Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
File:                     6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft (raw, json)
Hash identifier:          ZPeFxdoIg+uMCBVp7BVuErwnOSSH4R2mbOF76fLoXbQ=
Subject key identifier:   84:EC:7F:B7:EF:16:B7:48:1B:28:A1:26:32:8D:1E:E2:2C:8C:8C:87
Authority key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA
Certificate issuer:       /CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
Certificate serial:       41D89BE3FFAFC13FC60A3A17457700D896019499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
Manifest number:          043F
Signing time:             Wed 25 Mar 2026 15:28:43 +0000
Manifest this update:     Wed 25 Mar 2026 15:23:43 +0000
Manifest next update:     Thu 26 Mar 2026 19:09:43 +0000
Files and hashes:         1: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl (hash: jgkm/mjquNJ6mvmM4AEmb76DCtq34JH8HBjgoIGXsnc=)
                          2: AS48700.asa (hash: C6poKzLysJKn2xBPGTwFxBEZkUwyOo+wJDJRV11LSl4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d8:9b:e3:ff:af:c1:3f:c6:0a:3a:17:45:77:00:d8:96:01:94:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
        Validity
            Not Before: Mar 25 15:23:43 2026 GMT
            Not After : Mar 26 19:09:43 2026 GMT
        Subject: CN=84EC7FB7EF16B7481B28A126328D1EE22C8C8C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:e5:3e:f0:01:d1:5a:bc:8c:db:7a:1d:88:
                    a5:75:33:8b:dd:2d:56:b0:9e:bf:6b:26:7a:9d:64:
                    51:07:3b:8b:cc:f4:85:13:92:23:7a:1b:0b:bb:15:
                    92:06:0a:77:19:ba:31:9f:8a:ee:2b:ed:85:64:e1:
                    16:93:eb:33:59:8f:c7:58:1c:31:af:a4:ae:1d:8d:
                    0f:2f:de:e6:a9:a1:d0:81:92:22:51:a1:25:5a:06:
                    22:8a:6e:dd:41:e6:1a:3f:a1:30:ba:4e:c9:63:c4:
                    ac:81:28:43:da:36:99:19:d1:15:3e:7b:dd:03:67:
                    b7:2f:7c:e2:bd:7a:e5:46:34:74:5d:4f:7e:cf:41:
                    98:04:20:01:73:66:3a:44:6b:17:21:10:c5:d8:ba:
                    b3:8b:5d:a0:f4:1b:5e:5f:55:78:ef:ec:5b:05:17:
                    d3:0a:d3:14:cc:25:d1:41:69:43:ff:b2:90:17:a3:
                    b3:02:63:b5:4e:9d:aa:8b:ac:b8:c5:46:a8:a4:10:
                    80:a0:92:2a:d0:9b:15:92:19:a4:93:01:3d:74:5c:
                    9c:41:e5:58:4e:1d:35:54:86:47:9d:c4:1d:36:07:
                    9d:78:70:ef:b2:1e:37:8b:4c:02:9d:2b:d0:08:30:
                    1c:59:f9:d2:07:f1:1a:06:5a:7c:8c:3f:99:4b:be:
                    ff:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EC:7F:B7:EF:16:B7:48:1B:28:A1:26:32:8D:1E:E2:2C:8C:8C:87
            X509v3 Authority Key Identifier:
                keyid:60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c0:70:8e:c2:89:2e:63:48:9c:ab:bf:44:56:99:cc:5b:72:
         26:72:70:ea:2b:a2:a1:d8:04:f6:6b:04:fa:74:3b:b5:e9:39:
         ac:93:7d:39:64:dd:fa:f1:56:19:87:27:02:fa:c8:e7:3d:e1:
         94:4e:5d:38:06:c7:ed:d5:c6:43:56:ce:06:35:09:02:ef:4d:
         23:a9:e3:35:c1:59:b2:3b:73:fe:c2:30:96:e9:34:11:b0:53:
         ef:74:0e:c7:ef:33:0c:44:ed:f3:c4:e5:ac:9d:1f:60:23:e7:
         0c:bc:8a:a9:44:7a:eb:af:09:d3:08:16:1b:42:74:3c:17:fd:
         2e:14:aa:b8:2d:af:f8:bc:5c:19:89:78:71:86:a7:de:47:7b:
         28:69:1b:68:d9:d2:38:df:b3:d1:e6:32:27:89:5f:e5:ad:23:
         d0:7b:10:24:a3:b2:3c:1b:46:a4:70:94:e2:bd:cc:19:ed:5e:
         fb:e5:d1:70:f7:ec:8b:58:84:15:53:f3:59:6a:fb:46:74:3d:
         26:f2:71:a9:cf:7b:85:b9:4c:e2:19:5b:83:b4:6a:5d:49:34:
         2a:fe:67:7a:68:e9:11:ed:19:a9:92:31:ab:52:32:c1:1e:a5:
         85:26:b9:13:14:42:25:26:90:4c:48:25:2c:c1:d4:07:1a:74:
         65:f9:75:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:48 2026 by rpki-client