Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
File:                     D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft (raw, json)
Hash identifier:          WnmDJCJR8oZ08Sz9HhBoCzosTIUZqWt+JEe1TRvE9vw=
Subject key identifier:   15:DC:F2:54:1A:C2:EC:E1:6B:E7:F3:18:C5:A9:BD:DC:36:7E:20:1F
Authority key identifier: D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85
Certificate issuer:       /CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
Certificate serial:       3D5F68EAE1E8A20B976515F4EDE3659A7F19EF2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
Manifest number:          0478
Signing time:             Fri 18 Sep 2026 02:47:07 +0000
Manifest this update:     Fri 18 Sep 2026 02:42:07 +0000
Manifest next update:     Sat 19 Sep 2026 05:55:07 +0000
Files and hashes:         1: D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl (hash: gmv/Ftwx94BLJMdFKGxvSdZGr17p6NfnKqQw7hcJo5A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 05:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5f:68:ea:e1:e8:a2:0b:97:65:15:f4:ed:e3:65:9a:7f:19:ef:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
        Validity
            Not Before: Sep 18 02:42:07 2026 GMT
            Not After : Sep 19 05:55:07 2026 GMT
        Subject: CN=15DCF2541AC2ECE16BE7F318C5A9BDDC367E201F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:3f:1d:83:a6:fa:a7:86:79:86:c9:3d:66:
                    38:e5:59:3c:4e:73:a9:a4:04:80:0d:ab:b6:95:30:
                    e3:28:53:47:6d:49:96:de:12:43:59:db:7c:fa:29:
                    34:8e:6c:90:57:da:33:4c:ba:da:9e:bb:eb:5c:87:
                    60:08:1f:50:e8:87:c9:f3:52:48:d2:66:4c:f6:df:
                    06:93:2a:c3:be:7d:86:d1:4c:1d:b1:9b:88:93:5d:
                    85:1d:56:4b:52:ab:84:cd:1c:50:07:96:fd:42:15:
                    ec:ec:1d:41:8e:9a:b6:84:fc:13:79:f8:ba:69:02:
                    f0:4a:96:d7:c1:11:ce:88:47:37:c2:0a:a4:c7:c8:
                    f3:d3:a7:86:3c:03:b3:dc:0c:66:a2:02:22:50:e4:
                    8f:57:ee:04:a7:7b:83:74:19:25:d4:9a:5c:cb:8f:
                    73:e0:54:60:c3:1c:6d:10:5f:8f:e3:ed:b0:29:9d:
                    4b:88:49:61:c0:2f:ed:b4:47:66:d1:1f:8f:39:11:
                    8f:c6:4c:80:a1:b5:2b:ff:ae:3b:d5:a1:e6:06:98:
                    17:98:0a:56:e4:34:2f:cb:94:a2:34:90:77:3e:51:
                    ab:cb:70:b0:98:06:b9:27:3a:fa:2f:37:2b:30:9c:
                    e6:10:0b:62:71:ee:76:36:45:3c:85:a1:b2:66:26:
                    86:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DC:F2:54:1A:C2:EC:E1:6B:E7:F3:18:C5:A9:BD:DC:36:7E:20:1F
            X509v3 Authority Key Identifier:
                keyid:D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:6c:6d:be:6d:d1:fc:39:79:44:34:46:e9:39:7b:a5:a5:
         66:3a:47:7d:aa:8a:69:5e:ee:cb:0b:95:68:0e:73:63:ed:9f:
         81:2e:4a:66:13:ce:02:01:25:7a:ea:79:23:60:19:32:76:f9:
         4d:23:55:96:75:20:59:2e:17:a5:29:10:f9:d5:0c:f1:dd:96:
         09:6d:1d:f0:02:86:bb:2f:90:09:37:35:17:ac:19:21:a1:59:
         cd:2e:34:eb:ff:ed:61:a2:8c:96:b5:54:bf:74:5c:0f:c3:21:
         e8:4c:f5:91:a4:56:0a:2f:f9:8b:ae:be:06:c1:de:5b:f2:c9:
         32:b5:7e:cb:31:66:ab:07:bb:c5:da:ec:a8:54:6e:75:ed:4c:
         40:33:ce:72:85:7c:07:5d:b4:f6:ad:7a:85:4e:ca:57:62:65:
         a8:a3:22:53:23:0f:2e:af:eb:7f:27:67:bb:f9:8c:75:eb:c6:
         ba:86:84:40:bb:91:d9:b5:ea:93:21:9c:63:02:50:a5:28:a0:
         8a:33:e8:d3:58:ae:12:b1:93:c1:89:90:ac:1f:8b:eb:2d:88:
         2d:60:57:69:70:2e:c6:84:ac:fc:69:06:b6:19:39:1f:ac:e2:
         65:39:5b:b1:8a:d3:f4:9f:17:b6:be:55:11:46:af:1d:57:17:
         b5:af:e3:d3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUPV9o6uHooguXZRX07eNlmn8Z7yowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDkzZWYwNzAxZThjYTZlZDBhMGU2ZDQ2YTM4YjhkOGNm
MzA5MTI4NTAeFw0yNjA5MTgwMjQyMDdaFw0yNjA5MTkwNTU1MDdaMDMxMTAvBgNV
BAMTKDE1RENGMjU0MUFDMkVDRTE2QkU3RjMxOEM1QTlCRERDMzY3RTIwMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBD8dg6b6p4Z5hsk9ZjjlWTxO
c6mkBIANq7aVMOMoU0dtSZbeEkNZ23z6KTSObJBX2jNMutqeu+tch2AIH1Doh8nz
UkjSZkz23waTKsO+fYbRTB2xm4iTXYUdVktSq4TNHFAHlv1CFezsHUGOmraE/BN5
+LppAvBKltfBEc6IRzfCCqTHyPPTp4Y8A7PcDGaiAiJQ5I9X7gSne4N0GSXUmlzL
j3PgVGDDHG0QX4/j7bApnUuISWHAL+20R2bRH485EY/GTIChtSv/rjvVoeYGmBeY
ClbkNC/LlKI0kHc+UavLcLCYBrknOvovNyswnOYQC2Jx7nY2RTyFobJmJobZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUFdzyVBrC7OFr5/MYxam93DZ+IB8wHwYDVR0j
BBgwFoAU2T7wcB6Mpu0KDm1Go4uNjPMJEoUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl
YjdkLzAvRDkzRUYwNzAxRThDQTZFRDBBMEU2RDQ2QTM4QjhEOENGMzA5MTI4NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJUN3djQjZNcHUwS0RtMUdvNHVOalBN
SkVvVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOTkyNjVlZi0y
MmE5LTQxMDAtYTIzZC01MWE5ZDlmZWViN2QvMC9EOTNFRjA3MDFFOENBNkVEMEEw
RTZENDZBMzhCOEQ4Q0YzMDkxMjg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYthsbb5t0fw5eUQ0Ruk5
e6WlZjpHfaqKaV7uywuVaA5zY+2fgS5KZhPOAgEleup5I2AZMnb5TSNVlnUgWS4X
pSkQ+dUM8d2WCW0d8AKGuy+QCTc1F6wZIaFZzS406//tYaKMlrVUv3RcD8Mh6Ez1
kaRWCi/5i66+BsHeW/LJMrV+yzFmqwe7xdrsqFRude1MQDPOcoV8B1209q16hU7K
V2JlqKMiUyMPLq/rfydnu/mMdevGuoaEQLuR2bXqkyGcYwJQpSigijPo01iuErGT
wYmQrB+L6y2ILWBXaXAuxoSs/GkGthk5H6ziZTlbsYrT9J8Xtr5VEUavHVcXta/j
0w==
-----END CERTIFICATE-----