Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
File:                     C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft (raw, json)
Hash identifier:          V1vrE/9myB/wQ398JElQa+nn/Ygq/EY81Mt+hULF2Ug=
Subject key identifier:   1C:72:1F:E9:05:83:B6:12:58:A0:AC:C8:5B:CC:25:BE:E7:E6:87:A9
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Certificate issuer:       /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial:       7B0D2D74CC512A90F050E27342DC9E335F5E36A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
Manifest number:          0146
Signing time:             Tue 12 May 2026 06:36:14 +0000
Manifest this update:     Tue 12 May 2026 06:31:14 +0000
Manifest next update:     Wed 13 May 2026 06:56:14 +0000
Files and hashes:         1: AS204211.asa (hash: e40mm1w04l8pqH+S+LRtSq7rwuRJ9hfyzmkt5TzNy/Y=)
                          2: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl (hash: lFlm34S60i6SR0mj2p6Y72Ac+z7H1pnptHFaLHhlawA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 06:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0d:2d:74:cc:51:2a:90:f0:50:e2:73:42:dc:9e:33:5f:5e:36:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
        Validity
            Not Before: May 12 06:31:14 2026 GMT
            Not After : May 13 06:56:14 2026 GMT
        Subject: CN=1C721FE90583B61258A0ACC85BCC25BEE7E687A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ba:75:68:9f:f2:90:9f:1a:28:56:56:1f:65:
                    37:dc:a5:37:7a:00:eb:4d:7c:97:1e:06:dc:42:1a:
                    d6:10:5e:91:d7:27:dd:8b:ff:2e:e5:a9:9b:b2:fd:
                    bd:72:99:4d:e2:c8:23:d3:87:e6:c1:5f:83:9d:67:
                    3b:b6:52:23:7d:d6:22:8e:ae:a4:86:f6:01:e6:59:
                    88:2d:5e:db:1d:a7:0a:d5:4d:fc:71:70:ab:49:da:
                    2a:89:4b:bd:ce:bc:95:10:24:1b:2a:62:49:c6:49:
                    92:26:d8:20:e3:81:0e:b5:58:03:44:60:12:37:71:
                    09:48:7b:ab:9e:e6:5b:0f:6b:8d:6b:ce:b2:17:f9:
                    69:3d:2a:4c:12:ae:54:ee:ea:a7:9f:8e:f5:f6:c6:
                    da:41:d4:da:12:06:8d:d3:1a:6d:3b:3f:fc:cd:ea:
                    cc:fb:e0:22:91:3d:ef:8c:ec:5d:64:9d:e8:fb:c8:
                    df:2d:6b:91:8a:e7:b6:82:43:1d:99:fc:ae:4b:71:
                    fb:b0:5f:4f:5d:89:6c:04:5b:70:21:23:22:89:d5:
                    49:7d:d0:04:c7:77:c9:96:9b:01:05:52:dc:41:81:
                    e2:3b:0f:fe:04:c6:06:4f:49:0b:6b:b3:9e:01:7a:
                    36:6f:c4:9f:ab:24:85:34:13:b9:06:bb:46:3a:e7:
                    7c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:72:1F:E9:05:83:B6:12:58:A0:AC:C8:5B:CC:25:BE:E7:E6:87:A9
            X509v3 Authority Key Identifier:
                keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:00:bc:44:ab:c8:31:2b:cb:44:1e:63:9c:c7:72:b7:8e:cd:
         46:51:13:ea:1e:c4:23:e1:40:83:75:75:f7:41:87:88:ca:bb:
         46:06:5f:02:63:a3:07:4b:c2:6c:ee:3b:6f:95:31:d0:0b:a2:
         70:9d:bc:71:0b:e8:6c:34:94:e7:59:f7:44:6b:a8:d4:13:94:
         ae:d8:40:43:6b:7f:3c:ba:67:ea:2c:50:9e:ce:39:f4:23:75:
         7c:8c:aa:00:c9:0d:7d:c7:1e:ac:5f:98:8e:21:bd:4b:04:3f:
         4f:02:c4:d8:81:a2:aa:26:3b:d9:8b:3c:5e:e7:01:01:b6:dd:
         7f:5a:1b:4c:55:7c:a7:c8:79:a3:f2:53:f6:91:9d:53:26:22:
         70:bf:30:db:95:07:51:ec:55:ee:45:92:36:b1:9c:b4:35:d0:
         1f:c5:ae:82:7c:4c:46:e7:74:05:df:bd:e0:45:fa:f3:4c:02:
         64:0e:cf:d2:ef:09:37:3e:8e:80:fc:82:ed:fd:12:1b:e6:7d:
         6d:ee:41:44:ea:7a:c1:39:3c:30:cb:d5:de:aa:6a:4f:07:b9:
         c6:99:ef:8b:c9:19:76:c9:22:5f:be:d3:e4:9b:8a:dc:16:05:
         3e:c0:4a:6d:46:c5:e6:0b:7c:28:6f:e2:c9:aa:36:40:eb:7b:
         c0:b7:4c:14
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUew0tdMxRKpDwUOJzQtyeM19eNqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzE4MDIwYmRjNWU2YmE0YTU0NzRkM2FhMGRhNGE5NjJh
NjhkOThhYjAeFw0yNjA1MTIwNjMxMTRaFw0yNjA1MTMwNjU2MTRaMDMxMTAvBgNV
BAMTKDFDNzIxRkU5MDU4M0I2MTI1OEEwQUNDODVCQ0MyNUJFRTdFNjg3QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTunVon/KQnxooVlYfZTfcpTd6
AOtNfJceBtxCGtYQXpHXJ92L/y7lqZuy/b1ymU3iyCPTh+bBX4OdZzu2UiN91iKO
rqSG9gHmWYgtXtsdpwrVTfxxcKtJ2iqJS73OvJUQJBsqYknGSZIm2CDjgQ61WANE
YBI3cQlIe6ue5lsPa41rzrIX+Wk9KkwSrlTu6qefjvX2xtpB1NoSBo3TGm07P/zN
6sz74CKRPe+M7F1knej7yN8ta5GK57aCQx2Z/K5LcfuwX09diWwEW3AhIyKJ1Ul9
0ATHd8mWmwEFUtxBgeI7D/4ExgZPSQtrs54BejZvxJ+rJIU0E7kGu0Y653w9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUHHIf6QWDthJYoKzIW8wlvufmh6kwHwYDVR0j
BBgwFoAUwYAgvcXmukpUdNOqDaSpYqaNmKswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj
ZTM5LzEvQzE4MDIwQkRDNUU2QkE0QTU0NzREM0FBMERBNEE5NjJBNjhEOThBQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dZQWd2Y1htdWtwVWROT3FEYVNwWXFh
Tm1Lcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0y
ZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMS9DMTgwMjBCREM1RTZCQTRBNTQ3
NEQzQUEwREE0QTk2MkE2OEQ5OEFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgC8RKvIMSvLRB5jnMdy
t47NRlET6h7EI+FAg3V190GHiMq7RgZfAmOjB0vCbO47b5Ux0AuicJ28cQvobDSU
51n3RGuo1BOUrthAQ2t/PLpn6ixQns459CN1fIyqAMkNfccerF+YjiG9SwQ/TwLE
2IGiqiY72Ys8XucBAbbdf1obTFV8p8h5o/JT9pGdUyYicL8w25UHUexV7kWSNrGc
tDXQH8WugnxMRud0Bd+94EX680wCZA7P0u8JNz6OgPyC7f0SG+Z9be5BROp6wTk8
MMvV3qpqTwe5xpnvi8kZdskiX77T5JuK3BYFPsBKbUbF5gt8KG/iyao2QOt7wLdM
FA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:13:18 2026 by rpki-client