Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
File:                     A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft (raw, json)
Hash identifier:          QpFx06gxSj2+Uv8EBf0iVfT5+ROhUCmqnKwDPIcgIUs=
Subject key identifier:   12:93:23:4E:4E:D1:16:F5:A3:64:4E:AD:5C:58:5A:A8:93:38:04:D7
Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
Certificate issuer:       /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Certificate serial:       6395F3322F847B99CD8C9F6EBC44175E7F5AED07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
Manifest number:          013F
Signing time:             Tue 12 May 2026 12:19:55 +0000
Manifest this update:     Tue 12 May 2026 12:14:55 +0000
Manifest next update:     Wed 13 May 2026 12:44:55 +0000
Files and hashes:         1: AS214757.asa (hash: KJVkb/rZusffYD5r7h9TWmgVTQ05c1gZ3oofLZ7qbQY=)
                          2: A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl (hash: zIyufNUKg2NyhGqkIHInk9pY0lzrSZfWHBl4o4Fd3YE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:95:f3:32:2f:84:7b:99:cd:8c:9f:6e:bc:44:17:5e:7f:5a:ed:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
        Validity
            Not Before: May 12 12:14:55 2026 GMT
            Not After : May 13 12:44:55 2026 GMT
        Subject: CN=1293234E4ED116F5A3644EAD5C585AA8933804D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dc:8e:dd:5f:36:ec:a6:e4:b6:47:e7:03:0e:
                    4b:0f:11:56:4a:aa:e6:45:c7:a0:9f:5d:b7:69:46:
                    64:ed:0f:17:77:52:77:56:fe:45:2a:ce:ac:d6:a8:
                    b7:4f:98:d7:60:a4:f3:96:17:28:03:7a:bb:dd:93:
                    b9:11:c6:15:49:b3:33:41:15:73:f9:c7:e3:d7:37:
                    8e:92:66:07:e3:1e:0b:2a:3d:e5:9f:13:d0:d8:32:
                    4b:41:93:09:06:81:7f:5c:c5:a8:50:9b:dc:61:01:
                    fc:ff:cd:88:38:71:78:4c:54:67:65:d6:e9:9a:6d:
                    f9:b2:ba:46:c0:7e:f3:ad:0a:3b:49:19:29:27:b4:
                    b6:8e:ba:d7:be:b5:86:ee:f5:c2:a8:22:4c:96:16:
                    bf:30:b1:90:3e:ee:d7:53:49:b2:00:80:d8:25:40:
                    17:aa:b7:e7:0f:85:94:f7:3b:f2:f0:53:68:0b:3d:
                    94:97:9a:34:37:e8:9b:86:b5:fb:9e:78:cb:74:c2:
                    c0:85:87:2a:e1:cd:82:43:7a:4c:8d:59:6a:db:5f:
                    55:b1:4f:ef:87:83:3d:62:4d:d4:0c:e1:64:33:e5:
                    59:e9:d9:d2:aa:2b:88:a5:b6:ea:05:25:13:08:f0:
                    f3:1b:c9:4d:1b:56:97:49:bf:71:7f:4f:6b:97:7e:
                    45:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:93:23:4E:4E:D1:16:F5:A3:64:4E:AD:5C:58:5A:A8:93:38:04:D7
            X509v3 Authority Key Identifier:
                keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c6:4f:a6:fa:2c:5c:d0:1a:c1:47:ea:7f:0e:4d:62:19:62:
         e8:fa:db:c8:8f:c2:46:b7:5d:5d:68:56:df:dc:ac:b2:b3:31:
         0e:fc:6c:d6:29:9a:df:d1:ed:fe:62:46:f5:0f:ed:a2:1a:89:
         2a:86:85:25:b5:04:06:f9:34:2f:9c:d4:53:b6:3e:1d:c5:5b:
         76:c2:a0:58:7f:f5:2e:ec:78:30:ec:43:54:4e:bf:65:6a:25:
         c8:93:11:dc:c8:81:cb:07:da:cd:00:7f:31:1b:fb:cc:26:e5:
         73:52:27:d6:7a:fd:c5:07:10:ce:c3:b7:23:90:38:db:5d:01:
         5c:b5:47:b8:d7:62:ff:94:e2:76:3b:d5:d1:b3:74:81:a4:63:
         d7:1f:dc:47:a6:97:98:6c:4b:e6:da:57:6f:4e:9f:ec:b3:9a:
         33:30:a5:25:21:0b:68:47:0f:4c:c3:d0:dc:6d:0d:bb:54:ca:
         e1:1a:09:f5:b1:aa:7f:3a:1f:97:a0:83:06:6e:3c:63:bb:30:
         99:56:14:70:56:96:ec:17:59:54:e6:a5:1b:de:7c:dc:1e:68:
         35:68:41:4f:76:cb:c5:70:5e:57:57:55:28:74:b8:f4:6c:b1:
         1f:24:d3:34:ff:e9:b3:1c:4e:53:80:28:aa:f7:45:8e:28:71:
         ba:84:78:0b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUY5XzMi+Ee5nNjJ9uvEQXXn9a7QcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTBiYmI5NTQ1NzBjZmE2ZTg1NjkzNzA0M2RkMmMxNzQ1
YTBhMDVjMjAeFw0yNjA1MTIxMjE0NTVaFw0yNjA1MTMxMjQ0NTVaMDMxMTAvBgNV
BAMTKDEyOTMyMzRFNEVEMTE2RjVBMzY0NEVBRDVDNTg1QUE4OTMzODA0RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk3I7dXzbspuS2R+cDDksPEVZK
quZFx6CfXbdpRmTtDxd3UndW/kUqzqzWqLdPmNdgpPOWFygDervdk7kRxhVJszNB
FXP5x+PXN46SZgfjHgsqPeWfE9DYMktBkwkGgX9cxahQm9xhAfz/zYg4cXhMVGdl
1umabfmyukbAfvOtCjtJGSkntLaOute+tYbu9cKoIkyWFr8wsZA+7tdTSbIAgNgl
QBeqt+cPhZT3O/LwU2gLPZSXmjQ36JuGtfueeMt0wsCFhyrhzYJDekyNWWrbX1Wx
T++Hgz1iTdQM4WQz5Vnp2dKqK4iltuoFJRMI8PMbyU0bVpdJv3F/T2uXfkUnAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUEpMjTk7RFvWjZE6tXFhaqJM4BNcwHwYDVR0j
BBgwFoAUoLu5VFcM+m6FaTcEPdLBdFoKBcIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTdiNWY2ZjQtMjRiZS00YWUwLTgyYTgtZTVkODI4NDJl
MjI5LzAvQTBCQkI5NTQ1NzBDRkE2RTg1NjkzNzA0M0REMkMxNzQ1QTBBMDVDMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29MdTVWRmNNLW02RmFUY0VQZExCZEZv
S0JjSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85N2I1ZjZmNC0y
NGJlLTRhZTAtODJhOC1lNWQ4Mjg0MmUyMjkvMC9BMEJCQjk1NDU3MENGQTZFODU2
OTM3MDQzREQyQzE3NDVBMEEwNUMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8ZPpvosXNAawUfqfw5N
Yhli6PrbyI/CRrddXWhW39yssrMxDvxs1ima39Ht/mJG9Q/tohqJKoaFJbUEBvk0
L5zUU7Y+HcVbdsKgWH/1Lux4MOxDVE6/ZWolyJMR3MiBywfazQB/MRv7zCblc1In
1nr9xQcQzsO3I5A4210BXLVHuNdi/5TidjvV0bN0gaRj1x/cR6aXmGxL5tpXb06f
7LOaMzClJSELaEcPTMPQ3G0Nu1TK4RoJ9bGqfzofl6CDBm48Y7swmVYUcFaW7BdZ
VOalG9583B5oNWhBT3bLxXBeV1dVKHS49GyxHyTTNP/psxxOU4AoqvdFjihxuoR4
Cw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:09:02 2026 by rpki-client