Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.mft
File:                     81C1480DA58487D056863DD4AB71D8210A3687FA.mft (raw, json)
Hash identifier:          YRIT/uSVXc/E+UNkUtOlBYVckAcbre1KPfV+wBwrvhY=
Subject key identifier:   A6:CF:C8:3D:C2:9E:32:64:4E:A2:B7:E4:75:6E:55:68:A1:47:4B:87
Authority key identifier: 81:C1:48:0D:A5:84:87:D0:56:86:3D:D4:AB:71:D8:21:0A:36:87:FA
Certificate issuer:       /CN=81c1480da58487d056863dd4ab71d8210a3687fa
Certificate serial:       428869EB35D87AE8A0130B2A4F16DB52809776F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcFIDaWEh9BWhj3Uq3HYIQo2h_o.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.mft
Manifest number:          21
Signing time:             Wed 23 Sep 2026 22:13:51 +0000
Manifest this update:     Wed 23 Sep 2026 22:08:51 +0000
Manifest next update:     Thu 24 Sep 2026 23:41:51 +0000
Files and hashes:         1: AS204211.asa (hash: nspqzYTdh2cYN+ehCfBpH3dODefqj1UfyxztHHoGnjc=)
                          2: 81C1480DA58487D056863DD4AB71D8210A3687FA.crl (hash: 34EdqpHsyhiPcxrqAgEU8OjPcHJdKmOKMqqhGBXxlIs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcFIDaWEh9BWhj3Uq3HYIQo2h_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:88:69:eb:35:d8:7a:e8:a0:13:0b:2a:4f:16:db:52:80:97:76:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c1480da58487d056863dd4ab71d8210a3687fa
        Validity
            Not Before: Sep 23 22:08:51 2026 GMT
            Not After : Sep 24 23:41:51 2026 GMT
        Subject: CN=A6CFC83DC29E32644EA2B7E4756E5568A1474B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:59:0f:5a:67:6c:d5:7b:07:16:24:7a:7d:
                    ad:ad:c4:cc:1b:a0:cd:9e:90:d1:ed:9f:e1:7b:cc:
                    7c:26:3f:d6:45:c5:b3:05:3a:2c:6c:59:cf:cc:db:
                    60:f5:63:72:eb:a3:19:9d:0a:d5:d4:23:8e:a8:82:
                    27:db:e1:78:24:4f:24:ff:e5:29:18:c1:a1:4b:6b:
                    1c:98:74:de:36:66:9b:dc:8e:b7:48:1b:13:03:74:
                    ad:8a:98:46:17:9f:95:1f:b3:ac:e3:8c:69:fa:c6:
                    09:39:e1:3b:9a:f8:08:00:02:0c:75:66:2b:4d:0b:
                    56:d0:d9:ab:33:37:b3:df:05:63:a2:f5:fb:61:bc:
                    4a:ca:2d:01:4a:d3:b2:ed:36:56:bf:0d:3f:c9:ec:
                    13:e4:3f:e5:96:25:b3:3e:a4:fa:48:78:0f:52:38:
                    30:8a:1d:54:bc:82:36:6b:47:f6:e4:9c:8b:7b:5f:
                    3b:4f:59:e5:6c:e8:e3:c3:80:11:eb:92:cb:4f:b4:
                    cb:22:a2:a6:c1:b3:3e:f9:1c:01:e7:ad:24:e1:17:
                    96:03:99:69:d5:fc:0b:82:ff:df:88:b7:58:39:7c:
                    91:08:d5:6a:39:bf:1f:34:96:c6:1d:98:f9:01:54:
                    b8:ff:c3:fa:7f:4d:01:91:e3:d8:b4:0f:a3:10:66:
                    f6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CF:C8:3D:C2:9E:32:64:4E:A2:B7:E4:75:6E:55:68:A1:47:4B:87
            X509v3 Authority Key Identifier:
                keyid:81:C1:48:0D:A5:84:87:D0:56:86:3D:D4:AB:71:D8:21:0A:36:87:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcFIDaWEh9BWhj3Uq3HYIQo2h_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:fa:ea:bf:5f:9a:27:ab:49:98:8c:9c:99:9a:27:ec:c5:
         df:7d:a4:66:c9:38:66:14:08:7c:6f:fe:c5:05:72:1f:02:92:
         cb:87:00:c4:0d:35:4e:29:03:6c:95:89:91:82:8e:31:64:0b:
         d5:52:bb:44:8d:75:fe:cc:de:a1:bf:72:4a:cc:ef:a9:1a:f4:
         00:89:14:fc:74:19:d5:25:a9:a7:96:a3:85:b1:a5:65:e8:10:
         b5:13:78:69:c5:bd:22:52:92:e0:ec:5f:2a:21:ba:1b:4d:03:
         43:11:20:48:7e:f7:01:27:be:ef:68:4a:fe:2a:9a:3d:54:48:
         ec:18:1c:ff:12:e5:7b:e5:16:b3:f0:09:59:5e:b7:45:79:23:
         d5:d6:c5:1a:5f:e5:3b:9e:76:de:79:0a:e1:12:59:40:7f:51:
         8d:23:6d:5e:b8:83:c0:3c:de:c5:e7:5d:42:89:a2:c7:df:74:
         fb:a1:5a:77:8a:44:8b:fb:c1:28:a8:dd:5f:c6:ba:a6:49:b9:
         25:5e:14:a3:16:fa:3f:bb:7d:e3:9d:77:21:dd:ec:57:20:7f:
         55:55:34:04:d9:a7:96:4c:6c:48:b9:46:8f:4d:fd:d2:66:72:
         a1:b0:61:5b:7e:5e:3f:0f:80:61:b7:3a:1b:55:a3:9f:04:cc:
         7c:f5:c1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:40:27 2026 by rpki-client