Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/378e5eb0-c019-4ff5-b260-4e1638121055/0/E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.mft
File:                     E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.mft (raw, json)
Hash identifier:          pDzoNNbcNDbOFgD+G/Pk2fBUvBlySYq9R8WvCvUZcUw=
Subject key identifier:   8D:51:93:9A:80:B7:B7:29:79:F4:0C:55:B3:06:70:5D:B0:C0:8E:2B
Authority key identifier: E9:B7:59:12:FC:A7:89:B8:6C:CE:A3:B1:E0:9F:1B:5B:FA:84:B5:03
Certificate issuer:       /CN=e9b75912fca789b86ccea3b1e09f1b5bfa84b503
Certificate serial:       764B1B6EEA1905D78830182298BA00603ACB49CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bdZEvynibhszqOx4J8bW_qEtQM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/378e5eb0-c019-4ff5-b260-4e1638121055/0/E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.mft
Manifest number:          26
Signing time:             Wed 23 Sep 2026 02:40:22 +0000
Manifest this update:     Wed 23 Sep 2026 02:35:22 +0000
Manifest next update:     Thu 24 Sep 2026 02:44:22 +0000
Files and hashes:         1: E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.crl (hash: D3XrQFwT/njpg73ewy4Ekt/+8Kpj5DmqVfpT53yWYxk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/378e5eb0-c019-4ff5-b260-4e1638121055/0/E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/378e5eb0-c019-4ff5-b260-4e1638121055/0/E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bdZEvynibhszqOx4J8bW_qEtQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 02:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4b:1b:6e:ea:19:05:d7:88:30:18:22:98:ba:00:60:3a:cb:49:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b75912fca789b86ccea3b1e09f1b5bfa84b503
        Validity
            Not Before: Sep 23 02:35:22 2026 GMT
            Not After : Sep 24 02:44:22 2026 GMT
        Subject: CN=8D51939A80B7B72979F40C55B306705DB0C08E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:60:54:a5:04:62:e9:f0:08:e7:63:c0:5c:
                    18:a8:b1:cd:b5:56:1d:80:d7:40:16:65:3f:60:93:
                    ad:62:5d:0f:2e:a0:bf:53:9b:c4:f7:aa:e4:7a:5f:
                    31:27:a7:e6:f7:3a:9f:6e:70:fb:77:99:a0:4c:0b:
                    1b:25:2e:29:2c:be:3d:ba:34:99:a3:53:05:72:c0:
                    e6:d6:40:f7:85:dd:a6:36:18:f9:94:d7:0d:e5:58:
                    9f:cd:fa:67:fc:6c:d6:c2:4d:6f:46:3c:4a:f5:73:
                    6f:d1:f0:7b:eb:1f:b7:a5:6a:6d:bb:7f:8d:0f:27:
                    a3:0d:8f:b0:5a:89:b5:35:67:30:bc:cd:42:15:58:
                    af:b8:67:04:0c:72:dd:68:02:db:c8:5a:3d:bf:46:
                    2c:88:79:0e:0a:75:0b:06:10:32:77:12:13:f4:f6:
                    f4:20:0e:27:73:d4:3b:89:74:f6:fe:c8:f9:08:e3:
                    3c:fe:5b:0c:c5:27:e7:d1:13:f0:ad:97:25:f7:42:
                    b2:1b:2c:4b:7a:0d:01:bc:ff:ba:7f:66:fc:90:74:
                    20:c0:2f:50:b5:ed:d5:6a:96:ce:e3:1a:c4:f5:5d:
                    c6:62:61:89:07:cb:41:38:7a:19:07:82:57:e3:ed:
                    3f:1e:e4:90:cc:47:34:f2:a1:cb:17:b5:ee:d8:01:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:51:93:9A:80:B7:B7:29:79:F4:0C:55:B3:06:70:5D:B0:C0:8E:2B
            X509v3 Authority Key Identifier:
                keyid:E9:B7:59:12:FC:A7:89:B8:6C:CE:A3:B1:E0:9F:1B:5B:FA:84:B5:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/378e5eb0-c019-4ff5-b260-4e1638121055/0/E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bdZEvynibhszqOx4J8bW_qEtQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/378e5eb0-c019-4ff5-b260-4e1638121055/0/E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:41:63:f9:0e:8d:11:7a:ec:ea:bb:ed:81:39:bc:8d:33:92:
         d1:fb:30:ab:38:1f:92:04:68:5e:b1:a6:20:94:ec:1e:27:82:
         6f:c1:c5:e6:ea:15:4a:46:6d:22:38:1b:d5:1f:38:47:cb:b1:
         9e:5d:a2:03:ee:8b:01:01:a8:0f:a0:78:3b:2d:82:8a:f8:5d:
         3d:37:47:7b:83:30:ba:3e:53:11:cd:a1:4a:0b:5c:2b:95:ea:
         81:dc:b5:e0:24:83:18:d6:32:8f:f2:3d:a5:e1:d2:d0:78:6b:
         fb:f8:8b:1c:ac:44:4d:3a:94:b9:2d:1d:df:f5:71:92:3e:b3:
         32:41:de:b7:24:b3:38:4a:e1:4d:e8:cd:7d:e1:26:bd:5f:d7:
         5f:fa:79:da:1d:88:70:1c:2d:e2:3d:35:4a:47:9c:17:d1:77:
         1c:7e:d0:16:de:fd:be:ba:e9:62:bb:e1:2b:5a:85:56:15:63:
         4e:80:32:b3:00:52:41:00:c0:f4:92:c5:b8:5f:8f:21:af:c3:
         ad:1f:32:cf:5d:84:56:09:e7:16:9d:63:99:34:f7:4c:2a:f9:
         89:da:f3:b2:a5:46:a4:66:a6:d2:0d:8a:51:f0:5a:2d:e3:47:
         81:06:dc:03:c2:0f:21:01:6d:85:ba:ff:25:f0:53:e1:d6:94:
         76:58:d5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:28:50 2026 by rpki-client