Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File:                     94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier:          9mptvtooSyz+vlUcRin6F865b/LokVmwHqHyiiCK5DY=
Subject key identifier:   2A:A5:C2:3F:44:3B:6F:E5:8E:20:00:DD:64:8C:BA:B2:00:4F:78:6F
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer:       /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial:       0380E250EE9C23DB4F27B16D437D4CEE8902E1A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number:          037F
Signing time:             Thu 23 Jul 2026 07:56:48 +0000
Manifest this update:     Thu 23 Jul 2026 07:51:48 +0000
Manifest next update:     Fri 24 Jul 2026 22:54:48 +0000
Files and hashes:         1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: LAqMurOACKOcTDfVrSWYzLQrgHLkSYWwYzwSy/RN1e8=)
                          2: AS214701.asa (hash: UOIf3+bA1bWgRwKrencsqF4C+G5oZw6BMPcTVaDJzos=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:80:e2:50:ee:9c:23:db:4f:27:b1:6d:43:7d:4c:ee:89:02:e1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
        Validity
            Not Before: Jul 23 07:51:48 2026 GMT
            Not After : Jul 24 22:54:48 2026 GMT
        Subject: CN=2AA5C23F443B6FE58E2000DD648CBAB2004F786F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:cd:d8:a4:80:2e:ec:68:74:4e:d6:c7:b6:
                    cf:cd:07:40:d4:ed:75:81:b3:9c:36:37:0d:86:f1:
                    82:fa:24:3f:72:38:47:40:ca:cf:ef:34:b5:a4:17:
                    af:10:e6:e9:d6:0f:2c:7f:3d:34:da:b7:5d:7e:20:
                    3f:55:0a:d6:38:16:9c:41:c5:78:75:57:0d:cc:f8:
                    0a:ba:0e:14:98:7b:5e:4d:f6:e9:df:1e:cd:e8:e8:
                    a3:fc:8a:41:f7:83:64:42:72:14:a1:a5:d4:0a:ec:
                    4c:a0:54:36:1e:62:07:1d:ce:c7:b1:dc:26:37:c9:
                    08:b4:a7:05:5b:4e:4a:95:0b:1e:24:0a:52:34:f8:
                    d3:fe:c7:54:de:66:a2:4f:5a:44:60:6d:88:aa:62:
                    42:1d:29:da:17:c4:0f:2d:de:29:b7:b4:76:94:74:
                    f2:b0:b4:e2:a8:38:4c:8a:ca:30:31:63:cb:8c:8d:
                    50:3e:cb:1d:04:f8:5c:46:2a:76:c6:32:b7:d1:12:
                    b3:ba:af:d0:7b:92:a4:12:a2:02:bf:61:02:7e:30:
                    63:ee:e0:7d:c1:0b:8c:c7:f7:8d:63:f2:49:91:c1:
                    75:3e:3a:f4:6e:d2:95:0f:19:ed:54:18:40:2a:26:
                    0c:c7:17:6b:73:ad:cd:c4:f5:09:26:91:b7:cc:ef:
                    42:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A5:C2:3F:44:3B:6F:E5:8E:20:00:DD:64:8C:BA:B2:00:4F:78:6F
            X509v3 Authority Key Identifier:
                keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:3b:91:5a:f6:e6:6a:5e:f2:ae:a0:95:21:b0:21:44:1b:b2:
         9c:e1:a3:97:de:73:5c:3c:1c:4c:06:f2:40:b5:77:57:c7:5e:
         e3:ea:81:ac:43:ea:43:bb:7f:2c:63:e4:9a:c0:56:3c:b3:18:
         65:8f:99:1b:89:4f:9a:62:b0:d2:5c:d1:01:3d:56:78:78:e4:
         ef:9e:c5:db:1e:5c:43:6e:cc:1e:b6:2b:fb:4f:48:a7:26:87:
         18:c3:e5:67:39:89:28:9c:80:20:42:0f:4d:19:b7:3a:67:e0:
         1e:3e:94:f2:ba:31:2d:f5:a4:f2:cd:29:a5:80:f3:bb:24:d9:
         2c:bd:88:44:cc:c2:4b:de:ce:9b:bc:71:fc:f9:5f:e4:d5:2b:
         30:58:16:ff:a9:41:3e:0b:04:a5:4a:10:35:38:5b:91:6f:74:
         28:2b:d8:79:27:69:d2:87:c6:2c:cd:56:a8:95:a4:98:d5:d1:
         31:1e:b9:2a:3a:82:ee:1e:8b:7d:bf:6a:89:12:94:0d:f7:ba:
         3b:3b:22:ca:dc:0c:a0:a5:80:a2:96:2c:b2:b7:db:d8:8a:13:
         16:68:33:ee:ac:68:da:17:59:af:d9:f8:1b:f4:9c:68:b2:63:
         57:89:3c:e4:f6:79:01:32:66:42:e5:ca:d8:97:c6:d4:e6:82:
         b8:b0:96:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:48 2026 by rpki-client