Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File:                     578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier:          WRmwd2bjSI4DMtxGP3KzzhhQEunPeXTU9CCKx5q2wYo=
Subject key identifier:   2A:F0:12:12:7B:1F:50:BC:32:50:25:89:32:E6:60:33:5A:FA:02:01
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer:       /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial:       57319830F06FF73C794729A1221141D8E4EA63BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number:          02C3
Signing time:             Thu 23 Jul 2026 04:48:50 +0000
Manifest this update:     Thu 23 Jul 2026 04:43:50 +0000
Manifest next update:     Fri 24 Jul 2026 05:26:50 +0000
Files and hashes:         1: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: s2OIJeM/XJwJ6C91BXflur6o8HofJ9wEEJ6b10MdkxU=)
                          2: AS215296.asa (hash: yH3b51K2REyHiosn6A1Cdqy8Kzj6g5PC130VrBNpKy4=)
                          3: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: RGTgCra6z97DL3zPw+EaFuLG0rQZ9DlytQ3X3ko6llc=)
                          4: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: O+6twnNOV5ruNsTz6gyqZDCueGHR/39L745XmWi2d5I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 05:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:31:98:30:f0:6f:f7:3c:79:47:29:a1:22:11:41:d8:e4:ea:63:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
        Validity
            Not Before: Jul 23 04:43:50 2026 GMT
            Not After : Jul 24 05:26:50 2026 GMT
        Subject: CN=2AF012127B1F50BC3250258932E660335AFA0201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:5e:2a:f6:3b:9e:f6:ed:79:bb:a9:e9:4f:
                    e1:b2:55:b9:54:99:1d:9f:00:53:16:d5:ea:ab:80:
                    60:da:33:9a:2f:51:cf:f0:30:95:21:08:e8:0b:c5:
                    58:34:b6:d7:f5:3e:91:1f:bc:b4:7c:eb:5b:2a:0d:
                    71:5e:81:9e:f5:e2:f5:60:97:65:86:e4:91:be:4e:
                    ec:02:36:4e:d0:64:ca:e7:48:e6:b4:fe:cb:0a:4a:
                    61:03:ac:ec:f1:fc:b2:aa:ce:b2:10:c8:38:db:b8:
                    d5:04:ba:34:c1:9e:b7:6f:54:88:50:66:0e:99:18:
                    40:97:07:5b:d6:ec:df:52:5c:67:ac:91:57:2c:63:
                    c2:d7:78:93:f0:c8:d8:2f:39:a5:7f:88:55:42:8f:
                    b2:b2:58:0d:24:d6:0e:9f:c7:13:82:ca:a1:b6:64:
                    46:23:0e:aa:f1:46:75:69:2d:7b:ad:03:88:c4:a7:
                    9c:1d:36:94:c6:d6:4c:e0:18:36:95:cd:66:30:23:
                    9d:5e:16:73:87:7e:47:59:d2:31:a1:3f:0c:f1:65:
                    a8:a6:0b:72:17:dc:dd:25:b2:69:71:bb:bd:9b:39:
                    c1:f0:0b:6f:1f:70:45:b1:28:f9:c5:1f:f3:f7:11:
                    a3:d0:13:e6:7e:f3:96:44:3a:1a:0c:3d:ca:0a:84:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F0:12:12:7B:1F:50:BC:32:50:25:89:32:E6:60:33:5A:FA:02:01
            X509v3 Authority Key Identifier:
                keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:97:ab:b3:47:67:6f:bb:c2:a2:bf:6a:1c:66:ad:a6:7f:92:
         0c:ca:ee:a8:44:79:a7:88:06:41:9b:16:59:83:6d:e2:29:09:
         69:a0:7b:76:e1:68:10:98:fd:31:08:01:7a:2a:21:fc:fc:47:
         e3:db:da:b0:16:cb:88:24:c0:06:d6:f5:04:49:a8:10:87:c2:
         ed:9d:1b:9f:2d:cc:93:3e:35:6e:38:7a:cb:1f:86:cb:b3:c2:
         18:8f:47:6c:cd:76:1f:de:bc:25:28:42:12:82:92:22:08:01:
         71:c2:dc:3b:99:5a:44:c5:01:95:6c:c0:61:47:7e:93:5a:19:
         29:f2:a7:f6:6e:de:00:b2:11:43:f0:fd:15:c8:e4:40:28:0b:
         45:dd:41:85:f9:cf:fc:ce:31:75:f1:d6:2d:16:9d:24:f9:d0:
         a6:02:c1:b1:96:b5:9d:81:9d:81:70:3d:c5:95:af:ee:8a:2f:
         3a:ee:b3:bd:67:3f:af:50:74:20:64:a8:ff:82:70:a9:a5:b1:
         0a:02:99:a4:d9:10:bb:6f:e0:33:47:01:7f:cd:67:13:67:be:
         79:78:4f:7c:f9:27:64:76:73:f1:b6:9f:2f:d4:5e:f1:0b:88:
         1d:be:af:db:e4:fc:fe:cb:e0:7e:f0:52:95:6f:16:c0:83:7c:
         38:30:9c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:46 2026 by rpki-client