Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File:                     DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier:          o1cA6s8YNHEpiRt+oRPBDQihuN2rUeEL3WMS/CfQy+0=
Subject key identifier:   F5:86:CB:AE:EE:4C:19:70:2E:A1:65:C5:DB:55:D2:20:13:85:C2:12
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer:       /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial:       7A050435D0CFAB373F085442B04B39DA08EDAE2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number:          0359
Signing time:             Tue 12 May 2026 12:30:14 +0000
Manifest this update:     Tue 12 May 2026 12:25:14 +0000
Manifest next update:     Wed 13 May 2026 16:08:14 +0000
Files and hashes:         1: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: eyCZfu19vA+E02R/N8UyAwIxJPCGjcIvMyXW3W0osEY=)
                          2: AS215085.asa (hash: 7a341G7Gffj4oyeRnUz7yyrxEMobRVGoAA9D3EAfXXU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:05:04:35:d0:cf:ab:37:3f:08:54:42:b0:4b:39:da:08:ed:ae:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
        Validity
            Not Before: May 12 12:25:14 2026 GMT
            Not After : May 13 16:08:14 2026 GMT
        Subject: CN=F586CBAEEE4C19702EA165C5DB55D2201385C212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:cf:0c:20:7e:42:7f:e0:1e:4f:a1:e2:cc:
                    c2:20:87:25:69:ed:bd:b1:57:02:5d:16:ed:0b:ce:
                    5a:22:75:e8:c4:d5:45:5a:b9:fc:e1:77:43:6a:f3:
                    c7:e1:b4:36:54:73:30:69:a8:01:85:52:a5:23:52:
                    b4:2e:29:10:df:3f:14:24:4e:68:18:6e:0f:2c:c0:
                    cc:31:24:05:0b:c7:b5:8c:0f:36:1c:7d:73:ec:d7:
                    bf:ca:a7:6e:c1:ce:cf:42:a1:dc:5f:3a:36:a6:e5:
                    bb:94:59:56:ec:19:47:ae:9c:87:ae:f3:05:a5:f8:
                    8b:ad:87:7b:10:05:84:01:9b:ee:30:3b:e4:a9:cf:
                    fe:ed:19:20:b5:a6:a1:72:6f:16:fe:cd:56:30:37:
                    6a:ec:de:93:7c:fb:7e:9f:c3:36:b9:cf:55:51:85:
                    5d:8e:00:cf:1b:68:b3:15:86:8b:eb:0c:1b:85:9b:
                    8a:68:e5:f1:b6:9b:32:e9:ab:6c:8a:89:5c:ba:82:
                    3a:fe:ce:6b:da:df:66:40:2f:c5:87:1f:09:13:a9:
                    84:5f:6c:ea:c5:76:1c:52:a0:3e:eb:d3:dd:63:ff:
                    7f:27:d9:8e:49:08:61:a6:b2:bf:f0:12:21:4a:7a:
                    ca:79:ff:ce:81:76:de:e0:ec:15:f4:5c:4a:2d:18:
                    fc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:86:CB:AE:EE:4C:19:70:2E:A1:65:C5:DB:55:D2:20:13:85:C2:12
            X509v3 Authority Key Identifier:
                keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a0:2f:86:ae:4b:84:36:29:03:da:04:6a:35:c2:2e:38:f5:
         4c:e6:72:9d:b1:14:4b:9d:5d:ab:4e:85:a5:b3:13:21:c8:22:
         7d:13:cf:6d:df:c0:f7:42:0b:00:d7:23:5d:0b:aa:23:53:e4:
         de:68:36:22:0f:2d:9b:ad:11:25:13:40:7d:04:e0:ee:dc:d5:
         bf:bb:77:43:06:9e:3f:17:c5:74:73:ef:d4:85:d1:4b:49:c4:
         72:38:cb:b8:42:56:b1:0c:bf:55:7a:59:15:73:40:c0:53:11:
         43:d6:18:61:80:cd:e3:4c:19:28:f8:00:72:e8:ef:e4:f4:6b:
         af:f0:c8:ce:dd:3d:5e:4c:e1:5f:0e:3f:55:53:41:b4:a3:01:
         b8:c3:57:dd:58:24:6e:fc:0b:ac:26:b2:40:28:c4:8c:b8:ff:
         19:64:4b:fd:ec:b8:5c:54:0c:a2:ed:c5:f3:14:4e:66:46:bd:
         2d:7f:ca:96:d3:e2:fa:47:b7:e1:64:bc:cd:d1:cc:3f:22:da:
         73:9a:05:fd:44:10:88:6d:b0:7e:d0:97:81:c7:35:e6:e1:3c:
         14:c2:7a:dc:5f:e1:f0:b8:95:c9:0c:ca:9f:ac:51:18:27:c1:
         f9:f7:52:47:fa:dd:d8:6a:94:96:e8:8c:fe:ab:a5:08:83:78:
         22:14:4a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:14 2026 by rpki-client