Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/378e5eb0-c019-4ff5-b260-4e1638121055/0/E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.mft
File:                     E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.mft (raw, json)
Hash identifier:          BCmsZZVLtxVe+vnp8BWGN7qL4+/dzLAGjaCsaErdWBc=
Subject key identifier:   0F:54:74:83:4E:19:D4:69:49:BA:91:6D:B1:C1:C4:ED:CE:DA:A8:9E
Authority key identifier: E9:B7:59:12:FC:A7:89:B8:6C:CE:A3:B1:E0:9F:1B:5B:FA:84:B5:03
Certificate issuer:       /CN=e9b75912fca789b86ccea3b1e09f1b5bfa84b503
Certificate serial:       373F18131728B66667D19E797EEFCF8012D5E3DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bdZEvynibhszqOx4J8bW_qEtQM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/378e5eb0-c019-4ff5-b260-4e1638121055/0/E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.mft
Manifest number:          27
Signing time:             Wed 23 Sep 2026 18:45:22 +0000
Manifest this update:     Wed 23 Sep 2026 18:40:22 +0000
Manifest next update:     Thu 24 Sep 2026 18:45:22 +0000
Files and hashes:         1: E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.crl (hash: hiDdK1HGA11tKjYHEXAYjb1r+vEp1bdpi5f4l/o8ftw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/378e5eb0-c019-4ff5-b260-4e1638121055/0/E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/378e5eb0-c019-4ff5-b260-4e1638121055/0/E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bdZEvynibhszqOx4J8bW_qEtQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3f:18:13:17:28:b6:66:67:d1:9e:79:7e:ef:cf:80:12:d5:e3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b75912fca789b86ccea3b1e09f1b5bfa84b503
        Validity
            Not Before: Sep 23 18:40:22 2026 GMT
            Not After : Sep 24 18:45:22 2026 GMT
        Subject: CN=0F5474834E19D46949BA916DB1C1C4EDCEDAA89E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:9a:3f:db:07:72:fd:99:37:9b:96:31:87:
                    49:e2:27:29:b8:02:85:7c:02:b7:85:37:dd:8a:86:
                    f1:44:f7:e2:c3:f1:c6:a6:c4:9c:aa:0a:1e:25:e2:
                    f0:20:d5:85:ac:9e:55:7a:bf:7c:03:fb:b4:f7:88:
                    e0:55:c2:e1:b3:d2:2b:78:36:44:3c:0a:92:55:37:
                    47:59:b4:dd:a3:bd:80:3f:88:79:d6:fe:60:dc:05:
                    25:6f:0f:07:a4:12:29:d7:9c:d6:96:06:fa:d8:3b:
                    3e:7a:ff:4e:14:15:47:b8:60:40:07:85:3c:ec:aa:
                    e4:50:d9:73:21:af:48:77:5c:a3:3e:f8:8c:00:ba:
                    2e:06:78:0d:f4:24:87:11:0e:2d:2a:b3:4c:86:2a:
                    06:f2:f9:88:93:51:03:3a:fc:b4:8e:00:83:2e:a2:
                    1f:c7:16:81:06:08:2b:df:ff:69:ed:22:05:ca:b0:
                    54:df:1f:cb:bc:b4:f0:c0:f5:ce:87:ae:1c:b0:d1:
                    48:c3:74:f6:3a:d3:3b:8c:ef:7e:4a:b1:5b:ef:cd:
                    9c:ce:63:83:18:aa:75:c1:5d:d1:c4:66:dd:5b:63:
                    dd:3d:c0:e0:88:65:d1:87:47:52:1c:cf:88:20:db:
                    f4:dd:c7:29:98:6b:dc:db:fa:9c:1b:e1:ad:95:a0:
                    bc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:54:74:83:4E:19:D4:69:49:BA:91:6D:B1:C1:C4:ED:CE:DA:A8:9E
            X509v3 Authority Key Identifier:
                keyid:E9:B7:59:12:FC:A7:89:B8:6C:CE:A3:B1:E0:9F:1B:5B:FA:84:B5:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/378e5eb0-c019-4ff5-b260-4e1638121055/0/E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bdZEvynibhszqOx4J8bW_qEtQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/378e5eb0-c019-4ff5-b260-4e1638121055/0/E9B75912FCA789B86CCEA3B1E09F1B5BFA84B503.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:97:ad:14:07:ef:71:5f:a9:e9:ce:1f:72:ee:81:d4:de:ec:
         ea:04:bd:f8:db:89:ae:2c:07:99:af:35:0d:0f:14:0b:86:50:
         c1:ea:6d:2f:3b:f1:c6:30:73:d5:1b:6a:5b:54:73:ff:dc:a0:
         ac:64:3c:01:c0:ce:f7:36:eb:0c:c9:b3:d9:10:f3:8f:2b:7b:
         76:28:28:50:ed:64:5d:3a:c4:58:e5:72:5b:68:f8:f0:b4:df:
         c1:d9:d0:b3:ad:c8:e4:9b:58:be:af:79:61:16:69:26:8f:04:
         85:92:d4:3e:d2:df:52:24:ef:54:03:49:77:85:89:34:50:f2:
         a5:d3:81:14:d6:19:61:ea:70:06:b7:bc:31:fe:a3:8e:be:30:
         76:0a:34:80:19:98:65:ba:9f:0f:7f:25:b1:b8:b8:19:b7:48:
         6e:e1:7a:89:9c:63:39:79:d4:e9:bd:75:44:00:97:09:f7:10:
         df:f0:18:ca:5b:3d:d1:31:55:2e:b2:30:78:5c:18:9a:cf:e4:
         d8:68:91:43:6f:cd:e7:e9:57:8a:5c:20:fa:58:ca:12:2b:2e:
         a9:ba:90:51:e5:bb:0e:47:64:40:32:78:f0:66:17:b6:d5:a8:
         7a:c1:77:dc:68:5c:60:7c:96:3d:26:9d:3c:53:e3:cb:f9:30:
         de:6a:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:58:57 2026 by rpki-client