Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
File:                     0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft (raw, json)
Hash identifier:          f/9DNOd8ekZanFSDaEdwppvkzyOLj+bkpTNN7Qme5oQ=
Subject key identifier:   E6:D8:FA:10:5A:A9:49:97:E5:B3:3C:50:C8:03:F5:80:F3:DA:22:FF
Authority key identifier: 05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07
Certificate issuer:       /CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07
Certificate serial:       67A56FBF982E5B28C38EA62BA07B0BB4C267340C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
Manifest number:          0181
Signing time:             Tue 22 Sep 2026 17:23:49 +0000
Manifest this update:     Tue 22 Sep 2026 17:18:49 +0000
Manifest next update:     Wed 23 Sep 2026 18:29:49 +0000
Files and hashes:         1: AS210464.asa (hash: kiZfs2DSOzpX/hEwQfyXYmM6Lxpx1hqoRdZ896mQbuo=)
                          2: 0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl (hash: y1vV3l/ydxkMFhD2TvXh9Y3J9FOywT8H62n1rAnFmPE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a5:6f:bf:98:2e:5b:28:c3:8e:a6:2b:a0:7b:0b:b4:c2:67:34:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07
        Validity
            Not Before: Sep 22 17:18:49 2026 GMT
            Not After : Sep 23 18:29:49 2026 GMT
        Subject: CN=E6D8FA105AA94997E5B33C50C803F580F3DA22FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:24:a9:db:5d:d6:85:b7:26:c5:77:30:11:4c:
                    ff:b8:9f:47:a1:43:e9:43:eb:cb:5d:90:0d:9c:e0:
                    c3:32:cf:8d:f6:52:b1:c3:8a:9e:61:72:08:a6:f0:
                    3c:64:96:b7:66:5c:ac:19:3c:2d:a9:ca:56:8f:02:
                    de:97:82:de:af:12:c3:64:cd:55:34:88:a2:75:44:
                    72:b1:87:89:7c:b6:4f:3a:61:c8:ff:bc:51:3b:2d:
                    a4:11:d8:39:e3:bf:80:8b:4c:87:dd:90:37:14:ec:
                    db:57:50:b1:8d:db:61:7f:a9:d4:f7:f3:cc:79:b7:
                    87:a2:28:6c:82:8a:c9:c2:6d:41:80:10:9b:50:52:
                    a3:d9:1d:92:99:b2:0b:3b:d1:7f:cb:56:a7:65:79:
                    f6:41:46:1a:fb:68:be:70:c3:81:88:66:af:01:c0:
                    b3:eb:96:5a:3d:87:38:d8:be:4a:4b:97:b5:1b:d8:
                    fa:99:4b:00:42:ae:77:da:9b:c2:34:22:34:c3:77:
                    67:43:f3:ad:1b:8c:26:b8:00:65:5f:b6:0a:84:89:
                    73:d2:57:e0:fa:fe:b2:33:7a:7a:a7:c4:ac:d3:4a:
                    8d:0d:3a:68:78:89:b5:ee:43:0f:d7:bd:66:68:47:
                    7d:62:c1:b1:79:ab:52:f1:d4:d8:41:6a:60:02:f8:
                    e4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D8:FA:10:5A:A9:49:97:E5:B3:3C:50:C8:03:F5:80:F3:DA:22:FF
            X509v3 Authority Key Identifier:
                keyid:05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f6:f5:85:2f:c4:c3:9b:46:49:4d:9a:7d:b9:22:10:cf:27:
         84:7e:fe:15:45:20:5d:3b:22:68:00:ae:6a:84:a1:32:ad:22:
         93:88:1f:1b:e0:36:53:7e:73:18:03:81:5e:64:e8:5b:1a:2b:
         b6:bf:9c:bf:f3:18:b0:1e:51:1d:08:1a:7a:c0:fe:ed:21:ef:
         bf:c4:fa:24:e2:64:67:b4:54:1e:b8:ee:63:bc:fa:4a:7e:b9:
         d5:f8:66:26:59:f6:16:a1:23:a4:13:aa:89:5d:ce:e2:da:f0:
         b4:79:99:09:5b:45:aa:44:fa:80:2a:a2:5f:22:ca:a4:50:5a:
         68:5d:72:66:12:f6:49:0d:9d:2d:09:a2:18:85:85:50:4c:46:
         64:cb:6a:fa:0c:68:06:61:8e:ec:c2:2a:42:ee:cc:7f:00:40:
         9e:d7:cd:44:d5:1e:df:59:f8:9d:1f:82:61:df:77:fa:88:c6:
         ed:4f:3b:60:50:4e:a5:37:54:2a:e2:39:bb:66:14:c4:44:f9:
         d9:72:a1:64:2f:60:7d:03:b2:34:e3:91:da:53:a3:d6:09:58:
         e2:2e:cb:2e:1b:24:73:15:f6:af:89:de:35:6b:34:e1:d5:0e:
         08:90:b1:d4:5e:ab:ff:0f:1d:b8:ac:0a:9d:f9:1e:a3:0f:d2:
         bb:f7:79:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:54:38 2026 by rpki-client