Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.mft
File:                     A465A2ED221B2681A593F3273EC5E73FB69E883D.mft (raw, json)
Hash identifier:          u3iq25Tnamch3KvRP0mtOQzC3PxCOTks3WWtwGLgOq8=
Subject key identifier:   7C:E1:1C:91:6E:63:B8:36:98:B4:DF:29:65:40:C0:D0:CF:49:3A:51
Authority key identifier: A4:65:A2:ED:22:1B:26:81:A5:93:F3:27:3E:C5:E7:3F:B6:9E:88:3D
Certificate issuer:       /CN=a465a2ed221b2681a593f3273ec5e73fb69e883d
Certificate serial:       64E99D137815374355BBBE0E1D84BB7F747EE74B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pGWi7SIbJoGlk_MnPsXnP7aeiD0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.mft
Manifest number:          5D
Signing time:             Wed 25 Mar 2026 02:58:14 +0000
Manifest this update:     Wed 25 Mar 2026 02:53:14 +0000
Manifest next update:     Thu 26 Mar 2026 06:11:14 +0000
Files and hashes:         1: A465A2ED221B2681A593F3273EC5E73FB69E883D.crl (hash: UXABftVW9CoetVOQCBhybOlplYjApcoGfcq/n71QuB4=)
                          2: AS210773.asa (hash: /JteockIlNHN2+cPErXzdclJuRFyUn7Il8RAa/YV9sk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pGWi7SIbJoGlk_MnPsXnP7aeiD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 06:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e9:9d:13:78:15:37:43:55:bb:be:0e:1d:84:bb:7f:74:7e:e7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a465a2ed221b2681a593f3273ec5e73fb69e883d
        Validity
            Not Before: Mar 25 02:53:14 2026 GMT
            Not After : Mar 26 06:11:14 2026 GMT
        Subject: CN=7CE11C916E63B83698B4DF296540C0D0CF493A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:04:0c:49:97:12:ff:42:1f:3b:61:33:30:df:
                    38:98:fc:52:45:d9:59:ec:66:c7:49:8d:7b:df:2a:
                    21:13:51:cb:8b:5b:80:b0:64:99:c9:cc:27:e0:16:
                    5f:83:ba:08:7f:5a:dc:ff:21:01:f4:94:67:4f:81:
                    44:c7:3c:55:9b:5d:cf:0c:bd:c2:0a:57:08:aa:40:
                    c2:93:0f:56:30:6c:40:62:1a:e0:5e:3c:c7:b4:de:
                    12:02:72:f0:51:1c:f3:5b:4c:2e:3e:9b:55:06:cc:
                    74:ac:b9:b0:7e:be:e3:15:df:22:c7:0b:6a:11:ce:
                    f0:90:ee:f0:b7:07:79:e2:a9:3e:43:cd:6b:6d:4b:
                    6b:69:96:7d:9f:e4:9a:5e:d7:09:af:45:06:b0:84:
                    e1:65:b6:62:1b:95:21:16:cc:99:84:7a:22:01:2d:
                    6a:95:5e:c3:b4:50:eb:a4:16:88:2f:cc:8d:6d:dd:
                    93:84:d8:54:e6:7a:fe:7f:b9:96:6b:08:83:f1:c4:
                    c8:d2:fc:6c:10:a9:a0:89:57:7f:2c:41:c1:2c:30:
                    07:8d:db:ac:36:db:7f:c5:62:18:76:d7:20:c6:06:
                    39:4a:07:b9:3f:5a:ea:08:51:71:cc:87:54:87:88:
                    dd:f3:7a:ae:77:5b:0e:65:32:1d:d7:24:c9:d2:5e:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E1:1C:91:6E:63:B8:36:98:B4:DF:29:65:40:C0:D0:CF:49:3A:51
            X509v3 Authority Key Identifier:
                keyid:A4:65:A2:ED:22:1B:26:81:A5:93:F3:27:3E:C5:E7:3F:B6:9E:88:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pGWi7SIbJoGlk_MnPsXnP7aeiD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/3/A465A2ED221B2681A593F3273EC5E73FB69E883D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:71:17:4a:73:bc:58:46:00:91:30:7c:6e:0b:4a:5e:ad:90:
         ad:40:eb:b8:85:26:e1:75:cb:ba:74:07:e8:5d:db:61:a9:b2:
         29:b6:71:46:89:71:18:cd:15:96:9b:33:14:55:3a:b2:ab:af:
         d7:e2:00:7b:4a:63:72:40:39:30:09:52:8c:85:14:da:d1:df:
         88:84:67:e2:d6:35:42:d6:d0:87:d0:83:77:0c:b1:31:9d:45:
         35:55:3e:2b:31:3b:aa:f5:05:c1:fd:16:9a:2a:e0:a4:99:cf:
         0c:68:56:41:e0:40:70:7e:25:6a:0e:37:5d:f4:e8:22:e0:0a:
         1e:6b:a1:3d:88:8f:9d:10:48:2a:6c:a4:91:01:cd:80:6b:bd:
         92:91:a9:2c:88:a5:e7:01:0c:2c:94:34:a3:e2:bb:b3:78:95:
         00:34:22:81:3a:05:e0:26:59:58:66:03:f8:7b:7b:49:a9:2f:
         c0:61:7a:4e:43:03:c2:51:8f:47:ab:56:53:3e:4e:3a:fd:96:
         0d:fe:32:05:6a:b1:18:3b:d3:3f:0a:59:9a:3e:3f:72:ef:a6:
         c1:6d:63:f1:fa:bb:40:50:42:ed:69:e3:c2:72:62:06:32:73:
         98:db:52:78:ef:37:59:37:57:f7:fc:43:c2:f7:0f:38:b0:85:
         92:3f:cc:99
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUZOmdE3gVN0NVu74OHYS7f3R+50swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTQ2NWEyZWQyMjFiMjY4MWE1OTNmMzI3M2VjNWU3M2Zi
NjllODgzZDAeFw0yNjAzMjUwMjUzMTRaFw0yNjAzMjYwNjExMTRaMDMxMTAvBgNV
BAMTKDdDRTExQzkxNkU2M0I4MzY5OEI0REYyOTY1NDBDMEQwQ0Y0OTNBNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRBAxJlxL/Qh87YTMw3ziY/FJF
2VnsZsdJjXvfKiETUcuLW4CwZJnJzCfgFl+Dugh/Wtz/IQH0lGdPgUTHPFWbXc8M
vcIKVwiqQMKTD1YwbEBiGuBePMe03hICcvBRHPNbTC4+m1UGzHSsubB+vuMV3yLH
C2oRzvCQ7vC3B3niqT5DzWttS2tpln2f5Jpe1wmvRQawhOFltmIblSEWzJmEeiIB
LWqVXsO0UOukFogvzI1t3ZOE2FTmev5/uZZrCIPxxMjS/GwQqaCJV38sQcEsMAeN
26w223/FYhh21yDGBjlKB7k/WuoIUXHMh1SHiN3zeq53Ww5lMh3XJMnSXjM/AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUfOEckW5juDaYtN8pZUDA0M9JOlEwHwYDVR0j
BBgwFoAUpGWi7SIbJoGlk/MnPsXnP7aeiD0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTA4MjE4OTktNzdhNi00M2E3LTlhODItMGEzOGZmM2I0
YWQwLzMvQTQ2NUEyRUQyMjFCMjY4MUE1OTNGMzI3M0VDNUU3M0ZCNjlFODgzRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BHV2k3U0liSm9HbGtfTW5Qc1huUDdh
ZWlEMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MDgyMTg5OS03
N2E2LTQzYTctOWE4Mi0wYTM4ZmYzYjRhZDAvMy9BNDY1QTJFRDIyMUIyNjgxQTU5
M0YzMjczRUM1RTczRkI2OUU4ODNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAynEXSnO8WEYAkTB8bgtK
Xq2QrUDruIUm4XXLunQH6F3bYamyKbZxRolxGM0VlpszFFU6squv1+IAe0pjckA5
MAlSjIUU2tHfiIRn4tY1QtbQh9CDdwyxMZ1FNVU+KzE7qvUFwf0WmirgpJnPDGhW
QeBAcH4lag43XfToIuAKHmuhPYiPnRBIKmykkQHNgGu9kpGpLIil5wEMLJQ0o+K7
s3iVADQigToF4CZZWGYD+Ht7SakvwGF6TkMDwlGPR6tWUz5OOv2WDf4yBWqxGDvT
PwpZmj4/cu+mwW1j8fq7QFBC7WnjwnJiBjJzmNtSeO83WTdX9/xDwvcPOLCFkj/M
mQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:12 2026 by rpki-client