Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
File:                     47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json)
Hash identifier:          CQ1Fooo+uFbeF+68gAW0E98hA06xHHi10FUXQPjk1kw=
Subject key identifier:   C4:5B:03:C6:68:44:3A:D4:18:6B:3A:61:CC:0D:FF:3B:10:68:C6:EC
Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
Certificate issuer:       /CN=47E9555355C6B007AACD5D45BF41E3383E991641
Certificate serial:       517A10AB76637954DF42A733D211F949F1A093CF
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
Manifest number:          055B
Signing time:             Wed 25 Mar 2026 21:26:16 +0000
Manifest this update:     Wed 25 Mar 2026 21:21:16 +0000
Manifest next update:     Thu 26 Mar 2026 22:48:16 +0000
Files and hashes:         1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: QXj3TJyNokb2iS9oiXArwcEJLCJwzy0/YXvOayDZgfQ=)
                          2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: joAEPn9ggJnOJibwtnJz8w4Tu9b024lTJQ13MXp3eQ4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
                          rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7a:10:ab:76:63:79:54:df:42:a7:33:d2:11:f9:49:f1:a0:93:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641
        Validity
            Not Before: Mar 25 21:21:16 2026 GMT
            Not After : Mar 26 22:48:16 2026 GMT
        Subject: CN=C45B03C668443AD4186B3A61CC0DFF3B1068C6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:44:fa:f1:cd:e3:bd:f8:5e:42:88:4e:2c:
                    63:16:08:d1:6b:1e:b4:8d:92:39:36:5d:ba:69:64:
                    e8:e5:fb:d7:54:da:26:75:95:d2:de:7c:19:c7:1e:
                    6d:51:0a:2a:3b:01:22:d7:6b:e9:30:c4:79:89:87:
                    35:b9:5b:27:7a:9a:87:c4:46:c3:e2:38:47:91:e5:
                    6b:90:18:85:c0:0d:22:76:8a:a4:aa:43:67:4e:35:
                    83:ae:be:92:95:cd:b9:0c:cc:4e:82:09:d6:e7:c9:
                    8b:52:65:ca:80:33:4a:cb:47:f9:d6:75:29:8f:c2:
                    32:fd:88:9a:76:7e:ef:52:cd:f6:d6:c2:87:d6:89:
                    9d:30:93:0d:75:8f:77:27:e0:b4:09:a2:4c:59:fa:
                    5e:3b:87:1a:9f:15:c7:82:d2:85:1a:81:7b:3e:e8:
                    2f:63:f3:6b:c8:9b:8a:c1:9c:1a:d1:7f:09:f4:9f:
                    34:ac:7b:60:2b:9c:6a:81:ce:ba:dc:d8:ac:1d:05:
                    43:60:43:19:2e:99:5d:be:2e:31:70:c8:46:96:57:
                    04:51:c3:61:14:15:5e:ca:8a:e4:47:07:69:4c:57:
                    33:df:56:19:da:d5:2a:69:41:cf:30:2e:8f:f5:14:
                    75:1a:ce:1e:7f:2d:02:34:a1:f8:81:eb:f2:a7:13:
                    3d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5B:03:C6:68:44:3A:D4:18:6B:3A:61:CC:0D:FF:3B:10:68:C6:EC
            X509v3 Authority Key Identifier:
                keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:96:d7:d6:65:73:1a:55:68:24:d1:af:4a:e5:7b:29:fe:ff:
         a2:34:53:60:05:09:75:d7:ea:95:35:55:2b:ac:4b:12:75:cc:
         30:8f:a2:44:6f:fe:76:75:e1:ee:26:aa:ae:ac:a2:ac:04:9e:
         9d:ec:04:70:f7:42:c8:6d:44:a9:f4:16:81:ef:3e:be:2b:bf:
         be:0f:b7:72:f1:f3:96:9e:93:df:87:1f:97:82:80:b4:ba:02:
         b3:31:25:e4:02:c4:af:64:89:ed:5e:97:f1:ab:0b:d7:e2:1a:
         a1:b9:98:45:7b:dd:06:df:77:91:ad:58:b1:04:48:79:f1:15:
         1e:03:db:be:b0:41:3f:33:d1:db:0c:3e:ed:a8:3a:cb:ac:eb:
         9e:fd:94:d2:bd:58:0f:1f:24:9b:2f:64:6e:ef:27:31:ae:6d:
         ec:82:9b:5c:4c:8d:df:73:a2:22:3d:84:10:7a:bb:2c:ef:95:
         7a:14:a0:71:bd:53:5c:56:9c:24:10:42:7f:82:fb:ea:55:e6:
         d0:25:d7:fd:66:eb:b4:0f:24:91:90:dc:af:b8:59:56:de:6f:
         f5:0e:ff:4d:3f:9b:e0:ae:6b:7f:58:99:b2:2f:a3:12:4d:27:
         97:49:ff:48:f1:17:55:34:e1:21:3d:d1:a5:d5:4f:d4:36:43:
         dd:8b:13:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:22 2026 by rpki-client