Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
File:                     439CED080CC8B076E557B02CC83D8768D27D56A4.mft (raw, json)
Hash identifier:          yWA3+bRzBbsfvGNgdHF+oJyZtPaSizEhSnF43k4R+U8=
Subject key identifier:   F4:A3:BD:C5:6B:E4:1D:DE:ED:61:31:FA:D1:E0:1F:EF:DA:02:2E:BD
Authority key identifier: 43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
Certificate issuer:       /CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Certificate serial:       56566DC2B8C02B96096A13FBD40441F26A39041C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
Manifest number:          47
Signing time:             Tue 12 May 2026 15:21:30 +0000
Manifest this update:     Tue 12 May 2026 15:16:30 +0000
Manifest next update:     Wed 13 May 2026 18:56:30 +0000
Files and hashes:         1: AS216455.asa (hash: 3Hj6soP0mHi9tW3tH3/uigxupFi1xIZySq2M9PB9CK0=)
                          2: 439CED080CC8B076E557B02CC83D8768D27D56A4.crl (hash: D41yJBgN4JE+idB10ukKrIIX6h6FwQjkNmLQBqnAyvg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:56:6d:c2:b8:c0:2b:96:09:6a:13:fb:d4:04:41:f2:6a:39:04:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439ced080cc8b076e557b02cc83d8768d27d56a4
        Validity
            Not Before: May 12 15:16:30 2026 GMT
            Not After : May 13 18:56:30 2026 GMT
        Subject: CN=F4A3BDC56BE41DDEED6131FAD1E01FEFDA022EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:a1:49:cb:40:5a:cb:b6:3c:cf:99:6f:22:
                    65:63:dd:7e:6d:4a:0d:11:a6:ca:78:fd:d0:a2:ce:
                    d7:9c:a3:2d:00:eb:78:4f:40:71:df:d7:f6:9a:52:
                    9b:98:07:68:d6:4b:97:91:27:74:95:cf:70:df:cc:
                    4a:d9:b9:10:0a:39:26:27:1b:81:1d:11:42:d8:a4:
                    02:64:d1:1b:58:da:09:b6:79:17:d2:f8:42:a5:ba:
                    bb:36:08:64:01:3d:5a:a9:38:08:dc:f7:1f:f1:83:
                    20:f0:c8:66:31:5c:25:c9:e6:b4:82:b3:c4:c1:b7:
                    89:14:4d:ba:ad:f4:eb:79:7a:c7:b9:e7:6e:b1:9e:
                    89:ca:56:b8:e2:5d:15:a3:97:59:f5:12:18:3e:d5:
                    b6:7e:98:87:95:bb:4e:7e:f2:96:63:86:66:36:66:
                    42:7c:1b:9f:f0:1e:65:ab:76:2b:04:bc:bc:eb:d1:
                    40:12:59:4a:df:9c:17:74:91:77:f6:79:5d:b7:cf:
                    7e:20:22:ef:80:f6:60:98:42:63:60:7a:0a:88:3e:
                    9c:c5:f7:7d:cb:5f:9b:9b:ec:c8:36:00:c2:30:74:
                    f7:68:82:6d:1e:af:22:de:01:06:59:3c:80:ed:2c:
                    89:6a:6c:83:99:b9:3a:b9:52:42:a9:4f:d9:3f:a3:
                    b8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A3:BD:C5:6B:E4:1D:DE:ED:61:31:FA:D1:E0:1F:EF:DA:02:2E:BD
            X509v3 Authority Key Identifier:
                keyid:43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d7:7e:f4:4f:57:4f:64:85:54:50:7d:4b:41:b3:82:ba:85:
         7a:b1:11:0c:4b:91:1a:f3:7d:e1:0b:04:9c:57:95:42:f8:6d:
         a4:dd:d5:f6:14:31:0d:20:e6:cb:b9:ce:cd:75:63:17:c3:03:
         50:97:20:b8:30:6e:86:09:e7:3a:43:29:76:b7:4d:84:ff:ae:
         c4:0d:a2:3c:fd:c1:26:52:a0:9b:28:fc:41:12:5e:a9:0e:e7:
         b4:03:7f:71:b8:9b:7f:13:e7:8a:52:d2:9d:28:3f:78:e9:b1:
         24:98:d4:58:0b:79:ae:e0:bf:48:df:ba:e8:a6:4b:c3:0d:cc:
         cc:8e:c8:ee:14:0a:c7:ee:f4:6e:8e:25:6b:3e:da:b4:aa:0f:
         94:b3:03:9c:16:1e:8e:90:13:6f:32:2a:cb:9b:ba:d8:88:d3:
         05:42:60:16:5e:68:87:41:ec:57:a7:2f:7f:25:3e:2a:3d:70:
         59:bb:87:db:65:d3:e2:9e:08:11:3a:b4:8e:79:76:9c:e2:60:
         c7:23:bc:47:d3:59:18:1d:b8:b0:68:a6:92:b4:4b:3e:f5:02:
         a5:94:9c:b6:db:34:01:a5:ae:a4:d5:30:62:7a:c5:50:d5:8c:
         2e:ea:47:0b:11:dc:ae:e2:1e:cf:82:c2:c4:67:ac:32:4a:6b:
         c7:ad:f2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:29:21 2026 by rpki-client