Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft
File:                     5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft (raw, json)
Hash identifier:          jgkXzZvSi+ApOU2K1PfpPamtHE7aDYrax1Nlq6kG7I8=
Subject key identifier:   AC:21:D9:A3:C0:9C:D7:4B:80:C3:92:65:D0:0E:EF:AF:2B:28:8D:FD
Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC
Certificate issuer:       /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC
Certificate serial:       4FBAE8AF2ACE3F1019F9A7A5CF05A8928E935080
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft
Manifest number:          023C
Signing time:             Tue 22 Sep 2026 20:10:37 +0000
Manifest this update:     Tue 22 Sep 2026 20:05:37 +0000
Manifest next update:     Wed 23 Sep 2026 21:39:37 +0000
Files and hashes:         1: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl (hash: pspwdOYtCpaDT6oWN13arOfWhq6hYgslGL4VtLdmayQ=)
                          2: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: hR947RLO80MjAy1fUiecS1oEpdE+fjwemP68Afa7Bvc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ba:e8:af:2a:ce:3f:10:19:f9:a7:a5:cf:05:a8:92:8e:93:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC
        Validity
            Not Before: Sep 22 20:05:37 2026 GMT
            Not After : Sep 23 21:39:37 2026 GMT
        Subject: CN=AC21D9A3C09CD74B80C39265D00EEFAF2B288DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:be:95:bf:04:5e:69:8e:c9:7b:37:86:bc:
                    98:43:5c:83:1d:d8:1d:cb:11:37:40:48:2b:2a:aa:
                    50:f5:30:43:83:0b:a6:d3:08:c6:77:84:0e:17:c4:
                    44:f0:ac:b0:6d:2d:e3:26:75:fd:13:23:c1:59:b8:
                    bf:98:74:a1:8c:16:43:03:d3:c2:1e:c7:f8:50:72:
                    52:46:fa:c1:a8:c2:64:5f:0b:f9:7c:c7:4e:90:1f:
                    15:f9:39:78:42:ce:34:9d:ff:b6:80:14:07:0f:41:
                    0f:79:a7:a5:20:53:e0:a6:66:f5:14:01:a4:ae:71:
                    d0:7c:69:58:23:76:26:61:61:99:ff:43:5e:f1:6c:
                    b3:fd:38:f1:cd:4d:f1:05:1c:e7:98:43:f6:34:67:
                    05:5c:81:a0:38:40:7c:c2:8a:fe:34:a5:cc:2c:b7:
                    7f:87:6c:fd:4e:b2:29:08:95:7d:5d:6c:eb:dd:ba:
                    c7:cb:de:01:42:92:31:65:83:c8:af:0a:75:c6:c2:
                    58:6d:f1:f7:8a:f1:77:4a:dc:08:26:d0:a5:b2:85:
                    dd:af:71:46:01:d1:de:eb:29:ad:6b:02:61:02:12:
                    3c:f5:a2:98:46:56:10:0a:ec:c5:be:2c:f7:94:a3:
                    cc:35:ab:64:6f:d2:90:fa:d2:03:86:7e:06:37:2b:
                    b7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:21:D9:A3:C0:9C:D7:4B:80:C3:92:65:D0:0E:EF:AF:2B:28:8D:FD
            X509v3 Authority Key Identifier:
                keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5a:1c:a8:a1:1a:26:cd:d6:1a:e6:2e:9e:6f:e7:d0:1e:40:
         0e:5c:ad:f9:aa:e7:65:e7:91:61:85:7c:83:cb:c4:53:fd:75:
         32:48:c3:30:2c:85:39:7d:b8:ae:08:eb:84:91:93:1d:79:69:
         fd:d3:4d:2a:61:2e:22:f4:41:be:01:c7:13:5b:ff:b4:8a:62:
         04:24:4f:0f:0f:11:84:92:81:3e:7a:46:f7:39:06:5b:f5:07:
         1c:45:2f:2e:f1:8e:94:b4:d8:ca:dd:24:72:1d:7e:fc:69:be:
         90:c1:6b:a9:b7:fd:3c:f6:5b:8d:1d:1a:49:26:b2:26:59:ca:
         a4:6c:1e:4f:bd:b8:60:49:47:f1:0c:93:d5:1f:4f:c4:41:3d:
         32:45:c1:2d:f4:4c:76:d6:17:d7:b6:8a:f9:cc:1b:d8:c0:8a:
         ba:84:3b:e3:7f:c0:67:a4:eb:a1:e7:8e:5e:36:f3:b1:3c:3b:
         8c:91:36:ae:56:09:f8:55:d8:96:a2:ac:5b:dd:28:27:95:8f:
         f0:07:35:a3:b8:71:5a:0c:10:36:d6:38:2a:ea:34:35:fd:32:
         28:1a:7b:dc:6b:3f:38:7e:9b:f2:d6:a1:91:4d:14:16:ed:01:
         c3:43:36:01:fc:b7:5d:49:2b:36:9a:e4:3d:e2:f9:20:b5:04:
         31:b0:be:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----