Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File:                     9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier:          ghwkvUk41ubM/0E82gBLWgMFpccrMhFyR0PBYT5kox0=
Subject key identifier:   69:9F:62:14:DE:55:9E:3C:FC:E6:26:BE:46:40:9A:BE:30:8B:35:E4
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer:       /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial:       1495963749EAC4ABF6455CB44F23EF1845E09308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number:          0141
Signing time:             Sun 15 Mar 2026 18:48:50 +0000
Manifest this update:     Sun 15 Mar 2026 18:43:50 +0000
Manifest next update:     Mon 16 Mar 2026 18:58:50 +0000
Files and hashes:         1: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: 3ghIzFrDQJ/ta/r4UV0B2FtRHHKJWPXic3dfffx/HcM=)
                          2: AS214809.asa (hash: KZxAxAgv7eodloZuRGXMZMgeZt8qfPZMw5fBoAT3Z1o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 18:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:95:96:37:49:ea:c4:ab:f6:45:5c:b4:4f:23:ef:18:45:e0:93:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
        Validity
            Not Before: Mar 15 18:43:50 2026 GMT
            Not After : Mar 16 18:58:50 2026 GMT
        Subject: CN=699F6214DE559E3CFCE626BE46409ABE308B35E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:19:83:ba:e8:43:0e:e3:15:f2:a5:26:91:
                    61:95:65:ac:8d:54:17:18:27:52:34:16:cb:78:8d:
                    ed:30:78:ce:d3:2e:24:84:45:2b:5b:81:f4:fa:54:
                    b3:98:36:00:80:e1:b3:62:d1:57:50:b7:0c:32:c8:
                    20:c1:29:03:ce:0c:24:03:4a:eb:f9:23:e5:f1:45:
                    a3:1e:e4:90:25:ba:b5:85:09:e6:08:b0:12:b6:27:
                    1f:a3:56:a6:dc:86:ac:89:0f:96:d0:76:0e:14:b6:
                    f0:cd:b7:33:52:c1:ee:0b:b4:1b:5b:04:56:b8:b2:
                    f3:c4:76:e2:9e:c0:f3:3f:65:e3:7b:d4:32:97:6b:
                    fd:1d:b3:f5:9c:c8:a9:a2:76:10:cc:ba:ef:93:43:
                    27:7d:f9:41:74:69:49:d4:6c:6e:0d:36:00:35:7b:
                    b9:8c:72:9b:70:8a:1d:a4:6d:62:af:20:de:b4:a9:
                    bb:95:f4:a0:2a:04:46:fa:4a:0b:a7:0a:b8:f5:c0:
                    bf:28:64:9f:fc:1d:fa:57:31:8f:a6:38:ab:a9:cf:
                    4f:44:1a:7a:41:03:0f:a4:54:9c:a1:1e:07:74:d6:
                    5c:48:b7:5c:83:e3:2e:bf:fd:ab:e4:c5:85:74:0f:
                    41:c7:8c:dd:c9:69:c0:9b:98:c5:7d:7e:ea:8b:5f:
                    77:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9F:62:14:DE:55:9E:3C:FC:E6:26:BE:46:40:9A:BE:30:8B:35:E4
            X509v3 Authority Key Identifier:
                keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:76:a2:3e:a0:f7:aa:5b:88:0e:28:e0:69:1d:e4:d8:47:f3:
         7f:2a:d5:31:e1:d3:21:67:05:fb:a1:43:81:b4:bd:2f:e7:a7:
         c0:74:f1:10:e4:bc:1a:4b:cf:4c:92:df:13:a3:4d:9b:79:1d:
         08:b9:1b:c8:6f:c8:ee:6a:d2:08:c3:0a:dc:45:99:e5:6f:bf:
         3c:d4:f1:c0:00:51:72:61:4e:37:e5:73:26:fe:6e:35:03:98:
         c3:e9:4d:c8:ca:e2:c9:76:67:00:ec:87:97:b6:46:87:67:1a:
         28:f5:b7:c4:91:b0:f4:86:0e:ed:c0:2c:0d:94:da:0f:c3:f9:
         0c:44:19:8f:12:ec:a3:24:cf:6b:a8:a4:3b:c2:0a:5f:fe:7c:
         60:5c:fa:89:36:ca:f2:0f:e5:8a:6e:27:b9:1b:f6:42:15:f2:
         ea:5d:36:16:6f:d4:7b:04:cd:6d:20:12:7c:98:8f:50:78:5d:
         c7:38:71:8f:87:68:b0:d6:ff:27:79:8b:53:4b:ed:06:b6:d0:
         93:67:57:e8:bd:18:57:5b:4c:68:e0:5d:24:e3:3d:7a:c9:ea:
         a2:39:5c:79:2e:d4:12:c5:c9:f8:fc:3b:3f:40:8e:a5:5a:cf:
         58:ab:ef:74:d4:03:c2:e0:e6:0b:7f:7c:50:7e:9d:99:82:a7:
         04:63:6d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:15:05 2026 by rpki-client