Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
File:                     C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json)
Hash identifier:          92fWy/jooPr+F1if4HvrLyO82wiNUwiIuNGUkKDg/8M=
Subject key identifier:   FF:3C:D9:FC:28:77:9D:0B:4E:8B:1B:29:14:8D:14:F2:9F:E2:74:3B
Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF
Certificate issuer:       /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF
Certificate serial:       2C15612FBED456E57D068E7814EC037E56D9D312
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
Manifest number:          0145
Signing time:             Tue 13 Oct 2026 09:50:06 +0000
Manifest this update:     Tue 13 Oct 2026 09:45:06 +0000
Manifest next update:     Wed 14 Oct 2026 12:51:06 +0000
Files and hashes:         1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: B12UugDyYXd0PnL915tdE2gRmHAQxzAs9TEjx07g15Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 07:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:15:61:2f:be:d4:56:e5:7d:06:8e:78:14:ec:03:7e:56:d9:d3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF
        Validity
            Not Before: Oct 13 09:45:06 2026 GMT
            Not After : Oct 14 12:51:06 2026 GMT
        Subject: CN=FF3CD9FC28779D0B4E8B1B29148D14F29FE2743B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:13:5e:7e:92:95:ec:66:96:fb:54:d5:69:
                    d3:46:e5:db:a8:6b:e6:1b:48:ec:00:14:36:35:ea:
                    2d:06:3b:de:e8:bd:a2:3a:1d:6d:06:79:34:9d:0a:
                    7c:33:5f:c7:0c:64:8d:be:fd:cb:f2:e9:9c:62:b4:
                    db:cf:5a:49:7a:4f:26:74:cb:90:44:fd:9b:65:be:
                    f8:ce:38:d8:09:2a:76:27:ae:72:e3:5b:fa:06:3b:
                    03:ad:ff:ba:fc:ad:96:51:fb:10:95:16:1b:68:e2:
                    69:aa:d6:61:1a:88:f5:12:00:0f:14:6e:0f:e0:bb:
                    ca:5a:31:94:04:91:7f:73:9d:0e:45:53:fa:b1:d0:
                    c9:4f:16:46:f4:b5:a4:d0:51:35:46:52:36:98:73:
                    af:6d:fe:f2:bb:8e:00:8b:df:21:25:d5:d8:4b:7d:
                    23:0f:e1:f5:6e:f7:9f:16:7f:75:85:13:52:8f:ec:
                    4f:65:b7:f8:62:25:c4:1c:79:b0:8f:91:49:1c:e3:
                    4a:82:9c:7f:04:33:27:37:a5:8d:85:ad:dc:ee:79:
                    6b:28:7a:f2:38:de:cc:15:e4:6a:03:ee:b7:8e:ee:
                    03:83:eb:14:4e:14:3a:82:e8:0f:a0:86:9e:45:8e:
                    09:29:6a:f2:07:cd:58:ce:11:43:db:ff:8b:28:4c:
                    3a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3C:D9:FC:28:77:9D:0B:4E:8B:1B:29:14:8D:14:F2:9F:E2:74:3B
            X509v3 Authority Key Identifier:
                keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:10:00:74:b7:5b:61:4e:63:73:a6:ec:44:f0:41:98:54:a9:
         07:9c:39:82:83:63:87:50:ab:f7:8f:6e:36:fb:b9:62:79:55:
         73:67:ab:12:9e:b9:89:5b:27:6c:e4:f2:9f:7a:3f:9e:bd:21:
         1c:8c:97:86:3a:b4:2f:ea:35:34:14:2c:da:c9:d7:8a:20:73:
         f2:14:a5:7c:c0:4a:ab:56:3c:5c:ab:14:6a:9b:e4:8b:b2:b5:
         16:8e:d8:ba:9c:76:2d:4d:99:c4:13:f1:61:f9:bc:fe:6e:09:
         13:82:cc:6a:d4:5b:25:5b:9e:05:1c:c6:40:91:2b:10:8b:28:
         37:4a:76:34:a5:4d:6a:94:35:94:1b:11:a3:30:09:1c:ee:8f:
         71:5b:d1:a1:20:60:b7:ef:64:96:c5:27:9b:b1:ee:74:b4:9b:
         cb:0f:9b:87:88:a0:c8:bf:52:94:53:ec:ff:fa:05:78:a3:e3:
         40:d4:0e:22:84:f2:0d:ec:5a:5c:43:a8:d0:c5:04:f8:82:01:
         c8:17:90:97:32:f8:63:98:c9:b7:b5:ee:7e:00:dc:27:dc:94:
         62:6f:5f:66:7e:84:58:0d:aa:b1:8b:aa:04:8e:61:8b:9b:93:
         3f:5b:35:77:d8:0c:c4:1b:33:10:d5:f3:fc:1d:b6:44:14:1a:
         e7:d7:d6:f8
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIULBVhL77UVuV9Bo54FOwDflbZ0xIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1
NDEyRDFERjAeFw0yNjEwMTMwOTQ1MDZaFw0yNjEwMTQxMjUxMDZaMDMxMTAvBgNV
BAMTKEZGM0NEOUZDMjg3NzlEMEI0RThCMUIyOTE0OEQxNEYyOUZFMjc0M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsORNefpKV7GaW+1TVadNG5duo
a+YbSOwAFDY16i0GO97ovaI6HW0GeTSdCnwzX8cMZI2+/cvy6ZxitNvPWkl6TyZ0
y5BE/ZtlvvjOONgJKnYnrnLjW/oGOwOt/7r8rZZR+xCVFhto4mmq1mEaiPUSAA8U
bg/gu8paMZQEkX9znQ5FU/qx0MlPFkb0taTQUTVGUjaYc69t/vK7jgCL3yEl1dhL
fSMP4fVu958Wf3WFE1KP7E9lt/hiJcQcebCPkUkc40qCnH8EMyc3pY2FrdzueWso
evI43swV5GoD7reO7gOD6xROFDqC6A+ghp5FjgkpavIHzVjOEUPb/4soTDrRAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQU/zzZ/Ch3nQtOixspFI0U8p/idDswHwYDVR0j
BBgwFoAUw/AsKvOCN3ram1Hy6jcOdFQS0d8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl
YTA5LzEvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEyRDFERi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEy
RDFERi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h
OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS9DM0YwMkMyQUYzODIzNzdBREE5
QjUxRjJFQTM3MEU3NDU0MTJEMURGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRAAdLdbYU5jc6bsRPBB
mFSpB5w5goNjh1Cr949uNvu5YnlVc2erEp65iVsnbOTyn3o/nr0hHIyXhjq0L+o1
NBQs2snXiiBz8hSlfMBKq1Y8XKsUapvki7K1Fo7Yupx2LU2ZxBPxYfm8/m4JE4LM
atRbJVueBRzGQJErEIsoN0p2NKVNapQ1lBsRozAJHO6PcVvRoSBgt+9klsUnm7Hu
dLSbyw+bh4igyL9SlFPs//oFeKPjQNQOIoTyDexaXEOo0MUE+IIByBeQlzL4Y5jJ
t7XufgDcJ9yUYm9fZn6EWA2qsYuqBI5hi5uTP1s1d9gMxBszENXz/B22RBQa59fW
+A==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:32:01 2026 by rpki-client