Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File:                     E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier:          cduCrBdeuajWXvk64RzziokAGArX16gewQ7xDjIDbG4=
Subject key identifier:   9C:73:65:76:AA:31:3E:85:A7:49:EF:68:A0:0E:B7:4D:71:69:54:02
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer:       /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial:       3FB589F2C181AB893500FA424E0410302E63F39A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number:          0569
Signing time:             Mon 02 Mar 2026 06:33:01 +0000
Manifest this update:     Mon 02 Mar 2026 06:28:01 +0000
Manifest next update:     Tue 03 Mar 2026 08:12:01 +0000
Files and hashes:         1: AS208453.asa (hash: toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=)
                          2: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: J3QK9eIO/G4K712+9ARa8ai85ICp2ZRo+NVcLp/Pep0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b5:89:f2:c1:81:ab:89:35:00:fa:42:4e:04:10:30:2e:63:f3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
        Validity
            Not Before: Mar  2 06:28:01 2026 GMT
            Not After : Mar  3 08:12:01 2026 GMT
        Subject: CN=9C736576AA313E85A749EF68A00EB74D71695402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:1c:9b:32:32:64:b7:55:c2:81:33:cc:08:
                    37:38:8a:9c:79:51:d0:7d:bf:f4:df:0c:ae:80:2e:
                    60:ba:18:0a:3b:bf:80:fb:c4:14:da:c5:70:53:a7:
                    af:7b:83:af:22:57:0f:ff:71:2b:46:59:a2:82:00:
                    32:bf:59:57:ba:bc:54:12:98:a6:08:cb:91:f8:1a:
                    e4:c2:7f:48:24:1f:e3:16:4c:5b:c1:59:4e:c7:d6:
                    39:cc:a4:8f:55:c8:f3:f4:e8:8a:30:73:5f:0a:ef:
                    d0:6e:05:62:47:5a:ed:20:4f:e0:5b:72:a4:32:6d:
                    8d:f5:91:34:0e:bb:38:53:23:de:8f:3e:cd:fd:ba:
                    24:0e:51:fe:2e:47:33:92:4a:ef:f7:2c:c1:c0:76:
                    91:7e:4e:f6:cc:98:de:93:9a:ec:67:72:2a:62:df:
                    9f:0f:89:d2:0e:a3:67:7d:a0:37:ac:de:4b:3d:5e:
                    bb:e1:a0:7b:a3:a1:02:dd:01:60:60:66:b2:d4:57:
                    16:f7:a6:3d:94:e7:9a:06:57:0d:85:fc:02:5a:2d:
                    97:93:79:c1:99:8c:fd:29:f8:34:1f:3e:59:7e:83:
                    a9:2c:5c:d8:e4:07:2c:70:9d:9e:00:bf:88:46:ce:
                    4a:18:b3:06:fe:75:e6:6a:ca:7c:38:d6:f6:bb:32:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:73:65:76:AA:31:3E:85:A7:49:EF:68:A0:0E:B7:4D:71:69:54:02
            X509v3 Authority Key Identifier:
                keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:28:5f:97:a2:05:f7:e2:dd:cd:2a:41:a3:ac:59:45:08:fe:
         3c:1a:00:27:b9:c0:35:8a:5b:73:64:ea:0a:78:70:e1:b5:69:
         59:a9:27:ac:a4:1e:dc:d9:b1:99:29:b1:cb:38:70:5d:e1:7a:
         06:14:c4:70:79:5d:1e:a0:af:cc:62:f2:26:64:31:16:68:0f:
         e0:5c:b9:df:07:2c:dd:9e:34:b2:6b:2e:6a:69:0f:eb:7e:08:
         a5:52:af:4d:89:a0:fd:60:89:80:27:eb:96:a7:54:35:40:55:
         3c:97:2c:eb:f6:98:5c:7d:9f:c2:db:be:c0:4d:9c:cd:59:d2:
         38:41:bc:24:af:f4:36:14:f3:41:61:28:33:ae:e7:e9:b9:d4:
         6d:f0:7e:a2:4d:e7:ef:8f:d9:e3:1c:0a:d1:58:78:bb:27:93:
         8f:de:94:1e:06:c6:52:62:a5:ac:43:1a:c8:e8:2e:5b:ba:43:
         e1:95:d6:31:c9:c5:4b:e5:7f:f1:bf:bc:f7:0d:70:24:51:1a:
         10:2d:59:d3:13:d9:a8:72:77:8f:e0:67:b8:81:0d:be:a6:c2:
         c6:40:83:52:cc:95:ad:97:b7:b4:08:3a:69:e7:1f:c9:ce:40:
         b6:c8:28:a7:a5:13:e1:8b:13:da:50:28:0c:b8:74:19:8c:fd:
         09:90:14:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:41:05 2026 by rpki-client