Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File:                     E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier:          /te+5cLtliQ/+fz7iveiry14ymNTllrjVUGw4XCUbLU=
Subject key identifier:   67:B8:D8:1E:00:69:0E:34:73:BB:BC:07:ED:49:08:24:8E:21:3F:3B
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer:       /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial:       440CBB60447B024038F2ECE25B54D42635B67BF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number:          067E
Signing time:             Sun 11 Oct 2026 11:58:34 +0000
Manifest this update:     Sun 11 Oct 2026 11:53:34 +0000
Manifest next update:     Mon 12 Oct 2026 12:27:34 +0000
Files and hashes:         1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: G6hYN53Mn1kOje5gKCAaiukQL4qcUEXe2EYyc6l9BTM=)
                          2: AS208453.asa (hash: 5x7OLtbV+4q8/w789v9PXwFoAFEK+nd2zeMgZsuSWzI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0c:bb:60:44:7b:02:40:38:f2:ec:e2:5b:54:d4:26:35:b6:7b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
        Validity
            Not Before: Oct 11 11:53:34 2026 GMT
            Not After : Oct 12 12:27:34 2026 GMT
        Subject: CN=67B8D81E00690E3473BBBC07ED4908248E213F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:0b:82:57:2c:a8:13:2b:a6:ed:a3:fa:b3:
                    06:d4:0c:ab:17:d7:4b:5f:65:f7:a1:ad:17:8b:f4:
                    94:33:3b:b8:09:af:c5:15:ec:20:c4:26:32:68:01:
                    1d:ba:0a:08:f4:96:2d:af:a7:c2:df:85:79:8e:4f:
                    a4:6b:90:9e:70:10:66:b8:8f:d3:c8:35:fb:97:4a:
                    28:57:60:b3:64:85:32:29:95:6a:f1:b0:ab:07:ce:
                    7d:30:a9:a8:d0:bf:11:5c:1f:72:bc:8c:e5:50:1d:
                    ec:88:d6:68:f8:60:da:07:31:03:92:e8:aa:2d:8c:
                    a7:3f:bc:5d:bf:4d:68:80:c5:90:62:e0:36:93:ac:
                    2e:c4:2f:25:0f:33:fb:02:b6:f8:97:e4:92:aa:53:
                    06:34:fb:0d:ff:b4:f9:44:90:b1:02:f3:2b:83:4b:
                    69:7d:5e:98:87:76:2e:97:43:75:4c:67:de:1a:de:
                    88:ff:12:73:4a:96:bd:db:cb:ca:18:af:82:71:25:
                    8e:ac:c3:b2:d5:89:bc:c3:3b:fe:28:9a:57:b4:fa:
                    fa:a1:61:56:a5:6b:4e:42:03:77:3d:fb:d6:4d:12:
                    a3:2b:83:28:0c:c3:f1:71:7a:75:fb:d6:0a:45:58:
                    68:5c:3e:f1:69:f8:e8:f6:47:dc:67:d0:1c:90:ba:
                    13:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B8:D8:1E:00:69:0E:34:73:BB:BC:07:ED:49:08:24:8E:21:3F:3B
            X509v3 Authority Key Identifier:
                keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c7:b8:6e:54:ac:ee:eb:bd:92:c3:6e:01:f1:e7:fd:30:b3:
         47:49:f9:9f:ef:03:e7:6d:79:1e:ed:69:9f:c0:4a:ca:5e:67:
         cb:ca:15:6e:30:9d:53:ff:24:4f:b4:0c:4d:71:e9:26:9b:3a:
         83:8d:58:2d:91:ab:d4:f7:91:d3:46:6f:70:4e:02:8c:04:1c:
         36:f8:05:c3:54:09:1b:89:56:3a:5c:90:ed:5f:0e:30:50:69:
         29:a0:5e:be:b9:4d:6b:e1:6e:6e:8f:2c:8c:b9:49:34:51:51:
         c0:67:cf:d0:d3:d3:88:06:5a:0b:86:9d:d5:2f:43:76:4e:bd:
         7b:25:62:7b:54:74:54:f9:ac:1b:fa:3a:b5:51:20:9a:79:ea:
         c7:ea:f9:eb:47:c4:d1:be:40:6b:50:4e:32:7c:e9:67:4a:1b:
         47:0e:7a:64:39:f2:66:bb:12:0b:56:6d:8b:c8:98:b9:97:00:
         23:96:ec:9d:3a:a1:4c:94:40:1f:9b:78:d8:c1:d6:66:a7:12:
         61:66:58:82:1f:b3:4f:8d:03:5b:3d:93:c0:e6:c6:6f:f7:4c:
         2a:9b:47:d9:00:f6:46:ed:a6:02:50:bb:df:7c:42:6b:77:95:
         de:9e:42:0e:ed:df:7e:27:5f:98:4d:0a:2e:02:33:00:34:04:
         42:df:81:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:33:01 2026 by rpki-client