Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File:                     7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier:          Jl0FeJFFFGYz0khZaMoZBdB6tCuFjx2K1lNBP6JrBA4=
Subject key identifier:   F8:70:B7:78:F2:C5:84:B7:64:71:FA:38:4E:77:C2:76:B6:BE:8E:E8
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       3F1F5900E3C2CFC290298679A34790D237CD8584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number:          0402
Signing time:             Mon 14 Sep 2026 00:23:39 +0000
Manifest this update:     Mon 14 Sep 2026 00:18:39 +0000
Manifest next update:     Tue 15 Sep 2026 02:27:39 +0000
Files and hashes:         1: AS215849.asa (hash: QZI6Yvoi4hUBSRXS5p8Ju6CY1eYmF0fNOYB66ntflGk=)
                          2: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: tB080yL7PieHw8W90jYPoEGCBt2bVFVQz8BOpRYvnX8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Sep 2026 02:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1f:59:00:e3:c2:cf:c2:90:29:86:79:a3:47:90:d2:37:cd:85:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Sep 14 00:18:39 2026 GMT
            Not After : Sep 15 02:27:39 2026 GMT
        Subject: CN=F870B778F2C584B76471FA384E77C276B6BE8EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:0a:e1:a0:23:fc:36:c2:ca:d2:6a:22:b5:
                    10:cb:cc:ca:57:8c:ee:41:0e:ba:42:53:ce:df:34:
                    67:7c:1d:60:34:e5:eb:58:29:cf:36:1a:4b:a3:4c:
                    c3:0a:e2:ec:12:f7:72:6a:af:e6:7d:52:83:da:ec:
                    62:0f:e6:b7:c7:c1:43:dd:99:1d:bd:82:c7:8e:8b:
                    ff:86:95:c9:ad:86:0f:5f:56:3c:24:4f:b9:81:01:
                    39:41:3e:2c:33:be:3d:32:47:74:66:9a:74:19:b3:
                    b1:11:60:38:c1:b4:c4:22:4a:ec:90:4e:bd:d5:be:
                    f8:6b:6c:79:49:7a:58:bb:86:ff:04:21:0c:a5:45:
                    4d:43:0b:d5:e4:d0:cc:13:db:70:0d:25:ec:75:17:
                    32:fc:99:8e:a7:96:e8:f8:57:4a:bb:f1:68:bd:b3:
                    59:eb:44:1f:84:aa:6c:0b:17:1b:c9:ea:dd:c2:5b:
                    17:1f:25:82:b0:8b:92:ee:8c:fd:54:d6:fb:b9:84:
                    99:c8:e6:26:84:bf:68:43:8b:5e:96:b9:ba:82:2d:
                    54:b8:c9:41:fc:e8:64:aa:e4:03:ee:d3:f7:e5:ff:
                    4a:37:44:3a:23:91:5e:0b:70:8c:3d:ee:35:ad:16:
                    44:0a:7f:7c:5b:66:69:c4:83:2b:02:75:2d:69:25:
                    b6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:70:B7:78:F2:C5:84:B7:64:71:FA:38:4E:77:C2:76:B6:BE:8E:E8
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ca:8f:54:63:3c:ec:d4:ee:5c:4e:43:d3:39:db:58:c3:11:
         6f:fc:c5:14:1c:39:6f:3c:42:7d:24:a2:fd:64:ef:67:eb:b0:
         96:77:7e:de:9d:4a:b1:ab:42:f8:b7:a7:5f:90:44:d9:6d:1a:
         ad:0b:8e:2a:f6:30:3d:b2:05:e3:be:dd:ed:14:1d:9f:54:ca:
         95:84:ee:3d:dc:ea:bf:21:f5:8e:99:23:61:e6:bb:06:49:63:
         c9:6e:01:9c:21:68:09:6b:7b:aa:39:b2:03:29:82:b7:7e:12:
         2c:7e:b3:4f:23:55:11:7f:ff:ed:19:54:db:a2:e2:3d:e5:81:
         25:b4:ea:f1:e3:c2:e1:48:8f:e5:2f:24:08:6d:e2:85:27:15:
         b8:9c:9a:8e:8c:9c:a0:13:ba:3d:85:a9:7b:cd:aa:be:53:cf:
         73:87:fe:ee:08:57:3f:e9:1a:15:93:8e:b2:7c:d5:e2:dd:89:
         0e:d7:b7:cc:3d:eb:2e:76:32:51:a5:6c:ca:a4:7c:dc:df:28:
         b7:33:80:05:b3:33:b1:4d:e4:e0:cd:fc:69:9a:f9:4f:d9:30:
         c9:72:4a:06:04:2e:0b:c5:00:11:0f:b0:ae:b0:13:fd:ee:f4:
         ce:30:3d:c0:de:e4:c3:9a:03:e2:b8:97:89:6f:4c:e9:4e:0d:
         36:f7:4d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 17:45:32 2026 by rpki-client