Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
File:                     851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft (raw, json)
Hash identifier:          hH7p7GE/8EAvGom9qqgFLbJhCWog4Si1Xmllglqzu3U=
Subject key identifier:   1B:0A:32:C2:0A:BE:D0:27:D2:E3:90:A2:52:53:36:89:4E:FA:20:F3
Authority key identifier: 85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
Certificate issuer:       /CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Certificate serial:       750AA961CB8AAE98F4947EC9103FABC656CAAF88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
Manifest number:          019B
Signing time:             Sat 14 Nov 2026 18:44:54 +0000
Manifest this update:     Sat 14 Nov 2026 18:39:54 +0000
Manifest next update:     Sun 15 Nov 2026 20:01:54 +0000
Files and hashes:         1: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl (hash: N4V2/mzwp32tCIp5nKOP75ss6w1HfPKKJqwXEoc5C8U=)
                          2: AS199310.asa (hash: HsjyYaB6+XITG4qMcBoHUioWoHgu/QTQ6Xm/zkvNsJ0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0a:a9:61:cb:8a:ae:98:f4:94:7e:c9:10:3f:ab:c6:56:ca:af:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
        Validity
            Not Before: Nov 14 18:39:54 2026 GMT
            Not After : Nov 15 20:01:54 2026 GMT
        Subject: CN=1B0A32C20ABED027D2E390A2525336894EFA20F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:b5:f7:c4:2d:c4:05:18:10:94:82:07:54:
                    40:b8:88:a1:3f:55:de:01:c5:f7:16:22:fa:e8:ce:
                    35:95:60:bb:ba:55:b5:35:4d:7b:e2:77:08:35:6c:
                    1b:70:1a:ff:01:b5:d7:2b:19:a4:ba:10:b0:3a:96:
                    5a:34:fc:0d:52:30:57:49:dc:06:e4:57:e2:d0:4d:
                    43:13:28:64:b1:ec:56:28:40:53:94:80:2f:c7:c2:
                    49:67:e6:94:ca:ff:09:dc:e8:90:a9:59:79:43:35:
                    9f:45:a6:b5:ac:9b:5e:85:dc:d1:b4:37:46:48:ed:
                    09:27:f0:b4:02:0e:57:e0:37:ce:4d:90:55:7d:cb:
                    60:26:5a:dc:4d:66:d4:82:d4:e3:43:e7:a2:8e:e8:
                    24:09:ed:4f:5f:9c:2c:9a:39:63:29:5b:ce:e7:8f:
                    d4:43:c0:8b:b3:51:73:77:23:19:80:cf:7d:bc:f7:
                    1e:57:ec:64:1d:1c:6c:e5:54:7f:f3:79:51:72:c2:
                    bd:52:f8:9b:70:81:c7:f8:b2:2c:fa:d3:72:7f:f6:
                    7d:dd:87:6d:ad:d0:7b:4c:f6:30:7f:54:20:7b:b4:
                    e0:99:98:07:e8:48:3d:23:4c:fe:a5:3f:05:57:4e:
                    20:96:5e:11:8b:7d:42:ed:de:5e:47:7e:85:8f:56:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0A:32:C2:0A:BE:D0:27:D2:E3:90:A2:52:53:36:89:4E:FA:20:F3
            X509v3 Authority Key Identifier:
                keyid:85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:fb:c2:d7:94:64:bb:c4:57:0c:0f:69:a2:d5:2d:45:c5:b6:
         71:ba:53:7f:9f:46:f1:09:ec:cd:48:ee:07:28:67:1a:26:d1:
         3d:af:65:e9:a8:2b:7c:de:a5:e5:1a:4a:52:b5:a1:bc:81:a1:
         5f:5e:d8:fb:a0:e8:90:b9:b8:e1:3d:57:2b:43:b2:1a:87:6a:
         41:b5:e4:56:32:a1:20:2c:1c:6b:19:28:72:ff:29:47:39:ef:
         79:c7:fa:10:99:11:bc:db:32:ae:20:1c:59:72:01:f0:c7:44:
         97:90:80:bc:ef:74:42:bb:b8:fe:95:3d:bc:50:1a:d1:37:ef:
         4e:a5:17:80:95:a9:8c:a6:4d:46:5e:fb:4d:d0:52:34:5a:be:
         2e:02:79:ba:cf:e6:66:5c:e7:f0:94:b9:16:1a:c6:e2:6f:10:
         53:f2:f4:f3:d1:4a:a6:e9:e1:d2:fe:6d:d9:d8:fb:19:41:ab:
         1c:58:c7:a0:3a:d3:0c:75:3b:c7:02:a8:63:f3:a4:cc:00:f4:
         f7:aa:ad:02:e6:c4:d7:21:77:ab:2a:18:7a:98:14:6a:98:48:
         5d:51:3c:d1:bd:59:fd:e2:a6:bd:3c:e4:b0:1e:84:b0:f7:c4:
         8a:50:15:83:ce:74:20:28:d1:d4:91:4e:65:e7:14:35:ab:79:
         48:7d:cf:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:27 2026 by rpki-client