Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File:                     B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier:          3zeIiTmzMolPRzQr0U0DQD5mibVNWLG5aqHRR3Jd4g4=
Subject key identifier:   EB:9F:F9:3D:EC:77:9A:E9:75:D2:60:B1:7F:8E:5D:61:8A:A3:6F:FB
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       39AE0C6E4C1119BD7B962A9F04A596FBFFB8BF91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number:          0613
Signing time:             Sun 20 Sep 2026 16:00:01 +0000
Manifest this update:     Sun 20 Sep 2026 15:55:01 +0000
Manifest next update:     Mon 21 Sep 2026 19:51:01 +0000
Files and hashes:         1: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: Y5YQ7hvy+QMwmWKXzubGwtzbCAH9bdlZiAma05HfipU=)
                          2: AS215147.asa (hash: nfcUuwC/3qlcgX+cZTEul4NY/mXYH62iVKJI3G2XHV0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ae:0c:6e:4c:11:19:bd:7b:96:2a:9f:04:a5:96:fb:ff:b8:bf:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Sep 20 15:55:01 2026 GMT
            Not After : Sep 21 19:51:01 2026 GMT
        Subject: CN=EB9FF93DEC779AE975D260B17F8E5D618AA36FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ab:1e:ea:ba:ef:62:db:17:54:6e:d5:59:e8:
                    8f:a8:25:e6:a9:fd:bb:bd:e3:5c:87:80:83:a5:a9:
                    91:1a:85:99:34:83:dd:cd:01:e3:e1:5a:47:9b:ff:
                    3c:5a:68:12:b6:5f:08:9d:8b:74:48:e8:eb:e9:65:
                    50:5b:ed:4f:84:70:2a:42:6d:26:2a:9f:4e:a6:3e:
                    94:51:ac:e1:ef:d1:d6:32:6c:9e:85:47:c2:91:c3:
                    d5:cd:8c:cf:37:20:6c:15:90:70:96:62:6e:d3:34:
                    16:aa:d2:8e:f9:6b:d4:1e:c1:55:2c:b8:c5:73:c4:
                    9e:6a:3e:36:f9:36:67:6b:f0:69:7f:11:29:98:b6:
                    51:4b:c2:c3:35:a1:53:d2:fc:08:cc:bb:1e:9f:bf:
                    76:2a:15:e9:71:cc:51:47:fb:df:c6:dd:8b:c3:d5:
                    fb:7e:5d:0c:71:aa:d1:5d:46:7c:56:9a:a6:ae:4d:
                    72:5b:3f:80:24:08:d4:3c:a3:7b:02:e2:e9:a0:59:
                    c5:9b:66:74:49:40:87:8c:b9:fe:e6:d6:55:91:ad:
                    1f:1e:4a:7d:4d:1c:a6:d7:2e:fd:7f:50:32:7b:b3:
                    8e:1e:85:09:33:fb:71:52:eb:d5:32:f2:ca:3e:50:
                    74:d1:f9:cd:11:c3:0c:27:d0:05:24:31:82:d3:b3:
                    f4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9F:F9:3D:EC:77:9A:E9:75:D2:60:B1:7F:8E:5D:61:8A:A3:6F:FB
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ec:e7:7a:3c:51:8b:15:d7:dd:7d:71:b8:6a:fe:f5:11:54:
         ae:b2:4c:90:10:b7:da:24:e9:6d:a1:01:0c:48:fd:5f:35:52:
         ae:d5:35:27:22:91:82:f6:17:de:54:87:98:a6:48:08:a8:44:
         6e:bf:4e:31:aa:57:b2:b2:6f:1f:d7:84:2f:3c:c6:b8:27:81:
         54:ce:a3:78:6e:c5:73:cf:29:29:09:5a:1e:99:6b:7f:b1:b7:
         27:4a:9a:c7:cf:b9:f0:bd:af:c1:0b:2d:88:83:fb:23:29:e0:
         17:67:bb:62:34:b7:10:3e:15:51:65:47:db:70:63:4b:f9:4f:
         3b:ff:92:b9:06:50:b7:7f:19:a0:93:1f:19:cc:b7:04:33:81:
         21:66:d8:90:4a:b0:ee:7b:77:c3:ee:3b:12:c0:cf:40:76:f9:
         a9:32:8e:25:72:2e:4a:68:29:f4:4d:87:1e:42:5c:53:7f:00:
         16:8f:8a:01:9e:fa:c0:03:15:47:df:35:7b:4a:0c:14:48:16:
         f4:86:8b:ca:9f:ce:9a:c5:fc:ff:b8:a3:8e:e1:f9:2a:63:f1:
         87:5f:07:9a:5d:1a:28:35:30:a1:fe:e4:63:33:5d:be:ab:26:
         12:12:48:0a:a6:b2:36:9d:13:3b:9e:cd:53:8d:13:53:17:ac:
         37:aa:22:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:07:38 2026 by rpki-client