Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
File:                     47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json)
Hash identifier:          DqI6dBKEzhBTUPb8SdZQ1T49l8kqDWwktFt+0pFFns8=
Subject key identifier:   C3:9F:D0:76:9C:9F:15:21:05:C1:CB:A4:7B:38:11:A7:26:2B:B5:85
Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
Certificate issuer:       /CN=47E9555355C6B007AACD5D45BF41E3383E991641
Certificate serial:       517C8B129C0512187F6FDECAA0629F6139D3218B
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
Manifest number:          066B
Signing time:             Wed 07 Oct 2026 15:18:21 +0000
Manifest this update:     Wed 07 Oct 2026 15:13:21 +0000
Manifest next update:     Thu 08 Oct 2026 17:46:21 +0000
Files and hashes:         1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: 6jOYgtki+EFzx5RHyqrtboEixEqoBQX85bKTjOmeNSY=)
                          2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: joAEPn9ggJnOJibwtnJz8w4Tu9b024lTJQ13MXp3eQ4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
                          rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7c:8b:12:9c:05:12:18:7f:6f:de:ca:a0:62:9f:61:39:d3:21:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641
        Validity
            Not Before: Oct  7 15:13:21 2026 GMT
            Not After : Oct  8 17:46:21 2026 GMT
        Subject: CN=C39FD0769C9F152105C1CBA47B3811A7262BB585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:66:15:90:81:23:5c:1e:c2:7d:fe:07:83:
                    77:59:e7:61:4f:62:de:9f:a9:b2:c6:fb:07:1e:3b:
                    7f:01:4d:53:a3:f5:80:77:86:27:3a:ae:97:b1:a7:
                    a0:ce:19:aa:b8:19:8d:d1:45:65:0c:c7:97:b2:18:
                    7b:6d:6b:4e:ad:db:49:8e:ea:7f:ed:f9:82:62:b4:
                    3e:5b:d4:90:22:d5:08:fd:ea:3f:61:9e:31:73:b5:
                    ed:03:f0:9b:50:c4:88:77:ae:92:5d:84:76:6e:49:
                    62:d2:c0:15:38:ea:df:4a:9d:b5:e7:b2:38:52:2a:
                    1d:b6:c6:50:da:da:de:d4:10:05:ee:c3:31:34:5c:
                    21:61:b6:13:ea:8d:08:57:18:1c:d9:60:00:57:02:
                    f7:f1:0f:5a:f3:08:17:35:31:17:d3:cf:b7:c2:2d:
                    32:9c:72:12:b2:48:9c:7c:1e:7b:1f:f5:04:e5:e7:
                    d8:25:de:a5:73:17:fd:64:1b:f3:6f:af:27:48:af:
                    97:69:77:b5:d6:65:be:58:57:0c:9b:5a:7f:69:ad:
                    53:fd:de:24:96:a3:e6:d3:87:28:57:f8:0b:31:13:
                    be:eb:bf:24:42:35:0e:48:6d:11:e0:d8:3d:aa:f5:
                    bb:e2:d3:fb:c0:d0:13:16:26:11:d3:37:b0:9c:e6:
                    d0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9F:D0:76:9C:9F:15:21:05:C1:CB:A4:7B:38:11:A7:26:2B:B5:85
            X509v3 Authority Key Identifier:
                keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:90:fc:2b:b6:c6:92:a7:1d:f9:e5:aa:fc:08:38:64:8a:19:
         3a:b0:86:3a:4f:b1:12:f1:bd:57:4e:66:ae:95:85:08:e6:4b:
         28:5b:cc:00:8c:1a:1b:ca:4b:d0:11:c0:37:26:fa:ab:40:03:
         29:f4:31:b5:88:47:c0:47:2e:0e:19:3c:48:05:5e:75:2a:ce:
         a8:50:0f:dc:3e:73:79:72:0f:37:1c:62:45:cc:93:86:2a:a2:
         35:08:67:76:91:7d:4e:5d:ac:75:41:4e:fe:86:48:5f:aa:dc:
         6f:9f:ff:8b:1b:c1:6a:88:09:18:2b:3f:d8:7b:bc:66:bc:57:
         08:0a:c1:d2:60:10:ad:88:53:7e:cb:d8:9d:79:73:7e:ba:d9:
         29:f6:97:af:5a:e5:5b:50:06:34:ac:e8:2d:a3:d7:5e:38:8e:
         e4:9f:91:0c:b5:38:1a:a6:a0:2e:4e:15:96:ac:cb:c6:10:2d:
         ac:c5:c7:26:42:2f:fd:87:df:94:28:54:a7:03:e9:8d:5f:c2:
         a6:8e:3a:96:65:44:aa:0c:61:61:e2:74:bf:3b:6d:94:86:c4:
         49:b8:46:fd:57:32:12:59:53:3a:f1:f5:92:51:41:56:30:9a:
         e7:40:0c:4b:cf:8e:93:e9:13:d7:b5:38:aa:96:de:da:95:07:
         e3:2c:a7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:08:09 2026 by rpki-client