Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File:                     7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier:          MzpbU2RmcQKoH8ZPsJbVU/vVrgkCuciO47mEviZcapI=
Subject key identifier:   7D:A0:00:A4:77:68:D5:14:19:3C:56:41:0D:83:9E:6D:AF:DA:21:9C
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       21269BBA334776446C7EABD893C43F65E9BF9E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number:          040C
Signing time:             Mon 21 Sep 2026 08:43:45 +0000
Manifest this update:     Mon 21 Sep 2026 08:38:45 +0000
Manifest next update:     Tue 22 Sep 2026 12:40:45 +0000
Files and hashes:         1: AS215849.asa (hash: QZI6Yvoi4hUBSRXS5p8Ju6CY1eYmF0fNOYB66ntflGk=)
                          2: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: l+UizUknOYcAFtSjw/sa3BSMmKlP4TS8nTNZvusDxPs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:26:9b:ba:33:47:76:44:6c:7e:ab:d8:93:c4:3f:65:e9:bf:9e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Sep 21 08:38:45 2026 GMT
            Not After : Sep 22 12:40:45 2026 GMT
        Subject: CN=7DA000A47768D514193C56410D839E6DAFDA219C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c3:4e:6e:72:fe:15:fd:78:d6:0e:a2:86:f1:
                    67:40:8c:5e:46:5c:70:a2:fb:3f:f2:f9:e1:b0:f4:
                    80:cb:21:c0:c8:10:80:9e:84:d4:c4:49:00:93:26:
                    35:ef:aa:0b:10:d6:ea:b2:bc:99:ea:e1:68:f1:46:
                    16:47:63:b7:d5:93:3d:d8:82:35:e3:b5:99:bb:2d:
                    0f:17:42:28:f4:56:fc:99:0e:b3:db:04:bb:f3:8d:
                    a2:b4:39:1e:40:d6:8e:c8:ca:c7:07:f0:53:a7:fc:
                    0a:c3:2c:6e:ec:66:0f:78:b3:85:ea:95:f5:fa:fa:
                    38:cc:8f:7f:c0:cf:2a:4e:ab:95:bd:9e:08:ca:a4:
                    e6:dc:71:a2:30:9d:72:68:3f:e6:44:bb:be:77:f5:
                    b9:6e:ac:97:d9:88:cf:6e:11:bb:9f:85:10:f7:34:
                    6b:62:ce:3f:fa:25:02:14:06:ff:ba:5c:8e:c3:6c:
                    e9:df:d5:11:d0:eb:55:57:f8:0d:06:be:ca:2b:a1:
                    32:14:9c:14:12:d3:a9:b6:fb:04:4b:b8:6a:a9:c3:
                    38:c8:48:53:b1:f8:94:ca:2a:9a:cd:05:7d:3d:fd:
                    f1:a9:35:6f:99:41:4c:0f:9f:8f:21:2f:08:90:a1:
                    ad:5e:fd:01:c9:b9:17:02:ff:e4:cf:4f:0d:9c:aa:
                    8a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A0:00:A4:77:68:D5:14:19:3C:56:41:0D:83:9E:6D:AF:DA:21:9C
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9c:ce:14:7c:4b:7a:92:97:d5:68:f7:c4:d1:6c:44:8a:ed:
         b1:00:92:b6:5d:5a:5a:b9:d1:de:a0:d6:f0:56:fc:92:38:37:
         ca:50:01:d4:ab:df:06:39:7b:f4:c9:a5:dd:f2:2e:8f:27:d7:
         93:0e:58:4a:d3:d6:75:7d:8c:f1:a7:d4:ff:23:4e:22:60:be:
         38:98:94:e6:8d:bf:e1:92:74:5e:16:69:77:a1:46:74:d5:75:
         1b:93:94:cf:a8:fd:48:ae:09:d1:14:4a:af:64:63:1c:cb:a9:
         36:fe:7f:1a:1e:23:8d:f1:90:42:bf:d2:38:51:c2:58:06:7f:
         fd:72:3a:f5:d5:15:94:95:29:85:e1:3d:04:d4:bb:65:27:cc:
         7e:4d:89:bc:1c:d6:e0:2b:21:9b:19:90:72:97:90:92:5f:35:
         05:6b:04:d8:c4:ce:cb:27:e7:c4:84:9f:a7:dd:9a:16:26:65:
         1c:11:67:91:40:a5:b2:df:6b:a0:fe:e2:25:6d:c1:21:3f:72:
         78:b1:0e:47:23:50:1b:f1:5d:18:99:0b:dd:b1:5e:87:5d:f4:
         a5:8e:88:66:14:be:d8:1f:79:ab:39:9d:99:f7:dc:04:84:7d:
         27:6a:9b:ea:d5:8f:d9:e7:3d:e6:6a:f5:94:78:06:87:1e:2e:
         ea:44:3e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:06:45 2026 by rpki-client