Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
File:                     D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft (raw, json)
Hash identifier:          K3vXtMWwr9PObzvjNY3LahzDIZgbNOnz+KA+QKFYPaM=
Subject key identifier:   50:79:E9:85:08:97:5B:1E:A4:7F:67:18:25:D6:2A:BA:81:D3:A3:7B
Authority key identifier: D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85
Certificate issuer:       /CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
Certificate serial:       31D9B44A3E538EC22C379AD839EC382CA5913820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
Manifest number:          04C5
Signing time:             Sat 14 Nov 2026 19:31:47 +0000
Manifest this update:     Sat 14 Nov 2026 19:26:47 +0000
Manifest next update:     Sun 15 Nov 2026 21:06:47 +0000
Files and hashes:         1: D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl (hash: /dwlusX9p7koD1QzNPDImwBAl0uRRy1b3YuQrCLg/ZA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d9:b4:4a:3e:53:8e:c2:2c:37:9a:d8:39:ec:38:2c:a5:91:38:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
        Validity
            Not Before: Nov 14 19:26:47 2026 GMT
            Not After : Nov 15 21:06:47 2026 GMT
        Subject: CN=5079E98508975B1EA47F671825D62ABA81D3A37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1b:08:56:2e:4c:2d:5d:8f:06:65:19:ef:72:
                    dd:76:1b:61:9d:8e:c3:6f:be:79:fd:d2:cd:f9:ed:
                    e0:d4:a6:2d:f3:e4:cf:4d:45:ac:40:77:4d:28:cb:
                    74:7e:7a:51:9a:f8:cc:ce:a5:e9:8e:71:c6:72:61:
                    3a:37:5b:85:aa:15:35:2f:e8:44:86:79:3e:d3:cd:
                    a2:fc:36:fe:14:64:c4:82:e8:cb:61:bb:74:5e:be:
                    77:c7:ca:9f:74:5d:f2:46:c6:2c:b5:93:5f:a2:34:
                    85:a1:fb:4b:b6:a8:08:51:7e:ec:9b:80:82:fb:2d:
                    32:7f:d5:58:e1:46:4d:3c:6c:68:0d:07:16:17:ca:
                    f2:67:02:17:54:7b:98:4e:1e:b3:38:c7:44:1c:6b:
                    b9:21:bf:a5:74:43:b2:a1:bf:40:8b:1a:60:c0:b8:
                    08:54:1b:9a:b4:29:3e:ac:f3:cc:bc:6c:5d:9f:82:
                    58:c2:38:26:18:2b:63:a5:b4:3d:9b:1d:a2:f4:f8:
                    92:01:e7:62:dd:42:c8:dc:9b:6a:09:7b:c4:8f:38:
                    bb:34:c9:e5:9c:7a:a6:22:30:15:db:3b:1a:17:27:
                    4e:f0:8e:6f:9d:75:ad:b1:fc:36:3d:49:7a:46:00:
                    75:4e:5b:c8:bc:8d:90:3e:57:a2:88:1a:02:d2:a5:
                    18:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:79:E9:85:08:97:5B:1E:A4:7F:67:18:25:D6:2A:BA:81:D3:A3:7B
            X509v3 Authority Key Identifier:
                keyid:D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:6a:25:83:df:51:ee:16:af:c3:39:27:ec:ae:67:4f:bb:62:
         e1:e7:65:7e:39:c8:c7:ce:85:33:cd:94:99:2c:94:9f:8d:7a:
         0a:c8:a1:7b:e7:3b:b2:3a:17:b8:b8:1a:8e:ab:74:27:27:1f:
         c2:f6:0b:d8:d4:5f:b8:b5:ac:c7:45:9b:ad:1b:a4:5b:e6:74:
         1f:e4:85:fa:ff:dc:27:f4:91:af:8b:6a:08:ec:b4:ce:d3:41:
         61:c0:01:82:88:ea:6c:b7:9e:6a:72:8e:fe:9a:59:6a:1a:e1:
         d9:13:d8:b6:d0:d3:cd:c7:ef:69:6a:46:d1:3a:d5:05:cd:7f:
         61:33:ca:b8:ef:4b:39:ff:23:91:ff:77:c7:29:41:7f:06:21:
         08:02:b4:ec:74:6c:39:11:1f:94:d8:08:77:ed:23:08:13:cf:
         76:ba:b3:b3:f6:8b:ac:10:d7:53:ab:b7:6e:68:5c:a6:15:e8:
         f4:c5:b0:91:c6:b1:5d:3c:90:96:c8:65:e1:44:ea:98:0b:f0:
         71:a5:6f:78:91:05:a1:86:38:aa:61:65:c1:37:95:41:9b:51:
         d7:f8:a2:bd:bb:77:c5:2b:be:0c:c1:27:f9:37:db:25:de:b5:
         ae:0d:b4:88:14:77:22:15:df:46:66:1d:45:1e:dd:84:08:05:
         b8:0f:ef:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----