Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
File:                     13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft (raw, json)
Hash identifier:          8xham+ng/vhvKTO+1fDZosXfbUp9r6d8gpMXAtkKTJk=
Subject key identifier:   38:37:B0:80:60:7E:3D:A1:F5:9B:71:5E:0A:39:89:13:47:55:21:F7
Authority key identifier: 13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42
Certificate issuer:       /CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
Certificate serial:       1541450FF506887E07057DD6F1A6AF1DC6CD7BA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
Manifest number:          A8
Signing time:             Wed 13 May 2026 01:54:32 +0000
Manifest this update:     Wed 13 May 2026 01:49:32 +0000
Manifest next update:     Thu 14 May 2026 04:04:32 +0000
Files and hashes:         1: AS202335.asa (hash: 0NdiPm1MTZqzdzR4lGr6HP2lgZbomN/E7sx//bw33I0=)
                          2: 13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl (hash: oq8o/qPmD+P9NXgEyorSXYWuFEES6FIL+7MlLCuxoew=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:41:45:0f:f5:06:88:7e:07:05:7d:d6:f1:a6:af:1d:c6:cd:7b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
        Validity
            Not Before: May 13 01:49:32 2026 GMT
            Not After : May 14 04:04:32 2026 GMT
        Subject: CN=3837B080607E3DA1F59B715E0A398913475521F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:67:df:45:14:c4:26:b5:84:9b:10:9f:09:da:
                    42:d1:7c:c6:1c:2b:94:6e:a8:cc:14:63:2b:48:62:
                    10:c2:15:1d:a7:ac:da:29:8f:38:94:b9:22:d4:07:
                    a4:76:6b:a2:9d:dd:bb:e1:47:6b:54:42:b6:c0:e2:
                    80:4b:00:a1:18:2e:57:c5:be:ef:da:f5:61:9e:21:
                    d8:ac:46:86:66:b6:e5:3e:27:a5:dd:a7:ae:c3:c0:
                    7b:50:31:60:36:c5:23:af:b0:44:de:4f:03:5c:29:
                    f7:09:f1:07:9c:a8:be:15:c5:76:55:01:1f:1c:2a:
                    7e:c6:c7:ba:27:d3:47:18:50:2c:66:eb:ba:33:e5:
                    7a:d7:42:ad:91:93:c8:83:2f:74:af:49:b4:b7:fa:
                    73:25:ab:4c:4f:56:9a:dd:47:fb:1d:a1:27:58:17:
                    05:43:73:f6:50:28:27:ae:12:d0:17:60:c3:2f:b2:
                    2c:16:e4:b6:c0:c6:eb:a4:c2:37:c1:99:e4:8e:fb:
                    28:fb:0f:a7:50:44:80:0c:bc:e0:68:31:bf:2f:9a:
                    0d:81:f6:21:67:62:21:2d:c7:a8:c5:99:98:ee:39:
                    ba:a1:2c:15:d1:35:18:c3:e7:19:db:24:70:64:59:
                    09:fe:4f:1b:dd:d8:68:1c:ec:2e:f2:e6:08:b1:a7:
                    1f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:37:B0:80:60:7E:3D:A1:F5:9B:71:5E:0A:39:89:13:47:55:21:F7
            X509v3 Authority Key Identifier:
                keyid:13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1b:92:a0:75:b7:08:17:4a:1f:e0:c3:00:8a:09:fd:a5:3d:
         a6:2b:15:d6:6b:32:fe:80:cf:31:ed:99:70:94:cc:ac:ae:3a:
         72:ab:bd:e7:0b:04:00:cb:3f:9d:ee:c3:65:1b:39:92:95:35:
         ec:72:e7:7b:c9:f2:2a:71:7d:ef:f0:21:c7:28:c4:84:d5:98:
         c2:e7:44:88:52:39:3d:82:34:a4:e9:0b:6e:f8:1f:4f:2e:c8:
         b5:bb:f6:7d:93:9c:72:47:23:d2:c6:98:25:ec:e4:4d:ed:95:
         7c:71:3a:a8:af:b9:9c:ca:48:3d:29:9d:0b:e1:42:25:bf:8f:
         de:18:0c:b4:e4:f2:9c:b4:3a:17:b7:1c:66:84:33:31:82:51:
         05:2e:db:e2:10:11:e0:25:87:70:5f:b8:41:5c:e2:12:a5:cf:
         b0:42:0b:8b:da:e5:ba:59:b9:0e:46:01:4a:73:c0:94:be:e2:
         2d:96:1a:ec:b0:d0:c3:f2:16:50:93:05:d9:8e:5e:1c:59:1d:
         e1:e2:5f:7c:28:ef:c1:3d:1c:69:3b:4f:c8:87:98:27:68:23:
         7a:b3:03:34:52:f5:70:31:cd:1a:1b:6e:f7:e5:32:52:c3:10:
         72:10:30:59:65:4e:74:11:e9:97:8a:e2:06:a7:47:46:26:ef:
         c3:3e:ff:dd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFUFFD/UGiH4HBX3W8aavHcbNe6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNlZDI3ZWJmNzQ0NTEyYmI3YzQzMDNmZDJmZThiOTRl
NDQ4NjI0MjAeFw0yNjA1MTMwMTQ5MzJaFw0yNjA1MTQwNDA0MzJaMDMxMTAvBgNV
BAMTKDM4MzdCMDgwNjA3RTNEQTFGNTlCNzE1RTBBMzk4OTEzNDc1NTIxRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdZ99FFMQmtYSbEJ8J2kLRfMYc
K5RuqMwUYytIYhDCFR2nrNopjziUuSLUB6R2a6Kd3bvhR2tUQrbA4oBLAKEYLlfF
vu/a9WGeIdisRoZmtuU+J6Xdp67DwHtQMWA2xSOvsETeTwNcKfcJ8QecqL4VxXZV
AR8cKn7Gx7on00cYUCxm67oz5XrXQq2Rk8iDL3SvSbS3+nMlq0xPVprdR/sdoSdY
FwVDc/ZQKCeuEtAXYMMvsiwW5LbAxuukwjfBmeSO+yj7D6dQRIAMvOBoMb8vmg2B
9iFnYiEtx6jFmZjuObqhLBXRNRjD5xnbJHBkWQn+Txvd2Ggc7C7y5gixpx+dAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUODewgGB+PaH1m3FeCjmJE0dVIfcwHwYDVR0j
BBgwFoAUE+0n6/dEUSu3xDA/0v6LlORIYkIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw
ZGM5LzAvMTNFRDI3RUJGNzQ0NTEyQkI3QzQzMDNGRDJGRThCOTRFNDQ4NjI0Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0UtMG42X2RFVVN1M3hEQV8wdjZMbE9S
SVlrSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80MGNiYTYxZC00
MDU2LTQ2YTktOTM5Mi1hNjFkZmM1MDBkYzkvMC8xM0VEMjdFQkY3NDQ1MTJCQjdD
NDMwM0ZEMkZFOEI5NEU0NDg2MjQyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhuSoHW3CBdKH+DDAIoJ
/aU9pisV1msy/oDPMe2ZcJTMrK46cqu95wsEAMs/ne7DZRs5kpU17HLne8nyKnF9
7/AhxyjEhNWYwudEiFI5PYI0pOkLbvgfTy7Itbv2fZOcckcj0saYJezkTe2VfHE6
qK+5nMpIPSmdC+FCJb+P3hgMtOTynLQ6F7ccZoQzMYJRBS7b4hAR4CWHcF+4QVzi
EqXPsEILi9rlulm5DkYBSnPAlL7iLZYa7LDQw/IWUJMF2Y5eHFkd4eJffCjvwT0c
aTtPyIeYJ2gjerMDNFL1cDHNGhtu9+UyUsMQchAwWWVOdBHpl4riBqdHRibvwz7/
3Q==
-----END CERTIFICATE-----
Generated at Wed May 13 07:21:01 2026 by rpki-client