Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File:                     317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier:          OdJeFr3Zv9P4i6zFmoq+fLScRUcq5nXoy4WGlGo8kG4=
Subject key identifier:   A1:DD:3A:71:DE:FF:7D:E7:9F:8E:70:B9:5D:C0:0A:C6:84:AF:45:6B
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer:       /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial:       56856DB7EA34C8D484C202B2F85B94E57276F816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number:          01C6
Signing time:             Fri 18 Sep 2026 19:23:21 +0000
Manifest this update:     Fri 18 Sep 2026 19:18:21 +0000
Manifest next update:     Sat 19 Sep 2026 21:23:21 +0000
Files and hashes:         1: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: v+H+mn4dp+ffIZgitHCXGrbBOmW8SmGVM3cHsDiRi8w=)
                          2: AS207682.asa (hash: kOi2aY4CioenoW8DWmNLgHN1M5fvPo1KDSCtorodzW0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 21:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:85:6d:b7:ea:34:c8:d4:84:c2:02:b2:f8:5b:94:e5:72:76:f8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
        Validity
            Not Before: Sep 18 19:18:21 2026 GMT
            Not After : Sep 19 21:23:21 2026 GMT
        Subject: CN=A1DD3A71DEFF7DE79F8E70B95DC00AC684AF456B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:27:55:6e:87:ca:45:db:fe:f3:06:65:56:
                    78:e6:1e:67:4d:3d:ed:6c:ac:0b:a6:83:32:92:4f:
                    5c:e4:01:8a:94:26:31:30:cd:ca:70:a5:90:a3:16:
                    2c:66:96:f8:1b:2c:fe:ac:2e:1f:3a:54:8e:6b:bf:
                    fc:cb:d8:5f:75:75:41:f0:67:04:37:70:fe:9d:ba:
                    19:64:85:f7:53:aa:75:57:13:03:d8:c4:a7:e0:13:
                    7d:93:4e:c9:c1:7b:15:0d:d6:bc:0a:64:db:82:39:
                    d2:91:9f:fd:3e:df:f2:45:01:24:ac:db:08:f7:d6:
                    0d:f2:9e:07:c3:1c:ab:1a:21:02:77:1d:eb:e3:48:
                    37:30:40:6a:ce:03:0c:50:d4:40:56:4d:c2:70:91:
                    19:5d:be:9e:c9:f7:41:5b:d9:a7:43:2e:c0:3a:15:
                    14:e5:43:c9:7e:85:71:c1:20:b8:b7:2a:5a:0b:2b:
                    3b:1b:41:fc:dd:38:75:06:5b:b4:23:b5:15:e8:a6:
                    e2:ba:dc:a4:80:fb:18:cd:fd:2f:d1:d1:52:6a:60:
                    c7:3f:dd:da:44:5c:22:05:01:c5:1b:fc:d4:47:0c:
                    42:7d:a0:bd:3f:9a:16:48:33:1e:72:4a:88:35:38:
                    bf:de:fb:0d:78:05:fd:23:9f:b1:03:11:4f:af:f8:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DD:3A:71:DE:FF:7D:E7:9F:8E:70:B9:5D:C0:0A:C6:84:AF:45:6B
            X509v3 Authority Key Identifier:
                keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:8d:86:14:0d:05:2c:95:0b:29:d3:22:85:d3:2e:2d:32:59:
         e3:cc:11:7b:bd:83:75:2d:9b:96:09:f0:9f:53:9c:18:c8:82:
         5c:4b:ff:ed:44:e2:b9:f2:04:1e:c5:c4:a5:35:70:77:b9:d4:
         49:32:b2:3e:4f:58:8e:89:95:44:c8:b8:7b:fe:49:41:8c:8b:
         17:41:dd:0a:16:7c:d2:57:23:3e:0f:13:e0:b8:4a:b0:12:a1:
         a7:6c:f3:f4:a7:d7:eb:95:02:17:70:f9:05:e9:79:41:74:4a:
         18:45:bb:ec:9d:29:6c:7b:d4:e5:c2:bb:09:b8:4c:5f:9f:3d:
         34:51:50:21:58:58:e3:26:4d:53:88:dc:c6:23:a4:88:a2:fc:
         73:ea:ce:cd:21:23:70:a4:bc:bd:71:7a:d9:36:19:09:df:ee:
         87:ff:72:ec:33:45:c1:a1:70:ce:f1:07:c2:8a:51:77:8b:f9:
         2a:f0:cd:69:87:a2:96:7c:87:0f:44:72:a7:b2:d2:6b:1a:2e:
         7a:02:ad:e4:67:dd:d8:42:f2:87:63:42:c2:a6:d9:79:bc:e6:
         72:91:3f:34:15:8b:c4:c3:f9:c7:8a:56:8d:d7:93:a7:20:a0:
         87:16:c9:f9:e6:5e:e2:23:da:45:b8:88:3a:36:91:2b:db:6e:
         77:f9:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:04:48 2026 by rpki-client