Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File:                     9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier:          mAbFzt04G9oqXkbn8nYxlT3kX7lIpzEGvzUHqAbD8OQ=
Subject key identifier:   E8:3E:AD:27:08:87:E0:BA:50:E1:F1:DD:0F:F6:6C:A1:FC:2B:73:51
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer:       /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial:       1FA2CD694971DB0F88A346CAF860AC77AAB951D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number:          01FB
Signing time:             Tue 28 Jul 2026 10:04:02 +0000
Manifest this update:     Tue 28 Jul 2026 09:59:02 +0000
Manifest next update:     Wed 29 Jul 2026 11:51:02 +0000
Files and hashes:         1: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: tnVRKlYeNlyr0W2HNYMMa8+khhwYmXCRK5YtBQeEkYA=)
                          2: AS214809.asa (hash: KZxAxAgv7eodloZuRGXMZMgeZt8qfPZMw5fBoAT3Z1o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a2:cd:69:49:71:db:0f:88:a3:46:ca:f8:60:ac:77:aa:b9:51:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
        Validity
            Not Before: Jul 28 09:59:02 2026 GMT
            Not After : Jul 29 11:51:02 2026 GMT
        Subject: CN=E83EAD270887E0BA50E1F1DD0FF66CA1FC2B7351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:83:00:fb:7b:89:cd:6c:56:c8:c7:17:63:17:
                    97:4d:6b:c1:45:09:f5:8c:3a:1b:b3:42:17:52:6b:
                    17:ae:30:88:3e:7f:65:80:ab:dc:69:71:ab:c5:7c:
                    b4:6b:74:84:0d:9d:43:97:ff:c3:e5:28:7d:c8:29:
                    ef:b1:fc:60:30:43:12:c2:34:dc:5b:99:43:8f:1d:
                    49:53:73:14:4b:20:15:41:2d:f5:69:41:e0:06:a1:
                    c2:ec:40:25:67:5d:32:56:25:84:b3:e1:56:86:05:
                    41:58:39:10:ef:95:61:d8:10:a6:82:4c:8c:b2:22:
                    51:ed:49:ed:f2:7e:0a:bc:82:92:21:fa:62:1a:64:
                    04:5b:20:38:9c:3d:31:64:62:fa:85:31:cd:ed:ea:
                    40:c6:e8:92:dc:ac:e2:82:ac:b2:a0:a4:2e:19:df:
                    d3:08:b7:e3:ff:37:0c:d7:4d:3f:fe:2d:27:ff:95:
                    4a:75:32:32:98:6a:8e:8c:07:44:3e:4f:a7:cb:0d:
                    99:28:d6:d4:5b:5a:3c:d4:fa:59:90:a5:47:76:09:
                    32:53:76:2c:2b:70:8a:09:28:dd:cf:83:c0:01:d9:
                    1a:9e:6f:af:48:37:34:e5:54:9a:5e:23:48:d5:45:
                    18:10:c2:71:b6:7e:2a:d2:89:03:c0:f7:f8:00:3e:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3E:AD:27:08:87:E0:BA:50:E1:F1:DD:0F:F6:6C:A1:FC:2B:73:51
            X509v3 Authority Key Identifier:
                keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:45:a3:91:14:99:cb:36:e3:8f:a5:0e:38:81:68:ab:5f:08:
         ae:08:a3:96:43:50:3a:de:12:14:93:94:8c:38:ab:d5:a0:03:
         b2:fc:25:a6:fc:7a:86:f1:0b:07:ba:21:ba:13:1e:a1:6d:bd:
         e9:4d:74:af:0a:2c:77:6a:f9:12:d5:33:c6:0e:a6:29:88:2e:
         89:01:db:68:2b:1e:07:cf:bd:26:42:b4:61:04:82:d8:76:a7:
         63:65:b8:39:9b:c7:f3:70:dd:96:fc:d3:dd:a4:8e:08:fc:1d:
         ae:68:7f:47:b5:34:39:1c:17:34:80:e4:8f:4c:c9:cc:3a:0a:
         b3:82:41:36:87:99:b0:ed:e1:a3:2c:6d:1d:3f:7e:28:2c:21:
         c8:72:ca:7e:4b:1e:aa:0f:fc:02:37:a5:38:d5:36:3c:94:0a:
         36:d8:9c:7b:fd:62:f3:b0:bd:83:fc:61:19:95:d1:5f:6f:a0:
         40:38:72:e5:fc:c5:3c:42:63:ed:ec:75:a7:75:cc:08:ec:44:
         5e:17:d2:a0:4c:4c:e6:3f:73:ff:02:c4:db:ed:fe:35:a0:e6:
         61:23:6d:f8:7f:cf:93:dd:9a:fd:45:e0:41:18:c3:dc:35:e2:
         58:c7:8f:1d:3d:f5:da:72:d6:c3:0b:8a:34:8f:cf:93:84:6f:
         24:43:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:13:35 2026 by rpki-client