Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft
File:                     E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft (raw, json)
Hash identifier:          L3MxBMSkDl2q71iDxaYpv50oEi5J+CUyUieX6Tq6Osg=
Subject key identifier:   32:55:F3:5D:5C:A6:A7:24:03:64:01:7F:76:85:74:7C:DE:AB:EF:24
Authority key identifier: E1:45:6D:78:8F:E9:48:66:C9:FE:0B:87:75:8A:8A:B1:E2:21:E8:DB
Certificate issuer:       /CN=e1456d788fe94866c9fe0b87758a8ab1e221e8db
Certificate serial:       13C30F4161C1F9190305994099053398E7A60ED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UVteI_pSGbJ_guHdYqKseIh6Ns.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft
Manifest number:          9F
Signing time:             Sun 01 Mar 2026 22:04:47 +0000
Manifest this update:     Sun 01 Mar 2026 21:59:47 +0000
Manifest next update:     Tue 03 Mar 2026 00:17:47 +0000
Files and hashes:         1: AS210796.asa (hash: UUIMqt8ZmaK9oM2cGglTc+0B5+iNW+0belJbJzZMcCg=)
                          2: E1456D788FE94866C9FE0B87758A8AB1E221E8DB.crl (hash: Tva60rz/lWIBKdcE9+BBJAGepvpVUIZrdrn83VacThg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UVteI_pSGbJ_guHdYqKseIh6Ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c3:0f:41:61:c1:f9:19:03:05:99:40:99:05:33:98:e7:a6:0e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1456d788fe94866c9fe0b87758a8ab1e221e8db
        Validity
            Not Before: Mar  1 21:59:47 2026 GMT
            Not After : Mar  3 00:17:47 2026 GMT
        Subject: CN=3255F35D5CA6A7240364017F7685747CDEABEF24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d7:39:d6:6b:96:f6:a3:98:b7:e5:1c:94:45:
                    76:90:33:b5:f8:25:56:f7:d0:84:82:8d:01:22:22:
                    72:d7:de:31:47:da:34:c2:36:34:f4:0f:3d:30:39:
                    07:05:1f:c6:00:20:85:08:44:f6:3b:4c:2c:d6:11:
                    a6:8a:2c:f9:b7:e9:66:b5:1d:d6:af:4c:11:46:b0:
                    b2:fd:96:56:e1:fa:14:4a:1b:96:a0:c5:08:76:73:
                    82:e6:80:d1:9d:bd:c8:6d:13:56:ba:29:f3:76:b1:
                    dd:e8:37:cd:d3:b7:b0:10:bf:ef:9f:70:6f:66:3f:
                    98:d2:e5:e1:c2:07:68:08:8c:c4:c1:f0:2f:1a:fd:
                    c4:81:7e:fb:2c:f9:d3:ae:d7:9d:3a:cc:8f:92:34:
                    0c:37:42:29:08:9b:dc:ea:90:f5:cc:ff:db:e2:c3:
                    7c:07:2e:0c:93:5c:76:70:00:95:3c:1a:20:4d:3f:
                    ec:a9:ac:b7:5c:d2:6d:da:1c:99:dc:0c:fd:ba:05:
                    dd:c5:bf:2d:1f:f9:08:f7:2e:e5:a7:b2:0e:1c:61:
                    e2:f0:f3:aa:4a:ab:6f:b7:a4:e7:f5:63:4e:29:1e:
                    57:0e:f9:ad:d3:be:10:c8:f8:3c:51:b1:a9:5a:eb:
                    be:14:fb:dc:55:b5:1d:9a:0c:59:73:4f:eb:28:6a:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:55:F3:5D:5C:A6:A7:24:03:64:01:7F:76:85:74:7C:DE:AB:EF:24
            X509v3 Authority Key Identifier:
                keyid:E1:45:6D:78:8F:E9:48:66:C9:FE:0B:87:75:8A:8A:B1:E2:21:E8:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UVteI_pSGbJ_guHdYqKseIh6Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:22:c7:52:70:f2:aa:9a:a3:fb:c4:8f:0c:19:2d:2f:ef:
         a1:03:2c:64:5e:20:18:bd:1e:1b:ed:90:c0:78:6c:65:f0:cc:
         d1:4e:94:d5:d6:0e:c1:77:b1:4d:2d:ea:e0:b7:8e:fd:22:d5:
         02:7b:22:57:b8:e2:a5:82:de:c7:67:13:0c:90:7c:86:04:5d:
         42:02:45:4a:ce:38:3b:d7:dd:15:5a:71:54:28:f7:e7:67:60:
         e8:72:fd:5e:94:bc:3a:fc:69:ee:26:fa:72:87:b2:9c:e8:c6:
         b2:dc:eb:27:b2:30:d5:0b:d6:53:18:cd:3a:00:8a:0d:da:c8:
         ce:0b:09:66:63:77:77:7e:85:a6:d0:a6:f8:e6:fb:eb:4b:11:
         7f:55:9d:48:d0:ef:ae:7f:60:5d:7e:1b:6f:da:98:5c:2d:25:
         58:55:11:0f:77:70:6a:41:d2:74:20:fb:e4:c1:01:b0:a2:c9:
         24:31:7e:ba:0f:00:5a:88:da:59:eb:4d:c4:78:4d:11:c1:41:
         7e:21:a3:09:f6:06:f3:bb:13:1b:4e:fa:39:99:86:c9:78:90:
         53:fe:d1:7a:b2:ac:ff:ac:02:7e:95:f8:9d:8a:e5:6a:f5:5f:
         8e:18:af:93:af:52:eb:43:7b:02:9e:b4:57:c5:31:68:c8:ed:
         c3:f6:07:e8
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUE8MPQWHB+RkDBZlAmQUzmOemDtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTE0NTZkNzg4ZmU5NDg2NmM5ZmUwYjg3NzU4YThhYjFl
MjIxZThkYjAeFw0yNjAzMDEyMTU5NDdaFw0yNjAzMDMwMDE3NDdaMDMxMTAvBgNV
BAMTKDMyNTVGMzVENUNBNkE3MjQwMzY0MDE3Rjc2ODU3NDdDREVBQkVGMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz1znWa5b2o5i35RyURXaQM7X4
JVb30ISCjQEiInLX3jFH2jTCNjT0Dz0wOQcFH8YAIIUIRPY7TCzWEaaKLPm36Wa1
HdavTBFGsLL9llbh+hRKG5agxQh2c4LmgNGdvchtE1a6KfN2sd3oN83Tt7AQv++f
cG9mP5jS5eHCB2gIjMTB8C8a/cSBfvss+dOu1506zI+SNAw3QikIm9zqkPXM/9vi
w3wHLgyTXHZwAJU8GiBNP+yprLdc0m3aHJncDP26Bd3Fvy0f+Qj3LuWnsg4cYeLw
86pKq2+3pOf1Y04pHlcO+a3TvhDI+DxRsala674U+9xVtR2aDFlzT+soarv5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUMlXzXVympyQDZAF/doV0fN6r7yQwHwYDVR0j
BBgwFoAU4UVteI/pSGbJ/guHdYqKseIh6NswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy
MDQxLzAvRTE0NTZENzg4RkU5NDg2NkM5RkUwQjg3NzU4QThBQjFFMjIxRThEQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRVVnRlSV9wU0diSl9ndUhkWXFLc2VJ
aDZOcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iODg0NDMxOC0z
NWQ3LTQ4MmUtYmJkNS1iNjI0Y2YwYjIwNDEvMC9FMTQ1NkQ3ODhGRTk0ODY2QzlG
RTBCODc3NThBOEFCMUUyMjFFOERCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazIix1Jw8qqao/vEjwwZ
LS/voQMsZF4gGL0eG+2QwHhsZfDM0U6U1dYOwXexTS3q4LeO/SLVAnsiV7jipYLe
x2cTDJB8hgRdQgJFSs44O9fdFVpxVCj352dg6HL9XpS8Ovxp7ib6coeynOjGstzr
J7Iw1QvWUxjNOgCKDdrIzgsJZmN3d36FptCm+Ob760sRf1WdSNDvrn9gXX4bb9qY
XC0lWFURD3dwakHSdCD75MEBsKLJJDF+ug8AWojaWetNxHhNEcFBfiGjCfYG87sT
G076OZmGyXiQU/7RerKs/6wCfpX4nYrlavVfjhivk69S60N7Ap60V8UxaMjtw/YH
6A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:30 2026 by rpki-client