Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File:                     B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier:          azQmmdpwZm0PLmPrMw7qW4qcwV10dV2xI0FPWlzzDY4=
Subject key identifier:   37:C2:B3:58:8D:DD:B5:03:EA:FE:EF:2B:E8:27:6B:1F:77:AC:1A:9E
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer:       /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial:       10BFD9A471B18C531BC8E6B545BECBFFED458FB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number:          03B7
Signing time:             Mon 21 Sep 2026 17:28:48 +0000
Manifest this update:     Mon 21 Sep 2026 17:23:48 +0000
Manifest next update:     Tue 22 Sep 2026 20:44:48 +0000
Files and hashes:         1: AS215956.asa (hash: 09ikR/HMAWU31SyRogSTxn/jsC8mEMsW0D1qK+xqOTs=)
                          2: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: oFhM5z2dMPSaz1a/T8uidp2n2CQknDcaBJrFkM+sZzE=)
                          3: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: 36j2xsn00r7W1b+6ZfhyLbreLpWSsmIr79rmz3LWLAU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bf:d9:a4:71:b1:8c:53:1b:c8:e6:b5:45:be:cb:ff:ed:45:8f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
        Validity
            Not Before: Sep 21 17:23:48 2026 GMT
            Not After : Sep 22 20:44:48 2026 GMT
        Subject: CN=37C2B3588DDDB503EAFEEF2BE8276B1F77AC1A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2f:5f:4a:7d:a0:4d:77:9e:6d:9d:6c:cf:59:
                    81:8a:5c:80:04:94:c1:f8:93:f7:83:64:30:f3:36:
                    23:cc:24:93:4d:e6:6e:34:e8:7a:15:ac:74:5b:cb:
                    a3:08:17:d4:93:54:c3:cd:f9:75:c7:f1:51:29:ed:
                    1b:e4:4a:d2:80:4b:d0:b8:7d:40:c5:09:f7:21:60:
                    c7:a3:b1:dd:0b:27:0d:20:85:8d:7c:cb:eb:f0:74:
                    a7:66:27:d2:c0:ff:15:1c:e3:b8:6f:80:ce:5d:5d:
                    a6:36:12:e0:98:5e:c4:c3:fd:b0:b8:83:da:11:a2:
                    1e:02:2e:93:5a:b6:6b:10:79:96:21:63:a1:55:10:
                    42:6b:b0:3e:0b:53:e7:53:ad:80:f9:10:c2:81:18:
                    f9:d5:d7:09:0d:79:4f:11:01:70:d2:d8:8b:0e:b3:
                    02:06:f2:3e:16:65:54:69:ce:85:ce:c5:cf:96:f8:
                    d2:19:a9:18:e6:cc:54:12:10:6c:61:42:d5:4c:14:
                    a3:d5:2c:40:9d:41:ea:22:87:e1:9c:20:90:fc:bc:
                    24:2c:84:05:60:6d:b8:8b:03:b3:2d:7d:b0:bd:26:
                    36:73:14:59:00:f2:51:d0:04:ba:63:e7:89:b2:49:
                    10:42:44:69:86:ac:5d:46:33:1e:a4:4c:79:a3:7b:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C2:B3:58:8D:DD:B5:03:EA:FE:EF:2B:E8:27:6B:1F:77:AC:1A:9E
            X509v3 Authority Key Identifier:
                keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:01:1d:83:d7:b3:96:dc:7a:6c:4e:02:87:35:6e:11:c8:82:
         ba:8b:32:47:7d:08:8d:77:60:30:fa:6a:d2:b4:fc:4d:53:9d:
         40:f8:9f:ff:ca:9e:dd:21:08:6c:af:8a:b6:55:3c:a6:1a:a2:
         b8:40:3b:95:2b:54:88:4f:31:00:ba:bf:a7:a6:86:66:44:c7:
         cd:fe:60:ba:79:9b:b1:a0:d0:b6:6f:e7:26:ba:81:ae:54:c2:
         21:c7:ef:90:36:16:da:aa:13:6e:81:89:5e:8b:7f:92:95:fe:
         49:dc:55:55:c0:28:fe:e2:58:8f:07:f7:0c:ec:bc:69:c0:c3:
         7d:4d:57:87:8e:09:07:8c:10:38:52:04:8c:27:6d:cc:9b:31:
         30:e5:6f:f6:6f:90:c8:92:5f:46:2e:9a:77:a4:aa:ea:c1:28:
         05:04:fd:2d:c8:eb:fb:30:6c:5d:67:1b:43:50:41:65:4b:5f:
         9d:81:0d:42:d9:fa:43:b0:37:50:ba:6e:1e:7d:f0:3e:ca:9c:
         5c:16:f0:47:8e:1f:0e:f3:df:64:3d:ae:1e:b7:ae:55:d3:df:
         9a:8a:5d:21:97:4f:5e:78:8c:3e:0b:af:17:c1:5f:4d:dd:92:
         ee:82:ad:ff:be:67:77:3b:5a:bc:56:f7:f7:7e:85:2c:68:75:
         53:0d:1a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:12:13 2026 by rpki-client