Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
File:                     E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft (raw, json)
Hash identifier:          NpsgHTgSEkvxY6TtColo48Ju3/sEn1yV4izTlp/mh3k=
Subject key identifier:   42:17:35:96:C0:09:BD:17:A0:60:E9:CD:EC:82:5D:19:36:95:D5:2C
Authority key identifier: E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95
Certificate issuer:       /CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
Certificate serial:       2ADB78AEDFF36A12614BFA6C2C006303D955F6A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
Manifest number:          80
Signing time:             Thu 26 Mar 2026 05:44:08 +0000
Manifest this update:     Thu 26 Mar 2026 05:39:08 +0000
Manifest next update:     Fri 27 Mar 2026 07:42:08 +0000
Files and hashes:         1: AS214976.asa (hash: v5lBSdK131Etk8q/qrO2YWGrpYrwgCaCsAichEGY55Y=)
                          2: E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl (hash: tHh0YUbtYBQekixQFROpcXuQEze4qio05ya05142D9w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:db:78:ae:df:f3:6a:12:61:4b:fa:6c:2c:00:63:03:d9:55:f6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
        Validity
            Not Before: Mar 26 05:39:08 2026 GMT
            Not After : Mar 27 07:42:08 2026 GMT
        Subject: CN=42173596C009BD17A060E9CDEC825D193695D52C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:35:7b:5a:ad:8e:10:c4:55:c7:a0:3e:ae:
                    44:5b:b6:b3:e4:4f:0c:ea:d1:e2:dc:b9:33:a7:8e:
                    d0:f1:70:32:12:5a:c6:a6:c7:b4:f0:55:e2:a3:06:
                    99:94:58:91:46:3c:9c:7f:a6:d4:f9:9c:ca:26:a7:
                    e4:a2:26:51:2a:ce:01:88:35:17:3c:c5:65:62:56:
                    3a:61:3b:0d:26:e1:71:70:af:b5:2c:0e:d9:05:c8:
                    e9:21:c5:f3:a8:7d:de:e6:c4:d7:81:6b:29:05:8f:
                    1f:b7:55:05:82:bf:b5:b8:c6:54:09:87:e3:74:be:
                    12:b6:8e:00:e2:1f:c6:bf:51:7c:fd:47:72:3d:33:
                    9f:bc:61:00:1e:92:98:63:b1:4f:fb:9d:df:0f:95:
                    be:9e:c7:c7:59:c8:f4:50:51:df:45:dc:db:ce:2c:
                    4a:bd:52:46:10:37:1c:3b:29:22:02:84:87:14:33:
                    0a:9d:8b:30:a9:6b:14:94:be:53:36:e4:7b:e7:1e:
                    4e:de:0a:bf:a9:19:79:fd:95:65:02:e7:c8:2f:70:
                    25:dd:fe:93:58:7d:3d:e2:e7:cb:e5:f6:0e:20:cc:
                    46:98:28:ff:20:38:b0:48:78:29:3c:d4:e8:a7:a7:
                    ec:6c:d7:49:88:17:fb:7d:b7:28:02:f4:07:5d:a5:
                    1e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:17:35:96:C0:09:BD:17:A0:60:E9:CD:EC:82:5D:19:36:95:D5:2C
            X509v3 Authority Key Identifier:
                keyid:E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:77:d8:3b:c9:66:05:07:b4:13:b0:fd:92:37:80:b6:79:2e:
         81:c3:2d:21:c6:15:c8:f1:0c:a7:5d:19:0d:0c:88:28:7f:fc:
         40:31:1d:b4:48:69:19:ba:d7:e0:0e:3d:ac:b5:bb:0f:05:1f:
         5b:7c:a5:22:7a:66:00:bb:f8:76:d6:2c:d8:d2:ad:a3:82:05:
         15:95:4a:35:dc:de:08:f8:63:16:69:14:c1:96:e6:55:d5:d3:
         a6:8b:e0:e2:89:4d:cf:96:38:e7:4d:69:64:27:33:91:a2:b0:
         e6:7d:d3:be:34:05:7e:9a:77:1b:56:d8:58:c5:75:f2:7b:dd:
         32:22:7f:61:08:62:34:48:15:99:28:e6:73:92:4b:c3:da:7f:
         b9:f2:5a:94:ff:a6:ac:64:c0:1b:81:13:44:68:47:d1:0c:98:
         6f:da:f3:11:cd:e1:a7:49:6b:ed:4e:0e:c7:07:51:05:09:ab:
         c8:1b:ff:81:0e:47:e7:ad:8a:09:91:f9:c3:44:08:e6:2a:23:
         00:71:e6:de:8c:b6:3b:e1:e5:86:05:fb:b5:be:18:39:a1:4b:
         0f:00:64:60:7f:ca:b9:92:08:ae:7f:39:49:7e:10:e7:1c:03:
         2f:67:6b:f7:10:e0:77:d6:aa:36:00:18:9f:bc:27:e0:54:b3:
         98:c5:a5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:33 2026 by rpki-client