Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
File:                     188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft (raw, json)
Hash identifier:          boUjYgyBxDa9f/EyDmG5uemL7BkD2L0SUvQT1PUJdqA=
Subject key identifier:   FF:FF:CB:BE:3D:1A:6F:DB:C4:B5:0B:4C:06:E2:7F:9E:26:C1:47:EC
Authority key identifier: 18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96
Certificate issuer:       /CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96
Certificate serial:       4541A51D39F16E5A19D6F2656B033FE3F250A991
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
Manifest number:          02F6
Signing time:             Thu 01 Oct 2026 23:05:05 +0000
Manifest this update:     Thu 01 Oct 2026 23:00:05 +0000
Manifest next update:     Fri 02 Oct 2026 23:32:05 +0000
Files and hashes:         1: 188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl (hash: oR/7wSSfdszCJEuswSS5IbNM1r33znU6QQ+xSFAyTUA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 23:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:41:a5:1d:39:f1:6e:5a:19:d6:f2:65:6b:03:3f:e3:f2:50:a9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96
        Validity
            Not Before: Oct  1 23:00:05 2026 GMT
            Not After : Oct  2 23:32:05 2026 GMT
        Subject: CN=FFFFCBBE3D1A6FDBC4B50B4C06E27F9E26C147EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:51:e7:bd:9f:09:de:cf:c4:8d:98:60:03:
                    84:aa:a3:e2:e6:71:76:0f:ec:09:58:11:89:17:e0:
                    4d:0c:4a:d9:0b:5c:79:d3:86:76:cf:93:4f:e9:be:
                    31:38:fa:8f:e9:0f:10:82:40:ab:59:3e:d6:b7:fd:
                    b9:84:91:e7:6c:c3:71:39:0d:8d:da:ed:f0:5e:cc:
                    43:72:30:38:33:b2:85:e8:be:f4:3b:99:aa:8c:fa:
                    0f:8d:f4:da:eb:a5:c4:ff:5f:4f:ee:45:09:76:a1:
                    c1:6d:94:a9:b4:ad:76:4d:4f:7d:e9:be:1c:90:ea:
                    38:b7:f8:a9:fb:ed:81:77:05:01:37:4d:6c:dd:7e:
                    b8:93:3e:8c:85:9c:7f:04:4d:ba:7c:b9:b4:ab:c8:
                    3c:7b:da:f7:eb:fc:4e:c8:8e:60:9b:18:c9:e3:7b:
                    4b:35:54:56:a6:83:4f:f5:cc:b8:6a:03:15:9c:f2:
                    12:c8:b4:0d:3c:0e:f9:5f:58:12:e5:df:68:9f:b8:
                    bd:53:e6:d3:69:0e:62:36:ea:65:bf:aa:3d:a6:53:
                    e7:9a:13:93:07:81:db:84:15:a0:77:84:36:5d:95:
                    25:08:1b:61:f2:db:dc:ca:13:68:36:58:f7:94:4d:
                    fc:e9:a0:66:3a:59:72:0d:b0:26:29:dc:f8:ae:aa:
                    28:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FF:CB:BE:3D:1A:6F:DB:C4:B5:0B:4C:06:E2:7F:9E:26:C1:47:EC
            X509v3 Authority Key Identifier:
                keyid:18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:91:09:af:6d:2e:e0:10:36:cb:91:09:21:8c:0d:7c:3c:f7:
         3a:42:1b:fe:2f:e8:24:25:e4:c9:ab:0b:d3:e7:9d:0b:61:42:
         55:53:85:1e:99:62:fd:ad:fa:dc:cf:e2:c3:e1:3b:22:fa:3d:
         d8:88:df:75:de:eb:ad:44:3b:f0:fa:c9:92:2a:56:cf:28:bd:
         64:96:79:9b:a6:1b:d8:b7:de:13:7a:6c:ae:d2:f6:78:83:3f:
         d7:94:55:0c:fa:cf:a7:c4:57:69:52:46:88:c2:45:22:45:6d:
         ee:4b:b5:96:f7:f9:f1:c8:97:6a:57:47:c7:a5:db:83:4b:dc:
         38:95:f4:36:81:1c:49:57:da:cc:4d:af:86:9b:34:d4:ae:21:
         de:8f:93:5c:95:fe:c6:68:9f:c1:7f:1e:72:c9:27:c3:fe:bd:
         bd:1a:a9:9d:6a:cb:88:6e:cc:b2:b4:a2:d2:1d:8d:22:20:6d:
         ed:0c:81:19:6e:09:da:e6:f5:24:a3:ca:7d:4d:67:99:67:3a:
         64:f1:3f:89:7a:5c:db:a4:84:72:6a:47:64:3e:3b:d5:55:fa:
         78:d4:ac:77:21:06:6f:e2:5f:fd:72:76:a6:c4:13:70:e8:0c:
         bf:46:3d:8a:27:05:9e:12:e1:13:5e:5e:8b:3c:19:cb:87:f6:
         a4:f2:86:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:03:46 2026 by rpki-client