Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
File:                     06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft (raw, json)
Hash identifier:          cZ7mzi4/pvNGLslZW3GUrrtpmcYpe7w5X3yXki3p5zA=
Subject key identifier:   0A:9C:01:33:45:AD:72:CF:F3:84:A8:37:92:25:7C:27:23:78:DE:FF
Authority key identifier: 06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C
Certificate issuer:       /CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
Certificate serial:       4F9631A73E0C10FB5C895940AE3343E464585208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
Manifest number:          5C
Signing time:             Wed 25 Mar 2026 18:33:07 +0000
Manifest this update:     Wed 25 Mar 2026 18:28:07 +0000
Manifest next update:     Thu 26 Mar 2026 20:47:07 +0000
Files and hashes:         1: 06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl (hash: 8oh8bLXyVp+0peXbXdpGJHuo8DaLx9XOziv3X/VJWO0=)
                          2: AS202782.asa (hash: BUvQaaL6LDCtZinny59vQWt/MEabU/h3KDaRVhwqAQM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:96:31:a7:3e:0c:10:fb:5c:89:59:40:ae:33:43:e4:64:58:52:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
        Validity
            Not Before: Mar 25 18:28:07 2026 GMT
            Not After : Mar 26 20:47:07 2026 GMT
        Subject: CN=0A9C013345AD72CFF384A83792257C272378DEFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0b:17:63:22:03:1f:80:46:a3:34:0e:09:f3:
                    03:a1:5c:41:e7:4a:8f:72:26:6b:1e:21:52:53:e6:
                    93:1d:04:11:9a:0f:d3:75:de:56:55:45:e1:a4:00:
                    9e:da:85:cf:2b:e0:e8:a5:d0:4b:27:aa:a7:94:ca:
                    31:04:a5:5d:c6:33:8a:66:cb:92:29:fe:4a:00:f6:
                    dd:da:f9:a7:49:2a:45:dd:1a:c4:a1:4e:48:a0:0a:
                    a2:bd:a5:08:d3:f8:b8:3a:8f:03:43:e2:3f:8d:18:
                    65:a4:5a:3e:ee:29:10:cd:2a:e0:60:6b:82:93:4e:
                    f5:02:92:14:1a:02:a0:2c:8e:e7:00:f7:c5:ef:de:
                    ef:e1:52:85:46:d3:8a:54:47:ee:15:ea:e3:d2:3d:
                    07:99:2f:13:39:03:4e:2b:1f:2a:3a:15:65:de:cc:
                    21:3a:d2:eb:17:d6:ff:db:a0:92:f1:62:f8:2e:42:
                    ba:09:d2:52:e2:9c:79:18:1a:67:63:e8:03:a7:95:
                    aa:bb:2e:31:5e:39:8b:a1:b1:1b:20:71:03:8f:c2:
                    9d:66:74:60:b9:d7:e0:fa:54:b2:36:31:2d:fb:c2:
                    1d:29:d5:1c:88:a0:95:1b:8e:a3:c5:80:d5:cc:05:
                    bd:8c:44:cb:cb:86:2c:21:8f:63:73:f7:1d:35:fd:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9C:01:33:45:AD:72:CF:F3:84:A8:37:92:25:7C:27:23:78:DE:FF
            X509v3 Authority Key Identifier:
                keyid:06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6a:fb:fe:44:79:46:c8:10:b8:31:f0:b1:93:4a:f1:ce:27:
         80:84:9d:02:93:62:86:fb:d6:79:60:34:9a:a3:ef:d6:e0:01:
         59:b7:b0:8d:ce:e7:ff:9c:3d:e4:f4:9b:99:02:e0:ed:0a:f9:
         4f:e7:02:37:c8:34:ea:c6:37:60:23:30:dc:f7:36:b4:bf:f0:
         24:1e:ba:19:6f:80:08:c3:2f:c8:9e:51:e7:33:b7:0f:22:1b:
         ed:67:77:79:a4:60:cb:ff:ef:c0:cf:3c:5b:b4:5e:e9:91:b5:
         cd:c5:51:77:b1:81:22:2f:28:46:1a:26:fb:07:d3:90:e3:3b:
         ac:2c:6e:63:0b:eb:4f:bd:e8:78:cf:51:9c:79:03:66:c3:d3:
         fc:18:61:9c:ec:50:b4:e9:ca:92:ea:9d:87:51:b1:86:30:a1:
         fd:8a:b0:1f:4d:2b:e8:c0:16:2c:a9:ef:07:57:18:2b:dd:58:
         70:fb:bd:b1:8d:33:e4:86:b5:61:4d:87:12:fd:a9:f7:54:55:
         21:c9:43:8c:b1:2a:71:45:c3:0c:99:e4:0d:e3:af:65:7a:a0:
         f8:5f:b8:fc:74:09:b2:bd:6d:7c:f4:10:aa:a5:e0:b7:36:69:
         02:96:50:0d:83:e4:55:4e:21:30:ef:ae:de:61:9c:7d:f3:a4:
         d1:cc:4d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:11 2026 by rpki-client