Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
File:                     D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft (raw, json)
Hash identifier:          NA1nzZc/YkinklTzl1IPSOHf/nDhHYdg484WKqpmXdU=
Subject key identifier:   12:5C:6D:5B:2A:10:7B:2F:E5:3C:E3:E7:5D:17:08:76:CA:87:AF:3A
Authority key identifier: D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85
Certificate issuer:       /CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
Certificate serial:       680BC3E58D71B2B698083BD1E51BF7CDF60B0788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
Manifest number:          04B6
Signing time:             Tue 03 Nov 2026 08:57:27 +0000
Manifest this update:     Tue 03 Nov 2026 08:52:27 +0000
Manifest next update:     Wed 04 Nov 2026 12:01:27 +0000
Files and hashes:         1: D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl (hash: iIhbnrKV8JdYMk8SVm3+vjyyQj6WEpYT+gc1lKM+RL0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Nov 2026 12:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0b:c3:e5:8d:71:b2:b6:98:08:3b:d1:e5:1b:f7:cd:f6:0b:07:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
        Validity
            Not Before: Nov  3 08:52:27 2026 GMT
            Not After : Nov  4 12:01:27 2026 GMT
        Subject: CN=125C6D5B2A107B2FE53CE3E75D170876CA87AF3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f8:12:98:c0:ad:98:14:54:76:48:66:f6:48:
                    e2:8c:39:86:19:8c:c1:a7:01:61:33:43:23:e0:e9:
                    8e:fe:85:c7:9a:e0:85:b6:e5:d8:ac:2a:7a:67:e0:
                    5d:3e:fd:d1:f9:a1:19:34:3c:ef:2f:66:d0:8e:b9:
                    49:af:84:8d:51:a5:79:e5:d0:0d:1a:8e:a0:c7:f8:
                    a1:8d:f9:77:2e:4b:af:78:7a:40:1a:67:32:84:83:
                    ab:3c:b4:d2:3a:d5:3a:df:45:ca:1e:24:99:7b:28:
                    ea:b9:3c:66:34:d2:96:c3:95:e4:48:cb:71:9b:44:
                    39:ae:7c:c4:7d:d1:ea:bf:24:97:9e:3a:03:ff:6f:
                    cb:ea:9f:de:10:14:a8:0f:42:14:53:02:cd:b6:66:
                    2d:89:d5:63:e7:75:5a:12:34:64:fb:62:fd:c6:48:
                    f4:6d:8f:d7:ba:e6:35:1c:a8:d9:92:ca:c2:74:31:
                    b2:d5:3d:9f:f5:b3:1f:9c:af:ae:53:c2:b0:9e:ad:
                    0c:ea:ff:8c:39:42:c5:cb:28:c4:9e:61:69:db:db:
                    4e:82:15:8c:d5:a5:4b:b6:ff:51:95:65:23:57:da:
                    ec:9b:3a:69:70:21:ca:38:55:39:80:f7:69:f0:09:
                    71:7a:40:dc:c1:ac:86:c9:f1:cc:8f:48:f1:34:f9:
                    36:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5C:6D:5B:2A:10:7B:2F:E5:3C:E3:E7:5D:17:08:76:CA:87:AF:3A
            X509v3 Authority Key Identifier:
                keyid:D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:1f:09:82:19:d8:99:60:71:25:16:70:7a:45:0f:39:6b:c1:
         d2:b9:53:b0:34:b1:2e:5b:c9:94:2d:81:02:38:19:41:cb:39:
         1f:11:e7:35:9d:ea:25:9d:0d:a7:f3:24:cd:89:ab:b7:0e:a4:
         99:51:d6:a9:4e:b5:6e:c9:f9:aa:46:4c:e4:3e:54:42:50:bf:
         88:02:a3:30:36:4e:fb:2e:32:d3:ab:d1:d9:b3:27:ca:1c:8d:
         a2:36:b8:ef:a7:ef:1a:68:8f:de:4e:8a:73:f5:28:54:eb:c3:
         99:6f:3a:fc:66:6c:55:0e:46:4d:6e:41:a9:83:20:9a:ee:04:
         db:7d:d8:c6:f5:40:9b:d1:8b:c3:4e:a5:bc:e9:4c:4a:d2:fd:
         a5:54:01:98:c8:49:10:91:50:3c:e8:9a:8e:60:64:9d:29:48:
         f2:f7:6a:70:13:93:cf:95:a3:8f:88:70:db:7a:9b:41:b5:4a:
         80:fb:2f:27:ba:d9:6e:14:7c:21:d8:1c:e6:ba:1e:9f:dd:06:
         17:f1:af:d9:b0:6c:94:1b:3f:fa:aa:a5:88:d5:ab:e2:6b:0c:
         a0:54:0c:7c:dd:2d:43:5c:89:9c:85:b7:fe:7c:fd:95:a5:fa:
         65:e5:64:03:15:61:c5:c8:01:58:e7:4c:0f:3b:f2:f1:7f:c9:
         78:28:88:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----