Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
File:                     D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft (raw, json)
Hash identifier:          +weHDBjt3RVJhRKhSsnOgVcIwHBuH6ldyUtC1ArOPu8=
Subject key identifier:   E0:D4:49:ED:60:7E:E9:39:16:88:CD:3E:AC:D1:9A:BC:1F:2F:37:5C
Authority key identifier: D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85
Certificate issuer:       /CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
Certificate serial:       24935208B56875781AA83C1124D38F01E23C0DB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
Manifest number:          03DA
Signing time:             Tue 12 May 2026 16:08:15 +0000
Manifest this update:     Tue 12 May 2026 16:03:15 +0000
Manifest next update:     Wed 13 May 2026 19:52:15 +0000
Files and hashes:         1: D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl (hash: fES6CRY8tbB7vhSVUrScUKnfFOpc+CiOagn1vRY544s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:93:52:08:b5:68:75:78:1a:a8:3c:11:24:d3:8f:01:e2:3c:0d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
        Validity
            Not Before: May 12 16:03:15 2026 GMT
            Not After : May 13 19:52:15 2026 GMT
        Subject: CN=E0D449ED607EE9391688CD3EACD19ABC1F2F375C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5c:85:e0:aa:de:71:c4:00:0e:0e:bc:7a:9b:
                    ec:2a:aa:33:18:08:f5:d1:ad:3b:51:46:98:b0:f3:
                    f5:73:fa:09:6f:d0:11:1c:b2:dd:b7:7a:1f:91:a4:
                    06:71:30:4e:87:e2:8d:68:8b:a3:39:64:12:e9:84:
                    91:96:e9:cb:46:d5:3e:49:ed:61:35:83:b7:90:d3:
                    10:29:a2:aa:55:ec:6c:71:b3:6d:b8:f5:17:cf:8d:
                    76:b5:06:ae:0f:e9:7e:39:71:83:af:17:d1:c2:8f:
                    e1:a2:67:f5:42:5e:13:66:44:d9:b2:b6:cd:a9:1a:
                    2d:d6:a7:2b:33:1e:81:97:91:c1:f2:18:87:86:fd:
                    1d:25:ba:6f:c9:cd:ca:7d:6c:9d:3e:f5:fd:ac:b1:
                    be:4c:f9:24:89:21:b2:b4:d2:29:9b:07:97:b5:bb:
                    c3:fb:c8:0e:76:27:ea:79:f3:d3:d7:aa:1a:b1:70:
                    75:9d:9d:87:d6:be:03:1a:87:e1:f8:0e:c6:8d:ba:
                    70:f9:c9:1b:42:c4:e0:21:5e:dc:1d:9b:e2:3e:f4:
                    55:41:eb:36:d9:3c:c5:b1:c0:2e:5f:51:72:1c:d4:
                    30:5f:0a:14:25:7f:f5:e7:8f:95:3a:37:85:f2:45:
                    94:c9:0f:83:6d:7f:c2:77:32:37:79:2d:2b:0f:01:
                    93:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D4:49:ED:60:7E:E9:39:16:88:CD:3E:AC:D1:9A:BC:1F:2F:37:5C
            X509v3 Authority Key Identifier:
                keyid:D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e3:17:ee:ab:0c:ab:97:72:e8:da:78:f2:9a:cb:6b:92:2b:
         92:a0:34:df:90:17:55:ee:9d:63:12:8b:cb:0e:40:8a:c8:cf:
         a1:ef:61:dd:e0:28:15:9a:8a:fb:ff:71:db:c9:b3:cb:8c:c6:
         6b:f7:00:0c:35:bc:da:90:c7:a2:83:44:cc:db:4b:4e:b7:23:
         8e:7c:2c:ed:41:b7:c4:7e:d3:94:7a:a1:d3:01:d2:24:71:5b:
         ec:80:7d:5d:1f:cf:91:dd:4a:5b:76:b7:15:e6:d5:16:17:ef:
         39:2a:ff:a7:7a:06:a5:eb:7d:77:a8:57:34:0d:45:4e:74:2f:
         39:b4:9c:45:03:4e:10:3d:99:d4:3f:3d:77:4d:c6:e3:c7:34:
         8f:d8:3e:4f:eb:5e:f5:7c:c5:ce:ba:f9:d3:ac:c8:14:37:4f:
         49:72:a5:7a:8c:dd:d2:93:93:95:07:14:a6:57:4d:1c:e4:13:
         58:8e:f2:e8:b7:8c:50:2a:62:50:8d:77:d8:ce:a9:c5:a0:33:
         f0:c2:72:39:30:70:02:1d:cd:63:65:8c:6c:19:25:63:2f:45:
         af:3d:c8:29:ab:93:b6:98:93:b4:21:41:a6:2b:6d:f3:09:6f:
         a8:38:42:d1:10:8e:04:0a:db:da:3d:a6:ec:2d:ed:04:d7:d1:
         71:21:39:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:19:09 2026 by rpki-client