Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
File:                     C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft (raw, json)
Hash identifier:          o/9Jddb87KS/zyXOOeJGNtwyyjAZlm0b4ZwPbuNE3Cg=
Subject key identifier:   62:F4:B8:21:86:DB:B9:0A:49:3D:9A:49:F8:D4:6C:B1:D9:75:CB:BA
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Certificate issuer:       /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial:       1463CC0B94D0B23768A4865BCA4F76103E5802E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
Manifest number:          01EE
Signing time:             Thu 23 Jul 2026 12:48:31 +0000
Manifest this update:     Thu 23 Jul 2026 12:43:31 +0000
Manifest next update:     Fri 24 Jul 2026 14:17:31 +0000
Files and hashes:         1: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl (hash: 8x7keQhzGtKDmk0j9j+a/GsMcrRdpMPvNuSwuOIGR48=)
                          2: AS204211.asa (hash: 8DiImPpLo4EdjD5KWkZvz4rtarScRcwpm9BUyiTCXqc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:63:cc:0b:94:d0:b2:37:68:a4:86:5b:ca:4f:76:10:3e:58:02:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
        Validity
            Not Before: Jul 23 12:43:31 2026 GMT
            Not After : Jul 24 14:17:31 2026 GMT
        Subject: CN=62F4B82186DBB90A493D9A49F8D46CB1D975CBBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:67:3e:fd:52:12:d8:b7:6b:d7:26:e0:0e:
                    28:34:ee:8a:12:93:0f:c2:a7:97:02:83:87:c1:d6:
                    76:4a:2b:25:5a:11:b2:87:4d:4f:bf:3b:b0:f1:ce:
                    2a:a9:02:40:f1:fc:1a:93:d7:6b:b4:f6:60:f4:0f:
                    39:93:cb:4b:82:e0:e8:20:4c:0d:f7:de:cf:3f:24:
                    8b:2d:0a:0b:44:3a:92:43:46:76:be:07:35:c7:b3:
                    e3:f7:d8:a3:66:0b:02:52:b5:46:f5:21:1b:88:d0:
                    60:d9:51:8b:d5:67:a2:78:9d:fc:6d:51:3b:53:d5:
                    df:3c:1b:fe:ea:e7:e4:4c:19:e9:ea:0a:da:38:09:
                    d8:a3:b5:d0:f8:f2:94:5b:98:8a:a8:e1:df:e9:88:
                    60:88:d4:61:29:6f:49:a5:e5:b1:c9:65:a1:b8:d1:
                    1d:aa:01:8b:3b:7a:a3:c1:54:f0:0e:2c:66:b5:d8:
                    38:4c:cd:8a:e7:b5:db:e2:3a:65:7f:b0:e4:ee:9b:
                    3d:82:d2:0c:57:ad:e7:5f:92:12:7b:66:1f:21:94:
                    19:4f:47:7b:12:20:98:1b:1e:00:b0:1d:93:fe:b0:
                    5f:f8:d1:a8:f6:9b:9e:07:ee:c9:33:dd:58:90:ce:
                    80:3a:82:89:18:af:e9:fa:8e:85:a0:0a:5c:1d:9a:
                    95:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F4:B8:21:86:DB:B9:0A:49:3D:9A:49:F8:D4:6C:B1:D9:75:CB:BA
            X509v3 Authority Key Identifier:
                keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:60:c2:9d:ed:62:e0:8c:6e:74:5c:85:db:5d:7f:6d:17:ae:
         e4:1a:03:6f:1e:4b:31:d3:a9:04:28:23:32:f6:4e:53:3a:16:
         0a:93:6a:e3:8d:4e:0d:45:23:fe:44:05:ed:05:98:ae:ff:9d:
         f4:55:e8:4f:4b:39:39:25:ea:82:0e:4c:7f:23:65:2b:42:d3:
         96:36:9c:10:b7:da:73:00:a0:b1:cf:61:9f:71:63:e2:af:df:
         5b:94:ce:82:32:4e:15:13:02:de:68:7f:be:c4:49:35:40:a6:
         6f:6a:ab:ec:b5:9e:ba:65:e0:7b:f9:70:d8:82:25:5a:21:34:
         11:8a:c3:6a:97:06:db:26:18:87:8f:c0:f6:aa:6a:d2:21:d2:
         53:d1:0a:3f:12:cd:39:13:6b:8a:a9:e2:79:f7:cd:ce:3c:49:
         e0:36:af:32:9a:2e:c4:bb:b3:3d:c9:d8:9e:3c:29:ad:12:48:
         50:20:9f:f3:9d:a5:08:b2:aa:04:09:43:70:4f:2f:ed:bc:a8:
         97:be:6e:e4:b5:f9:a7:82:a9:02:71:8a:94:72:7e:ab:aa:d8:
         c9:cb:46:c6:78:7d:19:a0:ac:18:9a:e6:2b:39:87:eb:81:5b:
         4b:57:3e:42:f8:aa:c3:d2:57:50:a9:82:4e:ca:ee:f5:6a:55:
         06:3b:69:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:52 2026 by rpki-client