Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft
File:                     2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json)
Hash identifier:          YtsTMBIe/S3jkEUUGEtgqIp/QZ+ysIcRwPAE09uD/bw=
Subject key identifier:   77:E5:67:29:66:2B:F8:3D:7C:E8:8D:9B:80:E7:9B:78:F9:E8:3B:1D
Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13
Certificate issuer:       /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513
Certificate serial:       1E203F4692486B7DACE885D6A11EEF1D64706F73
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft
Manifest number:          0304
Signing time:             Sun 11 Oct 2026 17:05:11 +0000
Manifest this update:     Sun 11 Oct 2026 17:00:11 +0000
Manifest next update:     Mon 12 Oct 2026 20:13:11 +0000
Files and hashes:         1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: thMNECaGH1/EooTtye6IRgt83KWBot19DCVeu19726o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:20:3f:46:92:48:6b:7d:ac:e8:85:d6:a1:1e:ef:1d:64:70:6f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513
        Validity
            Not Before: Oct 11 17:00:11 2026 GMT
            Not After : Oct 12 20:13:11 2026 GMT
        Subject: CN=77E56729662BF83D7CE88D9B80E79B78F9E83B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a1:dd:05:f7:1b:e6:5b:04:f6:78:5e:b6:93:
                    71:e6:99:44:65:39:00:c2:2d:60:49:66:a1:d6:7d:
                    f1:7b:f1:1e:a7:bb:12:bf:3e:68:f5:60:65:2f:e8:
                    5e:e2:00:8d:67:76:90:42:03:f7:4e:6a:b9:3b:76:
                    93:7e:87:9b:5e:b5:7a:8e:33:22:ca:12:ee:bb:f6:
                    9a:09:e7:a2:f5:8e:c4:a1:2a:10:4a:ae:8f:bf:1f:
                    7d:74:33:f4:92:b7:96:5a:74:aa:d3:4a:bd:93:e8:
                    7a:d0:9a:02:bd:37:50:f4:34:34:99:ef:2d:0e:a1:
                    86:86:6d:71:61:b2:6d:b1:92:f2:82:9b:23:09:ca:
                    65:4e:a8:55:57:ae:40:4f:2b:27:87:63:dd:52:02:
                    2a:6a:ca:d2:ee:78:8c:a8:77:31:9a:52:dc:4a:38:
                    9f:e5:74:94:68:f0:6a:66:f0:c6:36:3c:b1:72:c4:
                    9f:a0:ba:24:1f:db:22:07:f5:8c:6e:0d:8d:51:e8:
                    90:6e:f1:df:8a:e4:10:20:a5:90:fd:92:59:36:d9:
                    c4:b0:9b:0a:e2:fb:28:11:86:d7:30:32:71:ac:e2:
                    b0:3a:ed:e1:b2:ca:18:5d:39:5f:29:88:b6:02:60:
                    62:d6:fa:48:27:f2:94:2f:66:ff:35:e2:32:9a:7d:
                    b7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E5:67:29:66:2B:F8:3D:7C:E8:8D:9B:80:E7:9B:78:F9:E8:3B:1D
            X509v3 Authority Key Identifier:
                keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:05:9c:4e:45:56:82:ba:47:ac:b6:d6:6a:9e:23:22:55:e4:
         33:b6:14:c9:33:87:8e:01:f7:bb:e7:4d:f6:cb:2d:c6:5d:6f:
         c3:c0:8c:7b:79:b8:b0:da:a2:0f:96:6a:50:9f:f2:4a:06:f6:
         2c:03:2d:5f:f3:67:09:31:6d:c6:3a:e4:55:22:cc:eb:3e:b6:
         ad:e5:cd:2d:62:31:74:87:4e:35:ba:ea:d4:f1:e6:ab:a6:86:
         1b:7b:53:40:58:c7:8d:1c:c4:5c:f2:ee:f5:f4:2b:3a:47:03:
         53:94:a1:5b:ad:ab:db:ff:cc:96:34:62:79:d1:5f:bf:ca:d1:
         dd:0b:17:6b:81:12:10:14:f0:4a:0e:4a:f9:69:b0:55:0d:d5:
         d3:73:d7:df:cb:1d:8b:da:76:3e:4c:f7:dd:05:b0:bb:a8:f5:
         16:0c:d9:22:2f:56:78:e9:cf:77:b6:40:cf:5f:e7:b3:3e:5c:
         66:33:b5:5e:a1:a0:d4:f6:16:28:c5:d3:89:06:25:85:5f:ed:
         23:12:4e:1c:f6:a4:5c:2e:aa:04:a9:1b:df:f2:f3:ab:2c:17:
         db:8f:7c:b9:fd:0f:f6:2d:4e:28:68:cf:29:2b:25:ab:ea:0e:
         a5:1c:a5:f2:a9:77:ce:c9:f3:ba:84:a8:b7:e9:00:3e:dc:c6:
         22:c6:d8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:12:36 2026 by rpki-client