Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
File:                     F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json)
Hash identifier:          qcIegkBb5NCbpunjHeZD0UPBFrFk76Vh/uU0/wTqH8c=
Subject key identifier:   A1:45:00:68:32:15:39:EF:91:16:5F:F1:2E:3F:03:F5:99:E9:80:21
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       29F3E1CC35A8C3781532ED851514FCD06F59EC19
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
Manifest number:          04BE
Signing time:             Sun 20 Sep 2026 08:41:00 +0000
Manifest this update:     Sun 20 Sep 2026 08:36:00 +0000
Manifest next update:     Mon 21 Sep 2026 12:14:00 +0000
Files and hashes:         1: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: XP+jdPTnn2AtZm0+8LuLQL2i/JI62jdNFrBgFNPn7UM=)
                          2: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: ROsrwkR7nWLwQbpaSZWVWx6M1N5sHIdeiD5wZMPm00g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 11:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f3:e1:cc:35:a8:c3:78:15:32:ed:85:15:14:fc:d0:6f:59:ec:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Sep 20 08:36:00 2026 GMT
            Not After : Sep 21 12:14:00 2026 GMT
        Subject: CN=A1450068321539EF91165FF12E3F03F599E98021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:07:b4:dd:81:1c:c6:71:f8:29:24:77:42:
                    84:af:c8:06:d2:f3:36:3f:94:27:3b:5b:57:bb:05:
                    ef:04:d6:54:de:98:aa:16:03:bc:e1:3c:94:1a:a2:
                    44:3d:9d:5b:bd:b0:83:5c:3d:0a:b2:c5:f5:16:a0:
                    78:57:ea:cf:91:64:b8:0e:9b:37:95:d6:1b:73:5e:
                    9a:89:e0:11:66:2a:48:a9:e9:38:4c:2c:6d:ef:d8:
                    ef:05:16:4f:a9:6d:c3:5a:aa:f3:93:f3:a5:70:27:
                    b8:d2:7c:5f:ca:40:3f:8a:df:d2:bb:d5:61:18:77:
                    90:a2:e9:89:c1:7b:c9:13:48:e1:8e:9b:76:86:b7:
                    3a:42:61:45:08:0b:44:f5:71:05:db:05:2c:7b:1b:
                    93:17:33:8b:80:da:19:eb:30:01:7a:8c:33:57:50:
                    d7:8a:c2:f8:cb:a1:ac:56:e8:7e:1e:e0:e5:0a:57:
                    61:20:a3:58:3b:82:dc:a2:cd:12:0b:2d:d3:76:47:
                    c9:1e:ca:c5:77:8a:eb:9e:e7:59:74:e1:45:88:20:
                    8c:99:9c:57:d9:a5:15:e9:22:28:70:fa:c6:c2:f0:
                    62:f6:5a:43:c8:a0:e2:a4:f0:b7:24:a8:01:e9:77:
                    dc:4e:f8:b2:3e:3e:c6:42:1d:45:70:17:40:36:73:
                    97:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:45:00:68:32:15:39:EF:91:16:5F:F1:2E:3F:03:F5:99:E9:80:21
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:bc:20:ac:4c:a4:00:37:7e:30:dc:d7:8c:09:bd:17:74:8f:
         e5:56:b5:79:ef:2d:6e:81:05:6f:60:b5:93:92:0f:07:bc:2f:
         ed:44:d4:e7:8b:79:ff:19:97:8e:d2:cd:28:d8:a0:ce:ac:62:
         bd:92:1e:5b:37:a8:6a:a0:88:74:89:c2:c4:48:5a:a0:b3:a3:
         a1:ee:c1:27:19:8f:19:38:4f:38:82:c7:95:07:ca:7e:ca:20:
         cc:ba:71:d7:0f:db:85:e4:a6:7e:ec:df:0f:5d:d5:2f:99:93:
         86:2b:0a:f5:86:b6:d3:81:cd:e2:80:2a:d9:1e:92:88:26:4a:
         9a:13:bf:79:a3:01:ff:2e:39:7f:7d:c3:88:f5:4e:7a:8c:34:
         ea:58:7d:c7:60:b5:a4:db:5c:67:0f:ec:3a:f0:57:60:01:15:
         47:dc:21:6c:f2:f9:85:40:16:92:42:ae:13:15:38:06:97:e3:
         12:1f:d9:70:88:e7:9b:a4:a6:17:df:48:d4:8c:df:4f:7b:fa:
         9b:92:59:56:72:65:c5:71:7f:25:e2:85:ad:4a:e5:fc:f3:2d:
         97:c9:0e:d5:76:81:e2:4c:28:3b:68:58:41:1a:87:1b:31:1d:
         60:3b:d9:39:0e:d5:5e:fc:58:a6:d0:c4:bd:21:b7:10:a7:36:
         d5:84:84:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----