Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
File:                     851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft (raw, json)
Hash identifier:          P542EeoblxQoG8IIwmu354owHDVU+aKBfUUTt6tv3wo=
Subject key identifier:   F9:C2:BD:9A:FE:F2:39:E4:7A:36:F4:06:ED:4F:FD:B8:F8:A1:B6:70
Authority key identifier: 85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
Certificate issuer:       /CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Certificate serial:       584370EC7F6814FDEB2026171F5C130DD4A83524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
Manifest number:          A0
Signing time:             Tue 12 May 2026 21:48:11 +0000
Manifest this update:     Tue 12 May 2026 21:43:11 +0000
Manifest next update:     Wed 13 May 2026 23:43:11 +0000
Files and hashes:         1: AS199310.asa (hash: LBWamUCbK1O722rXmKftUcs7o+T5UF9gLBEoV0j8QV4=)
                          2: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl (hash: sy2aJFXuDdsLeyeMxjggY1iA/sYSb3zV+BSJe3Zi7Uw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:43:70:ec:7f:68:14:fd:eb:20:26:17:1f:5c:13:0d:d4:a8:35:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
        Validity
            Not Before: May 12 21:43:11 2026 GMT
            Not After : May 13 23:43:11 2026 GMT
        Subject: CN=F9C2BD9AFEF239E47A36F406ED4FFDB8F8A1B670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:2b:f4:3e:09:2b:83:9c:50:e1:1c:75:06:
                    49:a8:6d:62:9f:04:7d:57:79:73:cb:86:f6:37:0e:
                    d0:ed:44:51:b0:0d:ec:f4:ac:76:98:56:36:a7:cd:
                    c6:a1:dc:b8:e8:2c:95:78:a7:d3:df:52:d1:f4:44:
                    b2:dc:e8:76:43:5e:a4:91:4b:7e:ed:b3:97:38:42:
                    96:f1:b0:6b:9f:f3:b4:31:bd:f7:66:1d:22:18:60:
                    64:1d:98:bc:f6:d4:fb:c2:75:de:66:67:51:68:14:
                    13:32:e7:0c:ab:49:a1:23:4a:67:cc:a4:ae:a7:a8:
                    6e:84:ab:dc:48:27:3b:aa:d4:b5:e5:2a:e5:2c:b1:
                    b1:e6:26:55:4e:34:11:34:16:4e:06:41:6f:db:24:
                    85:82:84:96:ed:32:42:e1:8a:8b:a7:b7:08:8b:03:
                    57:a8:4f:62:65:84:47:56:6f:c5:5b:84:13:96:6f:
                    53:04:1a:85:2b:ba:c4:1e:1a:50:de:50:f1:bc:f7:
                    df:40:bf:48:2b:6d:91:97:d0:d0:5f:fd:81:32:59:
                    b8:33:0d:25:83:ac:08:2c:4a:a9:0e:e0:3c:a1:91:
                    3d:3a:fd:66:e8:a8:81:62:1d:ab:42:f5:cc:e7:d3:
                    ce:45:4e:cb:c3:37:13:5b:c9:c7:da:aa:d9:27:6d:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C2:BD:9A:FE:F2:39:E4:7A:36:F4:06:ED:4F:FD:B8:F8:A1:B6:70
            X509v3 Authority Key Identifier:
                keyid:85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:24:95:8a:d3:8d:ff:d3:84:5d:d2:58:e7:1f:39:ee:a2:b5:
         b8:b5:be:e4:07:6c:99:5f:7c:96:74:b6:07:fa:ed:3b:4d:71:
         fe:3a:18:d4:01:ae:eb:16:29:7e:c3:b4:4d:15:69:c9:60:69:
         c6:c9:dc:84:39:d5:25:86:82:90:7c:0b:dd:5f:35:eb:79:12:
         f5:d6:67:30:a1:66:b8:26:4c:2a:f6:01:9f:64:d5:d4:22:65:
         f9:2f:8f:af:f6:ed:a8:bf:3d:19:be:05:6d:aa:b7:c6:9c:b9:
         02:e7:98:3f:db:27:b0:16:17:aa:03:9b:f7:fa:b7:47:b7:87:
         c5:36:12:c3:47:30:1e:1e:e0:3d:c0:cc:cf:7b:54:92:d8:8f:
         b3:40:2b:bb:e6:09:b5:0d:e2:04:a7:e9:d5:04:2b:47:a7:8e:
         59:a0:06:3b:46:97:33:3c:fc:75:4f:b7:60:af:32:80:f7:08:
         68:8a:6b:83:51:aa:3f:4c:b7:5c:20:13:cd:2f:ac:df:32:f4:
         55:4f:ae:6a:82:93:57:e0:e7:e2:27:cc:ee:73:b1:96:60:37:
         c3:0d:d5:4e:17:bd:63:44:f7:1e:8f:3d:09:ac:71:f1:e2:4f:
         2c:23:8e:44:08:1b:00:e6:ab:5c:dd:26:b6:6b:d0:b2:08:60:
         1a:4d:b5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:33 2026 by rpki-client