Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/0/54ABC05073AE6C755ED55ED0E1D2573706EB2D95.mft
File:                     54ABC05073AE6C755ED55ED0E1D2573706EB2D95.mft (raw, json)
Hash identifier:          qihpY6GfTNSddA2yMLUTt6nhMds3bkBzKN6D+VqknOA=
Subject key identifier:   3C:01:23:EF:D3:E6:A0:BB:FE:9E:3D:51:51:A9:BA:55:8E:13:D7:56
Authority key identifier: 54:AB:C0:50:73:AE:6C:75:5E:D5:5E:D0:E1:D2:57:37:06:EB:2D:95
Certificate issuer:       /CN=54abc05073ae6c755ed55ed0e1d2573706eb2d95
Certificate serial:       25F2EB7090FD969129D043EB111B791679188DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKvAUHOubHVe1V7Q4dJXNwbrLZU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/0/54ABC05073AE6C755ED55ED0E1D2573706EB2D95.mft
Manifest number:          3F
Signing time:             Wed 25 Mar 2026 13:11:37 +0000
Manifest this update:     Wed 25 Mar 2026 13:06:37 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:37 +0000
Files and hashes:         1: 54ABC05073AE6C755ED55ED0E1D2573706EB2D95.crl (hash: tTaGMRGuq2GF+ZU/xzE3oevou1g5JzOFSAQDrqiV/I0=)
                          2: AS201398.asa (hash: wNimOC0Q6esrTkfv21SK+JtgmCPGGevrew7DZPmAWDs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/0/54ABC05073AE6C755ED55ED0E1D2573706EB2D95.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/0/54ABC05073AE6C755ED55ED0E1D2573706EB2D95.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VKvAUHOubHVe1V7Q4dJXNwbrLZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f2:eb:70:90:fd:96:91:29:d0:43:eb:11:1b:79:16:79:18:8d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54abc05073ae6c755ed55ed0e1d2573706eb2d95
        Validity
            Not Before: Mar 25 13:06:37 2026 GMT
            Not After : Mar 26 16:01:37 2026 GMT
        Subject: CN=3C0123EFD3E6A0BBFE9E3D5151A9BA558E13D756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:29:a4:d8:31:e5:f7:ff:dd:9c:a6:6b:8f:
                    2d:cd:79:c0:b1:e3:ff:f9:6b:eb:3f:8e:8f:35:c7:
                    5a:8e:f1:e4:98:91:b5:d0:f1:4f:fe:e6:78:9d:ef:
                    f4:e6:99:10:66:dd:58:bf:69:69:58:b9:b3:a4:91:
                    05:55:1d:5f:a7:01:8f:29:17:b5:13:a2:da:43:a0:
                    11:76:c9:65:5d:00:3a:b6:0f:52:34:36:7e:68:45:
                    0a:8f:5f:06:13:3c:93:13:e1:7d:0d:7f:ff:bf:66:
                    9b:7e:a1:6d:fd:9a:5b:04:2b:57:56:9e:b7:86:e5:
                    09:aa:ac:12:9c:38:2a:92:35:e7:f2:ea:64:53:a4:
                    4a:ef:fe:85:d5:56:bc:7e:72:71:04:b4:95:4a:9f:
                    7c:5e:62:4a:fd:f6:e3:27:6d:a7:0a:76:c0:90:9f:
                    86:d7:0c:15:59:b3:f9:d8:4c:b5:c3:d2:8e:9f:3d:
                    f8:23:03:7e:15:ac:e9:b2:e3:a3:ae:17:ac:7f:a6:
                    0f:ea:c0:49:d9:72:db:d4:60:6b:ca:8e:70:32:af:
                    b1:0a:b6:1e:94:e0:5d:e0:22:5a:57:dc:2c:e7:33:
                    74:93:7a:62:e5:de:14:eb:13:2d:ab:a9:62:04:8f:
                    95:7c:fd:92:60:24:43:78:29:40:47:c5:fc:7d:9e:
                    76:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:01:23:EF:D3:E6:A0:BB:FE:9E:3D:51:51:A9:BA:55:8E:13:D7:56
            X509v3 Authority Key Identifier:
                keyid:54:AB:C0:50:73:AE:6C:75:5E:D5:5E:D0:E1:D2:57:37:06:EB:2D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/0/54ABC05073AE6C755ED55ED0E1D2573706EB2D95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKvAUHOubHVe1V7Q4dJXNwbrLZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/0/54ABC05073AE6C755ED55ED0E1D2573706EB2D95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:3d:5a:ac:d4:44:e5:ae:5e:ac:4f:53:90:8e:e9:a8:81:50:
         18:40:e6:0c:da:02:4b:88:9c:0e:f9:ef:1d:f5:bb:e8:c6:c0:
         ea:d4:61:a0:bc:f3:27:9c:64:c5:a7:32:71:4f:9c:0b:ab:ae:
         d3:bd:7a:35:d1:e9:8d:1c:80:0d:e5:ef:bb:c2:ee:4c:a1:db:
         28:92:0d:fc:00:a7:b7:64:a8:b1:1a:ab:82:25:8d:34:45:45:
         df:bd:05:10:10:7c:60:64:0a:27:aa:8b:c6:04:2d:9a:7b:27:
         73:9d:68:16:33:fa:76:e2:18:4f:69:e2:94:87:9f:22:8b:75:
         83:01:18:6c:41:cb:a2:c8:41:0d:56:78:51:60:2d:57:0e:94:
         e8:6e:ea:c7:7e:79:1e:e1:48:25:44:a8:09:4c:c7:e3:08:4e:
         db:24:31:f9:31:4b:07:e3:94:44:88:cf:e7:f2:26:a4:57:64:
         04:7a:04:2a:4b:72:70:0b:f2:4a:e8:f2:f4:91:4b:2d:d8:a0:
         3f:82:60:e0:ee:31:7c:ed:87:9c:93:3d:c6:2c:6d:34:a0:8c:
         97:5a:d3:07:3b:8a:e9:7a:72:0e:e1:02:40:de:11:f6:75:74:
         a9:b5:94:29:f8:5a:38:dd:a9:b7:1f:42:95:30:d5:97:1d:6e:
         29:f7:f8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:16 2026 by rpki-client