Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File:                     B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier:          7zM4HVPWxzldi9jnkj1nRnWWfKQhbWpgwRKLoHU7PR0=
Subject key identifier:   77:2B:1E:34:6E:81:BA:74:D5:B5:E0:BF:F6:20:37:B4:17:2D:E5:17
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer:       /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial:       47AA923433D1BAF3B6896C5D0FA071812D64FFDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number:          03CF
Signing time:             Fri 09 Oct 2026 22:24:33 +0000
Manifest this update:     Fri 09 Oct 2026 22:19:33 +0000
Manifest next update:     Sun 11 Oct 2026 01:31:33 +0000
Files and hashes:         1: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: 20CeuogPTtA+HMA1+1ZfWvp+0XyjI5+UFV+4AOT0ZFc=)
                          2: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: 36j2xsn00r7W1b+6ZfhyLbreLpWSsmIr79rmz3LWLAU=)
                          3: AS215956.asa (hash: 09ikR/HMAWU31SyRogSTxn/jsC8mEMsW0D1qK+xqOTs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:aa:92:34:33:d1:ba:f3:b6:89:6c:5d:0f:a0:71:81:2d:64:ff:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
        Validity
            Not Before: Oct  9 22:19:33 2026 GMT
            Not After : Oct 11 01:31:33 2026 GMT
        Subject: CN=772B1E346E81BA74D5B5E0BFF62037B4172DE517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:78:ce:51:cf:4a:a3:04:6c:f1:b3:ee:aa:
                    0a:c7:72:00:3e:67:c1:32:54:f4:d6:2d:a8:c9:96:
                    db:5d:82:69:84:24:0c:28:06:7c:39:7f:d2:b3:51:
                    5e:78:3d:c2:4a:86:3a:b4:cd:46:cd:04:03:20:ac:
                    d5:f8:54:8a:4d:8a:81:0e:21:d4:a2:20:0e:d5:38:
                    e8:9a:59:4c:b4:d8:22:45:03:38:3b:a1:20:b5:02:
                    eb:22:52:d6:5d:d3:33:e8:5e:b3:64:c3:b1:0d:7b:
                    b7:76:c2:86:b5:b8:31:6b:ec:fb:5a:75:66:85:75:
                    fd:97:8d:7c:8e:90:ce:64:f6:37:c2:c5:a8:84:6f:
                    4f:ae:05:f2:97:dc:d9:f0:3c:16:01:80:c8:31:7e:
                    31:d3:cc:eb:84:52:62:59:e1:8b:57:03:4e:3e:a7:
                    80:59:1e:57:06:29:89:eb:3e:fb:54:a0:81:7c:24:
                    c0:09:ae:8d:cb:5b:d4:81:7f:cc:df:db:42:5b:eb:
                    d1:c4:24:6d:74:8b:b7:dc:23:5e:47:de:31:c1:b4:
                    48:c4:c2:b7:e3:ec:ab:23:e3:be:57:91:0b:aa:be:
                    91:4f:a8:c3:37:ff:5a:ac:65:0b:f5:b0:18:3a:ca:
                    11:2c:3b:d9:45:45:6d:3e:99:91:62:4c:56:4e:1a:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2B:1E:34:6E:81:BA:74:D5:B5:E0:BF:F6:20:37:B4:17:2D:E5:17
            X509v3 Authority Key Identifier:
                keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:61:f3:0d:ce:5f:46:92:d6:70:99:c7:ce:71:20:42:6b:76:
         2c:12:2c:4f:e7:d4:d2:e3:1d:e7:4f:8c:26:11:06:fe:64:ef:
         15:4a:5a:73:31:47:8d:26:bf:82:02:5f:bd:ae:c6:29:26:0c:
         be:a8:34:36:d9:9e:b3:ea:10:29:55:4b:5a:56:8a:81:ac:8d:
         c8:17:ea:b4:a0:71:0f:02:57:55:2a:a4:11:a7:5b:a5:00:37:
         10:c8:ac:0d:58:47:8c:4d:9b:ad:b1:c9:d2:c8:30:01:88:39:
         d4:d4:74:af:71:a8:70:4f:20:d9:7d:b6:26:26:8e:03:9c:a0:
         11:7a:ae:9e:10:b7:3d:8d:2d:46:ac:c8:8d:51:88:25:c3:96:
         1e:6e:5c:17:16:50:50:e1:b7:96:42:fd:75:81:b2:f3:8d:f3:
         1b:bc:0e:88:0a:c5:4c:d1:f9:54:67:cd:29:5b:6f:44:b5:f6:
         a7:69:28:fa:ca:1a:6b:20:36:83:d7:bc:87:a0:84:f1:32:11:
         85:3e:8f:8e:8f:ae:10:93:23:d2:cb:4d:a5:66:e5:31:d6:89:
         45:d6:57:9c:52:6e:de:b0:12:07:2b:4f:01:fb:1d:0c:10:07:
         24:c3:97:51:2b:69:5f:1d:bc:fc:35:4d:af:34:1c:9a:92:be:
         a2:6c:5f:1a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUR6qSNDPRuvO2iWxdD6BxgS1k/98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjNiOTM2MGMwZGRhM2Q2ODhmNGRiZTUzZTJiNmQzY2Vm
NDdmZTgyNTAeFw0yNjEwMDkyMjE5MzNaFw0yNjEwMTEwMTMxMzNaMDMxMTAvBgNV
BAMTKDc3MkIxRTM0NkU4MUJBNzRENUI1RTBCRkY2MjAzN0I0MTcyREU1MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nXjOUc9KowRs8bPuqgrHcgA+
Z8EyVPTWLajJlttdgmmEJAwoBnw5f9KzUV54PcJKhjq0zUbNBAMgrNX4VIpNioEO
IdSiIA7VOOiaWUy02CJFAzg7oSC1AusiUtZd0zPoXrNkw7ENe7d2woa1uDFr7Pta
dWaFdf2XjXyOkM5k9jfCxaiEb0+uBfKX3NnwPBYBgMgxfjHTzOuEUmJZ4YtXA04+
p4BZHlcGKYnrPvtUoIF8JMAJro3LW9SBf8zf20Jb69HEJG10i7fcI15H3jHBtEjE
wrfj7Ksj475XkQuqvpFPqMM3/1qsZQv1sBg6yhEsO9lFRW0+mZFiTFZOGkNrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUdyseNG6BunTVteC/9iA3tBct5RcwHwYDVR0j
BBgwFoAUs7k2DA3aPWiPTb5T4rbTzvR/6CUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzAvQjNCOTM2MEMwRERBM0Q2ODhGNERCRTUzRTJCNkQzQ0VGNDdGRTgyNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M3azJEQTNhUFdpUFRiNVQ0cmJUenZS
XzZDVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYmYwNGM3Yy1m
ODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMC9CM0I5MzYwQzBEREEzRDY4OEY0
REJFNTNFMkI2RDNDRUY0N0ZFODI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWHzDc5fRpLWcJnHznEg
Qmt2LBIsT+fU0uMd50+MJhEG/mTvFUpaczFHjSa/ggJfva7GKSYMvqg0Ntmes+oQ
KVVLWlaKgayNyBfqtKBxDwJXVSqkEadbpQA3EMisDVhHjE2brbHJ0sgwAYg51NR0
r3GocE8g2X22JiaOA5ygEXqunhC3PY0tRqzIjVGIJcOWHm5cFxZQUOG3lkL9dYGy
843zG7wOiArFTNH5VGfNKVtvRLX2p2ko+soaayA2g9e8h6CE8TIRhT6Pjo+uEJMj
0stNpWblMdaJRdZXnFJu3rASBytPAfsdDBAHJMOXUStpXx28/DVNrzQcmpK+omxf
Gg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:38:16 2026 by rpki-client