Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File:                     E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier:          Qwbq6iUsZpdnD4SgsjaX6psejdoNE1dJLGE+/lcUAUQ=
Subject key identifier:   13:C4:A8:FE:0F:9A:05:AD:55:18:D1:31:B4:DD:04:80:F3:43:0B:07
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer:       /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial:       09BB85339DCBCACAB9F89A579CDA2C2197198447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number:          066D
Signing time:             Tue 29 Sep 2026 07:57:34 +0000
Manifest this update:     Tue 29 Sep 2026 07:52:34 +0000
Manifest next update:     Wed 30 Sep 2026 10:51:34 +0000
Files and hashes:         1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: Gcq7oJqvg37aRjnycuK/vVJOAIxvGjs2PzruWV7iGr4=)
                          2: AS208453.asa (hash: toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 10:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bb:85:33:9d:cb:ca:ca:b9:f8:9a:57:9c:da:2c:21:97:19:84:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
        Validity
            Not Before: Sep 29 07:52:34 2026 GMT
            Not After : Sep 30 10:51:34 2026 GMT
        Subject: CN=13C4A8FE0F9A05AD5518D131B4DD0480F3430B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:39:7e:67:dc:23:8a:45:c6:f0:98:65:01:
                    64:21:02:87:53:5e:f5:e6:ec:dd:54:3e:34:7b:c2:
                    74:40:fc:51:a4:62:95:e9:2e:d4:3d:33:38:9e:97:
                    99:6c:77:b2:80:50:c0:a0:8a:eb:48:52:88:3f:89:
                    31:d3:cb:31:4b:75:3b:19:91:7d:c2:5a:aa:df:83:
                    53:74:5a:fd:bc:59:d4:26:f9:8f:7f:f4:21:62:83:
                    42:13:db:99:fe:fc:c0:0d:a4:e4:ad:75:7a:87:a8:
                    8c:21:4b:05:d1:f8:d1:10:b3:97:aa:af:42:7b:ba:
                    6d:c1:8c:d8:8c:27:77:d2:9a:cd:75:a2:3a:ec:18:
                    78:f4:57:6d:f5:53:cc:b0:fe:12:9d:f4:3e:20:cd:
                    08:bb:33:47:9f:d2:a5:e8:ae:be:38:a6:76:72:90:
                    3f:fb:ca:78:05:71:60:5a:d4:54:e9:3a:a6:aa:02:
                    38:a6:d2:49:0c:f8:b2:39:99:31:58:09:c2:f2:f5:
                    de:09:11:e8:e1:81:9e:82:af:35:45:15:c2:05:ed:
                    67:cd:ac:4b:9e:b6:51:17:a3:61:ab:a1:48:71:2a:
                    1c:be:89:35:7e:fb:83:ce:42:79:6d:47:5d:4a:af:
                    74:9d:46:95:b3:0a:bd:a4:cd:6d:8e:53:26:87:f8:
                    4b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C4:A8:FE:0F:9A:05:AD:55:18:D1:31:B4:DD:04:80:F3:43:0B:07
            X509v3 Authority Key Identifier:
                keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:72:df:a0:a5:ce:dc:4f:59:15:c3:f7:c0:8f:d8:b8:e2:23:
         dc:e2:f6:e4:02:47:b9:4b:a8:d2:98:f4:c9:08:8a:53:25:c6:
         13:13:ed:3c:0f:c6:35:ff:90:92:88:52:e0:20:26:d8:70:36:
         22:db:bf:9a:05:87:48:03:e4:0c:74:44:be:d0:0f:e5:2f:02:
         75:75:34:51:c2:fd:6f:1c:9a:40:28:17:bb:6e:58:a4:91:3a:
         68:a5:10:c5:90:cb:6c:93:9e:a9:10:11:fe:24:49:ec:dc:fd:
         c2:d6:9c:77:96:21:4d:e6:89:7f:87:35:28:07:f7:f7:b5:c9:
         6e:be:2e:d0:1b:2f:a7:97:b0:30:e1:92:d7:68:16:d2:f6:1c:
         7d:c6:a7:d0:4f:a3:b6:b3:50:fc:fe:39:57:dd:c3:8e:46:ff:
         bd:71:45:9a:86:6b:3a:9d:d9:e5:74:f8:51:83:b8:27:96:a6:
         32:ce:1c:d1:e2:01:f9:36:19:38:35:cd:54:60:41:16:03:5d:
         60:c8:16:e2:69:9b:ab:f5:af:dc:75:b8:17:2b:f4:18:1e:c7:
         54:af:e6:c9:53:16:fc:72:2b:54:3c:7e:f1:2c:49:18:68:14:
         a8:da:91:1d:84:53:1f:9a:90:9c:1b:41:fd:16:06:54:18:bf:
         7d:5b:6a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:06:21 2026 by rpki-client