Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File:                     C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier:          G+naUcWWmy3USO5C4Bb8gFq9jrH0QiYkujFHJe4kKnI=
Subject key identifier:   31:E8:B4:C6:4C:35:36:99:C7:B9:AD:CA:23:28:FE:F5:D5:A3:45:46
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer:       /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial:       5610F3DB34B22580CB4E4647B71B0467C16E4018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number:          03A0
Signing time:             Tue 12 May 2026 06:26:43 +0000
Manifest this update:     Tue 12 May 2026 06:21:43 +0000
Manifest next update:     Wed 13 May 2026 08:36:43 +0000
Files and hashes:         1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: SyKiaHvCi2c3EQKZOJLQHNX1l9hMMXc6ikNUhegWWbM=)
                          2: AS214723.asa (hash: rkKLIM3Jzl++4c/N1MAbX2VnZd8jPZSTe5gZ4DgYJLI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 08:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:10:f3:db:34:b2:25:80:cb:4e:46:47:b7:1b:04:67:c1:6e:40:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
        Validity
            Not Before: May 12 06:21:43 2026 GMT
            Not After : May 13 08:36:43 2026 GMT
        Subject: CN=31E8B4C64C353699C7B9ADCA2328FEF5D5A34546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9c:be:7f:28:38:35:5b:8a:3d:93:c6:f7:d9:
                    64:a6:5a:76:1c:86:c3:33:d9:ca:09:a2:f7:05:09:
                    3c:fc:b0:4a:6f:8d:2c:9c:66:45:b7:b0:2d:04:46:
                    3d:dd:3c:61:07:0f:b0:19:a9:0c:23:70:51:9a:92:
                    33:a0:b1:10:11:a5:38:d6:42:22:08:5d:bc:92:11:
                    62:1e:2e:6a:89:47:7e:19:69:2d:95:1b:0f:7c:21:
                    6d:e3:17:e8:dd:27:59:f0:54:f6:9c:12:26:20:22:
                    6c:0e:27:28:bd:9b:6b:97:7a:45:bf:da:6d:0b:ce:
                    84:02:83:fb:ff:1b:67:ca:ee:16:4a:a2:c6:3a:19:
                    e0:c3:0a:b5:a8:f6:20:31:9a:b7:97:72:1c:d4:35:
                    05:05:c2:a2:e5:bb:0a:e2:d7:36:7b:de:fb:63:30:
                    e2:5c:23:71:68:76:75:a1:66:3d:03:e8:78:57:57:
                    02:8d:5b:cb:71:73:f1:64:da:22:2d:f8:08:c4:1e:
                    64:d6:aa:86:c8:b3:34:95:e9:93:d0:b9:c8:de:86:
                    62:5e:7c:d7:e1:4d:8e:66:46:7f:7c:84:05:02:59:
                    46:97:5b:db:99:78:bf:ea:5c:74:88:35:c4:00:26:
                    66:b2:f2:0f:bc:9a:98:eb:da:67:6b:b7:7a:f1:c0:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E8:B4:C6:4C:35:36:99:C7:B9:AD:CA:23:28:FE:F5:D5:A3:45:46
            X509v3 Authority Key Identifier:
                keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:12:90:ab:bb:15:1f:25:9b:27:fd:03:64:e0:6d:ad:45:d7:
         a6:7c:68:d7:c5:7b:13:d2:7c:d1:2c:be:8e:a6:1f:b3:4a:d5:
         63:0e:2f:20:da:4f:09:d7:40:c4:1a:8f:95:7b:d7:47:2f:9e:
         30:5d:5d:ec:7a:e5:b6:23:44:fc:af:d2:50:68:04:e8:4d:34:
         6b:38:4c:5d:b2:b6:3d:f9:71:49:33:11:0e:b8:7f:4c:c6:35:
         40:0a:c4:fb:49:a2:ff:78:5a:9e:21:05:bf:f2:0a:2c:d8:5a:
         2f:1f:b0:9c:b1:ac:13:70:10:4f:74:5a:57:07:dc:a5:45:d0:
         c3:fd:31:40:cc:7a:11:25:5e:40:d2:34:05:8e:fb:f7:df:aa:
         cd:3a:83:c4:a3:20:c8:fe:bf:08:b3:10:0a:86:b3:80:33:56:
         55:ff:84:7e:41:65:08:5e:7f:b5:20:2d:13:56:96:44:04:62:
         04:0c:6f:cf:fa:e4:53:b3:d3:d3:30:eb:9b:23:e5:13:38:a3:
         81:25:5c:dc:da:c6:89:75:c1:86:d6:e4:17:9b:b6:85:f7:62:
         10:24:e8:08:60:8c:bf:57:e0:c7:82:c2:26:55:5f:b9:e1:92:
         93:32:56:96:95:34:d2:d0:0d:1f:24:20:ec:28:79:54:f3:ef:
         2e:62:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:11 2026 by rpki-client