Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
File:                     C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json)
Hash identifier:          wOmiJ7C9lHkUvU/j8WuI2+HkpYbUKgSG4wHJi7qxJu4=
Subject key identifier:   EB:54:37:51:97:F0:15:DB:30:C0:C1:5C:02:89:5D:65:8D:58:12:30
Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF
Certificate issuer:       /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF
Certificate serial:       5552A83494608208904A8FAEC9A5FF7C2A15373A
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
Manifest number:          9A
Signing time:             Fri 12 Jun 2026 18:59:13 +0000
Manifest this update:     Fri 12 Jun 2026 18:54:13 +0000
Manifest next update:     Sat 13 Jun 2026 20:13:13 +0000
Files and hashes:         1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: umPhXmt+NVELA5aa+9BKsYMaHWLvyIfI+ipQMrRB1p0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:52:a8:34:94:60:82:08:90:4a:8f:ae:c9:a5:ff:7c:2a:15:37:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF
        Validity
            Not Before: Jun 12 18:54:13 2026 GMT
            Not After : Jun 13 20:13:13 2026 GMT
        Subject: CN=EB54375197F015DB30C0C15C02895D658D581230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:3e:83:ca:bc:7d:6e:ee:53:41:5c:3a:65:
                    a7:9a:8c:b1:eb:45:1b:3f:2b:3a:03:46:28:ac:a2:
                    c0:d4:e7:3f:73:06:5c:e0:ec:e3:41:45:d6:e1:6b:
                    3c:58:77:08:e2:a3:c9:e7:f3:e2:0d:42:6e:8a:30:
                    ae:6e:a4:59:87:ca:93:13:a2:c9:13:22:49:91:3c:
                    c6:f2:f0:30:c0:5f:a3:63:fc:c8:a6:d4:a2:21:1b:
                    e4:46:a0:a4:8f:95:a8:fa:80:05:27:14:25:7a:e7:
                    a4:cc:c1:14:a4:1a:ed:b8:be:0e:14:ca:a3:cd:69:
                    dd:ea:30:42:1b:02:11:51:b6:cd:12:82:b1:47:79:
                    1b:f6:4a:7a:32:46:e9:5f:e8:e9:bf:a8:9a:8e:e7:
                    fb:0c:53:e6:a1:64:54:71:80:12:52:8a:9f:43:ed:
                    d3:2d:4e:f2:6e:49:20:c2:1b:67:5c:56:93:2b:f4:
                    94:49:06:7c:88:0b:b1:ca:06:d2:09:fe:03:4d:17:
                    af:0d:1d:d2:6f:f4:5e:30:cc:01:ac:80:f1:94:65:
                    0e:62:72:e1:78:e7:b1:d7:3e:2e:be:b1:68:33:11:
                    e2:7b:8c:2e:e1:ec:37:1b:9a:dd:39:5c:bd:c3:c5:
                    f0:54:fb:ee:20:da:0c:c6:f9:0e:27:0d:fe:88:c2:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:54:37:51:97:F0:15:DB:30:C0:C1:5C:02:89:5D:65:8D:58:12:30
            X509v3 Authority Key Identifier:
                keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:56:92:72:53:ee:1b:31:6d:55:07:93:5d:97:4a:87:a9:35:
         b9:50:4f:a1:63:3d:cd:2d:0b:20:12:d1:94:78:24:d6:99:b8:
         18:65:c6:0f:54:0e:b0:12:9a:94:5a:c3:85:e2:e8:81:67:d4:
         5f:cb:06:5d:a8:85:92:94:95:4c:99:43:3e:6d:79:3e:c6:28:
         3c:0f:27:38:6d:6f:a0:98:b7:30:b8:59:e0:d3:05:1f:96:63:
         20:78:b6:49:c2:a1:7b:95:e9:c4:69:92:60:6b:d8:d6:9c:e6:
         9b:30:ce:d9:8a:12:d7:b3:9a:fe:ab:c2:52:da:d5:ef:74:e3:
         19:0d:d6:bb:ec:27:d0:e5:35:9b:6d:1d:a3:85:ff:68:b1:1d:
         37:d3:ae:0f:1e:7b:27:f3:bb:47:0c:d9:32:b7:2a:ee:1e:0e:
         73:a0:0b:14:1d:bc:0d:f3:ca:9d:7a:68:8f:be:8c:7f:08:89:
         24:b6:99:a1:44:22:49:fb:ca:80:62:8d:8f:3d:a8:f2:3c:97:
         d8:6a:9d:7c:19:1d:21:1e:8c:c2:8a:c9:f0:a7:c6:1b:c0:3b:
         3c:4e:ab:b6:c9:1f:7a:30:e4:89:8e:3c:e9:02:79:fe:74:9a:
         d9:91:c6:a9:0c:b8:1c:c5:ac:28:33:51:cf:98:b0:fe:7d:8e:
         b2:24:63:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:00:54 2026 by rpki-client