Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File:                     B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier:          03xmYmRTCogweRQThjz39jZNANwVEscq1aqYHb5mTyc=
Subject key identifier:   05:96:E8:A8:7D:E5:ED:28:A3:68:CB:22:5A:FC:F1:F2:0E:1B:77:7A
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer:       /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial:       279BC40B27B5B48F9A38F3348D8FBE448A69D922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number:          0400
Signing time:             Sun 15 Nov 2026 15:56:58 +0000
Manifest this update:     Sun 15 Nov 2026 15:51:58 +0000
Manifest next update:     Mon 16 Nov 2026 15:58:58 +0000
Files and hashes:         1: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: YWlBvpM42/1j/rljowUHQaJF6NjuvnuTtS33zfNfVVc=)
                          2: AS215956.asa (hash: 09ikR/HMAWU31SyRogSTxn/jsC8mEMsW0D1qK+xqOTs=)
                          3: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: 36j2xsn00r7W1b+6ZfhyLbreLpWSsmIr79rmz3LWLAU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9b:c4:0b:27:b5:b4:8f:9a:38:f3:34:8d:8f:be:44:8a:69:d9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
        Validity
            Not Before: Nov 15 15:51:58 2026 GMT
            Not After : Nov 16 15:58:58 2026 GMT
        Subject: CN=0596E8A87DE5ED28A368CB225AFCF1F20E1B777A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:b2:61:7b:41:82:ef:33:56:4a:a7:fd:52:
                    6a:c6:42:57:16:89:fb:a2:c8:6a:d8:28:c9:ad:1d:
                    44:11:59:63:67:6f:b6:92:c6:3e:92:1a:52:54:21:
                    c3:ac:dc:15:14:ce:bc:03:e0:70:66:c3:5b:d7:ce:
                    a5:fd:7f:ad:d3:df:ac:04:8b:d4:36:a5:4a:cc:da:
                    d0:3c:72:1c:65:d5:72:34:0d:18:54:a8:ea:51:91:
                    1f:38:4a:87:61:8e:4e:ce:11:a7:72:f1:05:b2:dc:
                    58:a0:85:3f:2c:31:00:bb:93:7e:c6:76:4e:27:cc:
                    08:27:d5:c5:da:16:b2:4a:7f:6c:96:cc:24:7c:c4:
                    d9:59:37:76:1d:f6:95:d7:c6:a1:b1:92:e9:d6:bc:
                    dc:26:7c:74:d5:86:30:d2:20:01:3e:94:3e:fa:ec:
                    4b:ef:9e:b9:6b:f1:59:50:b8:3c:8e:77:cc:f7:92:
                    60:59:c6:0a:b8:77:56:70:da:f4:c5:84:06:09:b0:
                    c0:29:27:8f:57:fe:f3:59:0e:65:1d:66:0e:4e:e8:
                    d9:28:d5:a0:0d:9f:80:9a:60:54:d1:7f:68:cc:07:
                    db:d5:9a:9a:54:d6:5e:1f:1e:85:47:96:e2:26:40:
                    6a:a8:01:63:e0:49:c8:18:d2:22:87:85:cb:09:23:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:96:E8:A8:7D:E5:ED:28:A3:68:CB:22:5A:FC:F1:F2:0E:1B:77:7A
            X509v3 Authority Key Identifier:
                keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c3:ba:14:bc:b1:8f:fb:9b:27:90:ce:48:2a:c8:1d:50:23:
         82:f3:cd:20:73:fc:c8:8d:d2:a4:3a:b7:54:b2:27:f4:b8:b3:
         df:9d:55:a4:dc:7a:73:79:9a:b4:91:a4:40:59:0d:ba:9a:52:
         df:8c:98:23:3e:45:a1:3e:67:f1:bf:a8:ca:48:f9:51:6f:f2:
         f4:74:4e:74:43:d9:d4:47:a6:6a:eb:86:62:cf:a6:05:18:da:
         39:24:de:81:d5:92:cd:a2:ae:3b:98:80:af:d5:6c:d0:ea:47:
         69:d4:9f:e5:57:0b:7d:38:a0:99:9d:67:4c:5f:e4:fa:be:27:
         12:39:05:e6:b8:82:b9:ee:af:a4:52:bd:f9:7b:b0:9a:6a:54:
         13:6e:3d:8d:f9:42:14:9a:80:ae:e2:52:83:b8:67:c8:0b:3b:
         c6:9d:02:1d:75:47:45:f5:26:ea:dd:0e:89:ea:dc:e4:dd:3d:
         26:f5:64:e2:f8:a9:b6:f5:27:c6:87:59:bc:c0:27:aa:79:a6:
         c8:00:ec:8a:8c:43:df:dc:fb:50:f2:0e:79:54:5b:06:e7:5b:
         69:55:3b:98:d3:1e:34:6a:06:ee:75:e2:77:f8:84:c8:0b:ac:
         a5:5f:27:db:47:a2:e8:46:b3:aa:96:74:40:9b:35:ee:17:aa:
         4b:da:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:49 2026 by rpki-client