Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
File:                     F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json)
Hash identifier:          kpAY/z4a11nBOth3ifi61wjGZTbr1gE2164j4SqHBuU=
Subject key identifier:   5A:0C:38:DC:B0:BA:A0:AD:B9:75:61:FE:D1:17:6E:79:31:46:8B:29
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       33648E15C215D52C44E8BB603AF83FF36F660D26
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
Manifest number:          04C7
Signing time:             Sun 27 Sep 2026 05:06:25 +0000
Manifest this update:     Sun 27 Sep 2026 05:01:25 +0000
Manifest next update:     Mon 28 Sep 2026 06:59:25 +0000
Files and hashes:         1: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: ROsrwkR7nWLwQbpaSZWVWx6M1N5sHIdeiD5wZMPm00g=)
                          2: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: 20JcZKcci6XoWKX2l0FkKf6rmL2figIjSSb6k+1Uu64=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:64:8e:15:c2:15:d5:2c:44:e8:bb:60:3a:f8:3f:f3:6f:66:0d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Sep 27 05:01:25 2026 GMT
            Not After : Sep 28 06:59:25 2026 GMT
        Subject: CN=5A0C38DCB0BAA0ADB97561FED1176E7931468B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:c9:9e:3f:3c:69:10:41:3f:e5:af:1a:81:
                    42:dd:cc:9a:90:c0:b5:87:38:7d:c9:6f:98:99:0a:
                    a8:ac:18:1e:4d:2d:c7:d4:8a:e0:72:26:d9:c3:79:
                    5e:98:fe:9e:f9:de:cc:02:90:ad:b5:d8:1d:62:6f:
                    48:7d:db:71:c2:84:b0:96:2c:8a:7e:f0:0c:a0:2b:
                    ce:57:7e:56:11:72:41:e9:c0:b2:d7:97:5b:29:15:
                    fe:5f:96:2f:a4:0f:84:f6:e8:d1:f8:f0:aa:47:54:
                    9f:e8:0c:de:be:d1:9a:d1:01:7a:a0:e1:b0:31:03:
                    19:3c:a7:d1:38:46:72:1a:51:03:ca:c4:49:a4:d3:
                    df:b1:64:16:14:1f:19:72:6b:a8:64:41:c6:16:d1:
                    1a:76:87:06:6e:e9:59:7a:a3:70:13:f6:26:77:1b:
                    16:79:0d:e4:0c:ba:b5:ee:1b:6a:9c:ab:34:7f:ae:
                    2f:d6:a1:63:34:19:d4:93:d5:24:2f:f5:e2:bc:ee:
                    87:0e:d4:e6:0b:2f:a5:be:42:ff:5f:72:a9:38:76:
                    02:98:5b:14:f1:4a:8b:cf:7b:29:d0:c4:84:e0:ea:
                    ec:9d:85:d7:ee:26:6b:d4:e7:ca:68:bd:31:dd:07:
                    b8:a3:c7:b7:aa:b2:17:1a:74:c6:7e:7c:20:05:d2:
                    13:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0C:38:DC:B0:BA:A0:AD:B9:75:61:FE:D1:17:6E:79:31:46:8B:29
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:36:f3:a2:94:65:6f:54:3a:3e:85:b8:bb:86:9d:e6:ed:e9:
         95:e7:f6:af:9b:ca:0c:57:b6:c4:51:2f:81:7b:d7:1e:34:2d:
         45:1f:49:ce:a6:a3:fc:08:68:71:02:e1:47:a7:4d:f1:0a:4d:
         10:cc:13:45:51:91:0b:71:2a:5a:ec:95:80:68:02:82:fb:93:
         77:d5:3c:83:1f:b3:1c:62:c0:0d:c3:dc:92:87:d2:69:2d:ea:
         b5:e6:ab:7f:4c:2e:b6:41:be:31:c6:05:4d:b8:f9:d4:71:0a:
         6f:8d:17:45:d1:34:fa:df:0b:28:33:45:97:d0:d7:94:03:29:
         e3:a4:31:0d:fc:8b:20:3e:f7:82:9c:f7:c1:8e:e5:95:64:1c:
         ef:9a:32:7d:63:ec:ab:9c:bd:82:89:7c:23:d3:98:11:90:e0:
         38:c1:87:20:6a:e8:fc:65:bf:a3:91:93:4c:62:3c:d0:98:bd:
         3a:44:69:3f:8c:13:76:2d:39:b2:d0:a1:54:53:56:37:61:ec:
         6f:eb:b9:31:14:33:8c:55:8c:bf:90:c0:a0:61:7b:c8:dd:43:
         0a:d6:12:01:7e:7f:29:94:a7:a0:e1:02:78:c8:92:86:ca:28:
         b8:25:9f:69:c1:43:f8:76:a3:ab:26:2f:fb:33:14:c5:84:ae:
         54:bd:8f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----