Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File:                     3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier:          5Yjq8898mGdLo5777zviJgUaRcTmkMa3cyoCAvCvgqA=
Subject key identifier:   69:38:71:B0:E1:EE:04:BA:0F:85:5F:D7:1F:6F:A6:E9:7F:D4:F1:64
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer:       /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial:       6BDEB1F5003D69F573437000DF028EA01EE9FD37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number:          04E9
Signing time:             Thu 16 Apr 2026 11:54:16 +0000
Manifest this update:     Thu 16 Apr 2026 11:49:16 +0000
Manifest next update:     Fri 17 Apr 2026 14:47:16 +0000
Files and hashes:         1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: i+uFO0/Pe/lgR/JdzgjjDo2whFLuvDGksn50VxqYwkE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 14:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:de:b1:f5:00:3d:69:f5:73:43:70:00:df:02:8e:a0:1e:e9:fd:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
        Validity
            Not Before: Apr 16 11:49:16 2026 GMT
            Not After : Apr 17 14:47:16 2026 GMT
        Subject: CN=693871B0E1EE04BA0F855FD71F6FA6E97FD4F164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:29:07:45:46:1f:50:39:c6:d4:65:b0:32:25:
                    67:45:25:87:5a:94:ce:f1:45:98:59:62:04:e4:b6:
                    5b:47:d7:3e:71:46:ad:4e:be:38:ea:ca:b3:56:9f:
                    24:04:d6:34:dd:f2:9c:a1:55:49:1a:67:e7:1e:13:
                    ce:58:ce:39:26:f2:3a:e2:d8:22:c6:1e:61:69:b1:
                    18:25:97:8c:f7:5f:40:81:77:c5:02:66:d9:e9:29:
                    45:3c:c3:4c:cb:45:51:0a:ad:98:54:86:4d:68:27:
                    1a:40:c0:63:e4:5c:0b:57:36:67:56:23:b7:a7:5e:
                    7a:54:74:5d:13:e1:cd:69:af:c4:5d:18:e4:1f:ef:
                    e7:91:af:05:f4:63:63:91:33:a3:2a:ac:c4:31:64:
                    61:d2:9c:02:1f:8b:e7:9c:98:c0:d8:d1:23:7a:57:
                    c4:9b:bd:e2:71:35:cd:00:13:4d:f2:cf:2a:74:85:
                    93:ff:e3:45:1f:ad:90:20:a7:d8:31:2e:8e:a7:ea:
                    98:b4:d5:24:e7:bf:ec:ca:69:b1:4d:28:a8:ea:7a:
                    3c:40:e7:79:55:0c:a1:5d:5f:71:0e:1c:a6:2e:f6:
                    15:ef:db:ad:2d:84:fe:4e:df:41:5b:27:88:27:2a:
                    83:84:e7:37:7e:75:48:9e:4d:77:1c:27:98:ea:7f:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:38:71:B0:E1:EE:04:BA:0F:85:5F:D7:1F:6F:A6:E9:7F:D4:F1:64
            X509v3 Authority Key Identifier:
                keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:4e:b5:7a:df:00:2d:b4:2a:6f:e5:6a:5b:5a:62:ab:e9:23:
         a0:2e:00:78:3c:f6:79:c4:9f:ea:6c:22:71:cc:9d:56:17:13:
         ec:9b:72:4d:9c:59:a4:c9:56:c7:34:54:a4:81:01:ce:be:d2:
         63:52:67:6f:ec:70:3e:e5:82:08:1e:07:e2:fd:de:82:ff:7c:
         ad:b1:8f:b8:27:b5:ef:42:c6:8b:22:b9:5a:1f:63:b1:f7:e6:
         13:08:e4:8c:a3:05:6b:ef:79:fe:f0:32:48:e9:9b:00:93:e8:
         2f:04:4a:6b:fe:95:e7:c5:46:ac:f1:9b:84:df:7b:95:b2:08:
         28:a5:9b:91:b6:ed:15:e8:a0:83:2c:19:d7:0c:2b:d7:3f:37:
         b7:0d:5c:46:49:84:70:7e:92:b5:af:48:e7:30:d6:72:f6:a8:
         3c:38:fb:de:6d:45:c8:09:c5:ad:4b:5b:10:b9:ee:5b:37:bc:
         fd:84:21:e0:b1:33:5a:70:5a:c5:68:5e:bd:56:1c:2e:5b:e4:
         78:7f:a7:11:78:c3:fd:bb:ce:1b:c1:21:11:94:38:41:f9:43:
         b2:79:fb:05:d3:0a:d7:fa:22:a1:6f:2f:f7:82:f7:a6:a3:13:
         3f:0b:89:44:ae:8c:5e:4a:52:5a:b5:d3:eb:54:e9:ab:ff:70:
         00:bf:77:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:14 2026 by rpki-client