Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
File:                     188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft (raw, json)
Hash identifier:          Fl2MGPrCSI2Dx/Zzz6J4XZyj2kpF2er4KwP50dABkUU=
Subject key identifier:   6E:E1:F1:0D:CD:81:63:78:CB:5F:D6:69:A7:B6:2C:43:C6:6F:38:46
Authority key identifier: 18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96
Certificate issuer:       /CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96
Certificate serial:       49EA7C5BD6B70841B4A383504E6E7B7908BCA8CE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
Manifest number:          02C1
Signing time:             Wed 26 Aug 2026 09:59:52 +0000
Manifest this update:     Wed 26 Aug 2026 09:54:52 +0000
Manifest next update:     Thu 27 Aug 2026 13:30:52 +0000
Files and hashes:         1: 188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl (hash: NfYY6BKtJcKITZ7v77P6pEx3GuU692NDpXqqMGmC98g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ea:7c:5b:d6:b7:08:41:b4:a3:83:50:4e:6e:7b:79:08:bc:a8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96
        Validity
            Not Before: Aug 26 09:54:52 2026 GMT
            Not After : Aug 27 13:30:52 2026 GMT
        Subject: CN=6EE1F10DCD816378CB5FD669A7B62C43C66F3846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:3c:bd:f7:71:bc:f0:e6:9b:7f:f7:1c:e4:
                    a4:c1:ba:3d:d1:49:ef:b1:a5:5a:de:e2:1b:a1:ee:
                    bc:77:ad:eb:a2:55:bc:78:9d:9c:a4:c3:4d:9d:59:
                    c5:ac:e1:e1:aa:ca:1a:03:0a:57:d7:08:aa:49:5f:
                    0c:89:1c:12:13:5a:60:a4:25:68:d6:4a:91:86:8a:
                    2b:fe:d5:8e:f2:e8:23:31:e1:40:62:78:66:4b:5c:
                    b7:dd:f5:71:a8:13:fc:ef:de:04:ca:4b:8f:d7:d0:
                    d2:52:2f:51:a4:34:80:f0:89:85:95:52:b3:83:ac:
                    cf:83:7d:78:f3:9d:45:3a:1c:d9:93:c1:85:06:c6:
                    41:18:04:a4:01:5d:b6:61:cb:d4:01:b3:e6:2d:48:
                    f2:87:0b:e3:bb:70:6a:9f:92:a3:78:e9:68:00:a8:
                    ee:c9:f1:ac:7b:15:14:cc:9a:d9:41:99:ba:ab:63:
                    6e:83:39:1e:41:bd:8b:be:79:fd:dd:7b:cb:60:d2:
                    c2:9c:87:41:44:7b:6b:03:84:b1:7c:e2:17:78:c0:
                    fb:27:17:1c:f2:a1:6f:92:12:87:fb:16:96:45:d8:
                    e6:b5:48:98:db:a4:67:e8:eb:a6:a0:3a:e9:9d:59:
                    82:65:52:18:87:e6:4c:b7:c7:8c:9d:3c:e2:36:51:
                    b3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E1:F1:0D:CD:81:63:78:CB:5F:D6:69:A7:B6:2C:43:C6:6F:38:46
            X509v3 Authority Key Identifier:
                keyid:18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:45:09:33:42:63:63:77:a1:81:6b:48:bb:f8:b1:8d:12:9c:
         2c:c2:9f:54:8b:ed:11:9c:9c:10:c9:67:a0:94:72:4b:db:fc:
         fa:58:1f:ef:4d:ef:53:f6:4a:3f:8b:f7:2b:c8:03:12:51:44:
         84:63:a4:da:26:d7:3c:89:9f:b6:bb:3f:14:89:ed:84:f2:15:
         6a:74:32:6e:fd:e2:ea:55:20:97:ad:b9:e1:70:cb:49:27:dc:
         fe:6e:eb:a7:5b:52:48:a6:6a:17:54:d0:c2:24:6e:ea:8c:d3:
         e1:f7:28:51:18:f6:d3:c0:fe:5e:e7:93:58:73:05:12:4a:0d:
         95:cd:c1:de:0c:f8:ac:7f:f3:04:8a:d1:63:80:d8:77:30:84:
         95:c7:67:06:63:61:da:41:a3:c3:18:ba:bd:4b:da:52:c5:df:
         02:91:6b:fe:7b:9c:57:22:51:53:7c:3e:e1:f4:25:10:bb:a1:
         98:ad:4b:f5:7a:74:bb:35:9f:47:26:36:7d:1f:17:fe:a1:33:
         02:92:5a:8d:ca:9c:bd:01:fb:be:90:5b:3e:56:81:2d:d7:9c:
         d8:41:a1:3a:c4:3f:4f:0b:60:4a:b8:a1:7f:fd:08:36:31:e3:
         a6:07:08:53:0a:d9:76:eb:06:0e:5f:00:0d:9d:82:3f:b0:47:
         7a:48:6f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:55:51 2026 by rpki-client