Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
File:                     C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft (raw, json)
Hash identifier:          0OYelpaE8wep8DimLtE2t5gl7PYKzWIGMz+7qfTyTCg=
Subject key identifier:   72:36:9E:93:77:5D:29:81:16:24:2A:7C:B7:95:50:2E:C5:A4:49:11
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Certificate issuer:       /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial:       38BB426820ACFE874D487D075423F7999958AC91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
Manifest number:          F5
Signing time:             Wed 25 Mar 2026 14:49:17 +0000
Manifest this update:     Wed 25 Mar 2026 14:44:17 +0000
Manifest next update:     Thu 26 Mar 2026 15:27:17 +0000
Files and hashes:         1: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl (hash: psja5dHJ+2RgFvWnJ6v6nltUtg5L0qXdvUS0kvIv80I=)
                          2: AS204211.asa (hash: 2MBMvImhzv+NxXJPDXOrYve/y6W3BMLMnQqmZzO5me0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bb:42:68:20:ac:fe:87:4d:48:7d:07:54:23:f7:99:99:58:ac:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
        Validity
            Not Before: Mar 25 14:44:17 2026 GMT
            Not After : Mar 26 15:27:17 2026 GMT
        Subject: CN=72369E93775D298116242A7CB795502EC5A44911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:43:b3:95:38:ba:bf:20:df:92:e8:38:d0:e3:
                    db:c1:08:29:46:04:dd:c2:fb:86:94:bc:77:55:04:
                    85:55:7a:17:b3:43:b1:78:fe:68:75:2d:31:25:d9:
                    24:84:5f:56:05:67:b1:20:83:a2:01:89:07:5f:b7:
                    eb:df:4a:dc:66:0a:d6:98:bd:ed:19:64:00:7c:20:
                    43:b2:b4:ac:8c:f9:9c:41:d8:5c:36:d2:24:77:77:
                    f9:f5:7d:9d:1b:96:8c:b2:11:f0:2f:13:e9:c7:04:
                    65:79:95:02:e9:4e:53:31:02:3a:63:fb:0c:7b:ec:
                    d6:04:94:8d:f6:f6:12:5f:2b:e1:5e:e0:a2:7b:30:
                    19:c1:86:2d:99:76:7e:9b:aa:3e:aa:63:5b:cc:b3:
                    ee:df:c0:3f:44:75:0f:48:17:8b:d7:79:24:52:82:
                    59:66:99:0e:56:3c:04:da:6d:71:e1:27:a9:f4:24:
                    33:6d:72:ec:58:8d:04:76:30:39:53:e4:ee:0f:5d:
                    17:77:48:da:27:f2:3a:91:9f:df:03:d1:5a:8c:63:
                    eb:dd:d8:f2:ae:3e:b4:86:a9:65:db:3a:c8:9a:59:
                    15:56:a9:61:1d:c4:01:2d:6b:7e:2d:b8:41:58:61:
                    2f:5e:37:2e:ed:7c:31:bd:4b:ca:b4:99:01:b1:56:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:36:9E:93:77:5D:29:81:16:24:2A:7C:B7:95:50:2E:C5:A4:49:11
            X509v3 Authority Key Identifier:
                keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b0:77:ca:f9:5f:ae:4a:aa:6d:3d:cf:c4:52:62:70:4e:14:
         d5:be:7d:6d:46:96:e0:50:9e:5f:db:39:8d:6b:94:b4:30:a2:
         13:e6:3d:72:68:c1:12:ba:41:a7:63:27:ef:ea:b7:db:1a:62:
         c0:d8:6f:03:84:a0:24:21:33:8f:c9:9c:2f:f7:81:cb:36:a8:
         ef:79:8f:29:47:a5:a1:d2:a2:21:e7:ee:9d:c0:4a:f6:61:83:
         0c:6b:ad:5c:44:c3:a8:e6:40:f5:87:96:af:4c:1e:6e:0c:7b:
         e8:eb:91:b2:22:7a:c5:af:1b:94:92:d4:d8:71:90:24:d7:de:
         a7:7f:4e:a8:68:0a:03:19:cd:b5:a5:c3:5f:b5:34:b0:16:2d:
         f3:aa:fb:45:d4:fe:9e:31:ad:d9:f8:de:1a:69:d6:76:9e:92:
         aa:bd:50:d3:3d:8b:20:22:9c:f2:b1:87:5d:75:aa:ba:f6:fb:
         37:49:b5:85:6b:04:c6:55:67:92:78:df:52:23:28:1c:dd:05:
         fb:70:fd:b8:f8:bd:58:77:34:08:3e:7d:b2:8e:7c:ec:47:b4:
         ad:66:a6:74:70:dc:b3:40:85:43:bc:cb:ae:e9:45:a8:ea:9b:
         51:18:0c:d4:25:b7:08:27:bf:b8:ba:13:9d:a0:2f:40:39:bf:
         ba:ff:15:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:53 2026 by rpki-client