Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
File:                     D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft (raw, json)
Hash identifier:          +sOTm6MF0cojGWU5JF6PXeKacQgQWiYe3gElP6mCxPU=
Subject key identifier:   76:7A:51:75:44:96:1B:CA:74:35:F1:8F:97:BE:AE:1A:1B:36:06:F7
Authority key identifier: D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85
Certificate issuer:       /CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
Certificate serial:       41B8A5C299C14006F0EAB347129C2E5A6C444D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
Manifest number:          03D3
Signing time:             Thu 07 May 2026 07:37:38 +0000
Manifest this update:     Thu 07 May 2026 07:32:38 +0000
Manifest next update:     Fri 08 May 2026 10:43:38 +0000
Files and hashes:         1: D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl (hash: mb8hf+dTetnisguaOnZum78Z54kGaEd46kzLkbJUP8M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 10:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b8:a5:c2:99:c1:40:06:f0:ea:b3:47:12:9c:2e:5a:6c:44:4d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
        Validity
            Not Before: May  7 07:32:38 2026 GMT
            Not After : May  8 10:43:38 2026 GMT
        Subject: CN=767A517544961BCA7435F18F97BEAE1A1B3606F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ec:68:08:e7:db:18:82:75:21:0e:15:ad:2e:
                    33:28:87:1f:6f:a3:88:84:22:ec:37:ab:a3:4d:b8:
                    47:e0:9d:eb:31:e0:ce:96:16:f7:e5:ed:3b:96:33:
                    6f:24:15:5f:8c:a6:a2:35:45:fd:23:4f:f0:87:79:
                    ea:35:22:5b:b7:9c:10:14:50:92:3a:61:b1:e4:f1:
                    df:8e:29:c9:6a:2f:ad:14:72:6e:cd:bc:7a:79:fc:
                    2b:0c:6d:dd:9a:29:b9:fc:2b:56:48:39:f8:7c:22:
                    5d:34:03:63:42:44:81:75:ac:d6:68:3f:9d:d4:7a:
                    a8:12:2b:82:ff:ce:bf:2f:55:ca:90:38:91:f7:20:
                    e1:ea:2d:ef:db:fd:cc:fb:cb:c3:4c:ed:ee:7e:dc:
                    cf:0d:d7:56:e3:11:37:09:11:8e:c5:0a:30:71:97:
                    2d:93:39:b4:80:87:05:04:f3:53:b5:e8:05:de:56:
                    7f:39:d5:d2:2a:f5:0d:57:50:5f:11:a5:d8:44:92:
                    32:14:85:78:73:14:59:aa:d0:d5:36:4c:74:13:dd:
                    2a:dd:a5:a6:8c:a4:8a:dc:ed:85:a9:5a:2c:95:3c:
                    a0:52:4e:ba:64:20:03:06:af:8f:bc:c9:c4:30:32:
                    22:e5:de:a5:ec:5d:97:ec:c3:73:aa:f3:a5:de:46:
                    08:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7A:51:75:44:96:1B:CA:74:35:F1:8F:97:BE:AE:1A:1B:36:06:F7
            X509v3 Authority Key Identifier:
                keyid:D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f0:1e:02:16:56:32:30:37:f9:7c:2e:1e:16:57:e4:44:b9:
         12:cb:a9:a3:8e:36:1f:5e:a8:0a:4c:9e:a0:b3:10:a1:29:8e:
         1c:13:60:54:a0:58:49:39:ce:79:b3:48:ee:2b:70:55:f7:d2:
         4e:f6:19:ae:95:50:5f:11:65:97:98:46:11:26:b0:1e:2b:c9:
         96:e1:bc:48:3e:97:28:1a:6a:06:08:5e:2d:ba:94:cc:b4:76:
         d6:ba:e0:62:4f:66:e2:74:5a:2c:be:60:de:15:fd:f1:f3:f6:
         23:a0:a2:28:b5:33:cb:1f:2b:f8:fe:59:84:8d:07:9e:02:79:
         97:fa:2e:65:89:9e:97:8e:f3:a9:9d:ca:60:5b:97:c4:07:2d:
         09:1f:00:4e:b1:fc:db:25:9d:67:ab:1e:f8:ef:b0:27:16:8c:
         7d:04:f8:e9:10:14:c1:98:79:22:4c:b6:15:0a:af:0b:d2:96:
         99:06:76:80:60:6e:74:89:e4:70:74:f4:1b:df:74:d5:71:f6:
         39:74:41:30:19:27:90:b3:5c:1e:1e:5d:ac:10:4f:4d:19:9b:
         80:81:e9:69:fc:43:e5:1d:3a:fc:b8:01:ec:70:05:9b:20:43:
         34:77:66:cd:83:d7:05:b1:b0:6f:ee:13:a1:9b:64:0c:05:ad:
         db:83:90:eb
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQbilwpnBQAbw6rNHEpwuWmxETQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDkzZWYwNzAxZThjYTZlZDBhMGU2ZDQ2YTM4YjhkOGNm
MzA5MTI4NTAeFw0yNjA1MDcwNzMyMzhaFw0yNjA1MDgxMDQzMzhaMDMxMTAvBgNV
BAMTKDc2N0E1MTc1NDQ5NjFCQ0E3NDM1RjE4Rjk3QkVBRTFBMUIzNjA2RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa7GgI59sYgnUhDhWtLjMohx9v
o4iEIuw3q6NNuEfgnesx4M6WFvfl7TuWM28kFV+MpqI1Rf0jT/CHeeo1Ilu3nBAU
UJI6YbHk8d+OKclqL60Ucm7NvHp5/CsMbd2aKbn8K1ZIOfh8Il00A2NCRIF1rNZo
P53UeqgSK4L/zr8vVcqQOJH3IOHqLe/b/cz7y8NM7e5+3M8N11bjETcJEY7FCjBx
ly2TObSAhwUE81O16AXeVn851dIq9Q1XUF8RpdhEkjIUhXhzFFmq0NU2THQT3Srd
paaMpIrc7YWpWiyVPKBSTrpkIAMGr4+8ycQwMiLl3qXsXZfsw3Oq86XeRgj3AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUdnpRdUSWG8p0NfGPl76uGhs2BvcwHwYDVR0j
BBgwFoAU2T7wcB6Mpu0KDm1Go4uNjPMJEoUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl
YjdkLzAvRDkzRUYwNzAxRThDQTZFRDBBMEU2RDQ2QTM4QjhEOENGMzA5MTI4NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJUN3djQjZNcHUwS0RtMUdvNHVOalBN
SkVvVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOTkyNjVlZi0y
MmE5LTQxMDAtYTIzZC01MWE5ZDlmZWViN2QvMC9EOTNFRjA3MDFFOENBNkVEMEEw
RTZENDZBMzhCOEQ4Q0YzMDkxMjg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxPAeAhZWMjA3+XwuHhZX
5ES5Esupo442H16oCkyeoLMQoSmOHBNgVKBYSTnOebNI7itwVffSTvYZrpVQXxFl
l5hGESawHivJluG8SD6XKBpqBgheLbqUzLR21rrgYk9m4nRaLL5g3hX98fP2I6Ci
KLUzyx8r+P5ZhI0HngJ5l/ouZYmel47zqZ3KYFuXxActCR8ATrH82yWdZ6se+O+w
JxaMfQT46RAUwZh5Iky2FQqvC9KWmQZ2gGBudInkcHT0G9901XH2OXRBMBknkLNc
Hh5drBBPTRmbgIHpafxD5R06/LgB7HAFmyBDNHdmzYPXBbGwb+4ToZtkDAWt24OQ
6w==
-----END CERTIFICATE-----
Generated at Thu May 7 22:32:39 2026 by rpki-client