Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
File:                     06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft (raw, json)
Hash identifier:          YxcKh9Wkz4JDvAz31j6y8ditWZ94+4+c6LVsu6eqkGg=
Subject key identifier:   09:73:F5:2B:6A:D0:7C:79:FE:7B:5D:9D:C4:5E:96:FF:38:AB:C6:81
Authority key identifier: 06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C
Certificate issuer:       /CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
Certificate serial:       530BF44EE1304A4409FE005FF1E5E1CA28A9D67A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
Manifest number:          0157
Signing time:             Thu 24 Sep 2026 19:32:50 +0000
Manifest this update:     Thu 24 Sep 2026 19:27:50 +0000
Manifest next update:     Fri 25 Sep 2026 20:40:50 +0000
Files and hashes:         1: AS202782.asa (hash: BUvQaaL6LDCtZinny59vQWt/MEabU/h3KDaRVhwqAQM=)
                          2: 06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl (hash: 58QJGCYZJbtqMm1gixNHxSBx/yORxHwEPnVOpmNRcBU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0b:f4:4e:e1:30:4a:44:09:fe:00:5f:f1:e5:e1:ca:28:a9:d6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
        Validity
            Not Before: Sep 24 19:27:50 2026 GMT
            Not After : Sep 25 20:40:50 2026 GMT
        Subject: CN=0973F52B6AD07C79FE7B5D9DC45E96FF38ABC681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:2e:c3:1f:5d:4f:2d:bd:2e:36:40:62:11:
                    fd:6c:8a:ea:77:2b:2a:0e:2d:b5:c6:39:da:7d:e0:
                    f0:e9:7b:24:25:7e:f1:13:ec:a9:58:46:df:a1:aa:
                    eb:94:f1:84:b1:69:51:16:80:bb:1f:cb:0b:75:b5:
                    64:c9:98:91:6c:9c:87:b3:77:7d:4d:b5:de:af:10:
                    71:2c:c3:02:af:a8:4e:b6:05:a6:10:f5:76:83:0f:
                    85:2c:90:b9:45:31:45:39:56:31:77:0b:9f:2c:f4:
                    89:00:c8:1f:ec:4e:2a:a7:02:2f:8a:40:64:2f:bc:
                    83:94:30:9b:80:99:24:20:72:e4:13:fc:ef:58:92:
                    4e:ed:97:3d:0a:f8:38:82:41:54:1b:08:92:6f:a3:
                    76:f3:d9:5f:6f:59:41:ee:4e:38:e8:03:53:70:19:
                    78:16:39:0e:5a:b2:69:0d:4b:b0:ef:25:25:11:6a:
                    51:27:47:93:5f:2f:9b:af:63:44:a0:06:20:14:ac:
                    fd:55:e3:59:ab:0c:d1:68:71:c9:0e:71:17:44:03:
                    82:59:42:e9:b2:b4:31:79:36:56:b7:6f:9f:34:44:
                    09:7c:fd:99:40:22:de:50:26:e6:4d:47:8e:a8:fc:
                    72:fd:ac:cc:61:e8:99:e7:7b:d4:f2:7d:46:c2:72:
                    7b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:73:F5:2B:6A:D0:7C:79:FE:7B:5D:9D:C4:5E:96:FF:38:AB:C6:81
            X509v3 Authority Key Identifier:
                keyid:06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ac:b5:83:8d:36:cd:39:5d:1d:84:0b:54:bd:5c:cb:6f:2f:
         e9:23:b4:89:8d:d5:ac:a1:21:3e:ae:b8:f6:b0:88:fb:7d:e5:
         81:5f:58:c7:92:3a:bf:18:2e:ef:57:b1:bb:12:ea:a7:27:12:
         ab:0b:72:e4:ea:e0:2f:ec:a4:25:2c:25:39:16:11:a3:d2:92:
         cc:68:ca:bd:ee:3d:31:5f:eb:59:3b:78:8c:df:ae:df:b8:15:
         14:27:1f:00:25:97:12:05:6a:80:b9:a3:8b:20:fe:b3:2a:ed:
         fd:59:1a:f9:08:a4:b6:f9:87:f0:0a:8d:bf:de:61:b5:29:4b:
         a0:aa:66:5b:58:e1:e5:ab:12:80:66:8c:f0:60:de:d4:d7:a8:
         be:79:8f:ea:64:42:ba:75:7b:38:85:12:42:71:d1:13:d1:56:
         e2:99:ed:98:32:00:ed:36:8c:d3:ac:7e:c9:ce:35:1b:8f:b4:
         8c:8e:2e:9f:96:57:54:4b:45:ae:b6:fa:d8:c1:18:30:73:0b:
         f0:4a:67:e3:93:3d:84:c6:03:2a:5c:81:56:a7:d2:79:d2:60:
         26:3a:45:62:ed:84:c7:32:af:fd:67:83:83:8b:39:98:d0:d0:
         d6:33:81:94:f1:39:58:11:b0:77:82:0b:92:fd:74:0a:26:49:
         f4:a7:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:55:42 2026 by rpki-client