Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File:                     9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier:          qGyJlwPLIwVmIQsxKdyqp9VyH2uQr584JLCfQPHzjJg=
Subject key identifier:   51:41:A7:29:AE:1D:81:3E:B3:D5:EA:F8:9A:23:49:79:9C:F7:41:34
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer:       /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial:       587150F216D7E83BA230CD9B2F7DB0AB3350F4E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number:          016D
Signing time:             Thu 16 Apr 2026 21:07:46 +0000
Manifest this update:     Thu 16 Apr 2026 21:02:46 +0000
Manifest next update:     Fri 17 Apr 2026 23:15:46 +0000
Files and hashes:         1: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: jqRf9vnMzWCNE37UoL8hE+U0P2EB6Q1oJGgLuKZnpuA=)
                          2: AS214809.asa (hash: KZxAxAgv7eodloZuRGXMZMgeZt8qfPZMw5fBoAT3Z1o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 23:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:71:50:f2:16:d7:e8:3b:a2:30:cd:9b:2f:7d:b0:ab:33:50:f4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
        Validity
            Not Before: Apr 16 21:02:46 2026 GMT
            Not After : Apr 17 23:15:46 2026 GMT
        Subject: CN=5141A729AE1D813EB3D5EAF89A2349799CF74134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:1b:fb:a0:05:4a:85:b1:3a:0f:0c:f7:e8:
                    df:0c:39:bc:f9:f7:f3:5b:64:dc:86:18:16:55:ed:
                    ee:09:6e:1a:14:b1:0b:9d:18:70:b0:27:ec:90:a0:
                    f6:db:8f:9f:73:39:89:ac:df:20:80:78:23:f9:b1:
                    b2:27:35:be:1b:de:86:9c:c6:eb:24:c5:39:84:9e:
                    3a:8c:d9:74:2e:25:4a:16:3b:b6:e0:9c:f1:af:7e:
                    d3:5b:9c:70:6b:0c:3e:5c:86:05:b8:2b:09:5c:a8:
                    a2:48:19:b7:8b:01:4a:a6:a4:05:b5:38:16:86:b4:
                    e8:a3:fa:4e:01:2e:cf:c2:50:a5:e9:89:69:f4:1a:
                    f0:f1:75:95:19:b4:57:b6:79:a1:a6:cf:92:84:cb:
                    db:ff:3f:e0:d9:c6:44:ca:0c:ba:58:6f:98:d6:1a:
                    8a:c5:df:7d:14:8a:be:32:df:98:82:07:96:d2:7c:
                    56:de:2e:37:62:58:91:17:20:5d:51:ac:a3:df:e3:
                    32:ff:49:ec:b7:ca:3a:2f:e7:ca:95:01:63:10:93:
                    3e:40:c3:af:b0:f9:cb:61:60:57:a6:14:68:77:fb:
                    d7:62:c3:49:24:c2:98:49:f7:7b:04:3c:b9:81:fd:
                    33:68:71:fa:b7:33:b5:53:78:b6:b3:ad:f6:27:6b:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:41:A7:29:AE:1D:81:3E:B3:D5:EA:F8:9A:23:49:79:9C:F7:41:34
            X509v3 Authority Key Identifier:
                keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e5:5f:6f:6d:4c:1e:13:e8:a0:4c:26:72:96:12:e6:b7:c6:
         d3:8f:bd:c4:a4:62:67:50:72:7f:b3:17:13:2f:f2:c0:e3:7c:
         66:3f:62:83:06:78:6e:4d:aa:45:47:e1:a9:38:5d:fb:b5:94:
         dc:82:ba:d2:3c:0b:db:79:53:24:c2:99:91:db:61:c5:f8:13:
         bf:2e:97:a9:fc:13:82:42:3a:6b:47:4e:dc:eb:4b:03:c4:4a:
         d0:8a:d0:5e:c1:c0:ce:6b:0e:51:95:51:66:ce:95:db:ba:c3:
         1d:3b:d2:d6:b9:20:19:ac:84:19:d0:b3:7c:45:13:d3:99:63:
         5d:b9:f0:8b:d1:4e:8c:46:50:94:54:47:da:f6:11:e7:4e:a3:
         13:70:b9:11:1d:ec:96:2c:fa:28:80:7f:31:8c:95:f9:d2:4d:
         68:8d:33:4b:d2:21:be:31:a2:4a:5f:36:64:df:30:a2:4b:02:
         48:4b:81:f2:6e:b6:d5:2b:e7:5d:78:f1:e0:93:69:e4:85:be:
         06:26:bf:3f:dd:71:cb:1a:b7:25:06:99:e8:b0:43:82:73:be:
         14:c9:dc:cf:57:b9:21:8e:6e:52:a0:83:f8:e0:e5:bc:86:0b:
         f7:04:28:3f:2e:4f:f1:45:94:31:82:86:06:a7:75:64:83:50:
         47:ed:75:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:39 2026 by rpki-client