Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
File:                     9BB8B7044997B7AAF52B54E757F998927956EC38.mft (raw, json)
Hash identifier:          kOqODwEkDv+GlYUlGPvd95bIO8frnA3IQMM3GGqD5Wc=
Subject key identifier:   13:9B:72:FB:97:34:11:E3:6F:4D:4A:01:88:0F:8F:12:96:D5:F4:49
Authority key identifier: 9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38
Certificate issuer:       /CN=9bb8b7044997b7aaf52b54e757f998927956ec38
Certificate serial:       2A26F4718C32FF501B81E6E206B3428AE521167C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
Manifest number:          C5
Signing time:             Fri 12 Jun 2026 01:15:51 +0000
Manifest this update:     Fri 12 Jun 2026 01:10:51 +0000
Manifest next update:     Sat 13 Jun 2026 01:52:51 +0000
Files and hashes:         1: 9BB8B7044997B7AAF52B54E757F998927956EC38.crl (hash: biXtGun/ngGXPwYmRlGYRgzP/9nOYu+2TVi2ClXqzQs=)
                          2: AS204844.asa (hash: VQAsDBi0RHb4rqNWH3oXo2B+pmgqS88NnKjLvvSUCF0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:26:f4:71:8c:32:ff:50:1b:81:e6:e2:06:b3:42:8a:e5:21:16:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb8b7044997b7aaf52b54e757f998927956ec38
        Validity
            Not Before: Jun 12 01:10:51 2026 GMT
            Not After : Jun 13 01:52:51 2026 GMT
        Subject: CN=139B72FB973411E36F4D4A01880F8F1296D5F449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:eb:86:56:fd:f7:83:19:ef:0f:62:43:cb:
                    d3:fb:e0:fb:ed:f8:2b:60:66:ba:20:32:1c:e1:d2:
                    41:2c:49:15:0d:19:0d:ac:78:73:5d:bb:e2:5f:b9:
                    b2:c6:5e:67:39:5a:fe:b3:9a:7b:d1:e5:78:ae:5b:
                    8b:f6:4a:24:55:c7:ba:66:26:08:16:35:7d:84:63:
                    45:55:f1:dd:3f:53:0c:d9:a4:d2:0b:ea:b4:d0:89:
                    42:f5:df:60:35:c3:ae:9e:b4:69:5a:66:27:51:09:
                    62:d5:2e:43:82:3e:63:d2:66:8a:7c:7e:11:bd:3e:
                    e3:29:fc:9a:cd:ab:11:28:c5:e8:8b:48:f7:12:a1:
                    48:17:d9:92:6d:d6:30:ff:49:2a:e0:44:d1:79:6b:
                    bb:c1:08:ce:2d:3a:b6:ec:88:b8:8e:06:18:64:7e:
                    45:1b:8f:50:22:b2:5a:eb:b5:9d:d9:00:f5:02:2e:
                    09:24:ec:a2:06:b5:a5:df:4f:4e:35:7a:3e:6b:b9:
                    8d:b2:1a:80:d0:64:b7:a5:fd:c8:79:f3:c4:5d:3d:
                    84:e8:44:2f:c1:a0:95:f4:f2:6c:07:66:a7:77:3d:
                    9c:4f:69:e1:ad:3d:98:36:3d:e6:d2:b5:10:e6:72:
                    fa:9a:c7:31:18:fd:44:fb:a6:93:03:9c:45:53:b3:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9B:72:FB:97:34:11:E3:6F:4D:4A:01:88:0F:8F:12:96:D5:F4:49
            X509v3 Authority Key Identifier:
                keyid:9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3b:f9:14:92:dd:07:6a:8e:60:bc:82:36:16:c4:99:cb:e8:
         02:d3:d3:f0:05:06:37:bd:d6:ea:40:7e:b4:ce:b7:b5:24:c7:
         49:c4:6a:2e:49:60:01:1f:ba:47:5e:50:db:d9:8e:17:3f:1a:
         60:0b:54:49:ec:f0:77:fc:ee:f5:9d:9b:d0:c0:63:95:dd:f2:
         81:64:03:b6:ff:7f:03:e6:c7:c9:7a:dd:48:21:31:b4:dd:a6:
         8c:f8:78:a9:f3:09:32:b7:a9:a0:1a:60:62:2c:bd:98:16:99:
         39:8d:89:e4:43:15:15:cb:e1:5d:a8:83:02:7d:a6:c1:8f:00:
         9b:63:15:59:a4:3d:22:35:f8:2b:05:f7:c3:64:fa:43:95:81:
         e1:6a:f0:83:65:cf:01:f7:3f:a4:8d:53:28:1e:e5:98:5b:61:
         03:99:e9:0b:9a:b3:2d:85:c8:7b:6a:5e:35:a2:3d:75:e6:68:
         bb:7e:9a:5d:10:80:24:30:4d:d0:c6:19:d8:06:d0:e0:c1:37:
         80:b7:87:7e:53:4d:67:92:77:c7:44:21:e7:58:1f:61:4f:43:
         d3:14:ce:6c:c4:8d:3b:4b:eb:06:cb:76:47:d9:a4:9a:81:24:
         37:2e:18:f7:30:e4:fe:f4:3c:db:d9:ed:87:3e:98:10:9b:7c:
         6c:26:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:28:28 2026 by rpki-client