Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File:                     7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier:          l3eYSCubjkrckay0HQUUa6tRwICa+d45pxLXGndjO+M=
Subject key identifier:   F7:48:1A:BC:66:39:3C:66:ED:18:86:6D:51:30:8A:A2:C3:75:07:25
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       060C422382B68919074AB510FD9E17A75EB2B8FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number:          040D
Signing time:             Tue 22 Sep 2026 04:43:45 +0000
Manifest this update:     Tue 22 Sep 2026 04:38:45 +0000
Manifest next update:     Wed 23 Sep 2026 07:32:45 +0000
Files and hashes:         1: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: b2vhhMsbpz6oeagswWsuKQraNLWQc2iPtP4i8Y5EykU=)
                          2: AS215849.asa (hash: QZI6Yvoi4hUBSRXS5p8Ju6CY1eYmF0fNOYB66ntflGk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0c:42:23:82:b6:89:19:07:4a:b5:10:fd:9e:17:a7:5e:b2:b8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Sep 22 04:38:45 2026 GMT
            Not After : Sep 23 07:32:45 2026 GMT
        Subject: CN=F7481ABC66393C66ED18866D51308AA2C3750725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:58:b8:4a:a1:ec:8a:de:31:da:39:ba:9a:4f:
                    5f:81:84:08:80:67:7e:dc:97:62:9c:31:26:98:15:
                    32:dd:7e:d7:ff:a0:16:3a:0e:41:80:bd:18:40:f5:
                    00:f1:a5:03:cb:00:ff:dd:3a:e7:21:d6:e6:0e:e7:
                    81:2d:82:03:38:0d:2e:cc:4b:10:a1:3d:3c:8b:a9:
                    72:a7:04:2e:ee:31:79:8a:47:67:0d:a9:14:fa:ed:
                    c4:18:05:78:e8:ed:92:0e:da:57:85:d0:60:9c:61:
                    30:0f:35:05:9d:80:10:22:37:6d:c4:36:2e:0c:ee:
                    91:22:e8:d5:51:75:fe:e4:7f:01:cb:dc:ff:da:83:
                    e0:c1:11:7c:64:28:6d:6e:77:74:29:b3:e8:27:88:
                    f1:f9:09:d3:df:4e:2f:da:7a:c2:67:03:33:8c:7c:
                    9b:aa:72:8e:25:71:18:02:e0:d3:55:0e:81:24:29:
                    70:e7:97:6f:5a:85:b5:2c:cf:2f:59:3e:6b:94:a6:
                    f6:fa:b3:cb:2b:c7:f4:69:3b:bd:06:91:df:87:7c:
                    dc:bf:d0:e2:2e:95:ea:a2:6b:d7:cd:0c:12:c9:7e:
                    0a:7d:dd:42:46:b3:1d:36:68:9a:95:dd:42:0b:5a:
                    19:98:14:e9:c0:1e:c5:b5:85:2c:dc:f6:b0:a9:e7:
                    e3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:48:1A:BC:66:39:3C:66:ED:18:86:6D:51:30:8A:A2:C3:75:07:25
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:46:a6:81:11:d1:06:aa:d8:a9:fc:f7:d7:7a:23:6c:81:c1:
         0a:1a:70:b6:72:ad:8a:fe:0a:e2:72:f8:9a:35:42:2d:1b:8c:
         2a:6d:16:51:ea:73:b2:69:b6:06:c9:80:19:65:73:f7:15:ac:
         23:9a:2a:3c:5c:f2:20:a0:6b:9b:bd:75:d5:7e:36:79:37:92:
         2b:0e:ca:1f:05:86:83:8f:c0:a8:3e:3b:5a:cb:2b:a7:36:ee:
         b6:d0:7a:a4:c2:0e:b2:c9:39:3e:a6:54:96:64:8f:27:22:ad:
         d8:80:a9:09:e4:cf:9c:cb:a1:d3:85:a4:55:e2:52:ac:71:08:
         b2:58:c9:bd:e6:8f:46:36:39:fa:ba:4f:9d:72:f3:84:09:3c:
         b2:0c:8c:13:9d:4b:61:76:2b:0b:1b:0b:ab:eb:ea:79:25:ad:
         c1:89:77:36:4b:01:2f:e5:9d:2f:35:ec:96:17:0d:41:70:25:
         62:16:f7:54:cb:27:84:5f:b5:20:f6:03:7b:43:81:ee:ae:c0:
         cd:18:fd:96:99:c4:76:5d:d1:bf:ae:8a:95:9c:20:88:42:ea:
         49:fa:b7:76:5b:68:d9:e3:f1:da:bb:03:a9:6e:20:f8:7a:6e:
         2a:4f:df:c5:ec:08:9f:8d:a2:23:f2:67:96:ed:63:98:61:a3:
         bb:87:39:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:09:51 2026 by rpki-client