Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File:                     0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier:          EL7mYPXM0XvLJ5HlfN6yE7ys4VzHZmUZkYPs1F7HuMw=
Subject key identifier:   22:FB:B8:4D:0B:10:06:61:01:9D:82:AD:7B:9B:A6:17:B5:5C:5D:F2
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer:       /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial:       44BD0CB87C64623A4148A5A51FFC3E4DFCE9DF45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number:          0481
Signing time:             Wed 23 Sep 2026 15:35:52 +0000
Manifest this update:     Wed 23 Sep 2026 15:30:52 +0000
Manifest next update:     Thu 24 Sep 2026 16:27:52 +0000
Files and hashes:         1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: 0a2+5aLHMxt8E7F3eevkl837x1xbL7RzA1mcVyq/I44=)
                          2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: 7bLO5behIIxh8QOWdCdYKrNmYUJrIUwnhfkYG+jVAro=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 16:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bd:0c:b8:7c:64:62:3a:41:48:a5:a5:1f:fc:3e:4d:fc:e9:df:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
        Validity
            Not Before: Sep 23 15:30:52 2026 GMT
            Not After : Sep 24 16:27:52 2026 GMT
        Subject: CN=22FBB84D0B100661019D82AD7B9BA617B55C5DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:c7:b2:f7:28:03:0e:4c:d7:7c:81:b3:56:
                    08:ee:70:3e:6f:49:ab:72:40:fa:a7:f6:ae:05:99:
                    02:6b:b3:7e:07:fe:da:a0:7d:17:6b:7f:68:46:45:
                    42:30:d8:2b:38:28:d7:50:32:23:10:bc:93:23:58:
                    c7:3b:c4:d6:47:c1:46:f7:3b:2e:d5:a5:d7:ce:8c:
                    9a:e5:28:4b:00:b2:48:53:ce:64:ef:af:8e:64:a6:
                    5f:bf:e7:57:59:3b:cf:f9:ca:40:55:72:dd:fa:1e:
                    8e:4a:1d:0b:f9:7c:90:8b:d4:af:43:f2:e8:6e:fb:
                    d4:00:72:d8:4a:3f:c5:3a:1b:78:39:14:40:f0:1c:
                    ea:da:ee:df:e8:34:97:a4:bd:4f:78:90:68:90:07:
                    cc:41:ed:cd:c1:ca:bd:5c:2c:0b:0e:80:06:ad:9a:
                    72:20:f2:63:55:eb:4a:b5:6a:b6:2a:dd:fc:86:03:
                    80:21:1f:0e:81:68:c7:32:66:1b:21:1a:cb:26:53:
                    27:33:19:fe:9b:a3:3a:5e:93:90:db:c7:78:5e:e3:
                    df:de:05:ec:e1:08:2c:71:a2:7b:65:81:2c:96:ea:
                    97:9e:78:b6:3b:d6:bb:79:57:a1:dc:e1:28:04:15:
                    83:62:70:6c:e8:24:9d:a5:08:2d:7a:ef:d5:d9:a3:
                    be:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FB:B8:4D:0B:10:06:61:01:9D:82:AD:7B:9B:A6:17:B5:5C:5D:F2
            X509v3 Authority Key Identifier:
                keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3d:df:5a:b9:21:d8:f4:c0:de:24:70:39:ef:af:05:4f:52:
         f2:27:da:c0:c8:3b:c5:c4:90:21:5a:0a:e1:81:49:44:9d:86:
         65:25:ad:78:96:3d:70:f6:2d:8e:bd:c0:cc:1a:25:30:21:f3:
         6f:53:fd:35:f5:58:90:48:cd:1d:1a:11:1a:42:9d:bc:a3:26:
         13:b0:8d:89:89:aa:73:2a:22:38:95:72:99:52:7e:c7:a9:3f:
         33:e9:b7:cc:58:d4:28:49:ba:73:c1:0f:d6:08:89:1b:61:b9:
         ea:1a:7f:e2:0d:d4:fb:1c:7a:5b:b9:73:dd:16:f3:8f:ab:2a:
         2e:94:aa:2b:2d:37:15:2c:b5:56:60:8d:17:5a:54:de:d2:f8:
         7d:9c:e7:e9:24:ce:ce:14:03:79:f6:07:19:90:c6:c2:61:0f:
         92:c7:61:3e:fa:cb:e2:79:c4:3f:3e:fd:a2:fa:7b:80:fe:e6:
         30:89:f2:98:68:26:ff:82:01:f8:e7:bd:62:9c:09:b0:55:ee:
         2b:68:8e:dd:c5:82:aa:57:ef:bd:8d:0a:32:5c:c8:56:c0:22:
         8b:bb:a4:1a:88:cf:1e:6d:96:ad:52:c6:8d:19:1b:60:ed:92:
         52:bb:e4:8d:7c:e2:37:38:b6:7f:be:2a:23:42:54:29:6e:39:
         e5:48:94:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:50:04 2026 by rpki-client