Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
File:                     2615B626807D30988381C32656617AE6FD6638B6.mft (raw, json)
Hash identifier:          O+3+UtIqYGExwf7FEGaOsxm4OrFZmKthOD8UP5VPJew=
Subject key identifier:   18:92:A6:11:AF:E8:0E:AD:20:2D:FB:CB:61:42:0B:0B:C4:2B:B9:0E
Authority key identifier: 26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
Certificate issuer:       /CN=2615b626807d30988381c32656617ae6fd6638b6
Certificate serial:       32D2710126C905976F54DCA2B44211FC698BA4F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
Manifest number:          01B8
Signing time:             Thu 23 Jul 2026 08:38:49 +0000
Manifest this update:     Thu 23 Jul 2026 08:33:49 +0000
Manifest next update:     Fri 24 Jul 2026 10:13:49 +0000
Files and hashes:         1: 2615B626807D30988381C32656617AE6FD6638B6.crl (hash: sAJ5V1GNUH+TTQ0zZBntjkchf655fN1o57E0axgfiis=)
                          2: AS209710.asa (hash: fei93QJj3GioeSiwJa/4u7D/L9WI2DyLXldgfiVGkiM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:13:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d2:71:01:26:c9:05:97:6f:54:dc:a2:b4:42:11:fc:69:8b:a4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2615b626807d30988381c32656617ae6fd6638b6
        Validity
            Not Before: Jul 23 08:33:49 2026 GMT
            Not After : Jul 24 10:13:49 2026 GMT
        Subject: CN=1892A611AFE80EAD202DFBCB61420B0BC42BB90E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:9d:26:d3:df:52:ce:26:07:32:a1:a1:f9:
                    5b:64:54:2a:4f:9c:c8:ee:b6:58:9b:d4:17:93:67:
                    55:51:d2:9f:f1:3a:05:b4:e4:c1:5d:46:0a:25:58:
                    de:e6:b9:7c:d7:d6:7a:ff:8e:ca:2b:4b:68:ad:55:
                    52:53:3b:a0:36:17:f0:27:b8:38:ff:09:3a:bf:e0:
                    76:36:2e:e9:b8:ef:ad:14:eb:13:70:1e:6d:e8:e8:
                    6f:7c:a0:16:6e:e7:e1:00:78:a8:91:cc:03:01:c0:
                    9a:8d:5b:2e:ac:d8:76:c5:ff:d9:2e:ae:08:b8:17:
                    e0:8d:2c:5d:79:ad:01:03:1e:a3:e9:8b:cd:a9:31:
                    31:bd:f6:d5:4d:8c:87:db:d8:41:3a:7f:9b:25:bc:
                    81:45:ec:54:90:f5:4e:4a:c8:30:e8:36:e0:97:11:
                    2f:5d:4d:0b:cf:5a:a6:a2:86:63:da:3d:82:2a:eb:
                    9f:ce:52:63:a9:d0:bf:21:b7:60:0d:b8:4d:d2:c2:
                    da:08:47:84:16:06:3e:3b:ba:d7:1d:c3:de:74:a7:
                    6b:05:f0:db:8d:23:9f:37:13:bc:9b:e0:4b:b1:79:
                    cd:f0:ea:08:58:f8:06:d7:45:a0:a8:8d:67:4a:93:
                    4e:fa:0c:0f:19:7e:71:56:0a:8e:c9:2a:c2:8c:7d:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:92:A6:11:AF:E8:0E:AD:20:2D:FB:CB:61:42:0B:0B:C4:2B:B9:0E
            X509v3 Authority Key Identifier:
                keyid:26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8f:60:2e:2b:23:f5:8c:18:85:34:25:a8:87:d1:8d:87:5d:
         36:13:06:5b:8d:24:86:3b:35:50:c2:97:6e:8c:f8:63:b2:ee:
         59:76:fa:2a:7f:03:58:5a:3f:38:9a:c1:db:a7:21:6c:2b:60:
         de:b4:ef:a0:ec:b5:cd:cf:41:66:6f:5e:66:6a:ca:05:26:e1:
         b6:f2:22:d1:7e:e0:f3:fe:bb:7a:0f:d0:f8:fd:4b:a6:e3:42:
         ff:35:12:d9:a8:62:f8:e4:1e:98:ba:aa:58:fb:29:5c:4b:66:
         fc:1a:c5:b2:6b:7d:af:18:b8:49:ab:bc:df:71:3b:71:ea:73:
         d0:e1:c5:a7:25:0e:bb:15:89:fc:5f:ff:a1:24:8d:1c:ec:5e:
         70:47:71:13:63:1f:2d:96:97:97:ed:bd:f8:01:49:4a:9e:10:
         50:60:03:f5:a6:7c:03:c6:12:fe:0b:80:cb:fd:d7:50:19:44:
         ed:d9:ef:1b:37:dc:6a:d6:83:92:d6:28:92:d2:33:70:a5:ec:
         d4:6b:cd:d3:e1:40:6e:bf:ef:c9:c3:6f:39:6e:cb:9a:3c:d1:
         9f:ca:b5:6b:7a:15:27:6b:15:3c:5f:7b:59:1b:ae:63:21:b4:
         46:17:0a:2c:e5:c8:71:a8:33:09:e0:31:c9:cf:a1:67:c4:b6:
         58:27:28:fa
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUMtJxASbJBZdvVNyitEIR/GmLpPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYxNWI2MjY4MDdkMzA5ODgzODFjMzI2NTY2MTdhZTZm
ZDY2MzhiNjAeFw0yNjA3MjMwODMzNDlaFw0yNjA3MjQxMDEzNDlaMDMxMTAvBgNV
BAMTKDE4OTJBNjExQUZFODBFQUQyMDJERkJDQjYxNDIwQjBCQzQyQkI5MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCsJ0m099SziYHMqGh+VtkVCpP
nMjutlib1BeTZ1VR0p/xOgW05MFdRgolWN7muXzX1nr/jsorS2itVVJTO6A2F/An
uDj/CTq/4HY2Lum4760U6xNwHm3o6G98oBZu5+EAeKiRzAMBwJqNWy6s2HbF/9ku
rgi4F+CNLF15rQEDHqPpi82pMTG99tVNjIfb2EE6f5slvIFF7FSQ9U5KyDDoNuCX
ES9dTQvPWqaihmPaPYIq65/OUmOp0L8ht2ANuE3SwtoIR4QWBj47utcdw950p2sF
8NuNI583E7yb4Euxec3w6ghY+AbXRaCojWdKk076DA8ZfnFWCo7JKsKMfbuNAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUGJKmEa/oDq0gLfvLYUILC8QruQ4wHwYDVR0j
BBgwFoAUJhW2JoB9MJiDgcMmVmF65v1mOLYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz
ODZjLzEvMjYxNUI2MjY4MDdEMzA5ODgzODFDMzI2NTY2MTdBRTZGRDY2MzhCNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0poVzJKb0I5TUppRGdjTW1WbUY2NXYx
bU9MWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZWNhYzQxMy00
Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMS8yNjE1QjYyNjgwN0QzMDk4ODM4
MUMzMjY1NjYxN0FFNkZENjYzOEI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYo9gLisj9YwYhTQlqIfR
jYddNhMGW40khjs1UMKXboz4Y7LuWXb6Kn8DWFo/OJrB26chbCtg3rTvoOy1zc9B
Zm9eZmrKBSbhtvIi0X7g8/67eg/Q+P1LpuNC/zUS2ahi+OQemLqqWPspXEtm/BrF
smt9rxi4Sau833E7cepz0OHFpyUOuxWJ/F//oSSNHOxecEdxE2MfLZaXl+29+AFJ
Sp4QUGAD9aZ8A8YS/guAy/3XUBlE7dnvGzfcataDktYoktIzcKXs1GvN0+FAbr/v
ycNvOW7LmjzRn8q1a3oVJ2sVPF97WRuuYyG0RhcKLOXIcagzCeAxyc+hZ8S2WCco
+g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:25 2026 by rpki-client