Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
File:                     F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json)
Hash identifier:          hEpQWB8NN6h25fGFDBkWBIb5A3CyE/8zS124IcgZeAM=
Subject key identifier:   EE:9A:B0:AA:FC:DC:50:77:A2:2A:8E:7B:A0:81:13:77:FE:2C:E0:F6
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       6F029CBAA24816B27635589B70C67A7E25C75065
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
Manifest number:          04EA
Signing time:             Fri 23 Oct 2026 19:12:39 +0000
Manifest this update:     Fri 23 Oct 2026 19:07:39 +0000
Manifest next update:     Sat 24 Oct 2026 21:58:39 +0000
Files and hashes:         1: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: ROsrwkR7nWLwQbpaSZWVWx6M1N5sHIdeiD5wZMPm00g=)
                          2: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: e/tIggSliMfvLsrOK3TL56ocLzzWJppRPJ+XGEL8VYQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 21:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:02:9c:ba:a2:48:16:b2:76:35:58:9b:70:c6:7a:7e:25:c7:50:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Oct 23 19:07:39 2026 GMT
            Not After : Oct 24 21:58:39 2026 GMT
        Subject: CN=EE9AB0AAFCDC5077A22A8E7BA0811377FE2CE0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:52:69:9d:59:21:fa:1a:75:cd:dc:1d:d9:
                    60:2d:d9:50:2c:34:c8:6b:24:66:38:2e:9a:83:9c:
                    c8:f2:12:11:18:93:38:d9:da:c8:76:36:fe:a7:db:
                    e3:82:84:8b:8b:2e:89:22:31:3d:d8:b0:34:9d:80:
                    20:f0:c0:df:6d:2e:f3:f9:89:e0:a5:79:13:61:d9:
                    7a:8d:e1:7a:17:b1:10:d9:7c:3b:8a:f6:70:1a:07:
                    23:08:39:4b:f1:76:72:c7:19:26:66:87:f1:05:4b:
                    1a:c6:2e:c4:04:20:b0:4b:08:02:26:d2:b1:94:f3:
                    5c:a3:5d:b3:41:b9:e9:7f:cf:0d:6f:e8:a4:eb:c5:
                    02:8f:ac:07:45:01:9d:c0:3e:78:b4:fb:9e:af:ac:
                    2f:88:a6:32:95:84:67:d9:ff:38:0a:de:7c:2c:01:
                    9d:1b:0c:c9:3d:46:cd:05:dd:e2:fa:88:89:3b:67:
                    c3:ab:11:24:24:08:15:10:5e:55:98:cb:16:c4:10:
                    75:ef:60:91:5b:90:1c:ae:1d:52:59:0a:96:d9:74:
                    bf:21:6e:64:9f:79:42:88:c8:ba:cb:e3:c2:ba:c8:
                    94:1c:1f:52:ed:32:41:d7:55:ce:1a:a7:aa:4a:26:
                    d2:19:90:3e:45:a4:3d:c3:2f:e9:a7:98:e9:e1:fd:
                    02:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9A:B0:AA:FC:DC:50:77:A2:2A:8E:7B:A0:81:13:77:FE:2C:E0:F6
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:cd:24:1d:fe:7f:7e:11:53:8d:ec:06:98:ad:6a:84:53:b9:
         f6:b9:c5:03:95:fa:2e:4c:1a:bb:ee:12:28:a2:6d:68:25:de:
         98:2c:ff:64:d7:32:76:50:cb:45:a0:54:fe:72:bd:98:54:63:
         ea:11:c3:cf:72:65:3b:7f:64:e1:77:cc:48:55:ac:e3:73:83:
         e5:be:a1:87:25:22:83:aa:73:3e:7d:38:dd:7d:4e:78:fe:21:
         06:90:79:59:4c:43:f8:19:44:06:f4:98:8c:1f:73:75:ec:7b:
         44:1f:e7:8b:af:e6:b4:77:a3:07:48:f4:d6:fc:60:66:8b:b8:
         48:1e:af:d9:08:69:d9:98:b9:a4:85:8c:ae:c5:b9:91:58:f6:
         c6:a4:36:56:70:34:cc:66:cf:34:39:6b:41:e7:4b:d4:ee:c5:
         9e:c2:d6:63:7c:ca:9e:55:ed:df:d4:3a:90:35:02:fa:3b:c4:
         e7:e8:0c:18:70:75:38:5e:40:ee:00:11:93:2a:71:4d:53:bd:
         43:5f:c1:88:c4:c3:80:0e:11:07:ce:a3:e6:16:62:2d:92:a0:
         86:39:97:0a:ca:07:e4:67:dc:1e:a8:81:56:9d:1e:51:1b:41:
         39:53:1c:1e:2c:ca:cf:df:8a:0d:96:fd:bb:91:c5:68:d2:c2:
         f2:c2:4c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----