Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File:                     9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier:          wh6+AQmo7M4OTafDQPAQk3mkESY8zLUv72Z2pzwURbk=
Subject key identifier:   50:8F:C1:42:75:A1:9B:D2:94:FE:74:40:47:28:B0:BD:A9:5F:D4:36
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer:       /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial:       4FAD838F74A77DEA70B3AEDAD5958D2690457C5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number:          79
Signing time:             Sun 19 Oct 2025 10:08:18 +0000
Manifest this update:     Sun 19 Oct 2025 10:03:18 +0000
Manifest next update:     Mon 20 Oct 2025 14:03:18 +0000
Files and hashes:         1: AS214809.asa (hash: twDSgOmLlkZzcvx0mDRRIi71WRXYCfTsSol/H2pUsYI=)
                          2: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: owiBnKdkQx/43WC98YEJ34wK2UKYMrg+ET8UdIXWemg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ad:83:8f:74:a7:7d:ea:70:b3:ae:da:d5:95:8d:26:90:45:7c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
        Validity
            Not Before: Oct 19 10:03:18 2025 GMT
            Not After : Oct 20 14:03:18 2025 GMT
        Subject: CN=508FC14275A19BD294FE74404728B0BDA95FD436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:51:e3:b4:f0:5d:83:4c:ca:82:2c:e1:91:
                    03:9c:21:6d:43:d9:d2:f9:97:88:11:7f:2c:be:4c:
                    0b:f5:9e:71:d6:fb:fc:a0:0c:4d:e3:7d:e7:58:78:
                    37:86:5d:76:5e:40:19:b0:94:ce:2b:c5:a4:57:7e:
                    2f:0c:e7:78:8b:40:56:21:59:69:04:03:1c:4c:3a:
                    78:4d:b8:61:b8:19:5d:07:79:f6:ae:3d:86:20:da:
                    d0:4d:f8:89:e8:77:4f:e0:f0:cd:68:fb:54:97:29:
                    a5:b6:54:7b:19:df:4f:19:7e:37:58:60:36:5f:af:
                    60:44:1f:b1:72:81:fd:4e:9a:ca:4a:ac:7b:b0:8f:
                    14:99:99:8e:ad:ce:a2:e3:e2:6a:91:a8:b8:bb:df:
                    79:be:8d:aa:63:3c:b6:e2:f8:01:0d:fc:61:18:03:
                    a2:0f:6e:c6:bf:f9:f6:82:4f:ff:87:4c:22:9f:81:
                    34:e0:bd:6b:81:14:c1:14:f1:af:c2:2f:be:bf:4c:
                    68:bb:2d:4a:ae:3f:29:af:02:0c:24:ff:99:df:c2:
                    37:c8:ca:a0:b2:83:db:a7:63:e3:51:11:1e:09:9b:
                    ed:a8:3e:72:80:2d:41:e3:93:ac:f3:de:59:7a:32:
                    ec:f3:2f:00:d5:0e:77:78:eb:fa:f5:70:d9:70:a6:
                    7b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8F:C1:42:75:A1:9B:D2:94:FE:74:40:47:28:B0:BD:A9:5F:D4:36
            X509v3 Authority Key Identifier:
                keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1b:f4:c6:86:8f:ca:79:a9:de:16:7d:34:25:ef:13:9a:25:
         12:28:4f:9b:8e:4d:5d:14:77:cc:4e:0a:96:d0:ce:5a:36:81:
         36:c0:6d:d8:cf:3c:28:63:30:fa:aa:c1:7b:97:b4:8b:d4:6c:
         dc:45:72:59:31:89:05:12:b4:66:f8:52:56:d6:f0:b5:17:d3:
         72:57:ce:dd:f4:db:b9:09:de:5a:fb:79:22:2f:e3:89:cb:3a:
         da:aa:4f:0e:1b:b8:94:78:6e:0a:81:42:e4:7a:56:b4:ef:3d:
         96:43:59:d1:60:70:0e:21:ed:20:dc:8c:eb:80:2d:42:6d:f3:
         cc:df:ae:76:b5:ad:d4:31:99:c9:90:c6:fe:a8:5f:4a:1e:bf:
         ed:a4:29:3f:bc:12:a3:6e:ad:93:08:ba:ba:87:0b:81:9b:49:
         ae:66:da:be:7d:18:4f:d5:f4:8b:1c:b4:54:20:50:f6:31:0c:
         dc:17:9c:b8:6d:87:ad:dd:a9:26:bf:3f:e0:32:6a:06:91:7d:
         da:fe:84:92:d1:3d:fa:25:46:17:56:44:0c:0b:f8:6d:84:32:
         9a:5d:53:7d:69:13:33:3b:61:a2:bb:23:4c:96:be:18:e2:ab:
         3d:d2:06:7a:fa:bd:a3:81:f5:b8:42:4b:cd:7e:16:c5:82:e1:
         25:db:30:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:49 2025 by rpki-client