Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
File:                     13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft (raw, json)
Hash identifier:          bbov9/uDFh825CSPINO65mpVCkGlH8C0/PvwP5VUHaM=
Subject key identifier:   6E:91:BB:DB:08:DF:D1:A2:64:6D:24:AC:51:61:66:57:97:1D:1A:2E
Authority key identifier: 13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42
Certificate issuer:       /CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
Certificate serial:       0FCCAF4C54ADA9533F786FE6863C645C072F0E30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
Manifest number:          67
Signing time:             Wed 25 Mar 2026 09:15:33 +0000
Manifest this update:     Wed 25 Mar 2026 09:10:33 +0000
Manifest next update:     Thu 26 Mar 2026 12:57:33 +0000
Files and hashes:         1: 13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl (hash: 725RF8g9PxyI/iZF4H07tRORXHdyy1f0Wwq4bwNvXHk=)
                          2: AS202335.asa (hash: 0NdiPm1MTZqzdzR4lGr6HP2lgZbomN/E7sx//bw33I0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cc:af:4c:54:ad:a9:53:3f:78:6f:e6:86:3c:64:5c:07:2f:0e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
        Validity
            Not Before: Mar 25 09:10:33 2026 GMT
            Not After : Mar 26 12:57:33 2026 GMT
        Subject: CN=6E91BBDB08DFD1A2646D24AC51616657971D1A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:48:22:9f:e3:0d:3a:92:0b:88:ff:40:97:
                    f0:d8:9f:ae:d9:f2:cf:c3:1b:be:bd:98:3e:b6:17:
                    ab:9b:01:f1:15:c9:b9:47:21:05:27:43:90:ab:5d:
                    00:04:94:17:05:98:3c:82:81:68:a7:fe:2c:c8:a5:
                    ff:16:e0:83:f2:e9:a1:02:d8:ac:1d:8c:4f:09:0e:
                    e0:91:a8:f1:78:56:09:65:2f:f8:ef:53:61:04:a7:
                    01:17:2b:b3:42:cd:df:03:d9:97:66:69:ee:9c:2d:
                    61:8b:1b:42:bb:e5:17:89:4e:57:95:c7:54:a8:59:
                    79:e8:71:e9:38:a9:05:55:aa:7c:8d:5e:5b:b4:da:
                    b7:b0:8c:3a:37:6d:91:70:8e:43:4d:dc:05:0a:28:
                    18:aa:db:18:cb:b6:8f:e0:81:b7:d2:b6:5b:bd:1f:
                    05:c8:6e:ad:0d:1b:c3:97:37:1d:f1:28:eb:c3:7f:
                    6d:52:10:d1:d7:e0:14:2f:a1:9b:be:52:71:37:39:
                    c5:ac:d9:8c:9e:1f:58:3d:40:88:c2:c4:61:13:94:
                    3d:45:df:b0:0f:d8:c8:43:38:ba:9d:88:83:fd:f9:
                    22:71:5e:eb:5d:f8:ae:98:dd:85:8d:c1:5e:48:28:
                    c0:f4:f9:88:9d:12:09:a7:2c:79:18:8d:26:b0:4f:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:91:BB:DB:08:DF:D1:A2:64:6D:24:AC:51:61:66:57:97:1D:1A:2E
            X509v3 Authority Key Identifier:
                keyid:13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1b:56:c2:43:7d:00:c9:7d:8d:a8:bd:41:74:1d:f5:36:17:
         f0:d0:2e:6c:b2:fa:fe:75:37:77:3a:df:f8:98:ca:1a:66:d4:
         dd:5e:6a:f7:8d:ba:f4:b6:3b:85:cd:3b:06:dc:4f:06:80:fe:
         02:60:df:3a:f1:e9:19:99:97:8a:eb:5e:fc:4a:d4:2a:93:d4:
         94:fd:c4:f0:3d:f6:e9:cd:4b:1b:da:08:0c:f3:44:68:a0:e2:
         aa:7a:7a:89:5c:83:d3:a6:ce:3c:dd:60:15:cc:67:af:91:5b:
         ec:f9:49:4b:02:89:ea:ff:97:76:dc:c4:1f:d3:8b:6d:52:31:
         66:de:0e:ce:00:0e:38:bf:4b:6f:a8:e5:3d:c4:6e:58:43:9e:
         f7:76:ec:4f:0f:37:42:df:10:39:35:62:17:14:9a:ad:5b:21:
         4b:47:7d:93:04:0d:9f:c2:19:eb:2d:d0:bc:16:26:a3:0b:3b:
         29:1e:a4:d3:94:ae:5f:d8:5b:6f:78:41:cd:52:b5:00:78:0a:
         d7:85:e3:9b:56:91:08:9e:c6:ed:31:cb:29:41:51:d5:34:e6:
         99:02:1a:fb:bf:38:c6:ec:72:9e:d0:26:7a:e2:bf:b6:64:cc:
         9e:96:22:03:d1:40:74:d7:5c:fb:d2:92:6c:2d:b2:b4:6d:c9:
         c4:8a:ac:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:09 2026 by rpki-client