Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
File:                     391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft (raw, json)
Hash identifier:          22Kmdula96+ju8ns5FV0+BohLWDYKj7qMWRchYfSing=
Subject key identifier:   10:CF:E5:7F:72:C5:FD:6E:55:57:3F:E5:B2:CA:F8:A8:0E:88:88:B9
Authority key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
Certificate issuer:       /CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Certificate serial:       2274CEB5751D1A2A506D2F3AC5CFD023874A9C4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
Manifest number:          4B
Signing time:             Wed 25 Mar 2026 16:00:06 +0000
Manifest this update:     Wed 25 Mar 2026 15:55:06 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:06 +0000
Files and hashes:         1: AS215685.asa (hash: YaDrA70r3c8UdJ/OHOv/yu3bJSTpuCNZQcfu9TFCX6c=)
                          2: 323030313a3637383a6139303a3a2f34382d3438203d3e20323135363835.roa (hash: f01olELinbK/WN+AKKfNEa3BaJPmtAdvY7LAPWQjTbg=)
                          3: 391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl (hash: tzyYN1hiew9Vc0hxaHArfhgXm1cSx+1wlNJ51GMIv1w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:74:ce:b5:75:1d:1a:2a:50:6d:2f:3a:c5:cf:d0:23:87:4a:9c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
        Validity
            Not Before: Mar 25 15:55:06 2026 GMT
            Not After : Mar 26 16:01:06 2026 GMT
        Subject: CN=10CFE57F72C5FD6E55573FE5B2CAF8A80E8888B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:20:af:d9:02:e1:2c:7a:2b:dc:8a:78:e0:
                    b7:7d:1f:94:60:cb:88:5a:89:36:a3:c2:11:1e:88:
                    5e:c4:1d:f0:cf:3f:77:2a:ed:e0:38:56:28:d2:79:
                    6d:0d:32:8a:fe:e0:9a:f8:c7:e1:d0:83:fc:ea:dd:
                    ca:6f:c4:25:51:02:e0:d8:c6:bb:e6:78:9d:5a:c5:
                    f8:df:5e:a6:da:77:05:3d:ca:0e:e0:56:5c:d7:0e:
                    c3:c4:a9:31:27:20:58:c7:f2:44:c1:54:b9:cc:1b:
                    a3:60:55:1e:61:33:62:10:e9:2f:87:e6:d4:3c:86:
                    1c:b4:de:d6:f2:09:31:cb:e3:fd:15:25:17:05:1f:
                    a7:e3:78:e5:5c:70:e7:15:a0:82:37:98:29:35:a3:
                    b9:fb:71:6b:de:00:7b:da:7a:b6:af:03:75:37:fa:
                    f0:b0:d9:72:1e:05:fc:50:99:aa:d5:a6:02:51:3b:
                    14:98:e9:12:05:c3:1d:73:f0:0b:f5:74:ab:e3:e6:
                    56:50:c0:75:63:58:35:8c:7c:26:d6:70:d6:83:4b:
                    a2:39:3a:56:bc:58:5c:37:ea:60:91:a4:c3:97:22:
                    98:d1:ce:ba:2b:83:0f:cb:50:ee:ff:be:b5:5c:98:
                    b8:05:02:1f:61:27:31:de:38:38:5e:62:3a:b1:0d:
                    2a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CF:E5:7F:72:C5:FD:6E:55:57:3F:E5:B2:CA:F8:A8:0E:88:88:B9
            X509v3 Authority Key Identifier:
                keyid:39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:cc:ad:b6:bc:c7:25:b7:87:93:72:25:11:71:cb:2d:bd:b9:
         20:c7:84:8c:f5:53:28:78:04:1a:e0:d6:17:b2:89:3e:f5:37:
         1f:34:72:f7:42:49:cd:7a:1e:7b:d0:e9:85:db:0d:07:e3:5d:
         17:cc:b1:b6:b7:dc:c6:47:60:29:14:7f:d2:ba:98:c3:d3:55:
         85:de:d1:82:ff:cd:71:c6:c8:be:0d:a7:e9:9d:f3:83:aa:e4:
         9e:32:55:89:08:4d:30:8e:99:d1:6e:f4:cc:17:17:fc:50:74:
         dc:38:75:85:e3:0a:e1:69:95:8b:5a:d6:3a:7f:f3:6a:f9:7a:
         16:cd:b9:20:1d:14:45:fa:ac:2d:ad:1f:60:4b:f0:61:04:0f:
         04:1b:d3:8c:b2:a4:69:57:1a:cd:38:71:38:09:a0:4f:8c:16:
         fd:bd:dd:41:11:6f:0b:28:b6:77:b3:1c:d5:ae:d5:6b:53:f8:
         9a:c6:e0:67:20:63:ea:e6:98:ad:8d:0d:80:61:d4:bc:b5:76:
         5b:a7:83:1b:83:37:6a:e7:dc:d9:e1:e6:b7:c3:63:50:c7:da:
         26:a9:8b:2d:4f:21:18:4f:31:c1:72:2a:08:a5:41:5b:25:06:
         fc:63:81:62:b4:8d:cd:f5:0e:87:b6:09:b9:c6:93:bf:79:24:
         09:cf:92:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:53:53 2026 by rpki-client