Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
File:                     C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft (raw, json)
Hash identifier:          exhbdOB3pGumD4G1h+fg06R5XjfeH9+kKsiFZNCia04=
Subject key identifier:   C0:AA:5A:3F:71:C6:5B:3A:B3:5F:D7:CD:FA:D4:D6:7A:91:50:EB:C8
Authority key identifier: C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E
Certificate issuer:       /CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
Certificate serial:       224EBB0D775F975B892FB69168426ACD72235527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
Manifest number:          02BA
Signing time:             Thu 16 Apr 2026 22:22:52 +0000
Manifest this update:     Thu 16 Apr 2026 22:17:52 +0000
Manifest next update:     Sat 18 Apr 2026 00:18:52 +0000
Files and hashes:         1: C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl (hash: nxTrdA6B7Rq5s8jKMWmeoQer1XkORsEhwbWIL549TBE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4e:bb:0d:77:5f:97:5b:89:2f:b6:91:68:42:6a:cd:72:23:55:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
        Validity
            Not Before: Apr 16 22:17:52 2026 GMT
            Not After : Apr 18 00:18:52 2026 GMT
        Subject: CN=C0AA5A3F71C65B3AB35FD7CDFAD4D67A9150EBC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:58:aa:18:f9:cd:b6:01:17:27:62:70:19:
                    49:59:c2:03:89:7d:81:4c:44:b8:48:52:13:b1:70:
                    ae:59:6c:2e:f4:b5:68:3d:83:dc:2f:ac:62:0a:49:
                    bc:d2:34:46:80:f1:0b:2c:5b:5f:a6:64:0a:32:9a:
                    09:0e:80:a3:81:0b:9b:0b:79:5d:71:6d:47:08:fa:
                    2e:2c:d3:fa:46:33:fa:25:aa:27:3a:8f:1d:de:7e:
                    c3:8c:2b:d4:f2:33:e3:99:33:31:12:9d:f8:32:18:
                    7f:4d:70:20:78:b2:18:5b:80:6d:d5:89:f8:30:d4:
                    85:a9:06:a5:36:0f:12:f1:93:b2:71:ec:e5:e5:9b:
                    4e:4b:ba:96:eb:6e:e6:22:46:02:0f:ec:35:74:a2:
                    67:e3:a0:4f:bf:2f:c6:d1:71:19:d0:a1:e6:a7:bc:
                    5a:19:47:c6:26:01:ee:73:9b:92:36:3b:74:60:ee:
                    66:f5:8a:87:79:57:74:43:92:ee:be:9b:5c:e3:91:
                    e3:f3:50:d2:f2:59:ea:bc:04:d1:a6:dc:44:4f:01:
                    ae:f9:18:aa:ad:f2:ec:1b:e0:c5:1d:9b:2c:72:03:
                    23:7a:f5:a7:56:89:d6:57:08:4e:73:84:82:1a:84:
                    8c:34:e6:38:1b:3c:26:8d:71:fb:bc:68:bc:0b:ce:
                    d2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AA:5A:3F:71:C6:5B:3A:B3:5F:D7:CD:FA:D4:D6:7A:91:50:EB:C8
            X509v3 Authority Key Identifier:
                keyid:C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:63:de:b1:60:61:95:79:8a:ff:e1:b3:ce:4e:ca:78:c9:c4:
         58:51:2b:72:80:43:48:88:16:74:13:3a:cc:c6:0c:e8:d9:cb:
         90:e2:0c:74:0c:12:3a:8d:9f:4d:eb:c2:28:4b:2b:a3:61:37:
         4f:e6:65:0c:cd:82:9d:01:78:8e:73:e7:2f:c9:4f:9d:1b:0a:
         2f:cd:2b:21:cb:06:a2:bb:40:17:e8:b1:1a:14:a6:52:38:c1:
         89:6a:51:79:6f:f9:74:51:8d:7a:61:61:2b:c7:7f:42:8e:73:
         f5:cf:de:c6:ee:51:57:2c:99:78:25:63:ff:21:9e:6f:47:eb:
         51:21:e1:a7:a8:40:55:82:8e:b9:65:50:be:95:20:82:4c:ae:
         19:20:47:9f:b1:2b:34:d8:c5:07:55:09:15:07:4b:49:43:e5:
         63:8c:1f:07:ec:70:6a:75:ed:93:91:2f:e7:ab:d1:c8:ba:d0:
         21:60:19:2c:f4:72:d9:8d:40:41:d7:12:bd:7b:f6:02:34:1b:
         3f:a1:76:99:a0:f9:ec:b0:55:33:35:05:fe:1c:10:74:75:35:
         85:97:ea:eb:24:b0:78:30:c5:b7:40:8a:88:c2:c1:d6:de:b3:
         17:6b:a4:45:0c:c3:14:53:34:1a:8e:8e:61:32:69:a0:4f:0f:
         06:f9:73:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:20 2026 by rpki-client