Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
File:                     391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft (raw, json)
Hash identifier:          HAwPtMrogeGBdPDYkRd21ZuYnsRHuyrLmOlVyQaVUWE=
Subject key identifier:   E8:86:40:4E:F3:A3:9C:7B:4C:C0:EA:CF:3C:02:BA:0F:92:1E:23:30
Authority key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
Certificate issuer:       /CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Certificate serial:       0BD0A7183CA024EAD0F4B421142FC46843AAA4A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
Manifest number:          0141
Signing time:             Mon 21 Sep 2026 02:54:16 +0000
Manifest this update:     Mon 21 Sep 2026 02:49:16 +0000
Manifest next update:     Tue 22 Sep 2026 03:25:16 +0000
Files and hashes:         1: 391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl (hash: iU+oTh7dxAqS32RY3j+QwRtY+IJwlvzikyFPr9V0AE8=)
                          2: 323030313a3637383a6139303a3a2f34382d3438203d3e20323135363835.roa (hash: f01olELinbK/WN+AKKfNEa3BaJPmtAdvY7LAPWQjTbg=)
                          3: AS215685.asa (hash: SiGiAM43YXFTtzfo7l172fprZ9HIiJ+kTVo0mLk/Nfk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 03:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d0:a7:18:3c:a0:24:ea:d0:f4:b4:21:14:2f:c4:68:43:aa:a4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
        Validity
            Not Before: Sep 21 02:49:16 2026 GMT
            Not After : Sep 22 03:25:16 2026 GMT
        Subject: CN=E886404EF3A39C7B4CC0EACF3C02BA0F921E2330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:2b:af:0e:1e:a5:6d:1f:0b:c0:c0:61:60:
                    9a:aa:7d:9e:21:f8:a2:4a:c9:74:85:c8:2c:3b:99:
                    37:4e:04:53:98:e3:02:c8:7d:c6:2e:a3:50:02:6f:
                    a7:77:a0:80:84:a9:37:fd:f0:b2:4c:2c:d6:2b:e4:
                    da:97:94:42:3d:ec:7d:b6:b4:09:9f:3b:aa:2b:f5:
                    f3:f0:a9:44:69:5e:c8:36:fc:e4:4a:43:e5:91:c0:
                    fe:a8:4f:a4:1b:5c:ea:3f:10:af:c8:ce:8a:02:52:
                    3f:c5:9e:bc:c3:b5:a5:1c:c4:30:43:d7:0d:40:4e:
                    9a:1b:dd:41:b4:9d:87:12:24:59:4f:52:3d:72:9b:
                    9c:52:06:83:22:8b:62:b3:b6:f2:8c:63:51:c8:50:
                    6a:08:40:ed:dc:c7:a7:3e:88:53:32:f5:42:50:ed:
                    9d:8c:13:1b:3c:84:90:b8:80:0a:63:34:c6:78:11:
                    d7:b2:a9:ca:b9:18:f6:d4:87:d1:66:0d:fe:71:35:
                    91:0b:c6:e9:88:05:33:70:70:ea:ca:4b:63:40:e4:
                    b4:b7:7f:d3:c3:f4:cc:bd:7c:68:3b:58:2a:22:79:
                    b8:0a:37:e4:75:36:b1:01:f2:33:23:d9:38:c4:0a:
                    57:9d:cb:e3:3c:74:0f:99:14:96:20:36:20:b3:bc:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:86:40:4E:F3:A3:9C:7B:4C:C0:EA:CF:3C:02:BA:0F:92:1E:23:30
            X509v3 Authority Key Identifier:
                keyid:39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ea:13:73:fb:e9:6b:b0:29:8d:2a:3f:ac:ec:c2:47:c9:ed:
         f7:cd:3c:13:fd:ac:d0:ef:7a:52:b1:66:0f:a7:28:03:9f:1d:
         f4:a5:64:0f:69:f2:78:c5:8c:e4:74:41:35:c7:fc:b6:55:ab:
         16:60:ae:97:19:ed:8d:68:4e:da:d5:d6:2a:bd:14:61:7e:5a:
         49:79:19:86:46:ae:d6:cd:0c:fa:a8:6b:cb:a3:c0:2c:60:22:
         1f:12:a1:84:c7:08:b0:0f:a6:d3:55:4d:f1:76:c1:35:39:1f:
         2e:2e:1b:16:14:43:53:bd:39:9f:0d:21:e9:bf:79:52:0d:46:
         76:80:40:fe:30:a6:38:e0:be:58:51:06:dc:37:8c:81:cc:2b:
         70:72:da:b7:a0:05:75:90:5c:9f:6a:51:72:0e:b6:06:52:42:
         fa:11:aa:24:c2:91:36:27:c1:18:3d:0e:89:9a:56:59:0d:f3:
         2c:92:34:44:52:d4:5f:2e:76:47:27:b3:a3:33:cd:0d:0e:c3:
         7e:88:ed:b2:6f:b2:12:b6:83:46:92:df:ec:8f:99:63:a6:34:
         fd:74:65:35:40:d5:df:43:fd:ec:d3:be:83:4e:c2:b2:52:cb:
         4b:e9:5f:e3:2b:a0:6e:2c:f8:a1:71:54:a8:5a:c5:2f:9b:79:
         af:5e:30:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:39:53 2026 by rpki-client