Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File:                     C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier:          DSUEpQlb+bFx6iEBmPKc3IKjg+16t792JZBhW308e7A=
Subject key identifier:   B4:6B:8D:7E:67:52:E0:88:CA:97:D5:67:A8:BD:F3:57:E9:27:82:6B
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer:       /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial:       06CE1EC9569B17E7F361CAB4F2E41A728B182761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number:          0401
Signing time:             Wed 22 Jul 2026 23:31:06 +0000
Manifest this update:     Wed 22 Jul 2026 23:26:06 +0000
Manifest next update:     Fri 24 Jul 2026 03:15:06 +0000
Files and hashes:         1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: cq9241RmyYTU+Nlo7QXF8eyTomhUA7nsraI6gsH8Vog=)
                          2: AS214723.asa (hash: rkKLIM3Jzl++4c/N1MAbX2VnZd8jPZSTe5gZ4DgYJLI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 03:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ce:1e:c9:56:9b:17:e7:f3:61:ca:b4:f2:e4:1a:72:8b:18:27:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
        Validity
            Not Before: Jul 22 23:26:06 2026 GMT
            Not After : Jul 24 03:15:06 2026 GMT
        Subject: CN=B46B8D7E6752E088CA97D567A8BDF357E927826B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:87:ed:c0:d4:aa:1a:17:7f:a7:30:21:e7:83:
                    d9:79:4f:eb:1b:a7:18:4e:fb:46:3a:fd:88:6e:e0:
                    ad:34:86:d0:d5:c4:3b:69:80:f3:c1:60:4a:25:1e:
                    f7:63:48:6c:68:ad:65:4c:ad:f9:ca:7e:eb:ee:c5:
                    6e:cd:96:8b:b9:2f:33:e6:9a:30:65:32:be:3b:de:
                    c0:0d:99:61:ab:a6:dd:8f:5e:ee:82:d3:1a:3b:a4:
                    d6:53:dc:61:56:6d:69:48:d9:b0:6d:58:47:02:ac:
                    a7:c7:c0:21:7e:06:b2:c7:bd:53:2f:34:a5:ec:ac:
                    a9:1c:78:b6:58:2c:e7:95:51:5d:39:0a:67:16:7d:
                    a9:13:4e:4e:0f:4a:4b:67:04:06:f1:6c:51:f1:f9:
                    7a:77:14:58:69:8f:b5:23:aa:44:5a:10:2c:99:8d:
                    a6:72:33:a3:eb:c4:48:3c:c3:9c:a6:db:99:a5:27:
                    83:64:ac:69:b6:62:10:ea:16:29:ff:12:07:dc:54:
                    66:40:d4:43:2e:4c:e6:96:a4:e0:f7:54:84:f9:99:
                    77:f5:31:7f:2d:20:e4:da:32:2e:8a:7b:47:1e:7d:
                    d0:f2:89:e7:05:39:e0:31:5a:11:3f:a8:fe:27:7c:
                    45:91:be:73:87:95:cf:e0:b5:bb:46:6d:c8:23:87:
                    65:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6B:8D:7E:67:52:E0:88:CA:97:D5:67:A8:BD:F3:57:E9:27:82:6B
            X509v3 Authority Key Identifier:
                keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6c:77:6e:25:02:4a:e2:dd:bf:de:d0:d9:fc:6a:ef:50:df:
         84:9f:2c:67:12:92:4c:68:2f:52:60:08:a6:3f:ba:26:bc:28:
         e0:4e:cf:ff:08:c2:28:2c:74:eb:c5:5b:90:f4:ce:5c:d1:e8:
         95:a5:4a:2a:88:58:bb:5c:13:15:c5:d3:bf:93:f5:c2:0e:d3:
         d9:76:b9:37:3a:1e:33:0a:79:36:23:3d:49:8d:3a:dd:ae:81:
         9a:81:8d:44:38:b3:7e:77:29:57:f6:f5:cf:a9:3b:2b:69:c4:
         0b:de:e8:af:a1:5b:e4:1f:1a:4f:9a:84:59:17:a2:1e:36:7b:
         b1:e2:3d:f7:54:1c:c2:8d:50:41:ab:6e:56:88:ab:4f:43:07:
         42:9b:2a:fb:4e:98:b8:06:79:bd:5d:bc:c2:f7:45:99:4b:37:
         55:be:56:7e:55:85:67:21:61:a6:9c:d0:5a:f6:23:fc:3a:09:
         16:23:aa:c9:ce:38:85:4f:c0:bb:7e:e8:28:e8:10:9d:cb:43:
         c9:19:b3:81:67:ab:e9:8e:39:50:95:3a:5e:79:b8:e1:4f:00:
         fd:6a:f1:9c:d8:21:0d:0e:a6:35:61:5e:7e:38:a9:d2:b3:8f:
         35:28:9a:79:d1:61:71:f7:31:f4:94:3d:ea:07:5f:d0:4d:81:
         9e:72:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:56 2026 by rpki-client