Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
File:                     E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft (raw, json)
Hash identifier:          BpniskJM9d5QBIcAS4ji1/xtPJOLfF1v6C/0GrOt0VM=
Subject key identifier:   BE:C4:14:29:44:64:36:52:37:CF:CB:8F:55:F7:BD:38:5D:B7:01:44
Authority key identifier: E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
Certificate issuer:       /CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Certificate serial:       58A6DF445F3EE95A7246FCC77353FBF18714A8E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
Manifest number:          0233
Signing time:             Wed 14 Oct 2026 07:38:50 +0000
Manifest this update:     Wed 14 Oct 2026 07:33:50 +0000
Manifest next update:     Thu 15 Oct 2026 10:55:50 +0000
Files and hashes:         1: E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl (hash: ITXTVQ3VJDwOSLnrx2lsP6DmPyg/+pa23c4dFjVyDH8=)
                          2: AS207529.asa (hash: BvphpJpL2uB0KRh6/fjlm/kgQ9a7ekqRvAQY9puR0n8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 10:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a6:df:44:5f:3e:e9:5a:72:46:fc:c7:73:53:fb:f1:87:14:a8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
        Validity
            Not Before: Oct 14 07:33:50 2026 GMT
            Not After : Oct 15 10:55:50 2026 GMT
        Subject: CN=BEC414294464365237CFCB8F55F7BD385DB70144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:a4:2e:7f:90:ae:a0:49:32:0c:30:cf:c2:
                    92:f0:42:05:a2:cb:a2:d3:9e:24:b8:14:3a:41:4f:
                    a8:b7:a7:9a:16:88:cb:39:e7:b6:1b:54:aa:a9:c6:
                    d2:c4:5d:f2:2a:d4:9b:b9:f0:e2:26:98:27:27:86:
                    66:5a:43:46:29:2b:71:a5:91:fb:18:ec:25:fb:ca:
                    90:3a:7e:bd:ce:9b:33:1f:7d:c5:07:9f:bc:af:2e:
                    6f:8e:6e:ed:12:cd:0b:32:93:6f:e3:5c:93:f1:69:
                    3e:ca:90:d7:40:f6:3a:9e:32:6b:a9:fc:88:3d:64:
                    db:46:f6:2e:30:59:97:13:7e:86:f4:62:6b:b0:c3:
                    8d:7d:24:5e:66:eb:b0:12:14:37:5f:7b:24:39:13:
                    24:e2:13:e9:fa:67:a7:69:08:54:58:e0:9d:fb:c8:
                    26:b2:45:da:3e:d9:cd:6a:7f:6c:6f:66:b0:0e:0b:
                    d1:3e:32:11:b8:69:a6:b7:69:65:9f:8e:2c:cd:ab:
                    1c:13:46:22:a5:e7:3e:42:68:d5:61:d9:45:db:5f:
                    da:62:18:6d:44:02:50:75:88:36:7c:75:db:ae:b9:
                    99:70:61:27:10:30:43:e3:6b:b4:e9:e2:1e:70:a4:
                    4e:31:d1:40:7c:52:41:48:c1:24:41:ea:c4:ff:7b:
                    a9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C4:14:29:44:64:36:52:37:CF:CB:8F:55:F7:BD:38:5D:B7:01:44
            X509v3 Authority Key Identifier:
                keyid:E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:57:b4:12:06:de:3c:47:dc:18:a9:7a:66:a5:3d:1b:31:6c:
         17:93:8e:ed:4e:7b:e9:19:99:f5:08:e4:3d:a0:7d:19:6a:3d:
         d2:68:37:ea:d0:f1:03:ac:19:5b:76:2b:10:63:34:92:06:f2:
         73:d7:3b:42:90:90:40:1b:a5:55:33:72:9b:29:ef:ea:ce:a0:
         ca:80:13:92:f8:80:d5:e1:da:a7:58:80:f3:d8:c8:1b:ff:05:
         7c:32:bf:1c:bb:c2:63:59:57:fa:ae:5f:cb:f2:d6:5e:cb:ff:
         31:26:a3:14:c3:fd:70:e9:75:8c:01:b1:8a:90:81:b8:a5:1d:
         aa:5e:35:68:76:e4:fb:b5:4a:86:bc:09:54:97:34:44:cc:43:
         35:b9:41:32:82:bb:db:ef:8e:8f:35:42:b6:71:36:bc:82:c3:
         6f:64:da:4a:c9:46:ec:ba:f5:25:81:ea:c1:b4:ad:f8:2b:aa:
         3b:d5:6c:75:4b:9b:de:a8:d1:c2:94:3b:9a:81:83:28:f8:41:
         6a:73:71:1e:60:99:5e:5b:ef:71:5d:b7:15:8b:75:5c:e9:d2:
         3f:65:15:99:25:f5:38:98:2c:2c:73:77:9d:2f:4c:d8:86:84:
         1b:5e:30:10:96:c8:fa:2f:07:36:fb:be:d8:52:12:57:e7:e3:
         aa:f6:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:17:17 2026 by rpki-client