Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
File:                     1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft (raw, json)
Hash identifier:          EGww9uPClIhmNgWnF1muJcXl9NZlA/Qlo+Dg29B+0HU=
Subject key identifier:   D4:3C:09:DD:A9:17:A9:32:91:96:7A:B8:CA:49:02:6D:12:70:79:53
Authority key identifier: 1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51
Certificate issuer:       /CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
Certificate serial:       5E0EF599C206FC421C5DCF08112D297725231BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
Manifest number:          01AB
Signing time:             Thu 26 Mar 2026 04:25:23 +0000
Manifest this update:     Thu 26 Mar 2026 04:20:23 +0000
Manifest next update:     Fri 27 Mar 2026 05:08:23 +0000
Files and hashes:         1: 1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl (hash: pwzDdLN0Rxu/bEk3c7ywVuwcSjWeilYDn4fxkgxNbok=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0e:f5:99:c2:06:fc:42:1c:5d:cf:08:11:2d:29:77:25:23:1b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
        Validity
            Not Before: Mar 26 04:20:23 2026 GMT
            Not After : Mar 27 05:08:23 2026 GMT
        Subject: CN=D43C09DDA917A93291967AB8CA49026D12707953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:e1:77:7f:a6:02:e4:6c:2e:82:2b:5e:98:
                    fc:01:25:37:bb:a4:75:2c:8b:a4:16:85:49:b1:9f:
                    79:83:5f:ba:11:a9:b6:c3:24:f3:da:09:09:4e:75:
                    ed:9b:83:b9:c9:48:19:80:e4:8c:dd:98:36:ba:cb:
                    a5:97:85:dc:49:49:40:89:c3:cc:3c:42:f9:47:47:
                    04:9d:62:d7:36:9e:e4:1b:74:c4:72:40:06:93:ba:
                    ef:e0:0b:c5:48:25:80:2c:c2:fb:35:9a:20:66:50:
                    57:57:9d:b3:a5:59:52:60:e1:3d:bf:11:37:b9:d0:
                    df:8c:46:ae:9c:02:74:1e:36:d7:1d:77:ed:fe:65:
                    a5:ff:45:2e:d4:ba:8e:8e:b8:01:97:18:02:44:60:
                    f8:be:7d:8e:31:2d:bf:b4:c6:32:25:a1:9e:ea:3e:
                    dc:8c:fe:ce:f2:8a:43:ee:d0:ec:bd:e4:54:24:ab:
                    bb:3b:57:6d:bd:ed:10:4d:81:03:75:40:bb:c6:b6:
                    18:fe:d4:76:ab:8c:d3:66:1c:bb:07:ce:cb:be:1e:
                    ca:f5:87:32:ed:04:34:83:05:d9:78:20:92:58:c9:
                    d3:84:97:ae:e8:53:e8:ca:15:62:94:e6:b1:bb:f7:
                    17:85:f5:ad:51:87:62:8f:66:9d:27:5a:15:11:ef:
                    30:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3C:09:DD:A9:17:A9:32:91:96:7A:B8:CA:49:02:6D:12:70:79:53
            X509v3 Authority Key Identifier:
                keyid:1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f3:5f:21:60:92:24:54:50:fd:4d:5f:2c:c1:3e:67:61:9c:
         cd:72:de:47:6f:c6:c8:1b:2c:3e:28:e2:24:7a:77:34:63:b8:
         c3:fa:3c:df:43:2a:a9:4c:51:76:6a:45:18:5c:54:f0:dc:9b:
         d9:3d:44:c2:0e:c2:6c:7c:7a:7b:85:0b:2d:ee:39:ad:2c:6d:
         8a:3a:9d:51:3b:19:6e:22:91:5f:f1:ee:99:b4:07:75:1b:d6:
         cb:fc:bc:05:73:7e:69:4e:cd:b9:8e:4c:5a:d1:ad:a2:2a:60:
         95:68:1a:f3:d2:72:1c:32:35:eb:90:8a:fb:fa:b8:62:5d:3c:
         87:6d:5b:86:4a:b8:40:36:1b:04:95:d8:1c:41:be:03:df:38:
         f5:aa:79:74:4c:28:3f:12:a4:42:b0:6e:49:cb:40:d3:33:b6:
         bd:1b:ba:fc:32:3f:36:2c:bc:f3:df:20:30:e4:3a:a4:75:85:
         f5:70:14:47:ed:6c:76:ff:6b:b1:2d:2b:0a:72:49:17:ec:ce:
         6c:03:a5:36:7e:86:a4:c5:94:cb:24:76:c7:2b:b0:5a:2d:a1:
         f9:50:27:f3:d9:b7:2a:22:3e:1a:80:32:21:3b:ae:82:1e:5a:
         5c:50:9a:40:4c:dc:85:51:39:13:0b:a9:15:49:26:f7:ec:09:
         5f:bd:ab:ed
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUXg71mcIG/EIcXc8IES0pdyUjG8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWFjNDZhYWZkMTVlZWUwYjFmZTYwNzJlNGYwZGRmMjcx
YzAzZWU1MTAeFw0yNjAzMjYwNDIwMjNaFw0yNjAzMjcwNTA4MjNaMDMxMTAvBgNV
BAMTKEQ0M0MwOUREQTkxN0E5MzI5MTk2N0FCOENBNDkwMjZEMTI3MDc5NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgieF3f6YC5GwugitemPwBJTe7
pHUsi6QWhUmxn3mDX7oRqbbDJPPaCQlOde2bg7nJSBmA5IzdmDa6y6WXhdxJSUCJ
w8w8QvlHRwSdYtc2nuQbdMRyQAaTuu/gC8VIJYAswvs1miBmUFdXnbOlWVJg4T2/
ETe50N+MRq6cAnQeNtcdd+3+ZaX/RS7Uuo6OuAGXGAJEYPi+fY4xLb+0xjIloZ7q
PtyM/s7yikPu0Oy95FQkq7s7V2297RBNgQN1QLvGthj+1HarjNNmHLsHzsu+Hsr1
hzLtBDSDBdl4IJJYydOEl67oU+jKFWKU5rG79xeF9a1Rh2KPZp0nWhUR7zB1AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU1DwJ3akXqTKRlnq4ykkCbRJweVMwHwYDVR0j
BBgwFoAUGsRqr9Fe7gsf5gcuTw3fJxwD7lEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWVhZjFmNmItMjA4MS00NjdhLTgwMzktZjFmOTY5YjRm
YjY2LzAvMUFDNDZBQUZEMTVFRUUwQjFGRTYwNzJFNEYwRERGMjcxQzAzRUU1MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0dzUnFyOUZlN2dzZjVnY3VUdzNmSnh3
RDdsRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZWFmMWY2Yi0y
MDgxLTQ2N2EtODAzOS1mMWY5NjliNGZiNjYvMC8xQUM0NkFBRkQxNUVFRTBCMUZF
NjA3MkU0RjBEREYyNzFDMDNFRTUxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPNfIWCSJFRQ/U1fLME+
Z2GczXLeR2/GyBssPijiJHp3NGO4w/o830MqqUxRdmpFGFxU8Nyb2T1Ewg7CbHx6
e4ULLe45rSxtijqdUTsZbiKRX/HumbQHdRvWy/y8BXN+aU7NuY5MWtGtoipglWga
89JyHDI165CK+/q4Yl08h21bhkq4QDYbBJXYHEG+A9849ap5dEwoPxKkQrBuSctA
0zO2vRu6/DI/Niy8898gMOQ6pHWF9XAUR+1sdv9rsS0rCnJJF+zObAOlNn6GpMWU
yyR2xyuwWi2h+VAn89m3KiI+GoAyITuugh5aXFCaQEzchVE5EwupFUkm9+wJX72r
7Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:09 2026 by rpki-client