Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft
File:                     E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json)
Hash identifier:          M9dLqbyCqJpSBq0pKTlulluKzNoGBn6/yTqEojeL8xM=
Subject key identifier:   EB:6F:81:07:5E:34:47:B5:10:BD:57:90:E2:CA:EB:D2:F7:44:EE:4A
Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE
Certificate issuer:       /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE
Certificate serial:       78D38C710BF9E8C50138F62A4C6A2EB3A2902E0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft
Manifest number:          0125
Signing time:             Sat 13 Jun 2026 00:21:30 +0000
Manifest this update:     Sat 13 Jun 2026 00:16:30 +0000
Manifest next update:     Sun 14 Jun 2026 04:14:30 +0000
Files and hashes:         1: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: tkerxX07BC3twCi0KYg/N5qiMhUkao+tmOYM+iMCSoE=)
                          2: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d3:8c:71:0b:f9:e8:c5:01:38:f6:2a:4c:6a:2e:b3:a2:90:2e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE
        Validity
            Not Before: Jun 13 00:16:30 2026 GMT
            Not After : Jun 14 04:14:30 2026 GMT
        Subject: CN=EB6F81075E3447B510BD5790E2CAEBD2F744EE4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:95:fe:cf:1b:0a:70:4d:23:9c:32:93:d1:22:
                    c7:31:67:73:dc:54:30:a4:da:af:f9:fe:fd:a7:7f:
                    28:de:1f:cb:14:2d:c6:7d:f5:52:e8:7a:66:75:25:
                    7a:c3:6e:fc:4f:2e:1e:90:95:21:1a:16:63:af:41:
                    3f:c2:3e:e2:66:50:63:67:03:ae:0e:20:49:59:b2:
                    5e:6a:73:3e:71:2e:49:90:51:15:5d:28:c2:04:5e:
                    3a:ee:b9:65:5e:8b:19:83:2b:a0:eb:ad:77:0d:d7:
                    40:d6:8f:0c:61:6f:f8:11:50:7d:3e:bf:d6:11:9b:
                    cf:05:01:69:f8:f5:f8:89:d4:6e:62:4a:2d:f3:c4:
                    63:45:e4:57:06:08:69:92:bc:86:69:73:61:63:65:
                    fc:83:5f:73:99:0b:ae:53:24:49:11:b3:53:e4:5c:
                    bc:3a:35:68:81:c0:2c:85:02:dd:10:8e:4e:ef:61:
                    cd:0c:95:44:2e:68:0b:e9:6a:b1:6b:df:dc:6e:95:
                    84:65:69:69:58:0f:29:f1:a1:19:ef:c0:6d:45:76:
                    a2:04:22:42:30:dc:40:d5:d3:f1:47:0a:4b:15:45:
                    65:15:0b:b3:46:71:5a:e6:81:92:96:e4:3e:87:63:
                    9a:1b:dd:48:0d:a6:a2:5a:98:21:ba:77:eb:44:b4:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6F:81:07:5E:34:47:B5:10:BD:57:90:E2:CA:EB:D2:F7:44:EE:4A
            X509v3 Authority Key Identifier:
                keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:fd:d4:98:a1:8b:60:66:96:8f:b6:cb:f9:c0:59:07:eb:51:
         61:5c:69:f5:69:9a:5c:d2:c2:6d:9f:99:23:60:68:65:50:58:
         6b:fb:ba:bb:6b:3a:14:4e:d5:83:d1:ca:57:1e:a9:2b:a3:2b:
         4a:2d:4f:78:5b:23:2c:06:70:1e:fd:6d:34:76:3c:9d:49:df:
         79:68:d5:58:5c:8c:41:ce:59:62:0e:75:47:71:53:73:69:f3:
         59:e5:fa:c4:14:24:09:d4:1e:d4:77:d6:f4:85:40:5e:36:05:
         98:2b:01:16:44:62:c9:9f:cf:6f:cf:36:67:8c:2d:34:c6:d3:
         3a:86:e2:3c:45:b8:65:57:26:43:66:a9:4d:6a:94:b6:01:f6:
         7c:92:df:ff:e5:8a:74:25:de:5b:1a:53:86:6a:6b:22:7f:68:
         c2:59:11:cb:c5:eb:83:91:b9:96:e0:8e:40:2a:98:2e:e3:dd:
         bd:e1:81:bd:7f:ac:e9:7b:29:66:b3:61:e5:dc:60:70:09:81:
         8a:dd:14:f1:19:be:74:e9:1f:42:49:11:fa:a9:6a:1f:5f:71:
         9e:b4:5e:47:91:bb:41:dc:ad:c6:db:35:ee:6b:a7:09:e2:95:
         4b:02:38:37:7c:b5:94:33:64:51:10:87:1a:87:19:c2:fa:d3:
         12:79:82:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:21:30 2026 by rpki-client