Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
File:                     E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft (raw, json)
Hash identifier:          MbIr2ypzEip4NndT26mZ1sj1yRZlsMOBwUvekok2NvY=
Subject key identifier:   32:81:DF:F7:6C:A0:5E:A2:81:48:8D:50:1A:22:60:75:90:61:D5:F0
Authority key identifier: E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
Certificate issuer:       /CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Certificate serial:       63FA6526B8B6765BE01C29F05BBD8A36931F83CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
Manifest number:          01A2
Signing time:             Mon 29 Jun 2026 00:15:20 +0000
Manifest this update:     Mon 29 Jun 2026 00:10:20 +0000
Manifest next update:     Tue 30 Jun 2026 01:23:20 +0000
Files and hashes:         1: E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl (hash: CgAbww0b/wdVcawuKjsEjiJN7WlbSpN3kYsIUQu4Y6s=)
                          2: AS207529.asa (hash: IIRswsrSxpeGT8GqkHPVPK3eICy6R7tJ2Q8SYyHawIs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fa:65:26:b8:b6:76:5b:e0:1c:29:f0:5b:bd:8a:36:93:1f:83:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
        Validity
            Not Before: Jun 29 00:10:20 2026 GMT
            Not After : Jun 30 01:23:20 2026 GMT
        Subject: CN=3281DFF76CA05EA281488D501A2260759061D5F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:ec:60:d8:b0:c8:6f:eb:9b:de:1a:3c:64:
                    98:d1:21:24:82:d6:0d:3b:0b:8a:4f:c2:f9:7d:c3:
                    ac:47:22:9f:53:42:16:5e:fb:d1:46:9a:3e:d9:fc:
                    51:8d:57:53:c3:29:6c:8d:32:44:21:8f:2e:a0:cb:
                    3c:e7:89:d2:d9:a8:74:ba:9f:cd:c0:52:bb:88:7f:
                    d1:db:d0:34:14:66:2e:ae:3a:53:11:cb:80:da:3a:
                    f7:13:65:be:ee:24:fc:cb:30:3c:01:0c:39:4b:2c:
                    6f:64:3c:05:93:41:f5:1e:f7:01:4c:b6:bf:cc:c2:
                    4d:b5:16:91:86:5d:90:c7:dd:69:cd:bc:fa:00:c0:
                    b7:77:bb:1f:57:d0:68:cd:ef:3a:ad:b4:01:ba:0f:
                    0a:37:99:be:4d:ce:61:7e:c8:0c:f7:a8:55:da:fa:
                    8f:d7:a9:84:70:2e:aa:d5:6f:7a:a8:f1:32:cf:91:
                    0d:76:ab:69:b5:07:af:6d:6f:28:5f:94:c6:20:80:
                    93:04:fc:af:3b:38:f1:a3:c0:35:b0:0e:56:80:df:
                    99:bd:d0:fd:07:5c:33:bb:24:64:7e:33:cf:07:17:
                    af:b9:c7:64:0d:cd:df:86:dd:6e:d0:7e:ae:aa:92:
                    f3:f6:40:82:e4:bc:1e:77:b5:aa:5f:ab:07:6c:b5:
                    4f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:81:DF:F7:6C:A0:5E:A2:81:48:8D:50:1A:22:60:75:90:61:D5:F0
            X509v3 Authority Key Identifier:
                keyid:E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:41:72:d0:b8:20:8a:d2:86:95:f7:04:0b:a5:d6:fc:ec:34:
         e6:82:1c:72:ea:6b:c4:0f:c6:8e:6c:80:e9:df:9f:2f:1c:b0:
         3d:33:32:3e:a9:a5:26:1b:4a:ff:b5:1c:1f:3a:86:7f:e0:ee:
         69:2c:16:68:ae:c1:f4:e7:11:ba:41:5b:2d:90:89:d8:d8:fe:
         ce:ef:1f:ba:9d:fd:d3:17:d3:e8:16:38:fc:96:8e:29:d8:f6:
         21:fe:51:72:2c:ab:56:6d:3f:c1:89:af:5a:fc:30:da:34:a4:
         63:47:00:26:a6:69:ba:27:ec:3f:06:80:20:03:ca:bd:40:56:
         f1:07:9f:3e:0c:6e:2c:0e:86:3a:2c:92:bb:de:18:96:99:87:
         39:a9:61:9d:44:b7:07:8c:e3:50:8d:ea:39:96:8d:87:f2:bd:
         34:23:00:0d:31:cc:10:a0:17:62:82:2e:41:58:bc:f2:d8:63:
         c3:bb:86:ba:8a:75:28:0d:0c:43:4f:bd:5e:df:2f:d5:81:1c:
         02:01:de:a2:52:61:0b:f0:87:96:5e:09:9f:16:80:be:4a:90:
         ff:1b:14:b2:b2:e9:a0:ba:bc:6e:48:0a:fa:97:65:99:70:e6:
         3c:9f:24:20:a4:5d:c4:48:ec:d3:e6:73:35:fc:18:9d:45:07:
         53:3c:37:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:46 2026 by rpki-client