C260C39F6175E6A8FFFA932BC83EB4D6B0051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:05:d0:59:b3:e7:91:02:fe:ef:aa:cf:c9:68:
                    29:26:c8:da:54:3f:77:fc:d1:04:03:78:41:31:23:
                    45:e7:85:43:f8:b8:59:a3:8c:0f:ed:4f:3b:58:88:
                    2a:84:eb:02:e9:2b:c6:c1:7e:b9:54:51:0e:d8:73:
                    a1:2e:1d:28:8a:5f:0c:15:e5:ed:6e:09:76:27:94:
                    93:04:60:c1:c8:a6:bb:a7:26:69:c8:3d:7c:80:6a:
                    26:d9:37:61:8e:fa:83:5d:09:c4:84:56:50:f5:32:
                    ab:b7:20:30:4f:47:ab:18:6e:a3:a3:01:d1:98:17:
                    8f:6c:e8:24:43:93:36:9c:3e:19:a1:c1:4b:f3:2b:
                    64:33:87:1c:c8:b2:e9:c4:73:3a:0e:70:5f:52:1f:
                    2b:0e:d0:ee:29:ec:c9:ac:23:17:2a:cb:eb:dd:8a:
                    40:2b:9f:4f:e7:59:93:3c:1d:84:f4:76:c9:2c:79:
                    37:21:a3:4c:80:fd:c5:73:49:85:86:94:c8:35:ed:
                    e0:9f:8b:b6:cd:ac:fe:0c:a3:ef:fd:27:38:35:a6:
                    01:51:27:cc:e9:3f:a8:ba:de:61:78:86:c1:91:ce:
                    70:c3:7c:15:2a:3b:66:09:9d:59:5f:72:c3:5f:9c:
                    1c:fb:2a:6c:27:db:9f:b3:21:04:6b:f1:30:bc:b1:
                    c1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2C:26:0C:39:F6:17:5E:6A:8F:FF:A9:32:BC:83:EB:4D:6B:00:51
            X509v3 Authority Key Identifier:
                keyid:85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:f4:62:f2:01:09:73:0e:9d:53:c3:cd:06:fc:1d:f0:b1:fd:
         11:65:10:6f:f4:35:24:d3:4a:e3:c8:e3:08:a7:a8:6e:83:48:
         da:09:0c:60:a5:31:a5:4d:35:14:78:62:7c:10:77:6a:83:bc:
         9a:89:7a:13:06:35:26:96:b5:d8:1f:b8:ff:fa:26:74:10:21:
         2b:a0:26:05:ff:70:1f:13:8c:8d:5d:a8:45:58:c6:06:e3:2a:
         4a:fd:e2:e9:2e:93:47:cd:d9:23:9e:ab:a1:81:be:3a:00:ac:
         30:9d:7d:c0:ff:8c:c7:28:01:e3:80:34:05:af:a4:62:cb:bf:
         00:2e:8b:a7:35:5c:99:ae:8b:c8:ed:c0:4d:51:30:1d:1a:3e:
         05:98:e2:c8:27:18:2c:50:db:66:e6:97:7f:77:22:94:46:4f:
         5d:8d:a8:50:78:8a:10:82:1e:8e:03:36:04:52:6c:82:23:c5:
         90:1a:2b:ff:5f:21:7b:71:33:8f:ca:e7:81:88:1f:fb:7e:61:
         20:a2:13:d8:5d:2e:b3:fd:0e:38:02:a0:25:32:36:af:8c:bd:
         8a:f8:81:3d:dd:10:e3:92:e4:6f:58:b8:fd:54:21:61:ed:cc:
         bc:d5:80:a5:ca:b7:d2:5d:d0:81:7c:73:ee:de:36:b3:a5:4e:
         90:f5:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:57:35 2026 by rpki-client