Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
File:                     6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft (raw, json)
Hash identifier:          btKbjMTa0ESoEP2KxkOtA0Fqd6ieElmxJkcTf59IV24=
Subject key identifier:   89:7E:3E:BC:E5:34:91:CC:64:75:23:76:BC:3F:7A:B7:79:E2:77:F2
Authority key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
Certificate issuer:       /CN=6a3130acfbfba9017addef637acd312fc763829a
Certificate serial:       6E975B982ABAD4034E57B6D39B95F96A4FCC9DA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
Manifest number:          03BB
Signing time:             Wed 23 Sep 2026 08:25:00 +0000
Manifest this update:     Wed 23 Sep 2026 08:20:00 +0000
Manifest next update:     Thu 24 Sep 2026 09:47:00 +0000
Files and hashes:         1: AS211562.asa (hash: 8C3+cv4Ox/77O136RcP0jRWcrYpRs3rcK+fBYsAe678=)
                          2: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl (hash: xjPfLUKWhd1iKxKuiq50x2Q2Q4NkuBoLWKQyW/bTSBw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:97:5b:98:2a:ba:d4:03:4e:57:b6:d3:9b:95:f9:6a:4f:cc:9d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a3130acfbfba9017addef637acd312fc763829a
        Validity
            Not Before: Sep 23 08:20:00 2026 GMT
            Not After : Sep 24 09:47:00 2026 GMT
        Subject: CN=897E3EBCE53491CC64752376BC3F7AB779E277F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:5f:19:b4:06:92:98:5a:ac:49:b9:88:f7:
                    68:6d:6b:35:bb:ee:5c:e1:2e:cf:2e:27:f2:b5:00:
                    b8:b4:e3:ed:1a:c8:e5:77:41:96:3a:be:ed:6c:46:
                    7a:8a:2f:a4:fc:0c:8f:c7:f9:81:7d:ae:3d:5c:15:
                    cb:97:c8:28:04:ef:70:db:6c:50:68:54:47:e5:18:
                    ce:74:10:ff:2c:4f:e8:bf:1a:72:a3:f7:c1:f9:2c:
                    55:df:3d:ed:54:cd:df:c3:5a:e9:de:51:ff:79:26:
                    1e:73:4a:a0:db:c2:a6:49:e1:dd:f6:88:5d:7a:32:
                    a0:82:c5:c1:2c:78:39:89:87:50:34:34:ed:78:e1:
                    0b:17:64:52:a1:1b:19:3d:99:3a:c9:c9:29:33:2b:
                    0c:1e:da:fd:0e:ee:a7:0f:fd:76:ae:73:cb:0e:e8:
                    7d:03:3c:ee:32:09:5d:39:96:17:3c:91:b1:da:ea:
                    ab:ab:03:55:56:4f:b3:41:a8:b5:af:16:c6:46:11:
                    e2:66:fb:51:f1:9f:b2:29:ec:79:5f:38:da:4d:d3:
                    29:4d:85:89:ac:01:af:e6:57:cd:22:c1:ae:39:1c:
                    e8:91:4b:81:d0:20:07:49:bf:2d:2c:4b:6d:10:f2:
                    46:65:b6:d6:a0:e0:a4:aa:a1:1a:21:47:d9:09:f4:
                    9e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7E:3E:BC:E5:34:91:CC:64:75:23:76:BC:3F:7A:B7:79:E2:77:F2
            X509v3 Authority Key Identifier:
                keyid:6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:36:7e:b9:ea:41:e7:85:a1:e2:fd:05:04:44:b4:83:93:eb:
         b9:73:79:f2:78:d1:bd:bd:3d:82:a5:c3:fd:84:c5:ae:af:df:
         53:67:92:14:ba:48:04:9f:99:51:04:e4:8d:c7:7a:72:ac:1c:
         43:c4:f2:9e:bd:e7:3f:f4:b4:d5:8e:3f:29:02:ed:1b:6e:df:
         39:e1:65:88:af:04:c3:be:44:f9:46:66:b0:c6:da:af:dd:93:
         46:a2:5e:6d:70:45:66:57:2b:a7:86:e2:ea:5e:73:44:24:11:
         2f:13:78:49:0e:2e:85:6a:d3:87:94:0c:75:41:70:41:93:6b:
         df:45:09:3c:ac:5a:28:61:ff:6d:40:4f:17:06:f2:cf:7b:55:
         b7:cb:01:62:7c:07:9d:48:66:4c:5b:2c:fa:b1:2b:b2:1b:9e:
         1a:79:1a:8f:59:5a:33:2b:63:95:62:52:e1:85:49:d2:09:d9:
         7c:ba:ac:19:7c:b5:53:4b:83:08:96:c8:49:7b:2a:b8:02:f2:
         72:45:fd:ab:03:37:ba:b3:97:e7:5e:c1:69:e3:42:75:49:f4:
         9c:46:98:f1:6d:1e:59:fe:cb:97:6d:1c:d9:81:db:e2:02:01:
         a0:46:23:67:f8:cd:d5:89:26:ea:60:b2:05:51:f6:91:ae:fa:
         43:73:ef:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:27:03 2026 by rpki-client