Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
File:                     E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft (raw, json)
Hash identifier:          nEuU7UTOIqJXuQ0iDTYQO8biDIGQs28dW7IyovhMGPE=
Subject key identifier:   83:6A:A4:78:CE:82:50:98:97:5C:56:74:15:FE:61:E4:7A:97:E4:0B
Authority key identifier: E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
Certificate issuer:       /CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Certificate serial:       1B7DE256AEF09017A021B8A67E8A811086D7E602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
Manifest number:          01C3
Signing time:             Thu 23 Jul 2026 14:07:06 +0000
Manifest this update:     Thu 23 Jul 2026 14:02:06 +0000
Manifest next update:     Fri 24 Jul 2026 16:34:06 +0000
Files and hashes:         1: AS207529.asa (hash: NYU3unoez1PFPgI95FST2CQAF674DNyqEK/UcqTtk2s=)
                          2: E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl (hash: EkccCU4ydxgVhHPRA1+or3f2thsEJZ6nd6yLQjEFbMA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7d:e2:56:ae:f0:90:17:a0:21:b8:a6:7e:8a:81:10:86:d7:e6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
        Validity
            Not Before: Jul 23 14:02:06 2026 GMT
            Not After : Jul 24 16:34:06 2026 GMT
        Subject: CN=836AA478CE825098975C567415FE61E47A97E40B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:f9:42:99:53:d6:b4:59:a9:b2:b1:42:9f:
                    33:8c:5a:c7:42:0c:53:21:77:47:22:70:7f:a4:7a:
                    e7:f7:a4:58:44:e3:36:87:f1:bd:0e:fa:00:fa:07:
                    bf:f8:6e:47:91:05:4c:0d:56:8e:95:0e:08:a3:86:
                    7d:f2:92:b5:12:58:83:11:1b:d8:f8:2d:a9:c4:d3:
                    80:82:48:ca:5d:82:f9:7a:9f:b2:5a:25:fc:82:cb:
                    b7:98:54:87:93:5a:2d:3e:62:98:f9:cc:a9:a5:d7:
                    2b:4c:37:e9:d7:ba:0c:ac:1c:5f:8a:53:75:2e:47:
                    2e:dd:b8:a5:18:c7:73:3f:f9:49:77:f7:4b:39:2c:
                    f9:61:80:3e:11:14:24:0a:b3:42:0b:7a:3e:e4:3b:
                    43:25:14:39:61:f7:d1:35:d9:0a:ea:e9:47:94:35:
                    b8:67:2a:6e:16:a1:ac:d0:f6:e4:41:e2:cb:29:17:
                    a6:f5:b0:68:c2:a9:1b:4f:ad:7b:fb:45:4c:af:3d:
                    6a:bb:fa:77:a1:df:11:97:80:16:a5:e1:6e:ec:01:
                    29:d3:13:14:d0:c1:b1:e9:bc:f3:d2:6f:87:6e:9d:
                    4d:da:01:e8:af:ab:40:8d:85:56:bb:94:c7:13:2d:
                    e5:21:1a:a4:1f:a5:bf:41:a7:8e:af:68:45:a4:bc:
                    f0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6A:A4:78:CE:82:50:98:97:5C:56:74:15:FE:61:E4:7A:97:E4:0B
            X509v3 Authority Key Identifier:
                keyid:E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:0c:fa:bb:e5:97:f2:1f:34:d2:bc:b6:55:3b:3c:88:f2:06:
         af:67:33:a2:f8:e3:8b:d0:91:7f:fb:42:07:b0:af:14:cc:ba:
         2c:37:e6:95:45:2d:05:f2:08:f6:55:b7:d8:35:b2:84:e2:bf:
         ec:c4:e2:20:bf:c6:92:a2:64:c0:f6:e4:a2:75:4f:37:b6:99:
         7e:2c:89:69:15:d5:70:97:ef:82:a9:32:52:0f:dc:79:6d:e9:
         26:6a:97:ee:64:5e:31:f1:29:5e:e9:ef:34:d5:84:0d:25:d7:
         06:af:a1:33:19:7f:29:52:41:2e:7f:c3:5b:95:0e:52:7d:18:
         9a:89:9f:bf:7f:b8:ad:ee:81:21:dc:b8:f2:dd:9e:01:15:34:
         a2:e5:a7:21:1f:15:b9:91:f2:f5:58:10:83:a4:ce:15:59:f9:
         3b:aa:df:6d:12:80:82:a3:e4:a9:b3:91:70:46:94:cb:b9:0b:
         1c:63:f3:2a:e8:14:63:9b:57:25:bd:a8:ac:7f:b5:8f:4f:c7:
         5d:80:48:6e:f1:6b:a1:eb:c2:c3:78:e0:37:48:36:00:87:d9:
         e5:32:71:f2:20:29:5e:12:14:77:0b:d2:05:22:45:f7:2b:b7:
         8f:51:3f:ad:aa:81:93:d7:5a:de:e6:a3:82:86:60:eb:98:8b:
         e9:8a:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:59 2026 by rpki-client