Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File:                     9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier:          vyqF+961ttNz9Us9R7HFwnC6N9niVE7eDsab12Mmagw=
Subject key identifier:   ED:8B:CB:F1:DF:8E:F5:99:C6:F7:EF:D6:0E:4F:7E:9B:8D:55:91:8D
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer:       /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial:       448BEE6315B4B0915FB7850498626B55513D60C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number:          2D
Signing time:             Sat 23 Aug 2025 04:23:03 +0000
Manifest this update:     Sat 23 Aug 2025 04:18:03 +0000
Manifest next update:     Sun 24 Aug 2025 07:56:03 +0000
Files and hashes:         1: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: E7Uv8jpJDxzdkVzhHRCwZi7Xw5Z9CeLVXwpRpryThps=)
                          2: AS214809.asa (hash: 3MqiLlZEY04ox4OToYgrbXmsSXFbDBylCL3MaP3vqh0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8b:ee:63:15:b4:b0:91:5f:b7:85:04:98:62:6b:55:51:3d:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
        Validity
            Not Before: Aug 23 04:18:03 2025 GMT
            Not After : Aug 24 07:56:03 2025 GMT
        Subject: CN=ED8BCBF1DF8EF599C6F7EFD60E4F7E9B8D55918D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:65:bd:64:dc:84:69:10:17:2c:b2:e5:d0:bf:
                    5d:1e:31:99:1c:4c:f9:53:1f:dd:f1:a7:00:44:3c:
                    a7:d9:13:0b:e0:15:c6:0d:ef:47:04:99:ac:5d:8d:
                    a6:fe:4d:a7:e0:08:0b:51:1d:a0:2b:2b:e9:79:90:
                    15:cf:64:3d:41:a7:5c:20:95:b1:20:d4:34:33:7a:
                    84:d0:af:b9:e2:97:cc:a6:70:e1:6f:a0:23:b3:28:
                    e0:21:02:ae:59:a5:f4:9f:08:99:49:4d:dd:61:22:
                    91:b3:1b:ef:84:87:03:cc:75:b1:35:d2:25:d6:73:
                    c8:c8:8e:9f:b1:37:1f:ce:3d:b2:a7:b0:0f:2c:d3:
                    2b:01:1b:df:bc:08:99:e1:f6:f2:59:5f:19:c6:e8:
                    5e:07:cb:3f:68:12:c1:14:a4:ac:cd:df:5f:0e:d0:
                    23:08:9e:c6:c8:a3:e1:45:6e:6d:e1:15:68:4d:d4:
                    49:d7:29:45:18:86:26:54:c8:6c:c8:45:f5:a5:89:
                    48:40:d3:c8:13:c2:69:d7:43:4c:51:3c:e3:d2:6d:
                    e9:59:b7:25:47:6d:db:fc:81:89:ca:a7:37:75:1b:
                    1d:0a:b7:1f:c3:ca:27:e7:c4:61:67:9e:2a:85:b0:
                    1b:0a:eb:0d:dd:da:27:d7:6b:2b:72:99:ad:f3:d1:
                    d9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8B:CB:F1:DF:8E:F5:99:C6:F7:EF:D6:0E:4F:7E:9B:8D:55:91:8D
            X509v3 Authority Key Identifier:
                keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:af:b9:51:27:45:0c:51:e9:99:9b:28:d6:7e:13:3c:20:50:
         2e:1f:cf:59:d9:75:94:07:b8:91:de:f6:c1:15:d7:0f:10:a1:
         40:b5:8f:44:7f:bb:09:3d:8b:e8:16:a8:07:df:6c:b3:00:3d:
         e7:1a:39:15:dc:52:31:62:93:54:32:12:a8:b9:08:7e:44:f1:
         71:59:7d:75:4c:84:b1:7d:9e:47:88:a7:73:b9:14:ab:e7:cb:
         d4:60:ac:fa:0b:b6:9d:86:ec:67:35:e4:a3:1d:b2:22:9b:d1:
         19:00:e1:f7:e3:49:63:ff:35:e4:50:e5:17:50:d1:6d:90:d7:
         b6:66:04:8d:69:47:22:4e:32:9a:08:77:f6:e2:68:7c:fd:07:
         f2:9c:e4:2d:e1:5a:10:3c:93:08:bf:63:14:99:1d:4a:17:8c:
         44:24:c4:a7:5e:6b:33:88:40:27:f1:f8:f1:7f:6f:29:ca:54:
         17:bd:c6:13:85:b2:91:c4:79:fd:d6:e7:0b:8a:71:fd:f7:a2:
         71:f8:95:d2:5c:46:4a:8b:21:25:78:df:70:eb:30:5e:84:be:
         02:24:fc:f4:0a:3f:10:ab:2e:01:e1:ac:68:2c:4d:85:19:5c:
         38:25:22:05:cb:19:1f:32:77:57:9c:af:f3:60:35:28:92:31:
         55:33:9f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:04 2025 by rpki-client