Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
File:                     6E57E27AC23C8932C53853BF557B28CD590488AC.mft (raw, json)
Hash identifier:          gqz7FJVDDxNblNc1bOg1PQp+dbBYBeI7VDBAXrKz51M=
Subject key identifier:   A3:BC:D4:B8:30:D8:B8:33:8B:68:32:AC:77:8B:47:AE:14:CE:41:66
Authority key identifier: 6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC
Certificate issuer:       /CN=6E57E27AC23C8932C53853BF557B28CD590488AC
Certificate serial:       644B44C4F537D2CEA823A3DE974C7DEF340EAFAF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
Manifest number:          011D
Signing time:             Thu 26 Mar 2026 07:23:21 +0000
Manifest this update:     Thu 26 Mar 2026 07:18:21 +0000
Manifest next update:     Fri 27 Mar 2026 07:41:21 +0000
Files and hashes:         1: 326131343a373538333a663330303a3a2f34302d3438203d3e20323035303038.roa (hash: Pw4yBx8L2Vx0/YJcoRiVJ2ZHCDI/+/xVhxU2P0lxb8w=)
                          2: 6E57E27AC23C8932C53853BF557B28CD590488AC.crl (hash: OUH0g2fRUDZlrDG3JK0Y0ZHCcz4tW6U9DhtkdJKURsw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4b:44:c4:f5:37:d2:ce:a8:23:a3:de:97:4c:7d:ef:34:0e:af:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E57E27AC23C8932C53853BF557B28CD590488AC
        Validity
            Not Before: Mar 26 07:18:21 2026 GMT
            Not After : Mar 27 07:41:21 2026 GMT
        Subject: CN=A3BCD4B830D8B8338B6832AC778B47AE14CE4166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c8:29:ae:ef:46:01:f6:1d:64:07:1d:1f:c2:
                    16:1d:07:05:b6:c2:91:b4:f9:b2:e6:37:d5:69:67:
                    9a:14:7d:a6:05:6f:92:c1:2f:1d:12:b5:c2:cc:c9:
                    eb:e2:9f:dc:06:93:5d:75:bd:f0:0d:c8:14:27:51:
                    07:8a:f2:ea:f3:8f:56:e2:a8:14:40:6e:cb:ee:81:
                    b7:73:fa:c1:1a:7e:e1:82:c4:d7:11:aa:ef:4a:d9:
                    cc:03:60:2f:89:27:8a:17:15:30:36:ab:0d:40:0d:
                    2f:3d:a6:5e:75:1a:53:fe:9c:e1:69:9d:e9:0b:94:
                    36:59:4e:1a:27:90:3a:3c:67:ff:06:e7:55:9d:a0:
                    d9:56:f9:6d:ea:49:da:17:01:7c:36:54:a2:f9:6e:
                    f8:56:a4:6c:45:13:16:52:eb:aa:e6:39:e8:ca:e5:
                    e9:79:92:09:2f:2d:7e:a7:61:34:0a:cc:44:6b:17:
                    64:23:94:15:71:17:75:04:37:eb:b3:fc:87:6a:90:
                    32:7e:9e:f2:75:3c:0b:56:30:84:a4:1b:3f:5f:6a:
                    88:0f:c4:44:4f:61:48:09:18:d6:e6:ff:8b:2d:6d:
                    f7:b3:ae:ee:dc:59:2b:5d:e6:e0:7c:7c:76:bf:1d:
                    68:6d:b3:76:72:1c:c2:bc:0b:5e:cf:78:85:88:f8:
                    88:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BC:D4:B8:30:D8:B8:33:8B:68:32:AC:77:8B:47:AE:14:CE:41:66
            X509v3 Authority Key Identifier:
                keyid:6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:dc:c8:53:3b:bc:79:d8:55:7b:b5:ca:dc:5c:ae:b9:c9:59:
         86:c6:e4:3b:9d:5d:9a:3d:ac:7f:ec:a9:fb:64:1b:b1:2e:0b:
         83:df:0a:0a:23:68:fb:b0:bb:98:89:b2:d6:52:21:bb:59:4e:
         d2:e4:23:cc:d6:60:fa:28:af:59:58:77:d5:31:28:b8:8d:1e:
         66:39:bf:0c:10:94:66:9a:b0:02:b1:83:67:68:c5:6b:68:3f:
         81:84:dc:c3:03:00:f2:fa:2a:56:d8:de:55:f8:bc:1d:da:f0:
         79:64:4f:1c:35:db:53:9e:da:dc:04:15:fe:cf:54:11:f9:72:
         e8:bb:c6:c6:44:81:88:9e:0a:b4:9c:6c:ca:eb:d7:f6:13:bd:
         fc:a0:92:53:ab:96:91:c3:82:46:6a:fa:1a:52:6a:28:1d:4c:
         31:ae:c2:f4:4d:3d:29:79:b5:57:ff:f5:00:7d:fa:0c:88:45:
         2c:a5:9c:4a:bc:e8:01:67:d5:3b:34:d8:81:f2:c6:0f:d2:45:
         d0:75:34:10:0f:95:6e:f5:a6:88:a3:1d:93:5a:b9:44:1c:ac:
         60:63:1f:92:3d:95:32:aa:12:3d:6c:14:a5:7b:a4:db:03:b4:
         a7:c6:8f:d8:93:c0:13:ee:e0:79:f7:a3:55:17:16:b7:f5:44:
         58:cb:8c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:51:20 2026 by rpki-client