Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft
File:                     7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft (raw, json)
Hash identifier:          jSEs2IG7lHZG3yZ4+S2VuTOCOibRgcanqkWNJYnVmnE=
Subject key identifier:   5B:EE:CD:49:94:01:B6:E8:DA:32:B5:99:6E:1F:20:18:C0:E8:E3:EE
Authority key identifier: 7B:08:E2:6E:A9:F3:D8:25:EC:CD:64:E5:FD:C3:55:C8:52:A7:AF:54
Certificate issuer:       /CN=7b08e26ea9f3d825eccd64e5fdc355c852a7af54
Certificate serial:       6B66B039398A81DCCB8ECCCA15649B5A2850F6CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewjibqnz2CXszWTl_cNVyFKnr1Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft
Manifest number:          031D
Signing time:             Wed 25 Mar 2026 20:20:13 +0000
Manifest this update:     Wed 25 Mar 2026 20:15:13 +0000
Manifest next update:     Thu 26 Mar 2026 20:35:13 +0000
Files and hashes:         1: 7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.crl (hash: YwAhUrrMJrdQfDYESCdaHAHXx6ZtHagn9tcYN5ijjuA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewjibqnz2CXszWTl_cNVyFKnr1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:66:b0:39:39:8a:81:dc:cb:8e:cc:ca:15:64:9b:5a:28:50:f6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b08e26ea9f3d825eccd64e5fdc355c852a7af54
        Validity
            Not Before: Mar 25 20:15:13 2026 GMT
            Not After : Mar 26 20:35:13 2026 GMT
        Subject: CN=5BEECD499401B6E8DA32B5996E1F2018C0E8E3EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:7d:eb:74:ba:d8:23:93:5e:11:f1:44:ea:
                    c9:36:3b:21:4d:74:00:9a:ca:6b:86:e3:96:f6:4a:
                    2a:bb:a8:b0:53:a6:7e:64:18:c8:b8:30:54:ad:d5:
                    e8:76:1e:bb:5c:2b:d4:46:c6:e4:33:e3:65:56:a1:
                    35:a6:b9:c5:cc:94:68:b4:fb:4a:2d:4d:81:e1:f9:
                    0d:88:d2:b7:22:98:89:22:90:67:47:86:8f:64:d5:
                    1b:41:cd:0b:3c:83:7c:d3:83:6e:a7:f4:3c:01:06:
                    2a:5d:53:c3:85:4e:e7:85:0a:08:a7:87:55:71:6c:
                    46:dd:d7:a9:cf:3a:69:83:36:29:b8:a1:51:e8:a9:
                    31:0e:68:d0:8e:e6:d3:30:56:8e:f3:7c:a0:a0:47:
                    86:e0:ff:6c:ae:5b:4e:19:ca:df:8d:5c:15:c1:9c:
                    e0:fa:05:73:7e:bc:aa:8f:f6:dc:9e:d3:00:35:88:
                    53:c7:c4:76:01:04:18:67:a6:3c:a9:64:9d:25:97:
                    17:7f:f9:fc:de:17:46:d1:7b:26:86:c5:37:7c:29:
                    0b:1f:90:34:dd:45:ee:dd:93:64:c6:c9:02:09:0f:
                    c2:2a:8d:f6:e3:47:8b:a7:c8:97:ec:9a:26:46:2f:
                    41:88:aa:b6:66:6c:22:2d:e6:23:10:3c:9e:b7:bb:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EE:CD:49:94:01:B6:E8:DA:32:B5:99:6E:1F:20:18:C0:E8:E3:EE
            X509v3 Authority Key Identifier:
                keyid:7B:08:E2:6E:A9:F3:D8:25:EC:CD:64:E5:FD:C3:55:C8:52:A7:AF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjibqnz2CXszWTl_cNVyFKnr1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:03:65:d7:d0:68:91:03:b3:96:99:0c:f1:73:70:ee:ae:47:
         3f:25:25:68:5b:46:0e:9f:2b:16:fa:98:1a:46:6d:72:20:2e:
         78:ab:b4:85:de:ce:8b:68:f2:6e:3d:1d:63:7c:f5:c2:42:1d:
         47:09:40:49:96:cd:26:1c:35:db:b3:bf:36:87:59:d0:77:77:
         b2:89:5f:0b:5f:88:d5:47:75:07:da:57:9c:11:0d:30:35:1d:
         a7:97:7d:41:f0:0b:59:0c:e1:6b:e9:89:51:be:73:29:8f:35:
         af:cf:06:0f:00:a5:d6:02:35:b1:bc:ff:3b:e4:e0:df:c1:f1:
         96:3c:57:ce:c7:05:c1:9c:63:ca:b7:fb:4c:e2:7f:c0:a2:82:
         4f:9b:a4:a3:cd:95:da:95:68:c8:0a:1f:4e:d7:15:58:9a:68:
         a9:7f:53:9b:98:9b:05:07:e8:a7:f7:08:38:3c:a8:22:39:b9:
         0f:55:af:2c:4c:c9:ca:98:c9:4b:e8:c4:70:3d:11:9d:59:f3:
         07:a4:ce:4d:09:84:58:8f:31:86:0d:51:d3:f5:a7:f6:cd:c9:
         cf:04:6f:82:03:f5:55:d9:15:3e:46:33:38:9a:e4:9c:f6:2e:
         db:d4:1f:46:8f:13:34:44:0e:a6:ff:7f:0c:60:22:92:5c:b3:
         de:ac:4e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:50:47 2026 by rpki-client