Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
File:                     D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft (raw, json)
Hash identifier:          qMD46LAB3vG29D111lDskv+QGBDXt0YvMS2IjURps9c=
Subject key identifier:   1F:EE:A5:2F:93:98:9D:B1:6F:C8:C8:0C:03:4B:56:3B:2A:69:23:76
Authority key identifier: D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85
Certificate issuer:       /CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
Certificate serial:       4FED3DAB7F6AC362EFCF0148B985BDE7E9A09C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
Manifest number:          03BA
Signing time:             Thu 16 Apr 2026 21:40:45 +0000
Manifest this update:     Thu 16 Apr 2026 21:35:45 +0000
Manifest next update:     Fri 17 Apr 2026 22:11:45 +0000
Files and hashes:         1: D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl (hash: FQL54EUYBQeCJSoEwU1r3IdHrhbDEKJbzsKiYl0J0Ho=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ed:3d:ab:7f:6a:c3:62:ef:cf:01:48:b9:85:bd:e7:e9:a0:9c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
        Validity
            Not Before: Apr 16 21:35:45 2026 GMT
            Not After : Apr 17 22:11:45 2026 GMT
        Subject: CN=1FEEA52F93989DB16FC8C80C034B563B2A692376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:59:bb:57:92:b1:0c:f6:96:f3:7b:64:7a:
                    c9:08:c5:2f:1b:22:46:18:f4:44:e9:08:4e:b7:25:
                    27:64:1a:92:52:81:b6:9b:d9:cf:9f:1c:8b:b8:e6:
                    57:e2:3f:e6:65:4b:78:66:de:5f:c6:1a:d9:14:04:
                    41:ae:56:1d:f2:df:1b:6d:6d:7c:34:8d:92:fd:10:
                    7c:b4:c4:85:b3:e1:c6:9f:9f:ab:8c:e1:a3:5b:41:
                    cb:71:23:1e:be:aa:56:25:d6:85:ca:bb:bb:2d:0f:
                    fa:60:10:b2:2c:f1:24:c3:a2:76:61:e8:17:7d:08:
                    bb:54:62:ab:3f:75:b1:bc:75:0f:09:ad:b7:c3:ef:
                    ff:a4:78:04:db:b8:e1:c7:0f:79:89:6b:62:0d:6b:
                    3c:a3:f6:2d:7a:90:02:27:34:f2:8a:bf:31:f6:84:
                    ea:14:6b:e3:aa:9d:30:04:f2:2f:ef:ec:6c:bd:82:
                    98:ee:af:66:3f:61:01:a4:90:22:de:31:2e:c6:ad:
                    ab:ed:f1:d1:b9:77:2f:97:d2:ea:d2:c8:1b:a3:07:
                    c8:33:4b:1f:a7:04:4e:2b:c2:38:80:16:4c:a2:63:
                    2f:35:e1:95:47:7f:ca:18:b8:f4:ec:03:4a:99:49:
                    bf:b0:17:4b:b8:a4:bb:e3:a5:29:f7:56:5c:2d:a2:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EE:A5:2F:93:98:9D:B1:6F:C8:C8:0C:03:4B:56:3B:2A:69:23:76
            X509v3 Authority Key Identifier:
                keyid:D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:04:cf:ad:15:36:fa:fd:7c:98:a3:81:68:5e:8e:1c:5d:8e:
         31:68:ae:53:ed:85:a5:54:a8:c8:0d:30:55:c2:60:31:6f:0b:
         a1:8f:42:68:27:94:08:db:16:19:97:3b:b6:a3:cc:cb:a7:40:
         1d:c6:4c:88:29:31:bd:e0:8b:1d:6c:30:2f:88:88:0f:2e:1c:
         76:bb:52:e8:6c:fa:d3:2d:82:67:bc:6d:22:b5:71:0a:6d:34:
         40:e3:7e:ee:9d:e6:ef:1f:31:c4:20:15:e3:25:5d:9a:af:17:
         7a:d0:59:3f:b8:e6:8e:56:60:c5:be:ee:94:62:4a:89:4b:87:
         07:f6:ce:48:29:b7:a8:50:14:ff:a4:ca:da:65:c3:2b:44:91:
         05:62:b0:ff:3c:0d:c1:42:bc:6b:e1:fa:fe:d6:51:8f:14:83:
         86:d5:76:c0:43:a6:31:fc:fa:47:18:96:5b:a8:7c:1b:be:42:
         6c:d8:46:1a:99:07:17:c4:2b:1f:a0:b3:27:1c:9f:31:3d:3d:
         7f:3f:31:c7:d6:95:36:bc:1d:cd:b2:1e:3f:96:68:c7:fa:bb:
         69:e5:92:94:60:fb:15:d2:8b:77:7d:c8:12:25:59:7c:a5:01:
         4b:90:ae:ba:39:71:55:37:19:e0:6e:1d:6a:00:45:38:19:9f:
         54:b9:56:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:30 2026 by rpki-client