Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
File:                     25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json)
Hash identifier:          8Tcl8oidwltWlc595mrX7q+wbB5WRxTJDV6t5C7dOmM=
Subject key identifier:   88:F4:29:55:D3:24:9C:9C:D5:DA:34:0C:0B:0D:B8:8F:F8:75:84:DF
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Certificate issuer:       /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial:       5CC137FDD1DE3339B134E1D1E46CC4EAB43F0C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
Manifest number:          03AF
Signing time:             Tue 12 May 2026 23:58:17 +0000
Manifest this update:     Tue 12 May 2026 23:53:17 +0000
Manifest next update:     Thu 14 May 2026 02:42:17 +0000
Files and hashes:         1: AS207487.asa (hash: s3p6b4UEGWgtzDLFmXDHf89hF7XtnQxEviO1lAFHwO4=)
                          2: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: dHA6HLPOR3IQCPs+KBxka5EoTXTVzS3+Rk/fPIxN15o=)
                          3: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=)
                          4: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=)
                          5: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: NlN3fbd4xPs8oXDjI1+pTaPhc7vLifacDO0nMI7gkYc=)
                          6: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=)
                          7: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: JY0Rc3GaOPbWiUR7LxflG7Xxi18KeQHl34u2lo6NSys=)
                          8: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=)
                          9: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c1:37:fd:d1:de:33:39:b1:34:e1:d1:e4:6c:c4:ea:b4:3f:0c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
        Validity
            Not Before: May 12 23:53:17 2026 GMT
            Not After : May 14 02:42:17 2026 GMT
        Subject: CN=88F42955D3249C9CD5DA340C0B0DB88FF87584DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:23:86:d8:35:a8:8f:88:4a:de:24:5f:d2:
                    c6:19:11:02:85:4b:55:3c:84:3c:d7:49:2f:4b:3f:
                    4e:06:03:a8:cb:c1:66:d2:4f:35:82:57:90:99:15:
                    86:ea:49:a1:5c:39:c8:ca:f8:11:55:b4:e1:cb:8d:
                    89:8d:6e:c0:ec:ff:a8:8f:36:a9:ae:0b:d2:dd:dd:
                    06:74:0b:ed:ce:15:df:ed:20:02:42:56:a8:e7:3c:
                    26:2c:db:70:79:2d:fb:5e:5c:72:ec:54:65:fa:36:
                    ed:71:ef:0c:21:6c:f7:be:3f:be:98:e0:8d:d6:e9:
                    ed:df:27:f9:e1:e6:2d:69:03:eb:01:a4:de:52:c5:
                    26:1e:fc:57:7e:7f:65:75:a0:2a:c9:12:3d:6c:31:
                    a4:89:73:e2:76:65:6e:c9:48:15:3e:f6:a9:ac:a8:
                    f3:3e:2a:a4:38:67:b3:6e:fd:0a:b2:50:49:ce:06:
                    a7:b3:ac:b2:f2:e9:33:85:5f:2a:9e:4a:ca:b9:fb:
                    7c:d6:3b:e6:ca:11:b9:19:2e:4d:b5:0f:ce:03:a1:
                    c0:b5:9f:b2:7f:76:c1:dd:17:ea:0e:2c:37:15:da:
                    55:6a:70:da:e8:c6:17:a8:e5:12:9e:78:7d:d3:98:
                    1d:aa:19:61:75:a5:86:f8:8f:92:f4:63:d1:d2:b8:
                    12:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F4:29:55:D3:24:9C:9C:D5:DA:34:0C:0B:0D:B8:8F:F8:75:84:DF
            X509v3 Authority Key Identifier:
                keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:8d:a5:b1:f6:28:5c:45:97:80:3c:e8:78:b3:f1:84:65:1c:
         39:c0:26:91:74:e9:b5:c5:14:3e:5f:9f:3d:24:b4:24:01:3c:
         62:00:7b:e6:08:0a:dc:2d:5c:b9:d3:84:29:51:15:88:67:10:
         de:e8:dc:49:be:97:69:3b:4f:72:29:b3:57:27:cc:66:4b:64:
         fd:86:eb:bb:fa:a7:40:79:e8:2f:99:f2:a5:83:0a:57:dc:4f:
         06:20:95:e5:14:32:3d:be:81:db:84:c1:e5:cb:05:30:c4:e7:
         8c:f1:52:84:be:6f:29:03:04:55:61:b4:3a:f4:45:a4:86:28:
         eb:c3:0a:03:04:b9:73:2e:c5:44:f2:9c:d7:9a:18:91:03:e3:
         11:97:6b:73:2c:61:69:66:7a:7e:f3:50:5f:89:7f:9f:e5:ca:
         64:23:46:01:70:07:73:90:38:f1:a2:f9:14:87:4d:a8:7b:d6:
         f8:33:27:0e:3e:b0:9a:20:4c:2a:12:8d:91:bb:19:a2:e6:41:
         79:47:81:b3:d4:da:0e:36:61:30:79:c5:c5:d8:2f:ed:b9:ec:
         ae:5b:9f:78:e3:72:de:4a:2b:28:63:7e:23:5e:2d:29:34:5a:
         13:a0:9f:ad:89:64:a6:d8:93:00:86:51:85:9b:24:60:ba:0c:
         d1:ff:05:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:10:20 2026 by rpki-client