Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          THDvJgdn1h4sfcE6hi+o0XUvYg6o+hVo49ZTSazNlIg=
Subject key identifier:   8A:EE:60:86:0F:66:E9:85:6A:16:25:7D:04:90:C0:80:9F:5B:15:B2
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       496B18C6146E001F90B0FEBF702AFA8A2E62B2FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          03CA
Signing time:             Wed 25 Mar 2026 03:08:30 +0000
Manifest this update:     Wed 25 Mar 2026 03:03:30 +0000
Manifest next update:     Fri 27 Mar 2026 05:41:30 +0000
Files and hashes:         1: AS213525.asa (hash: Fq0YNh+tWWvo+GdVGRIwjFZdtE0RP8wN2+bPbK7JSk8=)
                          2: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: sMNzv+gFD4YFATSbNtGhMkudfdi37D2htR4TS7I03Z8=)
                          3: AS214498.asa (hash: MXybwtu+5M9CBNDZHODBSDxfP4tk/0gnYAktlZuo6sk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6b:18:c6:14:6e:00:1f:90:b0:fe:bf:70:2a:fa:8a:2e:62:b2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Mar 25 03:03:30 2026 GMT
            Not After : Mar 27 05:41:30 2026 GMT
        Subject: CN=8AEE60860F66E9856A16257D0490C0809F5B15B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:93:46:dc:ee:04:8f:64:09:76:50:37:b4:
                    9a:18:44:e7:2c:c9:bc:cb:8a:da:83:0d:6e:41:c9:
                    22:dc:cc:bc:0b:61:2e:fc:54:85:ae:60:be:df:73:
                    f1:38:07:b6:50:92:a8:0d:2f:2b:eb:51:b4:76:e1:
                    9b:9c:c0:f8:a3:f5:62:81:53:35:c0:59:be:0a:ac:
                    e0:79:eb:04:11:27:37:6e:bb:f5:6f:52:44:3e:4c:
                    26:bc:88:48:b2:d2:c8:f9:cf:4a:97:e8:ef:a0:25:
                    fe:83:2a:0c:f6:e5:ff:9d:03:01:4b:91:37:56:23:
                    33:06:18:76:17:52:cd:7b:c3:20:63:96:01:fb:21:
                    c0:17:b7:ae:b4:e1:36:31:c3:a2:60:6b:7f:2d:a6:
                    19:c6:c1:15:6f:dc:0b:9d:df:fb:bc:8f:99:af:15:
                    86:06:3e:4d:31:8d:d0:84:14:60:a3:d6:67:fb:65:
                    8b:76:08:59:7b:e1:ac:01:9a:85:b1:72:aa:11:64:
                    a6:10:72:75:0a:67:6b:14:f0:50:18:c1:e2:09:e6:
                    df:e1:90:d8:12:3a:89:e4:88:7a:53:73:b1:2d:ca:
                    85:a3:b2:b9:32:7c:f9:79:cc:5d:a1:eb:98:24:67:
                    a5:86:86:25:db:0b:6e:ec:c0:ce:39:b6:06:06:e3:
                    d6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EE:60:86:0F:66:E9:85:6A:16:25:7D:04:90:C0:80:9F:5B:15:B2
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:40:72:7a:cb:a9:b8:0d:18:c4:be:fc:6f:83:68:88:75:a4:
         87:5f:20:c8:ee:22:f9:ce:23:d3:25:22:4f:3b:78:d3:d4:f7:
         13:ff:8c:fc:ff:77:22:14:92:fb:b0:bb:ad:91:27:8e:6e:8b:
         89:e6:23:03:5c:c9:99:3a:69:08:b1:64:b1:27:83:1f:64:c9:
         51:5b:d7:54:67:54:f9:cc:ff:85:d3:16:bb:e0:1d:32:39:c3:
         c4:95:11:8a:3f:64:60:12:32:f6:fd:81:41:0b:b9:9a:af:5d:
         19:da:33:ed:e6:89:81:7d:da:56:2e:26:05:00:18:53:37:8c:
         e7:7f:31:8e:52:23:16:aa:e4:69:70:11:a0:01:fe:63:d5:87:
         44:ae:8f:87:c8:6e:ac:7b:7c:1d:84:06:80:54:bb:50:83:71:
         cc:12:09:56:1c:47:a1:72:f4:67:c1:fb:ad:80:34:39:c5:b1:
         80:fe:ff:11:bd:dc:62:bc:9e:79:5a:da:3d:3b:bc:03:3d:27:
         af:2f:f8:aa:a7:64:8b:7f:16:95:16:da:58:e4:a9:3e:0c:30:
         9d:f5:23:b2:12:98:d8:10:12:2a:69:33:93:98:19:3d:3d:e1:
         8b:0a:fb:39:ef:62:b8:6a:3a:13:1c:81:bf:27:d9:fc:a7:d0:
         4b:4e:d9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:29:16 2026 by rpki-client