Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
File:                     6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json)
Hash identifier:          0gdADDFPO/MfNwxFDcAcgV5MwnTiRgZb4DLMrJWtd2U=
Subject key identifier:   B0:DF:22:F7:B2:7A:95:3E:D5:07:00:9F:2D:54:8D:B6:BD:8C:6D:99
Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62
Certificate issuer:       /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
Certificate serial:       2098107C438DF2B9528647FC090AD4E263076F0E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
Manifest number:          01D3
Signing time:             Sat 26 Sep 2026 05:26:45 +0000
Manifest this update:     Sat 26 Sep 2026 05:21:45 +0000
Manifest next update:     Sun 27 Sep 2026 06:29:45 +0000
Files and hashes:         1: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: U5b7yJECHTqrJ3XsB+492AqjlMa2EE0JUKH18LMPoqY=)
                          2: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: VPCifaYotKDxeBBkkXW6HF/0neQ4fTWKc9o0aOWVmJ8=)
                          3: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: OI8GOe2+TkBj9rSGei3QzDvWunB1dmRCogAxQNNMVi8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:98:10:7c:43:8d:f2:b9:52:86:47:fc:09:0a:d4:e2:63:07:6f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
        Validity
            Not Before: Sep 26 05:21:45 2026 GMT
            Not After : Sep 27 06:29:45 2026 GMT
        Subject: CN=B0DF22F7B27A953ED507009F2D548DB6BD8C6D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:a1:db:2a:4c:66:90:88:16:fb:e1:9e:69:
                    22:c9:d5:df:3a:58:25:6f:a2:e1:ff:7a:08:66:17:
                    5e:2b:41:9e:10:0a:ad:42:51:f3:84:c2:98:9c:08:
                    6e:d0:01:1b:ee:80:a3:2e:ac:ba:96:17:c0:3c:df:
                    e9:7e:91:b3:c6:bc:a9:46:24:0b:ba:0b:7c:37:52:
                    4d:38:7e:53:04:60:45:6c:ab:a6:86:81:11:70:eb:
                    4b:18:61:4b:e7:2a:e1:f3:a9:75:f0:8a:2d:81:a1:
                    ac:53:f3:fc:e1:81:c6:17:41:7f:49:40:eb:32:5f:
                    f9:f3:2e:95:6f:1d:d3:48:82:ce:8e:9c:f3:bf:e1:
                    82:21:d2:ab:5b:61:e7:ef:39:a3:b1:b2:83:63:b9:
                    66:6f:68:30:e2:7a:5e:5b:f8:4a:24:25:7d:99:ce:
                    50:d6:f3:a7:c5:85:e9:9a:e7:dc:0c:f0:8c:cc:d6:
                    08:23:42:f8:23:50:01:2f:48:e8:6b:66:58:8d:d2:
                    75:94:31:f6:93:cd:ac:35:07:2c:c9:a3:12:d2:d4:
                    f6:90:c5:c2:ad:f9:31:00:e0:9f:92:0d:53:ff:73:
                    5b:76:f1:19:cf:2c:f7:ac:6b:51:b6:66:fa:a3:6d:
                    08:0d:9d:97:8e:0b:a5:c8:3e:bf:a0:1b:0d:43:66:
                    e8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DF:22:F7:B2:7A:95:3E:D5:07:00:9F:2D:54:8D:B6:BD:8C:6D:99
            X509v3 Authority Key Identifier:
                keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:92:9e:48:25:24:ff:d9:68:c1:d8:54:b3:d0:24:ce:2c:14:
         be:2b:d1:c4:24:4e:67:bc:7f:f8:3b:3b:9c:b4:d2:97:47:02:
         d6:67:18:29:d2:a4:9c:79:9b:19:ac:63:5d:d9:14:a6:a9:85:
         60:a4:5b:eb:67:e3:ba:ca:47:a7:c6:50:39:f1:ec:28:33:49:
         45:99:95:71:78:22:d2:ea:76:23:da:66:fa:77:70:e9:aa:66:
         0d:87:e2:45:fb:c5:36:b3:0d:f9:05:73:d7:47:4c:96:d2:fd:
         f1:ca:9b:8b:4d:a8:a4:a9:b9:1f:38:6a:27:2e:6b:37:7b:6b:
         61:c7:bc:e7:01:43:be:1a:7b:91:3a:f2:70:e0:67:dd:49:92:
         e6:44:b8:df:53:26:76:d7:86:39:84:8d:8b:01:eb:da:08:87:
         0f:56:f8:eb:4b:05:40:64:0d:73:83:bb:7c:8b:5c:7e:71:cd:
         1c:38:91:e2:55:06:2a:06:b7:f2:ab:a2:94:ca:ce:ca:97:e2:
         01:59:63:17:af:ad:17:f3:a0:ff:6e:c2:fa:48:87:59:c5:fd:
         f4:8a:c9:60:3c:d5:87:88:3e:88:6f:fa:bd:f8:96:66:eb:81:
         f9:e7:b8:64:d6:f6:64:54:96:d4:10:2f:10:10:97:c7:5f:70:
         67:95:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:45:21 2026 by rpki-client