Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
File:                     E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft (raw, json)
Hash identifier:          VsYtE007XQdPjHrmYpHm6yDUlBnINM9LFkLcgMiZ4P0=
Subject key identifier:   28:3D:17:17:12:1E:D8:1E:F0:75:E0:17:17:DF:91:D4:C2:5D:29:6D
Authority key identifier: E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
Certificate issuer:       /CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Certificate serial:       1420AF621F389621BBD61BEBF57B6C38F57558EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
Manifest number:          0116
Signing time:             Wed 18 Mar 2026 20:02:57 +0000
Manifest this update:     Wed 18 Mar 2026 19:57:57 +0000
Manifest next update:     Thu 19 Mar 2026 23:06:57 +0000
Files and hashes:         1: AS207529.asa (hash: 91RgF1Q59DuPxrUsovbhCfTP8zMA9dTvBr19p6JV5F0=)
                          2: E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl (hash: VUDHA2BR+N0t3eYfi4MTH3aBSWmHjpuB4OiQuJJUpps=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Mar 2026 23:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:20:af:62:1f:38:96:21:bb:d6:1b:eb:f5:7b:6c:38:f5:75:58:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
        Validity
            Not Before: Mar 18 19:57:57 2026 GMT
            Not After : Mar 19 23:06:57 2026 GMT
        Subject: CN=283D1717121ED81EF075E01717DF91D4C25D296D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:cb:21:00:ad:94:81:ad:28:31:07:a3:75:
                    c0:c7:b8:26:c4:f2:11:09:27:4c:0b:77:26:18:77:
                    3a:e1:8b:d2:90:89:59:66:53:0d:87:1d:ae:5e:49:
                    3b:30:c7:ce:14:01:2d:57:06:74:2f:e4:2c:18:61:
                    88:27:5f:7f:8f:36:20:00:2e:61:e1:d4:f1:1f:76:
                    90:73:bc:67:2e:65:2a:80:a3:13:f1:af:23:51:60:
                    30:a2:53:cb:e7:25:37:20:a7:76:60:cb:ad:89:34:
                    d9:ce:c2:37:73:ae:fc:a9:ed:9f:06:b2:e3:cc:5b:
                    9b:50:48:e7:e3:f5:e9:d3:61:7d:3d:c4:5d:ad:4b:
                    d7:40:ea:8e:9f:2f:c2:63:9a:11:b4:36:ed:8e:a4:
                    b6:45:60:4e:57:ba:cf:6f:f9:e2:16:61:5f:6e:fc:
                    25:8b:f3:12:54:96:e4:2d:eb:ee:a2:ce:b5:43:ff:
                    a5:76:3d:52:25:e8:0b:e1:3e:8f:60:9a:27:d0:61:
                    d8:43:24:ac:8b:4b:b1:6e:6f:bf:42:af:c2:70:f0:
                    1e:e8:91:f5:ff:c8:de:3d:77:71:78:41:53:9f:71:
                    88:ec:49:c6:ed:d2:be:28:4a:55:3a:41:18:62:ab:
                    5f:a8:db:bf:c0:47:9b:42:15:4e:f1:62:a5:f4:1e:
                    77:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3D:17:17:12:1E:D8:1E:F0:75:E0:17:17:DF:91:D4:C2:5D:29:6D
            X509v3 Authority Key Identifier:
                keyid:E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a9:b3:e2:29:70:04:bc:25:e7:e5:ce:bb:09:44:67:0e:9c:
         38:c5:fb:43:a9:cb:83:2f:26:8d:ef:5b:7b:e9:55:a4:c6:c1:
         30:d7:90:b6:af:b8:73:ec:a8:fe:90:99:19:e4:f0:04:39:d4:
         36:75:f9:2e:19:70:43:2d:af:88:ac:c6:16:81:78:6c:36:70:
         58:64:1a:ff:a3:ed:5b:0a:3c:5d:76:55:3d:e8:8c:f8:d6:63:
         f7:1f:66:39:5f:44:88:5c:80:ce:7a:1c:7c:6e:80:e2:18:30:
         1e:0c:46:5c:75:9f:7e:8d:db:68:ca:da:5e:57:cc:29:42:d1:
         bd:b2:bb:43:ef:81:ca:a1:2f:79:40:dd:c8:5b:e7:d5:5c:a9:
         ea:2f:48:8d:6d:1a:e4:41:ce:2a:03:e8:a0:53:e6:c3:6e:cb:
         0f:4f:64:3a:93:99:d9:1a:cd:a7:87:b5:ca:b3:67:8b:35:77:
         5c:1e:48:3e:e8:9f:d5:d7:89:94:d1:ae:83:07:95:7b:3e:c8:
         0b:d9:ed:e9:34:c7:d1:d0:80:5e:31:8c:10:96:17:ce:a8:4a:
         0d:f8:75:15:b8:9b:52:da:f7:e4:20:2d:89:3d:36:a5:8f:a9:
         39:6e:c8:7f:8b:bf:e1:d9:45:51:f4:9c:d5:f5:a9:12:9a:72:
         19:a1:a0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 10:51:10 2026 by rpki-client