Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
File:                     25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json)
Hash identifier:          W5iD29AlZKcwDmBpsCqxVkd8OU/bPyePuKNPnSZh3ZE=
Subject key identifier:   12:11:88:36:37:01:F3:D7:AD:9E:35:E5:06:C7:D1:48:36:9E:FA:FB
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Certificate issuer:       /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial:       4BE83153A1CB1395B171EA1D741552F4919B22C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
Manifest number:          0467
Signing time:             Tue 29 Sep 2026 10:18:06 +0000
Manifest this update:     Tue 29 Sep 2026 10:13:06 +0000
Manifest next update:     Wed 30 Sep 2026 13:25:06 +0000
Files and hashes:         1: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: PwRH8j+3/520bLnGypJthbk5YeAmQc0iz413k/Tg/7o=)
                          2: AS207487.asa (hash: s3p6b4UEGWgtzDLFmXDHf89hF7XtnQxEviO1lAFHwO4=)
                          3: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=)
                          4: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: NlN3fbd4xPs8oXDjI1+pTaPhc7vLifacDO0nMI7gkYc=)
                          5: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=)
                          6: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=)
                          7: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: dHA6HLPOR3IQCPs+KBxka5EoTXTVzS3+Rk/fPIxN15o=)
                          8: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: b2vN+3qPM1Kt77HuQ8RzenF0xuc+QJpvrF7GjBac7y0=)
                          9: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e8:31:53:a1:cb:13:95:b1:71:ea:1d:74:15:52:f4:91:9b:22:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
        Validity
            Not Before: Sep 29 10:13:06 2026 GMT
            Not After : Sep 30 13:25:06 2026 GMT
        Subject: CN=121188363701F3D7AD9E35E506C7D148369EFAFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:ef:a5:41:8a:a3:65:73:3a:53:d5:12:c4:
                    c9:5c:70:32:ae:af:dc:b7:a6:ae:45:98:72:9b:56:
                    a6:ba:c5:37:58:38:ad:c5:d6:ad:ac:60:6f:1b:44:
                    bb:61:0d:10:cf:55:18:e2:c8:1d:05:24:35:16:e2:
                    9d:9d:cb:62:0f:be:e9:c4:07:61:1d:d4:ed:61:30:
                    3a:eb:5b:61:11:01:36:4b:b8:18:60:cb:f5:3a:79:
                    7f:8f:81:a3:cf:12:4f:0d:24:f5:28:86:b2:20:79:
                    40:65:60:df:20:59:7e:28:92:e2:03:a5:62:4b:55:
                    46:33:30:56:90:46:2b:f0:a4:a5:54:1a:01:65:a3:
                    50:cd:8e:f4:ac:eb:5b:ff:1e:76:02:5f:72:d3:29:
                    2b:53:aa:d1:5a:48:94:ea:86:c7:4b:98:2e:88:a6:
                    0b:cf:d7:93:f3:e4:24:fb:8b:f2:61:13:82:45:ff:
                    4f:5f:44:de:d6:84:e2:33:51:c4:de:78:27:dd:3c:
                    87:c6:ee:9d:b0:f8:76:1b:30:06:32:98:da:a2:62:
                    98:13:a3:1b:72:90:91:7a:af:4b:d8:46:d2:2b:d1:
                    3d:8b:cf:03:2e:67:15:51:8d:bb:16:75:c7:42:8d:
                    73:6f:89:2e:b7:08:ea:d2:3e:ce:3e:92:51:0c:e1:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:11:88:36:37:01:F3:D7:AD:9E:35:E5:06:C7:D1:48:36:9E:FA:FB
            X509v3 Authority Key Identifier:
                keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a4:8a:54:58:db:02:67:87:3d:c8:81:67:99:6c:8f:34:f0:
         61:dd:b6:ab:ab:18:e4:29:83:31:b9:d9:c3:35:10:ef:21:d0:
         a1:09:ed:ef:a7:e8:e5:03:6e:d2:30:93:95:57:e8:0e:90:d8:
         b7:5f:f4:27:3f:af:79:8e:00:eb:5b:97:97:8f:2c:28:9f:e9:
         3b:cd:1f:8f:81:89:25:c8:d5:0e:d6:1d:ef:ef:be:4b:cf:eb:
         03:f0:64:34:a4:77:be:17:60:5f:bf:c7:e8:29:1f:e7:fc:87:
         6f:f5:6d:14:60:9c:8d:04:82:8c:a3:a7:de:ec:a3:90:0e:f4:
         8a:b2:01:48:46:54:20:4b:b7:ad:84:23:dc:40:07:e5:b2:f1:
         f1:47:92:fd:7d:90:4d:0c:76:58:b7:fe:64:01:f1:c7:32:88:
         a3:3e:59:89:98:f8:bb:ed:f5:34:02:e1:02:9f:bc:63:c9:61:
         d0:0f:11:fb:43:3c:e2:a2:b8:e5:73:9b:fc:4e:47:b7:40:4f:
         ed:70:41:2f:47:36:47:df:d5:e7:4b:b0:49:78:f7:bb:ec:ba:
         b4:8c:7f:73:00:51:e8:82:d9:3f:c3:54:a1:ba:78:8e:44:c8:
         f9:eb:07:5c:af:f1:8f:4a:37:38:a7:42:c5:66:76:1d:49:15:
         5a:44:cc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:27:53 2026 by rpki-client