Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File:                     9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier:          RkgGnHPNfpMPt8EOlDUWucYixkdYTWG6hPxvNiaJea4=
Subject key identifier:   A6:3D:00:0D:3E:20:3E:0D:DF:2B:38:F8:7D:14:D4:BC:85:B0:29:E7
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer:       /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial:       05694728983D815045F88C0FF0E9B728449AF4BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number:          0243
Signing time:             Fri 18 Sep 2026 10:09:44 +0000
Manifest this update:     Fri 18 Sep 2026 10:04:44 +0000
Manifest next update:     Sat 19 Sep 2026 12:02:44 +0000
Files and hashes:         1: AS214809.asa (hash: KZxAxAgv7eodloZuRGXMZMgeZt8qfPZMw5fBoAT3Z1o=)
                          2: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: Oq4BTBFnyzz+hm21ylHQLRhIqHyQGVVlfV//JLtykXY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 12:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:69:47:28:98:3d:81:50:45:f8:8c:0f:f0:e9:b7:28:44:9a:f4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
        Validity
            Not Before: Sep 18 10:04:44 2026 GMT
            Not After : Sep 19 12:02:44 2026 GMT
        Subject: CN=A63D000D3E203E0DDF2B38F87D14D4BC85B029E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:b3:d6:e1:e3:82:bd:04:3e:6b:08:08:94:
                    a7:e2:53:25:c2:e2:64:48:b1:e9:8b:87:72:e2:0a:
                    b6:13:0f:ab:be:1d:2d:63:64:bb:39:21:93:8d:40:
                    d0:c0:a4:10:16:6e:22:90:a3:a4:0b:8f:f6:a7:01:
                    74:d4:23:45:1b:bd:a6:ee:d5:b5:ff:3d:95:bb:b0:
                    c7:dc:b4:80:30:79:c2:5d:1e:c6:03:4b:6a:24:a9:
                    de:ca:b4:08:ba:72:d8:3b:a9:38:69:76:3e:55:88:
                    ee:7e:32:77:c4:3b:9a:c5:c5:33:d3:9f:a3:1f:f3:
                    1f:1d:48:7f:d5:20:43:8c:f7:c9:05:b4:91:7f:93:
                    cd:71:0e:50:c0:00:f4:50:8a:24:e4:92:10:c3:31:
                    f6:c8:c4:51:72:18:fb:00:e5:f9:a3:c7:57:aa:1e:
                    a4:17:d6:d9:ca:5c:f2:46:e5:3f:3b:fc:05:dd:78:
                    3c:fd:97:f0:8b:3f:b2:d5:e6:86:d1:5b:4b:5d:98:
                    b8:09:7a:88:da:8a:dc:b5:83:30:9b:b9:f1:70:ac:
                    c9:03:f7:7d:49:fe:fb:05:bd:b5:b3:b6:27:8d:ff:
                    a5:b4:8e:81:ef:e7:b4:18:30:af:6d:47:12:fa:92:
                    19:19:d7:24:cc:dc:6d:9c:5b:e8:4c:2e:e5:c6:24:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3D:00:0D:3E:20:3E:0D:DF:2B:38:F8:7D:14:D4:BC:85:B0:29:E7
            X509v3 Authority Key Identifier:
                keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7d:c0:63:09:df:bf:ae:6f:f2:c2:30:03:2f:65:c0:56:a3:
         62:73:93:bf:2d:e3:9c:18:98:15:f6:70:00:19:35:15:de:50:
         71:f4:51:3c:e4:97:bc:90:6b:b4:01:fb:70:fc:1f:38:a8:eb:
         3b:b5:d7:0c:1b:1a:d1:8c:d9:39:d7:3d:88:ed:7a:4a:30:14:
         78:09:71:51:8e:6f:c4:27:4b:88:82:6d:74:89:f1:f6:bf:34:
         5d:30:4d:4a:7c:32:ae:1f:8f:03:ac:05:55:74:d8:26:04:38:
         42:44:2e:cb:dd:85:96:2d:b7:79:db:14:c4:f2:0e:42:4f:2b:
         a5:33:fa:d1:34:6f:39:f7:36:22:f8:c2:27:d3:5f:60:aa:4d:
         27:67:c4:c9:59:e0:08:0b:89:f0:93:aa:a5:47:51:b7:88:1d:
         cb:09:97:3e:c2:46:8c:3e:8b:dd:15:5e:8d:15:11:88:54:0d:
         9a:1d:d2:03:56:2c:d4:c1:b1:03:a4:47:b0:e7:eb:c8:43:dc:
         7c:1d:27:39:f3:d5:bc:f8:b3:32:76:f0:f4:c7:0f:b2:07:6f:
         24:ee:bc:a6:0e:22:fe:7d:9c:de:04:8c:8b:6f:fe:a4:7c:c3:
         80:58:c5:cf:b8:cf:02:e1:a2:9d:69:bf:93:e6:f2:70:4a:f3:
         07:10:b4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:26:53 2026 by rpki-client