Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
File:                     C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft (raw, json)
Hash identifier:          MlghaN5RMDK6weqfhD+NHqR/xyLg9Yiwo8M1IdnYpdo=
Subject key identifier:   FC:C4:C1:26:3F:56:33:3E:EC:C3:1D:00:BC:46:5F:E7:F1:F5:2C:1C
Authority key identifier: C0:9B:9B:6B:6B:65:AB:E2:9D:9F:08:6B:07:C6:DE:1F:1E:D8:CE:EB
Certificate issuer:       /CN=c09b9b6b6b65abe29d9f086b07c6de1f1ed8ceeb
Certificate serial:       6742249F422F9E942FADEE4BDAB238A39A5D5886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
Manifest number:          1E
Signing time:             Fri 25 Sep 2026 05:16:22 +0000
Manifest this update:     Fri 25 Sep 2026 05:11:22 +0000
Manifest next update:     Sat 26 Sep 2026 06:50:22 +0000
Files and hashes:         1: C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl (hash: PXrKxpRNyDEy3NpUFxVp1K0cZybCYJM7itXir0MhnyI=)
                          2: AS201398.asa (hash: RZO4ieNHqVPcfn3XDiP+r+hyFXWvPYLfC8/YrW201iY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:42:24:9f:42:2f:9e:94:2f:ad:ee:4b:da:b2:38:a3:9a:5d:58:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09b9b6b6b65abe29d9f086b07c6de1f1ed8ceeb
        Validity
            Not Before: Sep 25 05:11:22 2026 GMT
            Not After : Sep 26 06:50:22 2026 GMT
        Subject: CN=FCC4C1263F56333EECC31D00BC465FE7F1F52C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:8a:e2:1d:e8:d1:a9:45:0d:7e:9e:27:6a:
                    3d:b9:b0:2a:c1:60:9c:5b:f3:bf:73:c3:75:11:69:
                    16:36:09:a7:4b:7b:85:8d:1e:d7:6e:f8:ff:45:f7:
                    51:f9:9a:17:79:6f:a6:0e:13:b9:3b:e9:f8:fc:35:
                    28:1c:1f:ee:e3:03:80:8f:76:0e:c1:92:dc:52:3b:
                    21:9e:cb:df:d9:00:0a:3f:6f:d8:77:95:ed:e6:d6:
                    af:a0:f4:b2:11:46:b2:9b:f3:7e:ed:57:48:0d:be:
                    02:fc:06:21:ec:14:e2:62:47:1f:bd:5c:d9:c7:6c:
                    e6:48:fb:5a:47:7b:c2:59:dc:d4:2c:7a:71:c7:87:
                    5a:92:20:52:ed:3b:fd:aa:e6:e7:7a:58:2e:f5:e8:
                    18:e1:0a:ee:bf:cb:fe:4e:02:6c:dc:86:00:de:32:
                    cd:12:c9:d9:2e:29:28:fe:9f:fa:62:c8:89:14:52:
                    5d:58:70:e1:c2:34:da:00:00:44:6d:9f:33:bd:0f:
                    24:40:68:62:6f:58:a7:7d:f7:68:16:4f:bc:4f:c1:
                    69:11:70:43:69:26:dd:2b:a3:6e:ca:0e:6f:ee:8d:
                    d5:04:45:3e:cd:f8:8a:7a:3c:b8:a4:ae:40:d9:8e:
                    ab:b2:b4:7a:7a:ca:93:ac:c1:26:1f:bf:37:b1:f1:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C4:C1:26:3F:56:33:3E:EC:C3:1D:00:BC:46:5F:E7:F1:F5:2C:1C
            X509v3 Authority Key Identifier:
                keyid:C0:9B:9B:6B:6B:65:AB:E2:9D:9F:08:6B:07:C6:DE:1F:1E:D8:CE:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:10:d6:f2:9f:d5:e4:a7:b8:6f:05:50:71:16:15:b8:45:c1:
         34:83:d0:cd:3d:34:55:1a:16:a7:7a:55:d9:8b:19:58:59:18:
         21:2c:33:60:49:41:f0:77:48:4f:ee:fd:b0:61:c0:a5:13:18:
         8c:c6:c9:44:30:bc:ce:de:14:1d:9c:f9:2b:d0:7b:9f:f0:77:
         0b:94:aa:16:ac:49:9f:fd:82:8d:82:fd:6a:a7:d7:b1:8d:fe:
         3b:04:21:fc:bd:4d:ae:4a:36:8c:1a:84:b4:3c:4d:bd:ea:3b:
         01:e2:be:66:17:5a:bb:66:f6:66:82:9e:05:27:f1:e2:66:7a:
         6f:cf:0e:ee:94:20:e9:71:83:3a:f5:42:3e:17:1a:84:50:e1:
         80:81:0a:16:d7:cf:e2:03:64:7e:c2:46:f7:d1:e1:33:ea:31:
         9d:6e:b7:a6:08:65:14:bb:30:4b:e8:fb:46:4f:f3:dd:0a:ad:
         b0:26:51:48:1e:25:a1:fd:05:e2:af:81:5b:bd:88:75:26:cc:
         9f:7a:bc:75:c0:ab:cc:b8:f0:66:be:ba:67:af:5e:b0:f8:fb:
         48:c5:ab:37:53:68:73:49:d9:de:f9:ba:0e:e6:b4:9b:7b:4c:
         90:6a:b5:ea:83:ec:75:a8:95:c9:6c:a1:d7:9c:73:a3:b6:57:
         43:eb:1b:a5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUZ0Ikn0IvnpQvre5L2rI4o5pdWIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzA5YjliNmI2YjY1YWJlMjlkOWYwODZiMDdjNmRlMWYx
ZWQ4Y2VlYjAeFw0yNjA5MjUwNTExMjJaFw0yNjA5MjYwNjUwMjJaMDMxMTAvBgNV
BAMTKEZDQzRDMTI2M0Y1NjMzM0VFQ0MzMUQwMEJDNDY1RkU3RjFGNTJDMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQYriHejRqUUNfp4naj25sCrB
YJxb879zw3URaRY2CadLe4WNHtdu+P9F91H5mhd5b6YOE7k76fj8NSgcH+7jA4CP
dg7BktxSOyGey9/ZAAo/b9h3le3m1q+g9LIRRrKb837tV0gNvgL8BiHsFOJiRx+9
XNnHbOZI+1pHe8JZ3NQsenHHh1qSIFLtO/2q5ud6WC716BjhCu6/y/5OAmzchgDe
Ms0SydkuKSj+n/piyIkUUl1YcOHCNNoAAERtnzO9DyRAaGJvWKd992gWT7xPwWkR
cENpJt0ro27KDm/ujdUERT7N+Ip6PLikrkDZjquytHp6ypOswSYfvzex8aZ/AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU/MTBJj9WMz7swx0AvEZf5/H1LBwwHwYDVR0j
BBgwFoAUwJuba2tlq+KdnwhrB8beHx7YzuswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmNmZDlhMmMtODdmMS00OGE5LWI2ZWEtMjhhZDA5N2I3
NWQzLzMvQzA5QjlCNkI2QjY1QUJFMjlEOUYwODZCMDdDNkRFMUYxRUQ4Q0VFQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dKdWJhMnRscS1LZG53aHJCOGJlSHg3
WXp1cy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82Y2ZkOWEyYy04
N2YxLTQ4YTktYjZlYS0yOGFkMDk3Yjc1ZDMvMy9DMDlCOUI2QjZCNjVBQkUyOUQ5
RjA4NkIwN0M2REUxRjFFRDhDRUVCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihDW8p/V5Ke4bwVQcRYV
uEXBNIPQzT00VRoWp3pV2YsZWFkYISwzYElB8HdIT+79sGHApRMYjMbJRDC8zt4U
HZz5K9B7n/B3C5SqFqxJn/2CjYL9aqfXsY3+OwQh/L1Nrko2jBqEtDxNveo7AeK+
Zhdau2b2ZoKeBSfx4mZ6b88O7pQg6XGDOvVCPhcahFDhgIEKFtfP4gNkfsJG99Hh
M+oxnW63pghlFLswS+j7Rk/z3QqtsCZRSB4lof0F4q+BW72IdSbMn3q8dcCrzLjw
Zr66Z69esPj7SMWrN1Noc0nZ3vm6Dua0m3tMkGq16oPsdaiVyWyh15xzo7ZXQ+sb
pQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:03:09 2026 by rpki-client