Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.mft
File:                     559992E9723DF6CBA0618FF60190728D55026CCA.mft (raw, json)
Hash identifier:          tadDR+gDoQHKEU0e0cIeE3RzKLYE/1fb1CuNK/93IUI=
Subject key identifier:   24:BB:92:73:71:93:08:2A:7E:1D:E6:BF:B8:EF:8E:AC:58:E8:2A:3A
Authority key identifier: 55:99:92:E9:72:3D:F6:CB:A0:61:8F:F6:01:90:72:8D:55:02:6C:CA
Certificate issuer:       /CN=559992e9723df6cba0618ff60190728d55026cca
Certificate serial:       0B5FC7B564743C2AF19C919C028390DF810920E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZmS6XI99sugYY_2AZByjVUCbMo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.mft
Manifest number:          55
Signing time:             Thu 23 Jul 2026 07:27:33 +0000
Manifest this update:     Thu 23 Jul 2026 07:22:33 +0000
Manifest next update:     Fri 24 Jul 2026 09:14:33 +0000
Files and hashes:         1: AS198078.asa (hash: fDa05p/Agsdsrc9Fnyp/NPUFhpGq6mLJCII8lchSl+U=)
                          2: 559992E9723DF6CBA0618FF60190728D55026CCA.crl (hash: MRfQpby21TyMbZwSrEypA7t6KcOubB1ppZp1eP/fzWk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZmS6XI99sugYY_2AZByjVUCbMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 09:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5f:c7:b5:64:74:3c:2a:f1:9c:91:9c:02:83:90:df:81:09:20:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559992e9723df6cba0618ff60190728d55026cca
        Validity
            Not Before: Jul 23 07:22:33 2026 GMT
            Not After : Jul 24 09:14:33 2026 GMT
        Subject: CN=24BB92737193082A7E1DE6BFB8EF8EAC58E82A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a8:3d:62:79:b0:c8:cb:66:10:23:d8:48:9c:
                    35:8f:f8:ab:0c:7f:1a:ee:7a:28:13:19:01:09:14:
                    1a:c7:94:f7:34:d8:71:6e:68:15:ce:00:5f:32:55:
                    01:36:7b:63:0c:46:a5:b6:e6:44:e1:96:63:92:bf:
                    82:2c:4a:a0:cb:c4:7b:56:23:bb:e9:8c:b7:32:1d:
                    32:3e:e6:3a:41:e5:68:ec:d3:12:1f:00:00:04:79:
                    d2:93:0f:62:97:9e:8c:b6:6d:2e:ad:7c:4f:42:f1:
                    89:de:fa:44:ae:e1:f0:03:c2:30:41:4a:2c:17:be:
                    54:04:d6:87:c2:7a:d2:76:05:6f:02:c4:ec:ab:48:
                    1b:30:68:78:ae:c0:11:6c:32:fb:eb:c2:e8:ee:1a:
                    d9:1f:78:45:57:e1:74:cb:3c:0f:25:71:b1:39:91:
                    61:77:4f:72:d6:19:eb:2f:27:bc:ae:8d:fb:e7:40:
                    3d:b9:44:cd:1a:91:fb:3c:bb:63:32:4c:18:4e:16:
                    e1:87:17:95:fe:34:bd:dc:62:5c:24:44:95:9a:21:
                    d6:24:ac:88:bd:ef:8e:17:c2:6f:5f:32:fa:87:42:
                    f7:43:aa:e3:08:c1:c1:92:42:be:37:18:7f:21:6c:
                    eb:cf:2a:0b:b2:e9:b2:d5:9c:50:21:86:d3:ec:8e:
                    82:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BB:92:73:71:93:08:2A:7E:1D:E6:BF:B8:EF:8E:AC:58:E8:2A:3A
            X509v3 Authority Key Identifier:
                keyid:55:99:92:E9:72:3D:F6:CB:A0:61:8F:F6:01:90:72:8D:55:02:6C:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZmS6XI99sugYY_2AZByjVUCbMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:dd:93:e8:81:f4:40:30:fa:01:96:17:9a:dd:14:56:96:3d:
         65:b4:67:21:41:8e:b4:f5:42:c2:f9:9e:4a:4d:cd:3b:75:c1:
         49:01:c1:00:55:12:7c:b6:d4:83:bc:59:a7:07:ce:66:82:e8:
         50:d6:ef:2d:b4:0a:ca:98:7f:43:1e:86:e5:45:86:3d:4c:86:
         22:f1:51:5f:d8:45:c6:9a:58:f2:a1:79:ac:bf:87:84:fd:01:
         76:b9:87:94:52:b4:b7:11:a1:d9:3c:56:01:3e:28:cc:22:41:
         b3:60:e6:66:a2:b5:32:63:42:82:bf:7b:3e:21:9f:29:ec:16:
         a7:4e:20:6a:76:50:66:30:d2:23:d4:d4:5a:b1:1f:75:67:37:
         31:a6:24:b1:e9:7c:d9:e7:1d:cc:81:2f:e1:a4:ed:e4:0f:ec:
         5a:34:38:80:22:eb:7b:6a:c5:53:99:cf:d3:5a:fe:25:a7:db:
         d0:7b:b2:39:73:41:35:9b:2a:2a:78:27:e7:8b:10:6b:97:c8:
         06:88:7c:30:ec:09:37:56:ef:d8:a6:f9:8b:00:5a:ae:13:20:
         33:42:e9:74:eb:42:8a:5d:53:10:80:28:77:5b:7e:c2:18:5c:
         e9:26:4b:c5:16:c6:c3:bf:7e:be:30:b2:49:68:e3:b5:44:0f:
         bf:75:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:58:56 2026 by rpki-client