Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.mft
File:                     26EAC0C665B207D6F15E4123457505C531F616E2.mft (raw, json)
Hash identifier:          lwIlCOC9mWQcVc82+xbJL3SuCuZlq90qlIvj0fvqeac=
Subject key identifier:   3E:F7:1D:B1:1B:DB:C7:5E:CD:E0:70:DD:F9:8B:F7:4D:41:DB:93:08
Authority key identifier: 26:EA:C0:C6:65:B2:07:D6:F1:5E:41:23:45:75:05:C5:31:F6:16:E2
Certificate issuer:       /CN=26eac0c665b207d6f15e4123457505c531f616e2
Certificate serial:       043E98873E61B6987EC1DAD0F86A6F253B17B654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JurAxmWyB9bxXkEjRXUFxTH2FuI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.mft
Manifest number:          BA
Signing time:             Thu 26 Mar 2026 00:02:01 +0000
Manifest this update:     Wed 25 Mar 2026 23:57:01 +0000
Manifest next update:     Fri 27 Mar 2026 00:47:01 +0000
Files and hashes:         1: 26EAC0C665B207D6F15E4123457505C531F616E2.crl (hash: 6yKJnbPhqL+ASo/Nj/QxkA5ApDRDF+3FXaCkKd0XrTU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JurAxmWyB9bxXkEjRXUFxTH2FuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3e:98:87:3e:61:b6:98:7e:c1:da:d0:f8:6a:6f:25:3b:17:b6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26eac0c665b207d6f15e4123457505c531f616e2
        Validity
            Not Before: Mar 25 23:57:01 2026 GMT
            Not After : Mar 27 00:47:01 2026 GMT
        Subject: CN=3EF71DB11BDBC75ECDE070DDF98BF74D41DB9308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:9d:3c:d7:5d:89:66:7e:4a:38:34:be:47:
                    03:c3:50:3b:99:81:a2:17:20:9e:e8:1a:8b:b6:5e:
                    3a:bd:9a:bc:80:4b:b1:c4:76:0e:01:89:5b:11:5d:
                    80:2d:36:c2:ad:9c:c5:75:28:d0:96:db:77:39:99:
                    37:05:52:48:d7:bb:20:23:59:7d:91:cc:d9:17:10:
                    9d:29:76:41:7f:12:e7:77:c8:b9:87:9d:b0:db:7c:
                    be:19:b4:9a:bf:f8:70:be:26:c2:c3:61:36:92:fb:
                    5a:27:be:2b:2d:8e:4a:0f:48:05:ae:66:c6:97:e8:
                    f7:1a:1a:10:f3:fa:bf:b2:49:20:eb:46:e8:4b:fc:
                    19:29:b5:12:c9:e3:ff:6c:20:a5:6a:c0:91:2d:ff:
                    98:ea:11:fb:1b:e5:5f:0e:ec:fa:69:f1:2f:a1:9c:
                    5b:21:e0:44:72:35:f4:ec:5f:79:09:cf:e6:ea:72:
                    d6:a4:9a:b4:2e:d5:76:ad:dd:3f:9f:d5:a7:74:d6:
                    87:d3:44:69:e1:91:fe:a9:e8:23:41:70:2c:d7:21:
                    22:1a:72:1d:b2:63:b1:06:27:d2:e4:35:a3:53:ad:
                    9e:a0:e2:24:10:94:a9:7d:e4:98:fc:9d:c7:d1:87:
                    0c:b1:dc:e1:e2:14:df:03:1f:2a:23:2e:b6:13:1f:
                    6b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F7:1D:B1:1B:DB:C7:5E:CD:E0:70:DD:F9:8B:F7:4D:41:DB:93:08
            X509v3 Authority Key Identifier:
                keyid:26:EA:C0:C6:65:B2:07:D6:F1:5E:41:23:45:75:05:C5:31:F6:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JurAxmWyB9bxXkEjRXUFxTH2FuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:33:f7:95:28:b9:df:fe:30:8d:79:f3:a8:ab:d6:a3:1d:d8:
         13:d3:58:ec:f1:0b:b2:5b:6d:ea:d1:f3:69:b2:c3:3d:85:81:
         ef:8d:42:80:65:62:07:20:f9:1d:6e:fa:36:58:72:2b:9b:c4:
         1e:69:72:ea:02:fa:24:60:a7:6c:da:d4:ae:5c:30:e4:9b:51:
         42:96:2f:50:bc:c7:30:51:88:9c:3d:c2:fe:70:76:ce:ef:8b:
         cb:89:5e:e2:91:4d:bf:a1:83:73:38:04:6a:61:cd:09:b2:b4:
         97:88:e1:c6:6d:50:8b:61:aa:98:f9:5b:9f:e7:c7:99:56:58:
         39:57:f1:b6:68:48:11:72:e2:0b:1a:4c:18:80:5f:dc:33:59:
         47:63:8d:40:76:6e:6a:1c:16:b4:6d:cc:84:96:37:64:27:63:
         d2:98:fa:00:98:54:e8:e6:92:c1:1b:d9:d4:e8:2e:38:f2:29:
         ff:85:6a:e4:e6:bf:e5:61:83:cc:45:bf:67:ce:f7:d9:8b:83:
         f3:05:f3:98:fa:f9:13:1d:33:95:25:a5:e4:b9:19:e6:9d:3d:
         d7:a7:33:6b:7e:2d:88:93:a5:34:85:b7:f4:33:f6:d9:1a:5b:
         a3:ee:03:26:c4:04:b3:ae:d9:f6:d9:a5:88:d4:1e:5f:d3:7c:
         b0:e6:da:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:38 2026 by rpki-client