Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File:                     9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier:          ksqttZSqH0Ehr1hVlaO8CVsh95rVu6jnY1cuQvEPi/Y=
Subject key identifier:   85:9B:8E:46:30:D9:83:BE:CA:D3:EB:71:CF:97:28:FF:D4:E7:5F:B0
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer:       /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial:       34BF31A99D7B44BE486431B204DDDCD9CE96F1E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number:          01C4
Signing time:             Fri 19 Jun 2026 00:45:14 +0000
Manifest this update:     Fri 19 Jun 2026 00:40:14 +0000
Manifest next update:     Sat 20 Jun 2026 04:14:14 +0000
Files and hashes:         1: AS214809.asa (hash: KZxAxAgv7eodloZuRGXMZMgeZt8qfPZMw5fBoAT3Z1o=)
                          2: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: x4JxpiVcUpo/Zu05XkGsbG7v3JHDnzC/N1K8W6UyhQI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bf:31:a9:9d:7b:44:be:48:64:31:b2:04:dd:dc:d9:ce:96:f1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
        Validity
            Not Before: Jun 19 00:40:14 2026 GMT
            Not After : Jun 20 04:14:14 2026 GMT
        Subject: CN=859B8E4630D983BECAD3EB71CF9728FFD4E75FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:5b:bd:66:d5:48:62:12:99:8a:4c:f0:46:
                    5c:5e:a9:42:31:5f:c4:f2:97:82:a5:ac:66:80:8f:
                    db:bd:f5:ad:67:96:07:8f:af:ff:b4:ab:48:85:87:
                    73:0b:a9:17:91:a6:bc:34:9f:d1:2c:16:ee:b5:d5:
                    2d:95:51:52:65:27:ab:8a:86:0d:bd:70:89:29:e4:
                    7a:a4:3a:ab:ea:e8:85:13:14:df:b4:79:43:9d:14:
                    ed:48:e9:03:d5:f0:b6:3a:b3:bf:f5:39:61:d6:9a:
                    1f:70:88:cb:ad:62:f1:0a:da:46:84:de:61:81:7e:
                    60:91:ba:a9:53:87:a3:cc:00:0c:a2:e7:22:ae:19:
                    34:07:b2:21:f6:0a:36:27:2b:cf:ab:8b:22:4a:c6:
                    88:b8:a7:67:12:e9:02:64:1a:28:f6:65:50:61:77:
                    d3:f6:48:63:79:60:95:a4:de:17:f2:3b:77:1a:3a:
                    b7:cf:b8:c4:f7:e6:83:c3:39:e7:af:da:9c:c0:fe:
                    26:05:b4:8c:4c:e0:f8:d7:54:1b:3a:f7:c0:4b:0c:
                    30:42:ce:59:6c:69:3d:95:52:72:13:ba:69:b0:2d:
                    ff:1a:ae:63:b7:50:42:90:c6:e9:d2:e6:0c:5c:61:
                    48:31:af:16:e1:df:fb:07:76:c6:d7:53:f5:bf:d9:
                    aa:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9B:8E:46:30:D9:83:BE:CA:D3:EB:71:CF:97:28:FF:D4:E7:5F:B0
            X509v3 Authority Key Identifier:
                keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d9:e0:db:3b:71:0b:e7:7c:1f:06:a0:3f:a2:c2:0b:7a:68:
         88:44:f3:39:19:20:c2:e0:c4:5b:e8:90:20:7f:dd:85:fa:72:
         11:12:92:68:7f:bb:17:03:0f:ae:e3:54:57:9a:fc:bb:53:35:
         a5:0d:c5:e9:26:a8:55:27:eb:89:ca:84:b2:30:fd:78:2c:a7:
         7e:a6:c7:7d:b7:31:95:1f:38:0b:53:13:48:b1:13:07:e1:ff:
         48:cf:e5:e3:2f:10:c7:72:30:17:7d:14:2d:1c:74:fd:95:aa:
         42:89:c2:4a:54:4b:b5:30:95:19:57:18:8c:b5:1b:a3:6e:fd:
         bc:33:33:5e:73:3d:86:b2:32:38:8f:d7:42:d5:07:cb:11:7a:
         7d:19:32:8f:8b:60:97:88:21:07:5f:e5:8d:d5:4f:a8:bb:c0:
         9c:1c:54:28:ac:b9:3a:66:08:a0:ad:1a:87:4c:39:88:27:4d:
         74:f2:a1:43:6d:c4:15:7a:09:f6:e7:42:ac:57:41:25:5d:b9:
         61:a9:d4:a8:30:7e:76:a2:a1:84:3e:fe:30:ce:52:7b:5b:85:
         10:c8:1b:9d:8c:85:29:6d:b3:ec:49:45:12:37:98:17:26:93:
         ac:e8:2a:6d:b8:9e:48:d9:7b:1f:66:a0:23:9a:8f:48:27:a7:
         5f:0c:e2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 05:28:16 2026 by rpki-client