Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
File:                     E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft (raw, json)
Hash identifier:          l37riLMFGCQAPshCztCZvWmdEBQJGlCP7b7QXfiwUA4=
Subject key identifier:   9B:C5:6E:D6:8E:B5:CC:8F:87:E5:EC:63:CD:0E:E4:CA:53:1A:0E:FF
Authority key identifier: E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
Certificate issuer:       /CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Certificate serial:       56121504C7FDE893BDC1BD42028D58D03E34C46A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
Manifest number:          027D
Signing time:             Mon 15 Sep 2025 15:13:22 +0000
Manifest this update:     Mon 15 Sep 2025 15:08:22 +0000
Manifest next update:     Tue 16 Sep 2025 15:19:22 +0000
Files and hashes:         1: AS215131.asa (hash: /Ig9Y9j+GErTcuTTgHxL2iaOhUZXWZH+p25xdO/uCfk=)
                          2: 323030313a3637633a6535633a3a2f34382d3438203d3e20323135313331.roa (hash: /8lHhKIuzTcsmBKH0ioYgR3QJ/GmZe2e/TKZ5GWlTv0=)
                          3: E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl (hash: QRmzpOmgUzOuWO17cLPnlOk1alcB6W2l9D6zhNt9B1E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 13:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:12:15:04:c7:fd:e8:93:bd:c1:bd:42:02:8d:58:d0:3e:34:c4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
        Validity
            Not Before: Sep 15 15:08:22 2025 GMT
            Not After : Sep 16 15:19:22 2025 GMT
        Subject: CN=9BC56ED68EB5CC8F87E5EC63CD0EE4CA531A0EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:be:3e:37:1f:e6:e1:24:aa:29:2a:04:09:
                    2d:ac:57:8b:c2:39:86:78:d5:ae:b2:e4:5c:d0:45:
                    a1:e8:fb:d2:6e:12:8a:1e:68:87:ef:41:30:db:16:
                    7f:d5:8a:bf:4d:94:08:ea:57:c7:86:04:84:38:52:
                    8e:d1:4c:30:71:77:a9:84:75:2c:1c:da:33:1b:dd:
                    82:21:da:82:70:c2:06:d5:2b:3b:5c:87:6b:76:f4:
                    fe:b0:d7:89:e4:06:52:c6:75:b5:50:51:1e:04:4a:
                    f9:b2:ed:eb:ff:6a:6a:bf:3a:f2:05:56:ae:13:e6:
                    50:2d:98:0a:80:14:11:33:93:13:7d:fa:55:24:f5:
                    30:4d:7a:3d:b7:5f:a7:63:0d:3b:52:92:15:46:43:
                    07:94:ae:a6:5e:2e:57:22:ea:9d:7c:b2:66:08:7b:
                    af:58:d2:05:e3:e3:1e:33:9e:36:c2:54:4d:81:8e:
                    53:c2:e9:ea:17:74:65:64:32:b4:6e:0e:ce:05:37:
                    28:61:d4:f8:2a:ab:b4:74:af:a2:9f:0a:b8:c6:02:
                    a2:de:69:bf:c4:d2:fb:1a:03:79:a3:ce:de:ad:9a:
                    4e:bd:b2:59:99:fb:1e:2b:84:60:62:6d:25:61:ac:
                    7b:21:9a:b2:68:14:5d:3a:7b:e1:cd:fd:62:59:dc:
                    8f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C5:6E:D6:8E:B5:CC:8F:87:E5:EC:63:CD:0E:E4:CA:53:1A:0E:FF
            X509v3 Authority Key Identifier:
                keyid:E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:7b:a6:52:cb:11:96:c8:8b:66:a8:57:a2:c5:85:e4:66:77:
         5a:12:2c:8b:f0:00:64:03:63:0f:14:86:7b:1a:3c:59:b9:27:
         a5:a3:7a:cc:ee:71:f4:cb:ed:51:0d:c3:72:60:0c:6f:38:4f:
         3a:8f:0b:1e:92:4d:c2:bf:eb:b8:59:b3:8f:72:a0:08:77:f2:
         97:ab:db:f6:84:9b:cd:9f:b5:d7:5d:2e:7c:58:3f:cd:6d:66:
         48:42:5a:e6:83:3b:f3:f5:4d:22:4c:9b:9a:2d:1d:2f:48:5f:
         7c:d8:e9:f5:f0:01:13:cf:06:24:94:4a:93:40:64:a3:81:66:
         b8:e3:d7:68:ca:cc:33:56:c1:4a:a0:c9:1a:8e:06:2b:10:9a:
         ec:2c:2a:fb:0a:f0:67:65:05:c8:35:7e:f2:f2:af:64:9d:f2:
         39:d1:bb:95:98:52:cb:d5:ad:86:57:94:5c:3e:23:c2:88:ef:
         e6:93:8c:da:aa:13:e5:05:79:ba:a6:9a:17:2b:52:12:33:9c:
         14:63:f1:87:0e:34:b1:b9:42:48:9b:51:86:8e:b9:44:eb:e1:
         0d:e0:42:54:30:f7:05:71:c2:ad:63:36:b1:22:e8:f2:54:4a:
         c1:c8:78:54:f4:41:c4:f4:a6:b6:e8:4c:65:4c:e0:a2:67:7c:
         a2:e1:20:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:29:22 2025 by rpki-client