Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File:                     7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier:          Kg8hCXYjhr90xOhWJh1hbdjWJ/BnezyvY5ZF0fWrZpE=
Subject key identifier:   F3:C0:CA:81:8B:B7:3B:15:D8:51:16:64:72:E4:56:62:D6:CB:31:36
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       38E28EFA4B0C71E85D009FE8D911B50758CFDF31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number:          0456
Signing time:             Sun 15 Nov 2026 11:44:26 +0000
Manifest this update:     Sun 15 Nov 2026 11:39:26 +0000
Manifest next update:     Mon 16 Nov 2026 15:00:26 +0000
Files and hashes:         1: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: cGCnUjJUYE6M5REft/sPudruZArlPqsP8UDN9QWU+vY=)
                          2: AS215849.asa (hash: QZI6Yvoi4hUBSRXS5p8Ju6CY1eYmF0fNOYB66ntflGk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e2:8e:fa:4b:0c:71:e8:5d:00:9f:e8:d9:11:b5:07:58:cf:df:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Nov 15 11:39:26 2026 GMT
            Not After : Nov 16 15:00:26 2026 GMT
        Subject: CN=F3C0CA818BB73B15D851166472E45662D6CB3136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:08:3d:90:ce:1a:90:10:3c:8b:1c:47:57:
                    04:6c:f1:99:ab:e2:65:41:35:37:e7:e5:f1:97:0f:
                    c0:d3:7f:2a:3e:82:9f:e3:7a:e8:6c:be:c8:39:9e:
                    cc:4b:2f:23:4c:a1:03:56:39:14:fa:4e:81:6e:77:
                    0c:2a:a1:7c:54:0e:b2:a3:55:30:0d:e8:39:90:77:
                    0b:d0:79:d6:8f:b9:57:9d:5d:f6:00:0d:f9:06:65:
                    00:7c:bf:66:7d:b8:77:02:d6:cc:dc:bd:9e:ff:18:
                    84:6e:74:c6:2c:36:63:40:d1:a6:95:54:4a:51:29:
                    68:92:ff:f1:dd:fb:df:91:bf:cd:97:d1:66:f4:ef:
                    15:58:a8:98:a2:8a:c5:1f:6b:6c:21:ca:8a:01:6c:
                    4e:41:ad:20:ed:92:26:46:fa:dd:fa:11:78:b8:9c:
                    e5:38:5c:fe:dd:90:20:cb:ca:b4:dd:39:b9:69:a5:
                    54:4a:54:4e:56:1d:7a:54:b8:8b:db:56:cc:57:41:
                    74:f9:5f:76:ef:51:d8:5c:ff:6a:2a:7a:e5:d2:fe:
                    72:20:ba:84:24:db:b5:6e:03:e7:fb:5d:c9:67:f4:
                    b0:c8:b5:72:8f:b2:b2:ab:05:25:f2:e6:43:7a:87:
                    99:23:be:9b:e0:9b:de:fc:05:76:db:a1:8e:8c:b7:
                    5c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C0:CA:81:8B:B7:3B:15:D8:51:16:64:72:E4:56:62:D6:CB:31:36
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:82:03:4b:1c:dc:27:9e:b2:2e:3a:4b:ce:20:40:fd:c2:f4:
         50:68:89:6e:f7:77:18:c0:7b:59:10:e4:c2:ba:78:cb:91:e8:
         b4:07:5c:5f:c3:ec:d6:aa:85:03:6a:25:52:b4:4f:4d:19:5c:
         0d:8e:9a:24:6a:32:75:c2:7a:7e:db:c2:44:46:f0:f0:cc:06:
         e4:8c:67:60:66:3b:84:1f:63:51:ed:69:36:9a:30:3c:ca:89:
         fb:a7:0b:c6:70:1d:2f:23:af:bb:7f:90:59:57:f5:4f:cf:df:
         c2:19:87:49:3a:a3:90:c4:f1:83:ee:a7:de:16:97:0d:4c:0b:
         f2:64:51:f1:a4:39:17:f4:c5:87:b9:3f:5d:f5:4f:b6:66:63:
         02:46:95:4d:d8:77:07:46:08:61:18:35:f8:8b:b0:0b:6a:86:
         ad:c0:7b:76:55:be:a1:20:05:a3:e6:80:c3:f9:a9:3b:cb:6b:
         15:5c:d3:37:6e:73:28:d2:01:61:1f:6e:32:98:cf:95:34:3a:
         5a:57:c9:00:3a:1c:6d:95:7c:3d:23:22:61:5d:cd:cf:4c:17:
         83:b4:3b:09:92:fe:77:ac:d2:c6:87:1d:79:8d:81:5f:1b:7d:
         a8:40:76:aa:be:b5:07:8f:53:a3:cc:d4:1b:c9:33:c5:26:0b:
         16:13:47:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:33:26 2026 by rpki-client