Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/1/10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.mft
File:                     10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.mft (raw, json)
Hash identifier:          rO55T1mG327gDDxPyqGRmlMOClY103HGqt3h0OYsSCo=
Subject key identifier:   6C:96:0E:27:DD:AF:8F:78:D1:22:B6:21:DD:3F:73:79:90:5B:36:5F
Authority key identifier: 10:C8:7A:36:4F:C6:7E:6F:D6:44:AB:08:96:BE:E4:CB:1D:54:28:FE
Certificate issuer:       /CN=10c87a364fc67e6fd644ab0896bee4cb1d5428fe
Certificate serial:       245513B73C09582F5EF4C1E51DB8A5406FFBCEA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMh6Nk_Gfm_WRKsIlr7kyx1UKP4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/1/10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.mft
Manifest number:          8D
Signing time:             Thu 23 Jul 2026 21:33:03 +0000
Manifest this update:     Thu 23 Jul 2026 21:28:03 +0000
Manifest next update:     Sat 25 Jul 2026 00:26:03 +0000
Files and hashes:         1: 10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.crl (hash: BbK25bBpzTmKgtg1nGavrHhOPgEDtxSAApEx90U9IYk=)
                          2: AS199353.asa (hash: GHq0fMDecg/zzqJZNYYA6QTCzqO6m0lYKPv3f3blruk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/1/10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/1/10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMh6Nk_Gfm_WRKsIlr7kyx1UKP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:55:13:b7:3c:09:58:2f:5e:f4:c1:e5:1d:b8:a5:40:6f:fb:ce:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c87a364fc67e6fd644ab0896bee4cb1d5428fe
        Validity
            Not Before: Jul 23 21:28:03 2026 GMT
            Not After : Jul 25 00:26:03 2026 GMT
        Subject: CN=6C960E27DDAF8F78D122B621DD3F7379905B365F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:d2:20:38:50:7d:3b:36:b1:dd:44:78:bd:
                    f2:2f:e7:1f:30:f3:b5:e7:b6:23:aa:3a:f4:6c:ef:
                    49:6e:6b:77:47:f1:6e:7f:59:41:ae:b9:e8:06:72:
                    6b:1c:02:94:3f:3c:bb:2e:64:8f:15:b5:53:5f:06:
                    ef:37:8a:28:18:c3:da:5f:2f:61:7e:0d:dc:70:9d:
                    66:16:69:50:2d:42:a7:dd:92:f1:e9:c3:fc:df:ca:
                    86:ec:65:1b:06:55:00:2f:d0:70:86:60:50:cd:36:
                    ba:a0:db:36:ab:79:0a:9a:67:bc:8d:45:11:64:21:
                    60:b8:a0:0e:1b:61:8d:f1:f0:24:e8:7b:67:25:a3:
                    d7:6c:2d:d8:97:0a:23:73:eb:9e:33:16:62:a2:2e:
                    50:6e:52:ca:18:22:3b:d8:cf:33:d4:31:95:6a:99:
                    d9:a0:0c:2b:74:69:2c:cc:d9:d1:29:e6:96:11:4e:
                    c2:aa:88:ce:2f:a6:4c:80:fb:13:77:eb:d9:bc:a5:
                    67:06:ac:65:43:7a:47:cc:ae:7f:2d:d6:40:62:e6:
                    c9:86:1c:8b:39:41:63:8c:27:a0:62:c7:1f:11:36:
                    6c:a6:fa:fe:e3:7e:5e:9f:85:c4:9b:4e:75:41:ea:
                    33:75:e7:b5:8b:6c:fd:08:d2:47:18:57:36:20:fb:
                    24:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:96:0E:27:DD:AF:8F:78:D1:22:B6:21:DD:3F:73:79:90:5B:36:5F
            X509v3 Authority Key Identifier:
                keyid:10:C8:7A:36:4F:C6:7E:6F:D6:44:AB:08:96:BE:E4:CB:1D:54:28:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/1/10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMh6Nk_Gfm_WRKsIlr7kyx1UKP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/1/10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:75:87:fe:e2:fe:6a:d5:c6:14:08:b6:89:e2:05:be:7d:34:
         c5:6c:4b:02:a3:4f:c1:ac:88:84:f1:40:df:0f:ea:60:a4:33:
         49:90:d9:8a:7c:6a:b4:71:a3:dd:b7:de:23:71:87:96:ac:4b:
         03:36:a4:20:b2:17:0f:8a:31:2d:46:95:3f:e1:9e:4e:22:68:
         2b:cb:21:2e:79:4a:ef:f4:72:5a:9c:fa:59:39:09:96:00:f6:
         26:b5:ca:05:a5:f1:98:a3:ab:a4:f8:cd:3f:82:17:f0:b6:8f:
         dd:62:ce:b9:85:a0:73:22:09:d7:28:05:86:58:98:ea:60:32:
         cc:cc:95:bd:a8:bc:d9:3e:4d:a3:32:d6:c1:cc:c2:8d:da:98:
         db:80:08:d6:d4:d5:23:44:bf:1e:b9:40:02:c4:71:d1:42:42:
         ab:0b:36:2c:f1:f9:17:d4:06:4f:b3:e4:6c:30:2a:d1:66:9b:
         4c:86:84:10:ea:46:14:98:af:cb:71:6d:c0:f9:c6:52:b5:49:
         f2:f4:1d:4e:29:23:01:3f:35:55:be:ed:b7:a3:97:8a:0b:4b:
         2c:d0:ac:48:12:61:02:ae:f8:c4:df:ed:a1:b5:26:97:47:f1:
         8b:00:f5:48:c0:90:ac:a6:6f:92:d3:32:1a:f9:11:5d:de:89:
         92:30:3a:16
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJFUTtzwJWC9e9MHlHbilQG/7zqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBjODdhMzY0ZmM2N2U2ZmQ2NDRhYjA4OTZiZWU0Y2Ix
ZDU0MjhmZTAeFw0yNjA3MjMyMTI4MDNaFw0yNjA3MjUwMDI2MDNaMDMxMTAvBgNV
BAMTKDZDOTYwRTI3RERBRjhGNzhEMTIyQjYyMUREM0Y3Mzc5OTA1QjM2NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqQtIgOFB9Ozax3UR4vfIv5x8w
87XntiOqOvRs70lua3dH8W5/WUGuuegGcmscApQ/PLsuZI8VtVNfBu83iigYw9pf
L2F+DdxwnWYWaVAtQqfdkvHpw/zfyobsZRsGVQAv0HCGYFDNNrqg2zareQqaZ7yN
RRFkIWC4oA4bYY3x8CToe2clo9dsLdiXCiNz654zFmKiLlBuUsoYIjvYzzPUMZVq
mdmgDCt0aSzM2dEp5pYRTsKqiM4vpkyA+xN369m8pWcGrGVDekfMrn8t1kBi5smG
HIs5QWOMJ6Bixx8RNmym+v7jfl6fhcSbTnVB6jN157WLbP0I0kcYVzYg+yS7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUbJYOJ92vj3jRIrYh3T9zeZBbNl8wHwYDVR0j
BBgwFoAUEMh6Nk/Gfm/WRKsIlr7kyx1UKP4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4
ODgwLzEvMTBDODdBMzY0RkM2N0U2RkQ2NDRBQjA4OTZCRUU0Q0IxRDU0MjhGRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VNaDZOa19HZm1fV1JLc0lscjdreXgx
VUtQNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYjgwNjk3OC01
NTcxLTRkYzktYTg3Mi05MjM5N2M0Yzg4ODAvMS8xMEM4N0EzNjRGQzY3RTZGRDY0
NEFCMDg5NkJFRTRDQjFENTQyOEZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXWH/uL+atXGFAi2ieIF
vn00xWxLAqNPwayIhPFA3w/qYKQzSZDZinxqtHGj3bfeI3GHlqxLAzakILIXD4ox
LUaVP+GeTiJoK8shLnlK7/RyWpz6WTkJlgD2JrXKBaXxmKOrpPjNP4IX8LaP3WLO
uYWgcyIJ1ygFhliY6mAyzMyVvai82T5NozLWwczCjdqY24AI1tTVI0S/HrlAAsRx
0UJCqws2LPH5F9QGT7PkbDAq0WabTIaEEOpGFJivy3FtwPnGUrVJ8vQdTikjAT81
Vb7tt6OXigtLLNCsSBJhAq74xN/tobUml0fxiwD1SMCQrKZvktMyGvkRXd6JkjA6
Fg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:15 2026 by rpki-client