Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
File:                     D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft (raw, json)
Hash identifier:          QOvlI2xoRQTWMCtNLVW2mZrJIc7wt95r+FoLJSr5bNE=
Subject key identifier:   BE:B8:4C:98:52:B9:07:80:7E:8A:1F:E9:41:02:18:8C:39:DD:C2:64
Authority key identifier: D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85
Certificate issuer:       /CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
Certificate serial:       125CF8DD94C9E354930B08F5C8B5CD5C5A7FF0E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
Manifest number:          04B7
Signing time:             Wed 04 Nov 2026 04:06:16 +0000
Manifest this update:     Wed 04 Nov 2026 04:01:16 +0000
Manifest next update:     Thu 05 Nov 2026 05:43:16 +0000
Files and hashes:         1: D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl (hash: hMhQCMWRzqAb7Nb+pa6KekWl1w31XKycG3kncgJ8V7E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Nov 2026 23:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5c:f8:dd:94:c9:e3:54:93:0b:08:f5:c8:b5:cd:5c:5a:7f:f0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
        Validity
            Not Before: Nov  4 04:01:16 2026 GMT
            Not After : Nov  5 05:43:16 2026 GMT
        Subject: CN=BEB84C9852B907807E8A1FE94102188C39DDC264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:43:49:bc:d2:50:2c:c4:49:0a:a7:a9:03:
                    be:2f:40:a8:63:94:82:84:f9:27:b0:f0:d4:d4:c2:
                    eb:9a:69:89:6b:81:f3:40:8e:63:7f:e8:1a:a6:fd:
                    83:59:5d:f3:d3:30:5e:a6:78:e4:90:24:77:14:f7:
                    aa:ee:7d:84:2c:58:07:79:c7:2d:f4:2c:49:86:c6:
                    f7:f8:92:3f:b7:06:74:bc:a0:d0:5e:6a:34:ba:8a:
                    92:2f:ad:ea:b9:62:f0:32:9a:71:f7:6a:91:ce:3f:
                    f0:40:f3:1f:96:e6:c3:fb:89:b4:a2:e5:aa:82:70:
                    4f:5e:f5:c0:a7:f4:46:6c:17:47:79:a3:f9:ae:03:
                    e8:b5:ea:fa:45:82:35:77:b9:6a:31:8d:18:05:66:
                    cc:91:b1:4f:84:1a:4e:20:8c:50:b6:02:86:f6:d1:
                    ab:b3:17:d0:ff:cb:e9:6e:de:4a:db:29:36:be:93:
                    5e:a1:87:f8:62:f8:93:0c:b0:70:34:42:40:f6:d6:
                    a0:b6:d2:a5:a8:57:04:71:84:bb:79:a5:d1:7f:a2:
                    f2:41:e7:17:b3:fc:6a:4b:77:6f:54:42:e3:c1:40:
                    8c:29:60:e0:c7:65:2e:ab:7a:c6:bd:f3:41:73:ef:
                    32:71:1c:1a:25:5b:a5:b5:e9:8c:c1:a7:20:68:cd:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B8:4C:98:52:B9:07:80:7E:8A:1F:E9:41:02:18:8C:39:DD:C2:64
            X509v3 Authority Key Identifier:
                keyid:D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:23:1e:95:ea:7c:24:0a:89:4c:13:40:f3:06:74:74:98:49:
         e9:82:22:86:7a:0a:df:5b:9a:b6:4c:09:8a:2d:e6:2d:ed:4e:
         f4:1c:87:14:22:95:bd:f1:73:95:79:93:17:23:0c:39:da:b1:
         53:8b:e0:cd:55:d7:eb:22:4c:f0:2d:e7:80:b8:24:5a:68:f7:
         b4:1f:f9:b2:84:ff:b6:6b:18:51:9c:6a:f5:d8:72:ee:56:d9:
         bd:59:68:5e:fc:18:ec:02:34:e0:db:8b:65:37:6d:dc:11:ae:
         b2:5c:63:4e:b5:c1:73:0f:70:b6:26:01:09:46:1e:64:4e:e8:
         95:1d:df:6a:e0:96:22:c6:2e:d0:91:2a:b4:25:b6:a6:fd:5b:
         92:3d:5b:1d:d5:32:c1:c5:c7:1f:a6:cf:21:c7:5f:2b:04:95:
         c6:f1:fd:14:c2:6d:ec:c9:b7:85:39:4e:05:06:7a:6e:3f:59:
         c0:89:25:2e:d9:9d:c6:90:e3:ef:5b:5a:e1:9e:75:d7:08:72:
         db:c7:37:ec:11:ec:6a:c4:36:4e:28:a2:91:db:75:fa:96:79:
         b9:19:67:0b:b8:31:1e:ed:e3:ea:19:f7:d0:e1:80:2a:b1:ed:
         4d:81:12:b1:4f:52:fd:3d:99:7d:b1:25:ed:90:9a:b4:44:ed:
         1c:99:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----