Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
File:                     D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft (raw, json)
Hash identifier:          s6IRstD4dF5mRvrOIbtYFF5quqUnuRz5tYhf+spvo/0=
Subject key identifier:   A8:E7:D7:10:35:35:11:60:46:94:49:8E:DC:F6:8C:DF:20:8F:7B:7B
Authority key identifier: D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85
Certificate issuer:       /CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
Certificate serial:       61C26CBCE4CDC05088230A370F10ADCDE79910F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
Manifest number:          047E
Signing time:             Tue 22 Sep 2026 13:09:13 +0000
Manifest this update:     Tue 22 Sep 2026 13:04:13 +0000
Manifest next update:     Wed 23 Sep 2026 15:25:13 +0000
Files and hashes:         1: D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl (hash: keFPFlLbHNsOP4R8UYvEGM9zj0rz9++hyBbbyB3lw8U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c2:6c:bc:e4:cd:c0:50:88:23:0a:37:0f:10:ad:cd:e7:99:10:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
        Validity
            Not Before: Sep 22 13:04:13 2026 GMT
            Not After : Sep 23 15:25:13 2026 GMT
        Subject: CN=A8E7D710353511604694498EDCF68CDF208F7B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:be:91:63:b1:d1:20:f5:e4:ba:c3:53:ec:
                    35:9a:a5:d5:49:a0:aa:38:f2:a3:8a:52:0f:d9:8f:
                    b8:83:a9:07:2c:f7:e2:c7:1d:b5:9d:91:66:29:db:
                    0d:17:6b:3b:dc:1a:8c:42:00:06:6f:2a:ce:47:99:
                    b6:7f:f4:f4:f3:89:66:10:8f:c5:82:6b:3a:0a:78:
                    99:7a:2d:d0:a8:c0:43:86:23:3e:4b:bf:5d:f3:ba:
                    59:df:fc:9d:2a:ce:ae:6c:8a:e4:1a:9a:83:45:83:
                    b7:f1:66:50:ba:c1:77:ad:a1:a5:ff:2a:0f:4d:08:
                    47:ec:ce:5b:f7:6b:dd:37:6f:8e:b7:4e:c7:b7:69:
                    a6:c0:27:95:ba:cf:1c:82:c6:1c:6c:8f:e0:81:2a:
                    49:14:28:25:a9:03:cd:a6:9b:93:a2:5f:f1:ab:c5:
                    e2:7e:26:64:e5:21:ed:fe:40:71:09:6c:1f:6d:95:
                    a9:8b:af:b5:c9:e6:e8:63:e0:75:89:9e:c3:d1:dd:
                    56:56:a4:45:f9:b7:8d:e6:dc:fc:15:ec:44:be:31:
                    8f:70:a1:0d:0e:01:8b:c4:91:79:7e:01:82:93:b4:
                    4e:37:b5:52:a0:b5:1e:79:22:aa:70:d0:3c:c8:81:
                    7f:54:07:f3:95:7d:bf:1b:c9:b1:8c:c3:d9:44:46:
                    51:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E7:D7:10:35:35:11:60:46:94:49:8E:DC:F6:8C:DF:20:8F:7B:7B
            X509v3 Authority Key Identifier:
                keyid:D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a3:af:c5:32:e5:2a:35:8e:42:ea:55:52:02:bb:f6:03:d4:
         ce:50:21:4b:44:ee:70:75:76:15:f8:e3:c0:79:7f:7f:3c:dd:
         45:a2:f9:62:92:20:ce:10:bf:18:f8:72:1b:6e:bc:dc:ca:03:
         ad:df:7c:8d:ce:10:01:bb:32:55:c3:f3:0e:8c:90:4c:e7:90:
         84:b6:d2:d7:61:40:a3:7d:97:59:9f:de:93:9c:27:59:3a:1c:
         a8:31:6e:27:c2:cf:58:d5:ec:e9:3a:00:3a:b8:e2:44:a6:5c:
         b3:1e:9b:52:94:08:2f:2a:d0:ba:43:7e:28:98:bb:cc:83:42:
         36:ac:67:bf:21:a3:5c:4e:5f:75:79:dc:ab:fa:6b:9e:51:ab:
         be:74:24:5e:02:5d:e5:8b:ff:cd:c7:85:76:f2:4a:03:ce:16:
         37:9d:08:29:2b:81:2e:b4:0e:3d:b4:77:36:cf:ca:c6:86:56:
         4e:07:8a:84:4f:9f:af:98:4d:03:92:fd:2f:a5:db:2a:c6:88:
         6b:9f:87:2d:1f:c4:e4:c3:f9:d5:d0:58:62:c1:41:ff:04:81:
         8a:f6:22:f2:8a:a5:e5:77:d9:d6:6e:94:b6:16:b0:48:a5:8c:
         09:1e:94:72:d6:64:4f:76:54:c4:0a:5e:85:a4:40:23:1b:9d:
         eb:3e:40:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----