Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
File:                     A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft (raw, json)
Hash identifier:          A7JKw5S5UHAsFMnPZQzXJoE7X64Lz0XDa8FWv+hw2FY=
Subject key identifier:   83:F6:CC:E4:31:7D:8B:7A:65:B2:0E:3A:E3:2F:E7:7F:C1:D4:93:C7
Authority key identifier: A6:C1:7E:7D:36:3F:18:F7:3A:2A:8E:34:C1:42:5D:2D:46:56:20:3B
Certificate issuer:       /CN=a6c17e7d363f18f73a2a8e34c1425d2d4656203b
Certificate serial:       14B74AE61283F87BB8A26806C835F6F4994FE64C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
Manifest number:          0256
Signing time:             Sun 01 Mar 2026 11:51:42 +0000
Manifest this update:     Sun 01 Mar 2026 11:46:42 +0000
Manifest next update:     Mon 02 Mar 2026 14:47:42 +0000
Files and hashes:         1: A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl (hash: 5/0xDUF6Kd4Zh9XLPPah8kz/BTLPKK5ZLimzyq7CLdg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b7:4a:e6:12:83:f8:7b:b8:a2:68:06:c8:35:f6:f4:99:4f:e6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c17e7d363f18f73a2a8e34c1425d2d4656203b
        Validity
            Not Before: Mar  1 11:46:42 2026 GMT
            Not After : Mar  2 14:47:42 2026 GMT
        Subject: CN=83F6CCE4317D8B7A65B20E3AE32FE77FC1D493C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:18:ad:a2:1d:34:ea:80:6f:7c:18:ee:48:
                    d5:59:50:86:30:34:66:5e:95:7c:26:01:ed:eb:34:
                    5f:3b:f1:85:67:1d:f4:84:70:5c:88:47:40:9c:64:
                    52:fb:bb:8d:ae:62:79:bf:ad:b9:53:82:9f:6e:30:
                    50:78:c4:b3:e7:d5:5f:e0:1f:d4:46:3e:20:78:dc:
                    43:6a:cb:ab:e9:87:4a:31:54:d6:54:92:d9:6d:cc:
                    0f:ea:a6:a5:1e:37:4f:5e:10:73:db:e2:12:ae:8d:
                    63:f2:5b:0d:89:a4:f3:53:36:17:7c:3c:c3:10:42:
                    89:27:0e:d4:7c:40:26:6d:80:45:18:e3:00:54:b3:
                    de:4b:9f:6e:6b:83:55:7f:bd:19:f7:44:4c:47:e7:
                    ac:71:cd:07:a4:e2:f1:86:1c:15:49:50:0b:bf:b0:
                    a7:1d:59:1a:3c:2f:15:0a:0d:79:c4:40:4a:d8:2c:
                    b1:8d:c9:c9:b9:08:2e:d4:dc:1e:17:40:49:c5:93:
                    b6:da:8d:b8:79:53:e7:ff:71:22:68:74:be:ac:bc:
                    c0:b6:8e:b1:eb:7d:02:3a:05:1c:39:6b:cb:09:40:
                    3b:58:cb:75:58:63:23:89:b4:9f:ae:63:6d:d1:36:
                    1a:d8:07:db:0c:7f:d7:88:3b:da:f2:cd:68:3f:29:
                    6b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F6:CC:E4:31:7D:8B:7A:65:B2:0E:3A:E3:2F:E7:7F:C1:D4:93:C7
            X509v3 Authority Key Identifier:
                keyid:A6:C1:7E:7D:36:3F:18:F7:3A:2A:8E:34:C1:42:5D:2D:46:56:20:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:10:e1:0e:9c:f5:8e:ce:ef:7b:89:7a:95:61:d0:d4:6c:15:
         c0:d5:28:ee:d5:41:6f:0b:4c:80:1f:b1:1f:c1:79:fd:b3:ff:
         77:1a:90:2f:fb:65:a0:f0:ee:1f:57:fe:00:82:8d:c7:17:78:
         c5:22:8b:11:1e:a7:6b:56:bf:93:a8:3a:5c:4b:17:e1:a7:55:
         44:03:4c:5f:f9:a2:6c:f6:77:d1:bf:9a:31:4d:11:eb:e0:b7:
         ab:83:bd:e2:9b:43:84:2d:a5:77:77:16:30:8e:8d:e2:4b:08:
         38:4b:39:a0:d3:ee:0c:82:30:c8:22:ea:cb:b8:40:01:41:d0:
         34:13:c1:ee:f0:a5:46:fe:23:5d:0d:52:d2:f3:54:d3:7a:4b:
         6e:ff:01:cb:88:b5:78:78:e4:2f:4c:aa:1b:df:fb:bb:0f:2d:
         84:28:d2:83:3f:54:62:9b:cd:94:fa:be:e8:44:a0:96:37:41:
         a7:51:4c:e7:1d:9c:ae:54:dc:85:00:99:29:f9:7b:23:25:a9:
         af:12:69:eb:67:e0:62:48:06:18:e0:43:c8:2c:95:66:88:3a:
         6a:ab:01:f5:90:b5:8f:04:e3:cf:bf:e6:9c:ec:62:39:a8:7c:
         49:39:26:60:7e:ee:30:e1:04:de:10:76:ae:83:51:73:0b:b0:
         61:df:ae:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:04 2026 by rpki-client