Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
File:                     883931AAB8B1363015BC8FDDF0B582321767440A.mft (raw, json)
Hash identifier:          GmZtkswJLsLvJUdni+vnt7AkxCAJio3vo1NPBvskcC4=
Subject key identifier:   F0:25:7F:83:6E:7A:85:76:D0:34:DB:81:D8:67:76:83:A8:BC:5B:FF
Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
Certificate issuer:       /CN=883931aab8b1363015bc8fddf0b582321767440a
Certificate serial:       0935A2B4D751EFD5498101204315CB3945971C4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
Manifest number:          0124
Signing time:             Thu 23 Jul 2026 09:23:54 +0000
Manifest this update:     Thu 23 Jul 2026 09:18:54 +0000
Manifest next update:     Fri 24 Jul 2026 10:45:54 +0000
Files and hashes:         1: 883931AAB8B1363015BC8FDDF0B582321767440A.crl (hash: lH/iedpM0ON1oUvvChQ1BnyYCHCqJ9w7D3Ul7B4c/g4=)
                          2: AS213605.asa (hash: /VNMUci42IHQGokYnePPu+nWfjn6z+W+mTSXWO4Akec=)
                          3: 323030313a3637383a3533633a3a2f34382d3438203d3e20313534313835.roa (hash: ToBUFvUom+h4rbM7uZ7L3aEUItGSsZaFzls2rQ5hJzY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:35:a2:b4:d7:51:ef:d5:49:81:01:20:43:15:cb:39:45:97:1c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a
        Validity
            Not Before: Jul 23 09:18:54 2026 GMT
            Not After : Jul 24 10:45:54 2026 GMT
        Subject: CN=F0257F836E7A8576D034DB81D8677683A8BC5BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:13:97:70:97:e1:44:35:0e:ac:27:c1:0a:
                    ee:e0:9d:1d:0b:0a:2f:33:fd:f0:5d:28:d4:f3:4c:
                    8d:48:0e:01:9b:ad:c1:84:e0:b6:c8:a4:4f:18:1e:
                    1d:60:75:b4:72:9e:0e:3e:92:c4:bc:49:39:d8:ef:
                    d8:d7:59:79:23:97:1a:4e:df:53:14:c9:6d:73:53:
                    30:5c:4b:bd:d4:9e:f9:5f:99:cc:a8:6b:c9:6e:7a:
                    5f:ba:7a:7f:d3:5c:57:bc:36:e3:5d:54:3e:52:7e:
                    ea:e0:d1:3b:6e:9d:2d:14:19:04:39:f9:cd:4b:af:
                    78:6b:a9:f5:09:0d:2c:91:95:d4:34:d2:32:4b:3e:
                    20:18:dc:54:f6:d7:63:93:2c:27:58:45:b5:1d:e9:
                    15:d8:86:94:a3:99:66:fb:e8:b6:d3:5f:c1:02:d9:
                    d3:9d:6a:e3:ea:a8:81:65:2d:07:fb:f6:a6:91:f9:
                    81:99:34:d4:5f:06:fc:fb:d8:54:32:3c:77:e1:a7:
                    44:cb:46:03:6a:6d:8e:c0:3a:3e:ea:f1:9e:9e:fe:
                    30:df:92:d2:ed:58:1a:22:fd:3c:a2:c0:b8:93:45:
                    85:4c:bb:85:aa:5e:67:49:4f:a4:2c:11:8a:d9:3e:
                    2e:a1:e4:02:f1:05:4d:88:86:20:ac:91:54:3c:f9:
                    59:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:25:7F:83:6E:7A:85:76:D0:34:DB:81:D8:67:76:83:A8:BC:5B:FF
            X509v3 Authority Key Identifier:
                keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:e5:e0:fe:72:8f:6d:20:fb:cf:b0:9e:d2:a5:f8:34:60:8c:
         0c:4a:bf:7b:ef:bd:60:73:73:06:9c:ea:0c:be:1f:f9:d8:ca:
         fe:86:bc:e2:2f:b5:4e:45:f1:17:8f:64:99:77:7e:c0:a5:7b:
         d1:a5:ab:d7:e4:4b:b7:3c:c1:fb:a4:9d:1e:f7:f3:ab:26:0b:
         43:17:7f:49:1d:cc:aa:1d:81:06:35:e5:34:a2:19:54:59:f9:
         8c:83:1e:31:da:2a:fa:25:ae:32:18:5d:6f:20:93:ea:99:9f:
         4c:48:13:05:b2:e7:6b:d4:df:39:73:c0:0a:6b:00:6b:fc:04:
         f0:36:d6:e8:e0:59:82:d2:ad:34:38:e9:da:a8:5f:47:34:79:
         f8:21:aa:30:42:f1:54:8e:0e:8f:96:3b:ee:07:f3:57:08:75:
         f8:8d:25:fe:3a:63:5f:64:a9:a6:3b:15:07:2c:58:7b:e8:58:
         a3:85:51:0d:5a:dd:42:bf:b0:90:74:87:ea:56:db:f9:32:60:
         28:39:ff:af:fc:74:bd:7e:eb:9c:08:b5:3f:6a:d9:70:26:6e:
         71:cc:0f:c4:c2:7b:0a:f5:ce:ae:d2:bd:d5:09:e4:dd:db:6c:
         d2:66:ab:d6:93:02:77:d9:7a:47:95:c0:29:0e:7c:1e:ff:ef:
         c2:29:95:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:14 2026 by rpki-client