Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
File:                     BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft (raw, json)
Hash identifier:          m1cP7PbU1zLWLzoil39VJVnyjxl6HhRr5Z5jYplnqeY=
Subject key identifier:   38:8D:47:B7:57:A4:C2:2B:30:30:36:A2:D3:4E:61:AB:F9:71:60:1A
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Certificate issuer:       /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial:       31B44AF3764449E4A2B466DE20A5975777FBDE22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
Manifest number:          011E
Signing time:             Thu 23 Jul 2026 14:33:18 +0000
Manifest this update:     Thu 23 Jul 2026 14:28:18 +0000
Manifest next update:     Fri 24 Jul 2026 14:58:18 +0000
Files and hashes:         1: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl (hash: sBunVNDBFsvW2sOkvEqQwmReafBYZ+00k3N5CD2aXFo=)
                          2: AS210352.asa (hash: eDmTtEI2L8UnjXdJYLK4KpDqqBZSh4hjuB+p0Ri9A6I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b4:4a:f3:76:44:49:e4:a2:b4:66:de:20:a5:97:57:77:fb:de:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
        Validity
            Not Before: Jul 23 14:28:18 2026 GMT
            Not After : Jul 24 14:58:18 2026 GMT
        Subject: CN=388D47B757A4C22B303036A2D34E61ABF971601A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:10:0e:c8:f2:da:8a:22:b7:b7:1f:a2:22:
                    45:4d:cb:ae:10:98:73:92:d1:60:ac:c7:29:2a:94:
                    49:81:cb:1f:1f:b1:81:29:03:83:df:1f:e6:15:d3:
                    a0:fe:4c:5e:2d:02:7b:3a:43:c1:9a:36:e3:3d:4c:
                    91:e6:b2:de:ed:b0:0d:e3:5a:4b:03:96:80:fa:4a:
                    4d:f5:00:43:b6:71:b8:55:11:bc:6f:b8:3d:da:f1:
                    83:c6:30:f5:7f:9c:25:e2:8f:3a:d5:93:24:4d:d4:
                    d9:a2:9b:ab:b4:67:6a:1d:22:68:9a:00:03:db:91:
                    a6:ba:ec:ac:73:2c:9c:58:7e:90:fe:62:6d:cd:67:
                    7c:26:6f:8a:60:7b:b1:f0:63:6e:7d:6f:14:83:4a:
                    f5:af:4c:1a:b8:29:62:84:3c:b3:bd:a7:98:7f:a2:
                    1f:bb:b3:cc:c8:66:8f:1d:f6:dd:0c:04:f6:fb:64:
                    d3:ec:2c:f1:31:c2:b7:12:8e:86:37:cc:88:75:1f:
                    e2:ea:6c:f9:38:a3:b7:f2:90:f2:15:0d:23:65:0a:
                    6c:0c:a1:ce:4f:37:fe:6b:d3:3b:ce:41:23:5f:09:
                    95:24:2e:3e:81:26:33:a2:dd:4f:18:2d:ed:78:4e:
                    a3:27:37:a4:66:c5:34:10:77:6b:51:ca:56:2f:00:
                    3e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8D:47:B7:57:A4:C2:2B:30:30:36:A2:D3:4E:61:AB:F9:71:60:1A
            X509v3 Authority Key Identifier:
                keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:0b:1f:e4:76:d6:02:c4:66:22:80:28:36:fa:b0:76:22:28:
         96:7b:d7:55:28:fa:c8:ec:46:6b:b6:41:1f:28:d8:bf:bc:d8:
         3f:08:11:49:71:e0:2f:50:4b:af:03:70:34:ef:71:a3:aa:77:
         6b:31:eb:f2:41:c6:d2:18:26:98:80:62:ba:9d:2f:d8:cc:d4:
         a9:ce:5a:e3:38:67:6b:99:b6:59:e1:17:a8:a2:22:02:0a:23:
         80:c8:68:87:98:86:9a:1e:49:37:0d:fd:ed:48:20:dd:29:9c:
         8a:e4:ea:d0:64:b4:0d:ff:70:be:2c:88:84:75:54:94:59:39:
         5b:23:2e:13:42:55:44:1a:8f:64:2b:bb:98:07:60:b7:9c:2a:
         13:1e:cb:2f:3a:85:db:53:da:23:66:e8:51:3b:5a:ea:88:49:
         e7:26:4d:f0:55:ed:79:46:43:36:ff:8f:43:8e:ba:74:db:4c:
         d2:11:eb:16:2f:90:39:d7:a2:3d:fb:4b:2e:0c:f1:cd:12:cd:
         82:6b:33:ac:81:36:e8:6c:fb:7b:38:64:3d:8f:40:de:5f:46:
         0a:de:04:60:a0:8a:0f:5c:2c:47:4a:c9:f2:8e:c9:6f:6a:86:
         d3:68:7a:ed:a7:26:83:48:c0:75:60:cb:92:cd:3b:0a:31:0a:
         26:ff:f3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:14 2026 by rpki-client