Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
File:                     0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft (raw, json)
Hash identifier:          sRZ+amS1u18wdHPgqWkxCBHEQeOVm/yQUNPEHqMbRv4=
Subject key identifier:   FC:06:76:BF:68:F5:3E:5C:4F:6F:CF:47:D9:45:86:7A:0F:AE:AA:E7
Authority key identifier: 0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30
Certificate issuer:       /CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30
Certificate serial:       41094824A9B09F4A566A54292760DB993841E1C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
Manifest number:          CF
Signing time:             Tue 12 May 2026 17:05:57 +0000
Manifest this update:     Tue 12 May 2026 17:00:57 +0000
Manifest next update:     Wed 13 May 2026 17:59:57 +0000
Files and hashes:         1: AS208754.asa (hash: 3EW700VlL7DtTVIyBPhNoXihGyvxiMvZegasaRWzx5c=)
                          2: 0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl (hash: HWSrwKxX7pSc3I0DXjeTZBcEwsKpGhXt5G2tKG7SV7I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:09:48:24:a9:b0:9f:4a:56:6a:54:29:27:60:db:99:38:41:e1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30
        Validity
            Not Before: May 12 17:00:57 2026 GMT
            Not After : May 13 17:59:57 2026 GMT
        Subject: CN=FC0676BF68F53E5C4F6FCF47D945867A0FAEAAE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c4:cf:15:b0:dd:12:75:61:02:29:d5:16:59:
                    33:fd:c9:86:49:e4:4c:f4:56:52:df:a8:82:c5:fa:
                    2a:49:b8:21:b8:74:b3:d2:52:bd:5d:ac:c5:5f:fa:
                    05:03:69:44:78:82:7d:7a:a3:a9:33:75:e5:9e:c7:
                    43:f9:1b:0a:ff:df:22:b6:7f:d4:d5:a0:12:15:af:
                    17:17:1d:20:74:58:b5:d6:6a:8a:73:da:eb:dd:34:
                    01:6f:54:b6:8b:da:c1:4a:b8:30:7c:83:0b:30:e1:
                    c1:9e:07:d0:c0:c5:7f:55:47:27:5c:78:0b:b7:83:
                    9f:2e:88:d6:6c:98:f0:fc:65:bb:b0:5a:8b:eb:d9:
                    bc:1d:90:2a:98:82:07:8a:fa:49:a9:59:66:b4:ab:
                    8d:74:a2:a9:8e:ab:ae:c3:c3:3e:12:06:20:19:d7:
                    1b:95:c4:ce:6b:55:95:18:a0:fe:1c:36:bd:90:87:
                    4f:f0:b2:28:cf:b1:9d:94:66:3b:3a:28:18:c1:f6:
                    41:d9:1d:99:1d:86:05:1a:be:44:9b:4f:fc:0c:c1:
                    c9:53:88:53:11:15:c7:d9:9e:82:d7:2d:eb:bd:12:
                    57:9d:41:44:4d:4a:b2:00:bf:72:69:b2:bb:39:9a:
                    c1:27:62:45:cc:9d:2d:9e:4d:ee:ae:60:d8:d6:9e:
                    bd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:06:76:BF:68:F5:3E:5C:4F:6F:CF:47:D9:45:86:7A:0F:AE:AA:E7
            X509v3 Authority Key Identifier:
                keyid:0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:25:3b:d0:51:28:1e:9a:d6:65:bc:26:5a:0a:2e:be:72:03:
         3f:56:24:e2:b3:0c:ce:e3:cc:8c:31:00:13:26:07:4d:a3:ff:
         91:e0:b2:2b:40:61:be:13:6a:80:46:91:5e:54:49:77:fe:44:
         67:43:b4:dc:b2:44:3b:38:3d:93:24:d7:8c:3f:02:63:6b:07:
         02:6c:42:98:ec:0b:e7:be:42:f7:4f:51:c7:ee:8f:0c:f6:fa:
         b1:0e:43:40:6c:8e:c8:e8:2f:b0:e3:88:b6:8e:e2:57:fd:63:
         90:9d:be:1d:7a:f3:f1:4a:f9:ca:0f:d1:fa:31:1e:39:2c:15:
         80:7b:9d:ec:e2:8d:0e:9a:e6:e4:8b:bd:de:d2:20:1d:6c:89:
         ab:46:aa:56:d7:97:12:64:6d:a4:fa:bf:70:23:92:03:14:bb:
         30:47:95:7e:fb:d6:d3:a4:f4:24:a4:4c:f2:1b:34:c0:94:31:
         b3:be:3f:f0:a8:d8:52:3b:f6:e5:31:d5:61:a1:80:e6:5d:a4:
         5a:ea:aa:a2:9d:e7:ad:57:68:b4:86:83:3e:61:90:56:e2:72:
         c4:19:ec:71:52:25:8f:14:16:41:cd:76:e0:cb:ec:31:9e:64:
         8d:f7:a2:fe:14:a7:5e:f9:9f:bd:6a:35:8b:e1:22:f0:66:f4:
         d9:7f:60:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:41:35 2026 by rpki-client