Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File:                     578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier:          Apfav0xjUYZWa7Y8tsaHTBIOWWwEBO1H5K2hoe45JlQ=
Subject key identifier:   10:AA:BA:7E:65:77:39:28:A8:D0:0F:04:7B:44:5E:85:83:31:5A:8D
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer:       /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial:       68D8D5A24102EA92C621B98D5C91CD103B88AD3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number:          0220
Signing time:             Wed 25 Mar 2026 05:43:23 +0000
Manifest this update:     Wed 25 Mar 2026 05:38:23 +0000
Manifest next update:     Thu 26 Mar 2026 07:04:23 +0000
Files and hashes:         1: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: y62XCn9f6Rq45Uhh9RLNYmMQJK5fXcTvZYAcAE4xTNM=)
                          2: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: RGTgCra6z97DL3zPw+EaFuLG0rQZ9DlytQ3X3ko6llc=)
                          3: AS215296.asa (hash: OtSM7n/M5H4Gr1eK1WwYJcN3J5IxezG9iWmcyo289w0=)
                          4: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: O+6twnNOV5ruNsTz6gyqZDCueGHR/39L745XmWi2d5I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 07:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d8:d5:a2:41:02:ea:92:c6:21:b9:8d:5c:91:cd:10:3b:88:ad:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
        Validity
            Not Before: Mar 25 05:38:23 2026 GMT
            Not After : Mar 26 07:04:23 2026 GMT
        Subject: CN=10AABA7E65773928A8D00F047B445E8583315A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:54:d6:4e:63:7c:be:27:5f:c4:b5:15:e4:
                    5a:df:aa:a7:cc:c6:0b:ea:c9:67:1f:27:58:9c:c9:
                    19:75:89:39:11:48:7e:7e:f7:33:2a:d7:9a:f6:c3:
                    c5:47:28:1b:9d:25:b7:c0:e5:7d:30:70:b9:fc:c9:
                    39:12:64:a4:35:dd:30:b3:a8:e7:57:da:86:ba:4b:
                    22:61:dd:f4:77:fa:f6:5b:16:31:47:be:6b:06:83:
                    a4:88:8d:96:c1:5d:2a:db:cd:07:21:ab:64:10:50:
                    bc:70:e5:95:74:a7:64:b3:84:e1:0b:08:6e:ab:ae:
                    b8:12:71:04:cd:9c:e8:b0:5c:53:06:9b:dd:60:d0:
                    ff:bd:7c:41:37:f5:aa:03:77:0c:81:9a:17:21:0d:
                    9b:a7:6b:e1:45:5b:66:ff:5a:71:c6:c3:1c:52:e9:
                    0c:6a:19:7b:b5:54:a4:22:5b:c8:c8:e4:4a:2c:93:
                    77:72:69:56:57:c1:21:54:36:19:72:29:f6:d2:f5:
                    ba:ce:e6:2f:e3:10:80:d7:a9:f1:31:bb:07:40:af:
                    44:2f:8b:b4:82:8a:43:9f:21:b9:bd:da:57:65:ab:
                    40:cf:86:45:fe:4b:28:2f:47:84:af:01:f4:62:d1:
                    8f:0c:7d:b6:24:d6:fe:18:55:34:2e:8e:7a:c8:cf:
                    c0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AA:BA:7E:65:77:39:28:A8:D0:0F:04:7B:44:5E:85:83:31:5A:8D
            X509v3 Authority Key Identifier:
                keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:77:8b:6d:df:6a:0d:14:2b:4f:71:cc:4f:31:27:01:2f:5b:
         00:99:3b:c7:ef:a5:44:40:2d:67:ae:83:c7:6c:b3:b7:73:b5:
         bb:73:39:f5:d1:76:72:4f:3f:60:28:2c:f7:aa:19:07:b8:08:
         2b:6b:5c:c4:34:8f:a2:a0:d3:5b:49:0c:3d:21:ea:5f:11:54:
         e1:02:63:87:f2:d4:4d:73:61:21:f1:96:2f:78:f5:ed:c1:5b:
         96:9b:a0:86:e1:66:f8:b4:ed:7f:42:ed:d5:a9:55:7a:3c:4e:
         54:2d:8b:18:d8:a7:2d:e9:f2:52:02:3b:a2:c2:62:9f:66:24:
         7c:e6:10:44:41:6a:32:02:b1:7b:1d:ab:07:5d:f7:a7:70:be:
         1d:f7:67:d8:32:ab:1e:4c:14:b4:42:52:70:d5:6e:2f:25:d4:
         b2:8d:41:b5:0a:bc:53:7c:66:8f:32:97:71:ed:99:22:6a:33:
         77:d9:6a:98:5b:75:10:d7:88:68:99:df:ca:ac:9c:5a:d0:8e:
         7c:e3:ee:09:8b:e7:6d:86:01:74:92:c9:d7:71:a5:58:88:96:
         9b:91:6f:3d:4f:af:24:5a:cb:ae:13:d4:7a:2c:aa:e9:12:e1:
         84:e7:68:ee:b3:56:cb:39:44:50:b8:b4:6f:a6:a4:ab:01:8e:
         42:cb:30:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:27 2026 by rpki-client