Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
File:                     E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft (raw, json)
Hash identifier:          xXs/9e9U5QoqDgEwWu4ytseQswG0MQXfbppsROPD7os=
Subject key identifier:   B2:84:30:6E:7A:82:36:DA:F5:77:70:E2:E0:E5:4B:9C:1C:25:DD:AE
Authority key identifier: E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95
Certificate issuer:       /CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
Certificate serial:       44F53E960954B2F7EF9E1DA8131F2B10D1CC3F33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
Manifest number:          012D
Signing time:             Thu 23 Jul 2026 12:55:50 +0000
Manifest this update:     Thu 23 Jul 2026 12:50:50 +0000
Manifest next update:     Fri 24 Jul 2026 15:37:50 +0000
Files and hashes:         1: AS214976.asa (hash: v5lBSdK131Etk8q/qrO2YWGrpYrwgCaCsAichEGY55Y=)
                          2: E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl (hash: l1ukce+F97q3UPnOXMh56WTTX3JWNLaa6BKvtmOU+54=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f5:3e:96:09:54:b2:f7:ef:9e:1d:a8:13:1f:2b:10:d1:cc:3f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
        Validity
            Not Before: Jul 23 12:50:50 2026 GMT
            Not After : Jul 24 15:37:50 2026 GMT
        Subject: CN=B284306E7A8236DAF57770E2E0E54B9C1C25DDAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:52:39:71:0c:1c:56:fa:c5:bc:c9:df:72:
                    36:06:fc:c4:50:ec:7d:1b:e7:09:fb:ad:40:1c:a7:
                    7b:78:f4:fb:b0:a8:ca:84:5b:10:c8:bd:6e:3b:4e:
                    98:7f:fa:58:eb:6c:5f:d0:b2:a8:49:29:56:8a:5d:
                    52:df:24:08:4b:03:86:49:8f:99:56:fd:63:92:60:
                    6b:1a:ce:7a:5b:9b:1c:19:5c:26:44:d9:fa:99:83:
                    62:5d:9c:93:0b:1a:4b:73:8b:33:28:e6:db:5a:6d:
                    f6:cb:78:6a:eb:8d:b9:3b:97:c3:9a:c5:19:31:45:
                    8c:79:5c:8e:11:88:07:68:00:d5:a5:89:7b:08:10:
                    81:01:7c:3f:d6:dd:c6:a7:12:e2:30:2a:6d:fd:ff:
                    25:2a:03:f0:08:ab:83:17:cf:d9:c5:36:e5:48:88:
                    a2:cb:da:74:33:4a:64:b5:ad:7c:7b:5e:75:6d:35:
                    1c:a6:6d:ca:64:df:1c:f2:fb:2a:bc:77:a1:8b:83:
                    8f:70:30:e2:49:49:05:0b:01:70:3e:68:a9:8b:26:
                    85:4c:d1:01:ce:d4:42:06:d9:55:5c:92:a5:ca:5c:
                    4e:57:7b:d5:c4:0a:1a:56:f1:bc:99:50:50:bc:b6:
                    21:7c:73:2b:45:fd:9a:a7:98:fc:36:8f:50:90:96:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:84:30:6E:7A:82:36:DA:F5:77:70:E2:E0:E5:4B:9C:1C:25:DD:AE
            X509v3 Authority Key Identifier:
                keyid:E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9e:22:7c:36:c5:26:fa:03:b9:4e:72:c9:4f:57:6b:09:e7:
         78:48:74:1f:2b:3b:92:ad:6b:22:cb:ef:c9:78:fd:9c:f1:ab:
         83:9f:23:9d:6f:e5:8b:e6:09:63:32:b0:7a:b8:6c:f1:72:17:
         c9:d1:19:50:ec:e2:0b:65:9a:b2:3a:a9:9b:18:c8:45:43:fb:
         5a:b8:39:ab:79:65:74:65:61:97:4b:ca:84:81:ca:ce:2c:d1:
         27:98:00:15:69:b7:51:50:6d:91:65:ac:0d:aa:08:ff:c0:c2:
         80:a0:93:30:e4:a4:d5:d9:3c:09:04:d3:39:27:cf:1c:c1:e5:
         25:ae:1a:16:f6:11:7d:ef:75:53:7a:88:15:41:20:f0:ec:d9:
         8c:b9:a6:ee:b1:ad:f9:5b:36:9f:51:c6:02:d8:36:da:40:e5:
         c7:ad:bb:2e:6c:54:7b:75:71:69:58:7e:8d:37:70:9d:28:a6:
         2e:6d:4b:62:4e:28:bb:a7:4c:d2:e5:9d:5c:34:5d:41:c9:58:
         16:a4:09:b4:7f:b5:02:f9:49:51:e8:7d:62:bc:1f:43:58:32:
         16:36:f0:1b:ff:4b:e5:07:be:5b:fd:87:1f:a3:02:fd:b8:33:
         4d:94:a8:79:f1:e5:7f:29:b2:2c:11:c6:ba:2e:ca:23:fe:73:
         c7:4f:87:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:17 2026 by rpki-client