Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
File:                     0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft (raw, json)
Hash identifier:          0DwqCMYl8CWqk86rW2NCW8zjFRQs9k9n7uE/MUdW1Ow=
Subject key identifier:   DE:64:AE:F4:66:E3:71:3E:99:53:DE:13:12:DF:91:75:26:1B:96:B5
Authority key identifier: 05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07
Certificate issuer:       /CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07
Certificate serial:       1C3F15580A9179738014FB5DACFE5FEC520B5361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
Manifest number:          7D
Signing time:             Wed 25 Mar 2026 04:34:07 +0000
Manifest this update:     Wed 25 Mar 2026 04:29:07 +0000
Manifest next update:     Thu 26 Mar 2026 07:57:07 +0000
Files and hashes:         1: 0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl (hash: HMDjAm0i6dXlUBovHj3M3XXiiSmBlASIcz8F5Cfh1KY=)
                          2: AS210464.asa (hash: PLKM4TXIvwXLLkndEPhaXaJ+tJuD6hAffwBesSSDu2s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 07:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3f:15:58:0a:91:79:73:80:14:fb:5d:ac:fe:5f:ec:52:0b:53:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07
        Validity
            Not Before: Mar 25 04:29:07 2026 GMT
            Not After : Mar 26 07:57:07 2026 GMT
        Subject: CN=DE64AEF466E3713E9953DE1312DF9175261B96B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:52:dc:d6:be:7c:14:f2:82:55:6d:2c:a8:d1:
                    96:08:cf:9d:c0:08:77:8c:41:5c:83:c5:e8:2d:b6:
                    b7:93:f0:1b:57:c9:6a:22:65:b4:19:0a:88:ac:3d:
                    2c:0a:7d:78:ef:84:52:7e:33:83:cd:1b:39:59:94:
                    3e:83:8e:6d:00:2b:18:b6:4e:b1:40:ba:72:c7:8c:
                    a2:8a:fd:c1:28:75:d1:c8:09:29:b9:c1:58:99:92:
                    dd:2d:1e:c6:09:52:91:1d:78:94:a7:98:be:d5:b5:
                    2a:6f:82:a7:ad:9b:3d:e8:c6:39:ac:9d:cd:76:02:
                    83:72:b1:2c:75:c0:4f:80:43:8f:00:35:d3:04:60:
                    51:f3:03:7d:12:c3:2f:68:09:13:4b:a9:28:8a:37:
                    8f:8e:0b:ed:38:a4:c3:02:f2:62:d8:aa:2d:eb:5e:
                    8b:cc:b9:24:3c:5d:14:71:ad:4c:11:a1:9a:97:f0:
                    4c:81:f3:a2:e1:63:84:b5:19:91:09:e9:83:14:9b:
                    ec:b1:81:87:62:2b:fd:5e:37:d8:b1:f5:4e:d6:6c:
                    8c:de:67:29:04:51:1d:de:e9:a0:de:ce:6f:37:5c:
                    08:bf:ac:e6:0f:73:f5:64:63:6a:4a:74:03:74:e4:
                    f1:d4:8c:91:dc:59:3c:4f:01:7c:74:ad:bf:55:37:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:64:AE:F4:66:E3:71:3E:99:53:DE:13:12:DF:91:75:26:1B:96:B5
            X509v3 Authority Key Identifier:
                keyid:05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b3:4d:b7:94:b1:37:cb:83:25:f0:1b:f7:c3:97:6f:f7:0c:
         c5:e7:de:34:34:8e:63:77:58:ca:3c:cb:a0:87:d7:e1:8b:91:
         06:43:2c:40:66:2f:02:b0:f9:97:8e:89:a2:22:ec:32:ca:cb:
         c7:14:a1:53:36:b4:23:bc:3a:20:f5:89:e1:09:94:c3:6d:59:
         d2:b0:01:95:f6:15:02:cf:73:41:50:47:6f:68:77:30:c8:7c:
         10:4b:10:dd:df:5d:72:f9:e7:a9:f6:ac:68:67:87:9c:a6:22:
         bb:4c:f9:0b:5e:de:53:81:c5:ef:8e:29:46:0b:6b:09:88:e0:
         e0:ba:b2:f4:27:f4:c2:22:67:92:6e:e8:93:30:ac:a0:15:65:
         7e:73:48:7f:99:24:d9:0d:9b:2b:2f:47:de:99:08:ed:a9:4b:
         ae:bb:a8:c9:d8:50:95:7d:27:a1:d4:96:2f:0f:e5:d9:e8:41:
         00:6a:1c:09:32:89:38:78:ed:00:9e:78:b8:46:f2:1a:17:46:
         04:df:24:34:82:1f:3d:15:3e:b6:b5:69:04:ca:29:94:08:93:
         18:fc:c0:b8:3c:53:67:f7:5e:d5:22:dc:70:64:db:a3:36:1d:
         57:7b:40:7b:1d:bb:a2:67:09:63:81:d0:66:52:47:31:d3:37:
         d3:f3:9a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:19:50 2026 by rpki-client