Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft
File:                     E9AE8529E9A69A4FA376F17695E6EB8731823068.mft (raw, json)
Hash identifier:          ifqMS+q0+wwJxnzO1gadM4g/EY9FbazwPz8h/m7ARC8=
Subject key identifier:   FA:D9:8A:9A:AB:61:B1:AB:71:FD:67:DA:E5:21:90:D3:12:D3:25:2B
Authority key identifier: E9:AE:85:29:E9:A6:9A:4F:A3:76:F1:76:95:E6:EB:87:31:82:30:68
Certificate issuer:       /CN=E9AE8529E9A69A4FA376F17695E6EB8731823068
Certificate serial:       2E7F08ED6A59E522CF7B958B4F8348F13DC604E5
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft
Manifest number:          44
Signing time:             Thu 26 Mar 2026 08:07:26 +0000
Manifest this update:     Thu 26 Mar 2026 08:02:26 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:26 +0000
Files and hashes:         1: E9AE8529E9A69A4FA376F17695E6EB8731823068.crl (hash: FVdNbvxJUzDTlWSToaJi3GLSlvCvXhaC+vKCjAlg4ak=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7f:08:ed:6a:59:e5:22:cf:7b:95:8b:4f:83:48:f1:3d:c6:04:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AE8529E9A69A4FA376F17695E6EB8731823068
        Validity
            Not Before: Mar 26 08:02:26 2026 GMT
            Not After : Mar 27 09:01:26 2026 GMT
        Subject: CN=FAD98A9AAB61B1AB71FD67DAE52190D312D3252B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:5b:c2:39:a5:b1:7c:cf:fe:60:45:68:58:
                    e2:c9:8d:c2:3a:c6:1b:92:aa:bb:04:f8:da:3e:b0:
                    15:4a:a9:90:c7:8e:54:a2:51:82:d3:4e:93:ed:4a:
                    31:01:74:7f:30:22:93:ad:a9:73:eb:79:79:ac:cd:
                    f9:cf:93:fc:96:48:84:e5:75:49:dd:b6:db:0e:83:
                    7f:10:dd:b5:ef:28:c5:bd:17:04:64:df:6f:02:6b:
                    e7:13:85:8b:70:a8:e1:51:d8:e3:90:90:d9:1c:55:
                    55:3d:54:52:57:e6:1d:8b:72:0e:16:44:5b:71:13:
                    c8:bc:47:3a:e2:1b:9d:6f:44:c9:f2:0f:56:a7:af:
                    50:28:e5:7f:8f:88:36:86:0b:37:5b:3c:35:17:1f:
                    73:c1:c4:45:4b:7c:07:8a:bc:08:e4:85:bc:a3:9e:
                    1a:4a:6a:52:a7:0a:f2:0c:6e:5c:a5:71:83:ff:1f:
                    de:e6:0d:90:01:34:f6:dc:5c:c5:72:c5:e5:90:f1:
                    25:a9:2f:c3:41:7f:e1:27:82:87:19:5b:d9:18:53:
                    72:65:ff:19:00:e2:9c:26:ea:36:53:0c:70:55:40:
                    cf:41:4b:25:63:8c:86:47:ca:c9:78:7f:2e:d7:24:
                    a4:d4:8c:2a:22:c4:d9:cb:af:f1:42:1a:1b:d2:85:
                    b0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D9:8A:9A:AB:61:B1:AB:71:FD:67:DA:E5:21:90:D3:12:D3:25:2B
            X509v3 Authority Key Identifier:
                keyid:E9:AE:85:29:E9:A6:9A:4F:A3:76:F1:76:95:E6:EB:87:31:82:30:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:34:38:58:cd:ae:61:14:f3:55:63:f4:ca:c8:89:be:d5:a7:
         af:99:1e:3c:8e:14:78:a3:3a:01:59:03:f0:25:3e:72:fb:d3:
         ac:d7:ba:98:fe:e7:b8:e1:d2:d6:6b:46:3b:14:9a:3d:8b:31:
         bb:1a:90:14:11:3e:ad:cb:88:15:a3:20:7f:7f:f1:47:9b:40:
         7c:d7:95:4a:52:28:13:cd:c1:de:ab:64:78:f4:66:d4:1e:55:
         45:8e:66:81:ed:5e:5f:7b:ee:01:65:2c:6c:f8:ac:5b:14:b5:
         b4:9f:dd:8f:46:9c:99:01:68:bd:8d:fc:46:9b:73:3a:df:59:
         22:f6:a9:7a:f4:5f:f3:59:bc:0a:6e:3e:55:48:99:d9:b0:21:
         dc:a6:d7:63:be:a4:be:e3:27:fc:5b:93:6c:a2:40:1e:92:dd:
         6f:fa:ef:49:22:45:bc:21:0f:7c:00:76:fa:2a:80:4a:66:62:
         e1:9e:56:51:21:ae:14:b7:eb:be:d7:04:b8:12:b5:fe:82:ee:
         8a:a2:d2:5b:9d:65:19:bc:d8:3c:27:85:a0:52:b4:ae:d5:5a:
         04:f9:ab:97:39:85:76:0a:9d:f7:d2:36:8a:ca:e0:d6:ee:15:
         2a:0e:54:e6:8f:1f:7e:64:e1:ce:f8:17:b7:c2:31:5b:cb:c7:
         d7:2f:0b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:40 2026 by rpki-client