Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
File:                     D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft (raw, json)
Hash identifier:          odte4pa8htl8agaIyLrwCacqm7CpDrjsUE4k8YCVInE=
Subject key identifier:   7E:18:99:9F:24:0B:6C:9D:A8:CE:AC:4F:9A:C3:67:FE:B3:58:95:58
Authority key identifier: D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85
Certificate issuer:       /CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
Certificate serial:       2D1C068C9AE003C6F0BC62589A6929441C83FB85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
Manifest number:          0404
Signing time:             Fri 12 Jun 2026 19:42:41 +0000
Manifest this update:     Fri 12 Jun 2026 19:37:41 +0000
Manifest next update:     Sat 13 Jun 2026 23:32:41 +0000
Files and hashes:         1: D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl (hash: S4SyKlSdnvf7l+ARxvyCPzen3sgjAIT4igSCWpOjsrQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1c:06:8c:9a:e0:03:c6:f0:bc:62:58:9a:69:29:44:1c:83:fb:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
        Validity
            Not Before: Jun 12 19:37:41 2026 GMT
            Not After : Jun 13 23:32:41 2026 GMT
        Subject: CN=7E18999F240B6C9DA8CEAC4F9AC367FEB3589558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:7d:07:51:5d:61:2a:16:9e:a8:6d:a5:58:
                    be:96:68:20:28:d8:e7:dd:5e:31:38:08:2b:d4:eb:
                    64:3e:27:99:87:93:0f:1b:e4:27:0c:43:bb:de:c4:
                    44:ca:47:ca:91:1d:24:3f:4a:38:93:f9:e8:25:33:
                    c3:73:2f:3d:10:03:41:93:c7:cc:5e:fc:59:61:eb:
                    ad:8c:d4:6c:de:1a:53:22:ae:95:06:1b:23:98:01:
                    2c:3b:a2:97:89:dc:39:c4:a4:ae:9e:a7:b4:5f:1d:
                    3f:c4:ab:43:e8:cf:37:3e:6f:6f:e2:8c:44:c1:85:
                    46:d4:cd:5d:e5:09:81:56:6f:e7:6b:1e:36:88:66:
                    e6:9c:9d:84:36:2b:76:1f:76:e3:06:8f:f5:b2:6b:
                    b1:04:35:59:60:74:ee:f5:ac:f2:dc:73:c1:51:8e:
                    59:bd:04:c8:fe:e3:0e:0f:7c:41:b3:fd:36:82:6c:
                    65:fe:48:8e:39:df:12:12:95:45:6a:41:ed:14:84:
                    74:0a:18:ec:35:9b:34:0f:e0:a0:6d:28:eb:c3:4a:
                    e0:13:d2:7f:8c:90:d8:06:dc:6a:5b:15:ec:7f:a8:
                    f3:5e:89:66:59:3a:56:95:95:1b:0a:9b:10:88:d2:
                    63:d1:c5:53:f8:09:45:7a:d8:92:4b:66:ab:19:83:
                    81:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:18:99:9F:24:0B:6C:9D:A8:CE:AC:4F:9A:C3:67:FE:B3:58:95:58
            X509v3 Authority Key Identifier:
                keyid:D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4a:52:f2:c1:30:90:13:28:fd:03:d2:a5:4a:cb:28:24:40:
         ca:b4:6b:c5:67:3a:c1:02:59:f4:ec:72:63:4b:1a:67:fd:17:
         8f:b1:9e:d7:06:17:d4:64:66:75:47:e8:1e:37:19:c0:f2:15:
         32:70:78:01:78:cc:b8:d2:a5:64:40:1c:cd:87:7d:95:61:f2:
         cd:dd:b2:79:9a:0e:3f:fd:09:87:5f:37:44:08:01:5b:d8:69:
         be:6b:2a:28:54:9f:e4:14:77:e5:9a:17:f3:2c:06:9b:05:b9:
         f2:c7:4e:0f:58:c3:16:01:99:da:16:d6:d0:3d:2d:f1:5b:58:
         2f:db:6b:a2:09:19:49:80:bd:db:c9:7e:50:c5:df:44:7e:ef:
         4f:fa:8d:66:f1:79:d6:8c:c2:f6:f5:da:98:79:f5:ad:44:2a:
         0b:30:91:d8:d3:bf:f6:62:32:9f:8d:cf:cf:14:f6:b4:0e:61:
         61:b4:00:45:a4:cd:61:03:ed:9d:3b:63:ee:2f:47:d6:48:e0:
         f5:62:cb:6f:88:b4:fb:50:5e:62:8b:b4:3c:e9:cc:f1:b2:dc:
         b4:67:1c:8f:dd:fb:c3:56:b3:0a:53:fa:25:21:2f:f8:00:07:
         2e:3e:a9:d4:8e:99:bc:bf:6f:2b:92:8a:63:a5:ae:56:37:0a:
         87:ec:76:03
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULRwGjJrgA8bwvGJYmmkpRByD+4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDkzZWYwNzAxZThjYTZlZDBhMGU2ZDQ2YTM4YjhkOGNm
MzA5MTI4NTAeFw0yNjA2MTIxOTM3NDFaFw0yNjA2MTMyMzMyNDFaMDMxMTAvBgNV
BAMTKDdFMTg5OTlGMjQwQjZDOURBOENFQUM0RjlBQzM2N0ZFQjM1ODk1NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTCn0HUV1hKhaeqG2lWL6WaCAo
2OfdXjE4CCvU62Q+J5mHkw8b5CcMQ7vexETKR8qRHSQ/SjiT+eglM8NzLz0QA0GT
x8xe/Flh662M1GzeGlMirpUGGyOYASw7opeJ3DnEpK6ep7RfHT/Eq0Pozzc+b2/i
jETBhUbUzV3lCYFWb+drHjaIZuacnYQ2K3YfduMGj/Wya7EENVlgdO71rPLcc8FR
jlm9BMj+4w4PfEGz/TaCbGX+SI453xISlUVqQe0UhHQKGOw1mzQP4KBtKOvDSuAT
0n+MkNgG3GpbFex/qPNeiWZZOlaVlRsKmxCI0mPRxVP4CUV62JJLZqsZg4HHAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUfhiZnyQLbJ2ozqxPmsNn/rNYlVgwHwYDVR0j
BBgwFoAU2T7wcB6Mpu0KDm1Go4uNjPMJEoUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl
YjdkLzAvRDkzRUYwNzAxRThDQTZFRDBBMEU2RDQ2QTM4QjhEOENGMzA5MTI4NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJUN3djQjZNcHUwS0RtMUdvNHVOalBN
SkVvVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOTkyNjVlZi0y
MmE5LTQxMDAtYTIzZC01MWE5ZDlmZWViN2QvMC9EOTNFRjA3MDFFOENBNkVEMEEw
RTZENDZBMzhCOEQ4Q0YzMDkxMjg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0pS8sEwkBMo/QPSpUrL
KCRAyrRrxWc6wQJZ9OxyY0saZ/0Xj7Ge1wYX1GRmdUfoHjcZwPIVMnB4AXjMuNKl
ZEAczYd9lWHyzd2yeZoOP/0Jh183RAgBW9hpvmsqKFSf5BR35ZoX8ywGmwW58sdO
D1jDFgGZ2hbW0D0t8VtYL9trogkZSYC928l+UMXfRH7vT/qNZvF51ozC9vXamHn1
rUQqCzCR2NO/9mIyn43PzxT2tA5hYbQARaTNYQPtnTtj7i9H1kjg9WLLb4i0+1Be
You0POnM8bLctGccj937w1azClP6JSEv+AAHLj6p1I6ZvL9vK5KKY6WuVjcKh+x2
Aw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:31:54 2026 by rpki-client