Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
File:                     C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft (raw, json)
Hash identifier:          58gac6bQk5HvccWeNaSEWGgo7t8YdxizTYekpdLwt6k=
Subject key identifier:   6A:E3:9D:73:2C:6E:A5:4A:7C:3F:A2:71:5B:6C:4C:14:BE:AE:CF:BF
Authority key identifier: C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E
Certificate issuer:       /CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
Certificate serial:       7BDAE99A503622FDD387EFE1237D2438F6C895F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
Manifest number:          0208
Signing time:             Sun 07 Sep 2025 01:08:56 +0000
Manifest this update:     Sun 07 Sep 2025 01:03:56 +0000
Manifest next update:     Mon 08 Sep 2025 04:48:56 +0000
Files and hashes:         1: C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl (hash: ndIc8Chx7ZL0GUbMxZm1AMFqQhLxzwNXuSINStcgH2Y=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:da:e9:9a:50:36:22:fd:d3:87:ef:e1:23:7d:24:38:f6:c8:95:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
        Validity
            Not Before: Sep  7 01:03:56 2025 GMT
            Not After : Sep  8 04:48:56 2025 GMT
        Subject: CN=6AE39D732C6EA54A7C3FA2715B6C4C14BEAECFBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:df:ae:55:e4:a3:e7:5a:ed:c9:ba:36:a4:
                    f6:57:3c:5f:65:ea:7a:68:cb:ac:0d:b1:96:a7:9f:
                    33:ae:f6:d1:50:e1:2f:5e:83:2c:cb:56:3a:16:9e:
                    30:a6:0d:05:c8:e3:df:7f:e0:9a:67:34:24:36:03:
                    bc:b7:3e:f0:92:1d:d4:4f:d0:23:d7:4e:b7:9a:e1:
                    19:0d:d3:9b:81:ae:d5:f7:9d:a8:b6:57:88:bf:e3:
                    fc:be:c4:ca:b2:d8:07:5d:f2:ee:e1:f8:e1:da:7e:
                    01:09:88:d4:30:76:e8:9f:7c:48:01:d8:23:c4:18:
                    6a:71:e8:42:e2:a9:af:e5:23:04:08:0b:59:4c:b1:
                    22:a0:f5:3c:01:fe:ad:24:42:c9:cc:a0:7e:bc:b0:
                    84:ff:75:a2:15:a4:2e:a5:96:6e:45:6c:0e:ea:8a:
                    09:e0:bb:8f:96:c7:f9:c8:da:90:0b:5d:24:5e:38:
                    84:0b:68:06:13:4c:21:9c:50:85:24:44:81:18:71:
                    d1:3d:5f:d9:d6:e0:31:a8:b1:85:d7:0b:cd:4f:6d:
                    ee:f6:c9:0a:e0:e3:41:da:6b:49:97:db:67:6c:51:
                    0c:d2:77:97:e8:b1:7b:c5:ef:8a:b4:54:9f:78:00:
                    f4:4f:9d:f2:0d:c6:2a:3e:93:50:5e:9d:11:48:47:
                    f3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E3:9D:73:2C:6E:A5:4A:7C:3F:A2:71:5B:6C:4C:14:BE:AE:CF:BF
            X509v3 Authority Key Identifier:
                keyid:C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e6:67:65:18:43:91:85:54:8f:f8:a2:c1:1c:b3:76:ac:a3:
         d9:41:c6:79:50:88:bf:3b:48:c3:d0:2e:97:a5:e7:6c:cb:f4:
         28:22:cb:eb:b1:f5:77:82:b3:fb:73:d6:aa:d1:dd:90:ce:f8:
         6d:0a:f9:dc:fb:07:be:72:e6:63:88:88:8f:cd:5a:89:a0:b1:
         17:75:b4:d2:f3:40:d3:d2:55:a9:b9:a9:14:bb:6d:47:cd:9e:
         13:d1:93:ad:86:ad:30:a9:78:3f:a4:3d:9f:ff:16:d6:d2:94:
         e9:53:1a:57:30:56:71:ea:f8:1e:1f:6f:9a:58:93:99:7f:4c:
         08:22:90:91:42:cc:48:86:09:a9:c5:ba:16:9d:60:48:7b:50:
         a3:87:6a:41:b5:15:27:e6:90:49:fe:53:46:04:1e:61:28:03:
         a9:76:da:14:7c:66:61:b8:29:28:f2:0c:4d:54:47:8f:29:2d:
         6e:a8:e9:8f:20:b2:7b:70:94:1d:ff:28:42:4f:97:47:bc:79:
         fa:4e:30:e2:81:44:87:0c:a0:bf:43:0c:91:a7:5f:ef:a4:07:
         a3:fe:25:c7:49:37:b4:75:7d:c6:05:a9:d3:b4:a2:60:44:be:
         ed:ac:3f:09:7f:f7:97:03:eb:32:96:46:2f:28:f1:ca:d6:ff:
         76:57:aa:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:28:07 2025 by rpki-client