Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
File:                     E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft (raw, json)
Hash identifier:          fwxnSBdvdN8twA1E9Qm835+jXYNmTdLZV64bLXOi1f8=
Subject key identifier:   3E:B2:8E:D6:F0:D6:57:BE:5C:3C:B0:18:18:C0:FA:E7:90:E2:8A:9A
Authority key identifier: E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
Certificate issuer:       /CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Certificate serial:       56CC2AD32BFFA6FF00F420679DFB6076F4C5819F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
Manifest number:          0D
Signing time:             Mon 08 Sep 2025 16:47:26 +0000
Manifest this update:     Mon 08 Sep 2025 16:42:26 +0000
Manifest next update:     Tue 09 Sep 2025 18:52:26 +0000
Files and hashes:         1: E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl (hash: x1vs7a6WgK3IawZvBUdXAJEO4ypDaBttI1uP2Il+i8Q=)
                          2: AS207529.asa (hash: syj0nCiiS9Te/nJQIijROTM0hpDggaLBynzrFP43oRk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 18:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:cc:2a:d3:2b:ff:a6:ff:00:f4:20:67:9d:fb:60:76:f4:c5:81:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
        Validity
            Not Before: Sep  8 16:42:26 2025 GMT
            Not After : Sep  9 18:52:26 2025 GMT
        Subject: CN=3EB28ED6F0D657BE5C3CB01818C0FAE790E28A9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:cd:96:c2:6a:56:fe:48:16:f4:1d:be:97:
                    3f:dc:b7:23:77:9e:92:70:6b:0d:6c:7c:ab:c3:2f:
                    b9:f1:34:58:ce:8b:39:e8:31:f0:9a:a2:30:0e:ec:
                    66:e7:6e:d5:8b:00:b5:0d:73:94:30:98:29:88:92:
                    76:84:5a:bc:86:03:50:d7:59:15:81:39:8f:52:3f:
                    da:f6:c7:45:9a:6c:36:e1:ba:c0:8c:d9:da:dd:4f:
                    ba:08:10:ec:f2:8f:2a:bf:80:15:20:7a:cd:98:9c:
                    1e:d5:62:4b:c7:24:ef:05:34:9e:d5:3d:2c:2f:2d:
                    ed:7f:8d:73:20:06:66:65:f3:fc:28:e5:a4:27:69:
                    76:28:2a:e9:31:4c:3b:b8:d4:e7:e0:11:7c:da:d3:
                    a7:c2:db:4e:55:53:9f:0c:c3:0a:26:5e:b0:8c:c5:
                    67:2e:94:9c:92:f3:12:8d:ee:72:0e:e7:0f:23:ca:
                    0f:12:ea:e9:23:83:21:e9:49:47:85:7c:57:46:dd:
                    38:ea:67:cd:35:29:80:ca:25:40:05:d0:07:65:f6:
                    9f:7f:2f:10:32:e3:a7:c5:f3:03:68:4b:ec:ce:9c:
                    0d:58:94:c2:bb:84:e2:14:ee:ac:51:2b:89:88:e7:
                    87:a3:ee:e5:17:d9:f7:ab:d3:35:c5:ef:22:e3:d2:
                    51:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B2:8E:D6:F0:D6:57:BE:5C:3C:B0:18:18:C0:FA:E7:90:E2:8A:9A
            X509v3 Authority Key Identifier:
                keyid:E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:96:fb:eb:21:52:8d:99:ca:6a:81:77:ce:23:ce:ba:37:04:
         8c:99:76:9c:d8:04:10:7c:61:78:c4:20:80:2d:04:a0:ac:25:
         f4:b7:3d:9e:da:71:54:e0:62:08:43:b1:81:bb:0c:1e:d5:84:
         d0:03:84:9c:4e:bc:fc:c2:1a:28:3b:1f:57:25:3e:46:18:c3:
         d3:92:c6:3b:b7:bc:68:38:38:de:56:eb:1a:17:c4:3e:44:ec:
         14:55:84:67:0b:ae:b6:09:c7:85:28:4d:8e:26:65:4e:34:8c:
         40:7c:b6:80:d0:e7:4a:75:40:82:56:1f:89:a8:bd:63:da:0e:
         9a:85:ef:a9:1f:bb:32:f8:f3:ad:7d:10:b1:d4:bb:00:33:76:
         35:aa:69:b2:4c:1a:4d:b2:1a:87:29:05:8d:2d:f3:ca:e2:ce:
         fd:66:59:5e:01:0c:7c:50:98:8d:63:a0:35:34:88:59:ea:05:
         a4:eb:b7:3c:07:76:11:dc:ed:cc:ec:e8:3b:1b:99:f1:c7:94:
         83:9d:ba:ed:3a:e2:e7:be:7e:35:3c:7d:32:59:13:0f:e2:14:
         d8:69:f9:a8:9e:61:e6:98:98:53:6a:8b:37:ab:4f:a0:18:e8:
         74:4d:6c:dc:80:30:a3:38:9e:74:c8:95:b2:42:3d:68:2e:e2:
         fc:2b:55:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:33:10 2025 by rpki-client