Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
File:                     F7DD807E33980D7322171230874230C1DB2A1A7F.mft (raw, json)
Hash identifier:          ttWZukSLDRmxPx53mzgv/oYm5dE/cZ9Prd+HzzVNEHc=
Subject key identifier:   87:50:8E:75:03:9D:11:90:92:1B:EE:FB:73:F4:9C:4D:BC:2A:FA:36
Authority key identifier: F7:DD:80:7E:33:98:0D:73:22:17:12:30:87:42:30:C1:DB:2A:1A:7F
Certificate issuer:       /CN=f7dd807e33980d7322171230874230c1db2a1a7f
Certificate serial:       7630D15CA55D49A4B2AE9528CCC96D05DDF60500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
Manifest number:          66
Signing time:             Wed 23 Sep 2026 09:44:35 +0000
Manifest this update:     Wed 23 Sep 2026 09:39:35 +0000
Manifest next update:     Thu 24 Sep 2026 23:42:35 +0000
Files and hashes:         1: AS214344.asa (hash: uariAkNcC7BunX/HDd6SiaYS4ed/MPMzbBuNgQzVolM=)
                          2: F7DD807E33980D7322171230874230C1DB2A1A7F.crl (hash: QijqPm4/nA3flDiqND/7C2IrnBrQVvMfpeg06caNbFc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:30:d1:5c:a5:5d:49:a4:b2:ae:95:28:cc:c9:6d:05:dd:f6:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7dd807e33980d7322171230874230c1db2a1a7f
        Validity
            Not Before: Sep 23 09:39:35 2026 GMT
            Not After : Sep 24 23:42:35 2026 GMT
        Subject: CN=87508E75039D1190921BEEFB73F49C4DBC2AFA36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6e:c6:ba:28:58:6c:06:a0:ff:e2:af:9f:08:
                    26:78:fe:b0:3b:19:88:e5:3c:0d:02:a5:9e:99:3f:
                    9f:b4:c5:65:63:c4:d7:ba:38:3b:0c:c5:3c:1a:3b:
                    ec:5c:de:0b:8e:96:66:b1:a3:52:bf:92:1e:7a:ea:
                    78:de:f9:46:a6:f5:38:fb:f0:9d:98:6b:f2:c2:2e:
                    76:8e:87:a7:41:6d:1c:6b:0e:f4:11:39:bc:6d:be:
                    69:a2:e0:ff:96:3a:a3:9f:75:26:00:20:b0:06:ad:
                    1c:95:3f:fb:7a:a0:bf:71:fc:84:3b:31:b8:14:a5:
                    0b:14:2e:72:50:c8:b4:d4:1c:e1:12:5f:67:07:38:
                    38:55:3a:a9:e9:3a:52:79:b0:18:36:56:d1:ed:82:
                    55:07:8d:2b:48:32:7b:47:f9:7e:b9:31:27:0d:90:
                    9b:08:85:9b:fd:52:1f:6c:90:35:d6:2f:96:5a:bd:
                    fa:ed:9a:4c:28:3e:29:ab:99:fd:35:d7:36:16:93:
                    c5:61:42:04:74:77:84:2d:15:42:7e:52:bc:40:4c:
                    23:f3:6d:b2:4d:ba:3b:94:68:52:14:e8:ab:3e:c6:
                    b1:fb:02:bd:07:e4:0f:57:91:d6:34:53:04:44:ed:
                    21:1a:a2:58:c4:91:af:31:6d:d3:bd:90:40:39:7e:
                    c6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:50:8E:75:03:9D:11:90:92:1B:EE:FB:73:F4:9C:4D:BC:2A:FA:36
            X509v3 Authority Key Identifier:
                keyid:F7:DD:80:7E:33:98:0D:73:22:17:12:30:87:42:30:C1:DB:2A:1A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:25:e7:a7:d9:29:44:11:f4:4b:a5:5b:03:94:35:3c:95:a2:
         c9:43:0a:90:ac:22:a8:fa:44:4f:fb:62:e1:ab:32:61:d2:ce:
         47:98:ba:ea:3b:6f:30:ae:29:60:d8:28:e2:e9:c1:36:2b:32:
         0d:72:54:06:be:74:bc:f7:bd:57:6d:f4:35:17:59:df:a8:eb:
         62:6c:f5:60:67:e7:99:99:4c:7f:f9:ca:a4:40:1d:de:d3:70:
         97:3c:a2:1e:a1:07:c4:9f:9f:d4:04:78:4b:eb:13:fa:09:16:
         ab:1a:a8:3a:ed:26:fe:99:df:a7:14:04:88:c7:77:24:81:08:
         ee:04:e0:a0:4b:58:b9:ed:c8:4d:be:74:49:5f:05:11:81:66:
         50:a3:dd:7c:c8:b2:f4:a9:6c:61:74:53:87:96:8b:41:a2:9b:
         6b:f2:62:b6:cf:44:ca:ad:2d:27:e0:a6:58:73:d3:21:7d:b5:
         c5:9b:05:d0:8e:38:1f:34:de:37:5e:aa:0a:24:ee:eb:c3:05:
         fd:e8:3b:25:99:f7:5f:1b:c0:c1:75:83:e1:fb:36:6f:26:0e:
         54:f0:e6:38:a2:e0:ec:48:56:2f:f1:b4:2a:3b:6d:b9:45:09:
         8e:bb:fc:76:c3:83:e9:40:34:1e:21:50:f1:75:9e:50:3d:31:
         3f:c6:b4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:08:39 2026 by rpki-client