Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
File:                     9BB8B7044997B7AAF52B54E757F998927956EC38.mft (raw, json)
Hash identifier:          VWzlVW0ftolDB4MTBdfuKU2aET7SpQ29e+N3efKB1vo=
Subject key identifier:   EA:58:83:6A:78:16:C0:A6:09:63:20:E1:FE:67:99:91:EE:5D:BF:F4
Authority key identifier: 9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38
Certificate issuer:       /CN=9bb8b7044997b7aaf52b54e757f998927956ec38
Certificate serial:       50E88625C4F330B246B8DF157DB8352804BDFBB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
Manifest number:          014C
Signing time:             Mon 21 Sep 2026 02:43:22 +0000
Manifest this update:     Mon 21 Sep 2026 02:38:22 +0000
Manifest next update:     Tue 22 Sep 2026 04:16:22 +0000
Files and hashes:         1: AS204844.asa (hash: VQAsDBi0RHb4rqNWH3oXo2B+pmgqS88NnKjLvvSUCF0=)
                          2: 9BB8B7044997B7AAF52B54E757F998927956EC38.crl (hash: c/4M4pQ0Y5sTSgPTCDfSuSuKRIJ0D/2WqDPqgDei2Y0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e8:86:25:c4:f3:30:b2:46:b8:df:15:7d:b8:35:28:04:bd:fb:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb8b7044997b7aaf52b54e757f998927956ec38
        Validity
            Not Before: Sep 21 02:38:22 2026 GMT
            Not After : Sep 22 04:16:22 2026 GMT
        Subject: CN=EA58836A7816C0A6096320E1FE679991EE5DBFF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:38:01:59:4d:a2:e7:55:b7:75:0c:f2:2a:
                    33:a5:72:ad:67:31:15:31:c2:71:f1:c3:7d:be:ef:
                    33:82:3c:f4:14:36:5d:b2:38:ed:06:de:00:4c:20:
                    6d:99:75:11:6e:90:ca:30:bb:3c:81:ac:ba:e7:b9:
                    50:af:94:d2:a4:4c:79:96:ba:9f:94:80:db:76:bf:
                    c3:37:19:5a:5f:db:77:86:60:3a:19:13:dc:f3:2f:
                    47:b8:95:23:36:a4:2b:67:aa:f1:b3:b0:d4:24:d9:
                    0a:00:a0:9b:bd:79:1e:a9:d2:8d:79:12:6f:20:d4:
                    6f:b2:6f:62:a5:6c:3a:fe:2c:2b:b0:6f:43:f8:6a:
                    33:d5:95:b8:84:db:35:ff:9a:46:df:ed:90:3b:f8:
                    fc:9d:18:0c:96:b7:b9:01:2e:12:b5:e1:24:c8:30:
                    f9:b5:71:45:a4:a9:6a:56:dd:c5:8e:6c:fb:55:e7:
                    d2:98:c9:2a:6a:3b:e4:53:b7:56:9e:a8:06:35:ed:
                    2b:5d:72:6e:a5:cc:ea:34:ad:91:a6:f7:3f:88:8b:
                    c4:89:ed:89:d3:49:b4:2c:fa:f6:f1:e7:db:65:53:
                    76:b2:a0:7b:c9:2b:84:f8:52:02:1d:2c:81:01:cc:
                    a7:7b:c1:de:47:7f:8d:b4:b2:da:65:1a:7b:9f:2c:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:58:83:6A:78:16:C0:A6:09:63:20:E1:FE:67:99:91:EE:5D:BF:F4
            X509v3 Authority Key Identifier:
                keyid:9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:24:b1:a8:73:9d:83:e3:b4:fe:5c:ef:69:13:92:1c:ef:7a:
         10:88:ba:cb:90:0f:e9:4d:ef:ce:12:4e:70:af:3d:11:1d:e8:
         d7:b7:f5:9e:c2:e9:ed:f6:e9:f1:16:1b:92:a1:08:43:07:64:
         18:ee:f9:1e:6a:01:40:7d:c4:55:bd:04:09:b8:81:59:28:ec:
         a9:b1:a3:4b:71:dc:1b:3c:88:73:df:45:1e:c2:90:d7:44:8f:
         57:3b:93:dc:59:75:a3:65:f8:f0:eb:ff:d3:23:8c:71:35:1e:
         98:17:38:17:c0:e1:fe:1e:2b:5d:72:a8:66:f7:8f:ad:27:8e:
         49:52:50:ec:0b:be:ab:6d:29:5e:d6:52:93:ec:a2:78:f4:35:
         8c:41:68:71:c2:a0:67:2b:b8:0b:c9:c5:61:96:8e:51:80:a6:
         d6:74:fc:46:27:56:b6:3f:83:03:79:ab:27:26:e7:bc:d0:13:
         4b:b2:45:1a:fd:00:d0:3a:5e:9e:03:86:2d:f6:44:6d:41:a3:
         2a:34:47:a1:99:23:1c:b7:70:14:e4:38:81:34:22:1c:80:e9:
         1d:f1:7e:83:45:ed:d6:7a:ba:ab:76:47:fc:7f:a7:5f:f6:17:
         06:df:fc:de:b5:7f:fa:a3:90:d4:2e:39:00:58:9a:09:c3:c4:
         8c:30:c9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:21:52 2026 by rpki-client