Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
File:                     D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft (raw, json)
Hash identifier:          SJrogEN/MLE7zBlwFGbRwowNst1/jzCle9OT0ZnHU64=
Subject key identifier:   DE:6D:BA:77:B3:19:A7:0C:7A:1F:D6:EA:8A:70:72:76:94:DF:A8:5B
Authority key identifier: D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85
Certificate issuer:       /CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
Certificate serial:       437A4240C43940D5C229CB800103D36C3896F4A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
Manifest number:          0397
Signing time:             Sun 22 Mar 2026 04:07:38 +0000
Manifest this update:     Sun 22 Mar 2026 04:02:38 +0000
Manifest next update:     Mon 23 Mar 2026 05:56:38 +0000
Files and hashes:         1: D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl (hash: 64ukvpwwxkzFcnqeBs+uraMXuqeGLeMeh/MadQPMjF4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7a:42:40:c4:39:40:d5:c2:29:cb:80:01:03:d3:6c:38:96:f4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
        Validity
            Not Before: Mar 22 04:02:38 2026 GMT
            Not After : Mar 23 05:56:38 2026 GMT
        Subject: CN=DE6DBA77B319A70C7A1FD6EA8A70727694DFA85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:53:0f:1f:33:e4:f6:8b:6c:f4:86:73:87:
                    3a:ac:0c:de:af:0b:ea:e8:69:4e:94:3f:a8:cd:97:
                    ae:fa:c3:49:a2:46:5e:0f:eb:4e:fa:6e:a9:5e:ea:
                    38:ba:00:0f:63:ba:04:aa:b2:9e:b6:f8:b8:ce:82:
                    76:ad:82:19:c2:25:66:b5:68:e2:82:6a:00:52:71:
                    cf:4e:b3:eb:89:20:25:a7:50:fb:e6:92:dc:b3:4d:
                    84:9d:b9:82:2e:fc:ab:80:6c:2e:fd:83:e3:14:b6:
                    78:e3:c1:8e:33:58:44:40:16:5d:b6:71:0a:15:6b:
                    f4:31:a8:28:01:f4:83:0d:50:be:d9:f2:be:5f:7c:
                    55:8c:22:ad:ee:ad:cf:be:7a:5e:3b:38:06:5a:73:
                    76:45:19:6d:4a:84:ec:87:d4:cd:5d:c2:bb:b1:a9:
                    38:ed:85:0a:04:8f:2c:4b:c8:ab:f3:a4:6b:40:88:
                    4d:0e:ef:6a:9c:a3:5f:87:36:3c:17:35:62:22:17:
                    28:fd:a4:cc:29:0c:f6:d9:f3:a6:19:49:af:b6:8a:
                    9c:09:1e:39:b8:37:2e:1d:3e:16:48:57:2f:e0:bd:
                    14:f5:79:36:fa:7a:a0:b6:8d:e4:0c:74:93:98:cd:
                    08:79:fa:c5:04:2a:ae:38:e6:09:b0:36:11:00:93:
                    a2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6D:BA:77:B3:19:A7:0C:7A:1F:D6:EA:8A:70:72:76:94:DF:A8:5B
            X509v3 Authority Key Identifier:
                keyid:D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a4:cc:98:28:12:3f:71:ea:02:22:6c:7c:76:3a:37:6e:cf:
         41:0d:34:fc:62:c0:99:71:3d:b4:7c:a1:27:f8:22:7f:ad:33:
         56:11:fb:b2:75:fb:8b:12:75:0c:d4:8a:4b:2a:88:eb:60:91:
         1e:76:0c:39:cd:3b:d9:c7:14:42:26:6a:f0:3a:3b:02:b1:d2:
         e3:e5:71:ae:10:b8:44:8e:4c:54:e5:2f:17:58:2b:89:b5:1d:
         4c:ae:8a:13:68:d8:28:9c:85:06:98:5c:2b:4a:cb:38:7d:c8:
         99:61:78:0b:f0:0d:3d:7f:02:d8:47:ee:fd:09:84:52:9b:45:
         bb:fa:bc:89:71:52:92:32:aa:af:f0:5a:f6:f8:3b:f2:a4:13:
         63:8d:7d:17:ab:81:5e:b7:9c:84:a3:80:eb:91:0f:18:ed:77:
         d8:7b:a7:eb:77:b3:27:49:65:20:ae:93:a0:21:57:23:f8:c1:
         9d:7e:2c:93:c3:16:e3:b6:5b:6c:54:21:ab:0c:3a:8e:11:dd:
         6d:87:ac:26:1c:32:d6:dd:a3:28:40:00:5f:d3:16:02:3e:e0:
         ea:71:f2:15:00:53:0b:7d:5f:0d:37:36:11:61:f5:52:73:b7:
         6d:10:0e:58:0e:a3:d3:8a:7d:3f:a0:91:5d:d5:d2:f3:0c:4e:
         c7:9a:9c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 10:36:24 2026 by rpki-client