Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
File:                     9BB8B7044997B7AAF52B54E757F998927956EC38.mft (raw, json)
Hash identifier:          wnFB30NyU21qxawvkbqxZBPZExfg9iwzxB9ASykTyS8=
Subject key identifier:   22:BF:2A:9A:D6:8C:09:32:C0:34:EC:39:42:8C:77:67:20:87:7E:8B
Authority key identifier: 9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38
Certificate issuer:       /CN=9bb8b7044997b7aaf52b54e757f998927956ec38
Certificate serial:       7762FC1F8B7C6B02AB549AA56C26D76CA23AA4B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
Manifest number:          010F
Signing time:             Thu 06 Aug 2026 07:48:22 +0000
Manifest this update:     Thu 06 Aug 2026 07:43:22 +0000
Manifest next update:     Fri 07 Aug 2026 10:53:22 +0000
Files and hashes:         1: 9BB8B7044997B7AAF52B54E757F998927956EC38.crl (hash: EOZy+xPOQCjcABga0KeJEznH3Sw9VSpALoLe1HkjomA=)
                          2: AS204844.asa (hash: VQAsDBi0RHb4rqNWH3oXo2B+pmgqS88NnKjLvvSUCF0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 10:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:62:fc:1f:8b:7c:6b:02:ab:54:9a:a5:6c:26:d7:6c:a2:3a:a4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb8b7044997b7aaf52b54e757f998927956ec38
        Validity
            Not Before: Aug  6 07:43:22 2026 GMT
            Not After : Aug  7 10:53:22 2026 GMT
        Subject: CN=22BF2A9AD68C0932C034EC39428C776720877E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:32:2b:5a:63:5b:f4:39:83:94:6c:17:6f:
                    ee:1b:71:fe:2a:72:36:88:f9:36:a2:bf:0c:4d:db:
                    13:2a:95:c7:c1:b6:3c:ed:cb:21:65:3f:bf:c0:7d:
                    7b:5d:71:13:1a:62:3b:0c:ea:2d:2f:56:f2:88:39:
                    a1:bf:84:f4:60:04:b2:46:1e:48:2b:57:08:dc:f3:
                    23:f6:f0:88:38:b2:04:7c:08:d6:ad:61:8c:b5:5c:
                    64:11:65:d8:39:11:9e:3d:93:4e:88:17:f7:98:f4:
                    59:28:d2:7e:e1:08:37:79:10:ce:0c:2d:78:62:43:
                    95:e2:2c:00:4f:d1:ac:2a:5e:18:5b:9f:77:2e:28:
                    34:59:77:1f:10:47:48:90:db:76:2d:53:45:8a:e6:
                    9c:d7:2d:52:1f:a6:bc:96:69:1b:bf:50:21:73:f9:
                    dd:82:19:1c:ab:2e:8e:49:6e:cc:81:a0:b1:09:08:
                    df:34:b9:16:78:61:e3:de:83:8e:69:36:4a:7a:8f:
                    a1:70:f4:23:40:6b:14:65:d5:d3:9f:11:68:cb:0e:
                    4b:ca:1f:88:8d:63:34:d8:6d:db:74:47:0c:db:84:
                    28:ff:bf:36:71:a4:26:dc:a7:7d:00:1b:cf:5d:4a:
                    54:7d:e1:18:ea:25:c6:71:a9:1e:17:f8:3d:d9:ea:
                    43:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BF:2A:9A:D6:8C:09:32:C0:34:EC:39:42:8C:77:67:20:87:7E:8B
            X509v3 Authority Key Identifier:
                keyid:9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:74:b0:96:e5:0b:69:56:2f:e5:99:bb:30:40:82:9a:ce:
         ce:0f:1c:a0:e3:6f:44:3a:b3:14:32:9a:e2:3b:85:4a:53:fc:
         50:29:35:5a:bd:32:0d:8d:91:80:b4:82:b2:5e:46:34:59:55:
         a4:2f:c1:6c:54:dc:13:c4:a6:a9:29:ff:66:6e:8f:a9:e4:32:
         9d:b7:2b:ad:2e:9c:f6:dc:86:b4:a8:0b:ad:0c:5f:75:0d:d5:
         90:02:b3:61:fa:bc:d1:17:54:ae:b4:79:5b:e5:9e:5c:2f:36:
         c1:87:2d:44:86:bb:ce:fd:de:82:45:c9:f8:84:1b:73:05:3f:
         c6:59:64:41:e7:2c:33:18:80:9f:bf:d2:3f:71:47:42:d4:aa:
         6f:cf:89:8d:51:72:d6:62:58:44:70:33:9a:19:bf:8f:50:8f:
         a5:94:4d:5a:12:0e:b2:46:d8:ba:ed:44:f6:73:b5:b1:e3:bd:
         4b:c6:00:95:61:d5:2d:a3:78:27:79:51:bd:4a:e5:de:2f:60:
         9a:ce:76:6c:42:e5:51:ed:91:20:fb:3b:47:7d:ac:ad:f0:bd:
         5c:d2:61:84:45:61:29:0a:d0:2d:eb:c2:de:dd:66:6b:6e:06:
         fe:39:e9:4c:38:6f:20:7e:a3:33:a7:88:ef:1b:a7:66:fe:8d:
         58:8c:aa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 01:47:53 2026 by rpki-client