Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
File:                     D6D172D72D23BAC1F197C131AD720E6E8230B003.mft (raw, json)
Hash identifier:          bLVBKlfYi4JQ77Lr+IUuYYF+dR70/JPpLboJNJqLRQE=
Subject key identifier:   27:4E:CD:B9:D9:04:71:04:87:11:64:E2:CA:16:3B:BD:DB:93:28:F8
Authority key identifier: D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03
Certificate issuer:       /CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
Certificate serial:       2D83016F835C749AFC05F46A4DF7F9E4829D2DB4
Authority info access:    rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
Manifest number:          1D
Signing time:             Tue 12 May 2026 10:50:35 +0000
Manifest this update:     Tue 12 May 2026 10:45:35 +0000
Manifest next update:     Wed 13 May 2026 12:27:35 +0000
Files and hashes:         1: 323630323a663530633a6330303a3a2f34382d3438203d3e20323035393431.roa (hash: cSyT/kciF2Zl7w9vCUjIl+nGIP8YdhjrqQH5HZwdaRM=)
                          2: D6D172D72D23BAC1F197C131AD720E6E8230B003.crl (hash: AkXbvBdjSDBcWwn9h3IPx9fPiLKfQ7z6L62SutlM7i8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 11:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:83:01:6f:83:5c:74:9a:fc:05:f4:6a:4d:f7:f9:e4:82:9d:2d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
        Validity
            Not Before: May 12 10:45:35 2026 GMT
            Not After : May 13 12:27:35 2026 GMT
        Subject: CN=274ECDB9D9047104871164E2CA163BBDDB9328F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:2a:90:a5:53:c3:1b:45:1c:6b:94:97:bd:
                    5b:01:02:8e:8f:0f:41:5e:61:6e:1c:99:2f:ee:bd:
                    50:28:d3:0b:bd:e5:cc:b5:10:83:76:fb:5c:a8:ae:
                    6f:9c:8d:c0:56:75:89:e6:aa:f4:31:e9:a1:a9:41:
                    c5:69:5f:e1:e7:35:37:df:af:42:38:eb:d5:38:a4:
                    b8:da:4f:5a:51:b4:53:07:61:a7:5c:12:7b:f7:d9:
                    6b:df:9f:58:c4:63:b8:e7:e6:7f:df:03:65:30:57:
                    da:f4:f9:08:18:97:04:58:87:19:8b:42:f9:82:34:
                    98:48:be:f6:b7:24:9f:fc:0f:bf:c3:1d:0e:5b:6d:
                    89:db:bb:0d:1a:31:0f:e5:17:76:15:d4:d3:d5:8d:
                    e2:6b:b0:3c:e8:f7:e6:7c:9f:60:4f:de:ac:d4:14:
                    6e:31:f2:d1:ab:58:20:55:67:49:70:81:7b:89:19:
                    76:e7:25:d4:40:34:b3:94:b5:29:97:6b:01:f5:49:
                    f9:43:c9:55:33:17:cf:72:82:0f:f0:bb:bb:e1:38:
                    62:e6:1e:f3:0a:6a:11:43:eb:d9:a3:76:ee:ae:73:
                    2f:be:0c:cf:0c:07:37:71:99:14:63:13:8e:eb:1e:
                    f5:84:65:6f:ed:cc:7e:d5:2d:af:c8:ba:67:66:88:
                    7b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4E:CD:B9:D9:04:71:04:87:11:64:E2:CA:16:3B:BD:DB:93:28:F8
            X509v3 Authority Key Identifier:
                keyid:D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:10:a9:83:d6:a6:65:19:90:2e:35:90:52:91:16:ed:cc:24:
         3a:56:94:6e:0b:7d:c8:ff:75:10:63:ad:22:55:ad:1c:06:76:
         3e:20:74:1f:22:e7:4b:d1:32:82:46:29:6f:60:31:26:1c:68:
         2a:03:c0:e3:1c:d0:9f:cc:35:1a:50:a7:e0:74:90:85:ad:df:
         42:23:4d:39:9f:bd:7e:a4:c5:c9:aa:5a:16:48:39:c9:5d:cb:
         d0:62:c2:59:bb:ec:90:32:11:36:b6:1e:6b:74:88:4d:2c:82:
         42:a1:21:89:ee:1a:0f:c6:ab:74:55:68:45:94:f0:a3:29:db:
         4b:f3:d6:fd:c5:1d:21:6c:cb:d8:c0:b1:3d:46:2c:46:2b:e9:
         6b:e9:ca:e1:7a:db:32:80:ba:5a:f3:22:d0:05:86:7c:3b:79:
         42:fe:f6:b0:13:7a:d6:3e:55:c5:84:41:39:86:00:99:52:9b:
         f9:c2:9a:3a:18:88:9b:e5:b3:65:cc:40:40:cc:4f:d3:10:a9:
         36:0e:67:6d:17:93:e3:7d:29:3f:15:18:b4:55:67:27:7c:07:
         f6:51:59:1d:32:8a:5e:81:ec:36:4e:29:9e:b4:c4:4c:2a:18:
         88:c1:0f:93:37:47:19:7b:32:33:14:89:07:40:50:1d:3c:be:
         f0:89:a0:2d
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIULYMBb4NcdJr8BfRqTff55IKdLbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZEMTcyRDcyRDIzQkFDMUYxOTdDMTMxQUQ3MjBFNkU4
MjMwQjAwMzAeFw0yNjA1MTIxMDQ1MzVaFw0yNjA1MTMxMjI3MzVaMDMxMTAvBgNV
BAMTKDI3NEVDREI5RDkwNDcxMDQ4NzExNjRFMkNBMTYzQkJEREI5MzI4RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaQyqQpVPDG0Uca5SXvVsBAo6P
D0FeYW4cmS/uvVAo0wu95cy1EIN2+1yorm+cjcBWdYnmqvQx6aGpQcVpX+HnNTff
r0I469U4pLjaT1pRtFMHYadcEnv32Wvfn1jEY7jn5n/fA2UwV9r0+QgYlwRYhxmL
QvmCNJhIvva3JJ/8D7/DHQ5bbYnbuw0aMQ/lF3YV1NPVjeJrsDzo9+Z8n2BP3qzU
FG4x8tGrWCBVZ0lwgXuJGXbnJdRANLOUtSmXawH1SflDyVUzF89ygg/wu7vhOGLm
HvMKahFD69mjdu6ucy++DM8MBzdxmRRjE47rHvWEZW/tzH7VLa/IumdmiHvnAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUJ07NudkEcQSHEWTiyhY7vduTKPgwHwYDVR0j
BBgwFoAU1tFy1y0jusHxl8ExrXIOboIwsAMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5
NzVjLzIvRDZEMTcyRDcyRDIzQkFDMUYxOTdDMTMxQUQ3MjBFNkU4MjMwQjAwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2NhMmIxMmFmYzQyODQzZGJhZTRiMDVj
ZjM2MGQ5NTJkLzAvRDZEMTcyRDcyRDIzQkFDMUYxOTdDMTMxQUQ3MjBFNkU4MjMw
QjAwMy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1h
YmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMi9ENkQxNzJENzJEMjNCQUMxRjE5
N0MxMzFBRDcyMEU2RTgyMzBCMDAzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxCpg9amZRmQLjWQUpEW
7cwkOlaUbgt9yP91EGOtIlWtHAZ2PiB0HyLnS9EygkYpb2AxJhxoKgPA4xzQn8w1
GlCn4HSQha3fQiNNOZ+9fqTFyapaFkg5yV3L0GLCWbvskDIRNrYea3SITSyCQqEh
ie4aD8ardFVoRZTwoynbS/PW/cUdIWzL2MCxPUYsRivpa+nK4XrbMoC6WvMi0AWG
fDt5Qv72sBN61j5VxYRBOYYAmVKb+cKaOhiIm+WzZcxAQMxP0xCpNg5nbReT430p
PxUYtFVnJ3wH9lFZHTKKXoHsNk4pnrTETCoYiMEPkzdHGXsyMxSJB0BQHTy+8Img
LQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:34:19 2026 by rpki-client