Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File:                     7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier:          SPAOlTPounji9M7+Nstqs6GfelMw/0SsbxR7/fg7Qj4=
Subject key identifier:   9C:FB:E1:95:FA:D6:C2:2F:39:3C:CC:24:5A:EA:54:F4:B1:42:AF:7B
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       55F7D9D607DAF1168CCACCBAAB129E4473BCFE11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number:          037D
Signing time:             Sat 13 Jun 2026 02:58:48 +0000
Manifest this update:     Sat 13 Jun 2026 02:53:48 +0000
Manifest next update:     Sun 14 Jun 2026 06:32:48 +0000
Files and hashes:         1: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: 0LKEHE172DcMsZvUdCaHcbloGGg/+xYGYrfPBjwYsCk=)
                          2: AS215849.asa (hash: zDqRf1CmpsA1KFLVwsUM6m+4OIs88BLCSJXXlOwSvmc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f7:d9:d6:07:da:f1:16:8c:ca:cc:ba:ab:12:9e:44:73:bc:fe:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Jun 13 02:53:48 2026 GMT
            Not After : Jun 14 06:32:48 2026 GMT
        Subject: CN=9CFBE195FAD6C22F393CCC245AEA54F4B142AF7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:99:d7:dd:23:db:ac:46:d4:c8:f9:15:36:
                    8d:79:03:51:07:1a:ee:61:3f:4e:d3:b5:9d:03:22:
                    fc:bc:83:71:5c:b6:48:5d:9a:05:96:49:e1:00:b2:
                    cd:7e:a2:30:92:40:e8:43:8b:67:55:63:81:66:b5:
                    5e:82:57:b4:7b:20:40:9d:af:5a:7f:7f:fc:95:14:
                    42:b2:d2:35:0f:e3:8c:8d:3a:ac:80:c0:ea:a5:26:
                    97:89:18:55:f0:6c:f5:30:f7:90:5b:b3:f9:6b:ef:
                    e1:48:13:ca:7c:9d:b6:85:13:5b:e7:6d:ee:f1:85:
                    a3:ed:be:28:76:ee:fb:84:10:84:dc:32:69:1f:25:
                    ac:d6:1f:84:f6:09:8a:8b:6a:55:c8:6a:85:de:8d:
                    e9:cf:ea:26:2b:78:02:07:73:9f:0e:75:dc:6b:0c:
                    55:6a:91:df:f8:d8:50:22:dd:8d:70:96:ab:dd:34:
                    ec:c8:80:a0:a8:46:ca:c9:df:26:67:32:5d:93:5f:
                    be:95:92:2b:0a:82:6a:ad:9c:c3:b9:20:b2:cd:36:
                    f5:0c:58:b0:aa:9e:2f:b5:7f:46:71:e7:85:36:a3:
                    ac:89:d8:15:88:a1:88:69:a0:60:66:a7:85:4d:9a:
                    b5:e3:9c:81:99:24:92:d8:35:ae:84:b6:f2:64:1e:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FB:E1:95:FA:D6:C2:2F:39:3C:CC:24:5A:EA:54:F4:B1:42:AF:7B
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e7:7d:32:90:73:3a:f1:ee:c7:51:92:68:ef:42:c4:ea:a8:
         fa:73:0a:24:1b:e9:91:8d:ae:40:46:d6:82:7e:92:ab:d8:06:
         bd:67:75:88:41:78:e8:8a:1d:c5:cc:ea:05:12:de:3d:7c:bd:
         1f:f0:83:43:d7:e8:e3:dc:10:c5:7c:fb:3f:8b:58:b8:30:4d:
         ff:c1:41:49:b1:83:e5:39:81:c4:8a:78:7c:00:aa:15:04:65:
         aa:fb:a7:c8:07:81:43:aa:13:85:90:c3:f6:67:0f:9f:ec:f0:
         e3:c8:be:a2:13:5f:a2:97:a2:3f:ef:1c:35:e7:fb:93:a2:e8:
         69:c2:9c:61:e8:e4:33:f3:75:cf:ef:a7:e0:83:6b:ba:3e:d8:
         38:f6:cf:7f:22:bf:0a:e4:9b:c4:49:88:7d:89:20:4e:12:90:
         d8:cb:b5:c7:a3:4f:42:ec:16:2e:3d:2e:a5:eb:1b:96:96:75:
         9c:d4:2f:db:f4:1c:d9:4e:c8:85:bf:81:32:40:0a:e5:ca:b4:
         42:55:60:19:20:12:c9:48:20:71:69:2f:9b:6b:8b:19:ea:3e:
         d6:05:c9:16:50:c6:0f:a5:37:7c:16:22:df:a2:0c:cf:7a:7d:
         cc:c5:94:83:54:e6:0d:ef:5e:9e:28:96:4b:fb:8b:39:5f:71:
         a6:fb:84:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:36:46 2026 by rpki-client