Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File:                     2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier:          dL0SK6zFQUGvQ/oNc0gp9yY8WtiyY6I605ocKAkkomE=
Subject key identifier:   2B:50:A9:AB:3E:23:5F:9D:0A:09:8D:1D:0A:C9:E9:BC:40:AE:AB:1C
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer:       /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial:       3774BCE2DFF16CFEA8A75C61A4C705A1E65F50B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number:          04AE
Signing time:             Thu 23 Jul 2026 17:05:45 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:45 +0000
Manifest next update:     Fri 24 Jul 2026 19:37:45 +0000
Files and hashes:         1: AS205329.asa (hash: VGL8fNaLY3qFu9mP5r7NvYdgKqN6s2IJxTCOZNeTahk=)
                          2: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: JlCMCS7cbsR7ZQDrlIL2EenoMa8HoJCgJ1OF2kcTVzk=)
                          3: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: MA6NPPoujdiQWojyCVLJyxDFh4C42V7H1GeWERt+WOo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:74:bc:e2:df:f1:6c:fe:a8:a7:5c:61:a4:c7:05:a1:e6:5f:50:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
        Validity
            Not Before: Jul 23 17:00:45 2026 GMT
            Not After : Jul 24 19:37:45 2026 GMT
        Subject: CN=2B50A9AB3E235F9D0A098D1D0AC9E9BC40AEAB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:00:6f:a2:2e:14:6c:7e:ff:7a:99:2e:4f:
                    c8:1f:10:51:d9:d0:29:d6:be:cf:1d:8a:6a:ef:cc:
                    55:8c:50:ff:13:5e:04:b5:41:d2:c0:82:7f:c5:fb:
                    a8:5a:78:73:95:53:d4:c0:ae:56:f1:ae:42:09:d5:
                    23:4f:51:a7:74:d5:c4:41:6e:64:31:78:fb:0b:01:
                    82:6d:f6:36:d0:24:f8:32:af:02:bb:ee:19:0d:d5:
                    5c:07:06:9f:81:d7:52:99:28:56:3c:a9:4c:6f:af:
                    9b:52:59:d7:4f:0e:27:92:31:b1:f1:dd:c8:ba:af:
                    94:a0:f9:b1:30:49:bd:0f:4e:be:ac:d2:c2:9c:61:
                    ac:2a:1d:9a:6b:57:7d:91:e7:9d:26:b0:ef:a8:8e:
                    08:7f:3f:dd:a4:91:51:a5:bd:08:17:03:03:a2:12:
                    d9:ff:51:4a:d8:f3:03:d5:b0:97:07:93:00:e5:97:
                    90:18:d7:a9:72:54:96:de:20:d0:1e:81:a5:de:98:
                    37:04:30:d9:c5:12:42:6e:23:20:2e:27:c3:e7:1b:
                    26:c5:6e:41:78:18:ed:8c:1e:ab:f2:db:9d:fa:e1:
                    93:4c:5c:7f:26:e3:38:04:aa:77:7e:81:71:35:0d:
                    8b:1d:7c:89:c4:81:ec:f7:a0:fa:56:b9:29:04:89:
                    aa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:50:A9:AB:3E:23:5F:9D:0A:09:8D:1D:0A:C9:E9:BC:40:AE:AB:1C
            X509v3 Authority Key Identifier:
                keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:42:b3:65:ef:91:68:ab:32:1e:bd:10:4f:bc:31:4f:8e:fd:
         8e:38:af:e2:6d:cd:cc:41:35:0b:0d:b3:c8:0d:c7:6f:8c:4c:
         a4:de:dc:63:e8:f8:f4:b2:3e:43:0c:5a:83:f1:77:cf:f8:1e:
         a3:60:9f:30:3b:b6:7b:17:95:d6:88:a2:ce:d6:76:0f:99:b7:
         fd:0a:7e:e1:b4:18:55:08:87:22:06:54:74:ca:d9:3a:db:fa:
         9b:ae:c1:a5:a8:2e:cd:b8:17:d3:46:f6:b4:35:4c:ea:e7:34:
         7c:7c:44:90:76:ab:76:f8:14:11:74:fd:7a:63:8a:b9:67:0f:
         9c:f9:21:f5:5e:51:d4:6b:95:1c:fe:98:a7:91:3a:f2:2b:24:
         bb:56:2a:10:28:32:7c:13:5a:c8:d0:a1:0a:c0:d9:da:cf:e7:
         34:aa:9b:a0:d3:97:4d:ba:ee:e0:6d:22:80:b2:a7:1b:e2:c3:
         9d:22:3f:1b:c0:e5:9b:5d:23:94:77:cc:49:a7:31:a0:3d:bd:
         5c:89:21:36:21:26:26:5e:2f:54:18:ba:7d:81:ba:d5:2a:b5:
         b1:a4:8d:30:cb:8e:14:0c:2f:7c:4d:d9:7a:ce:e5:34:c9:96:
         41:e8:da:e6:23:56:c4:fc:1b:d0:58:b8:db:c7:01:e1:b5:a8:
         d3:d2:c0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:55 2026 by rpki-client