Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
File:                     B75F3781BC9C2E7301754988659F92686704E570.mft (raw, json)
Hash identifier:          Q14F8lcQbQV7SZ6P3gozLpvd6sxBv2fduXFQNK8lzTM=
Subject key identifier:   D1:63:1E:9D:16:44:DD:FB:E5:73:47:13:65:8D:AD:FE:26:C8:0B:D7
Authority key identifier: B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
Certificate issuer:       /CN=B75F3781BC9C2E7301754988659F92686704E570
Certificate serial:       691EF01813719717B8261A7E299306B5CA82AE9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
Manifest number:          AA
Signing time:             Thu 24 Sep 2026 16:02:53 +0000
Manifest this update:     Thu 24 Sep 2026 15:57:53 +0000
Manifest next update:     Fri 25 Sep 2026 19:24:53 +0000
Files and hashes:         1: 326131343a373538343a313030303a3a2f33362d3438203d3e20323139313130.roa (hash: g8fldf5+E2NiQG2t2rZiRlzT/xT38c/wIUeoDvqX1AA=)
                          2: B75F3781BC9C2E7301754988659F92686704E570.crl (hash: 5YmawpaiuFa6WEb6oNo+pZEeBzEgeP9NStYeb3hnbu8=)
                          3: 326131343a373538333a656636303a3a2f34382d3438203d3e20323135383238.roa (hash: jHx3oPogw+alCyId8KrXrlALGQwaM9lw4XrTBhR0WTI=)
                          4: 326131343a373538333a656635333a3a2f34382d3438203d3e20323139313130.roa (hash: /nUry8et8sxqIBNM4RCPWBpdTl6L1a65u8Inqobujxc=)
                          5: 326131343a373538333a656635343a3a2f34382d3438203d3e20323139313130.roa (hash: iDftdBCsthJXN/ndb+q/GQx72Gzjt+eyR9jMDK8uFwA=)
                          6: 326131343a373538333a656635323a3a2f34382d3438203d3e20323135333735.roa (hash: SkNEqHKkgb9xaKNRo3z5v+C960c6kIipwLJBD5hMIP8=)
                          7: 326131343a373538333a656635303a3a2f34382d3438203d3e20323135333735.roa (hash: QC+VLR1atMBjLZKqNKRIXRZjoNccmm6wjr6eMvg5Isw=)
                          8: 326131343a373538333a656635313a3a2f34382d3438203d3e20323135333735.roa (hash: FZxMvnN2JvS0E7GRVuAh2S+maz7EiQ9+xRJngz4LUC0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1e:f0:18:13:71:97:17:b8:26:1a:7e:29:93:06:b5:ca:82:ae:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75F3781BC9C2E7301754988659F92686704E570
        Validity
            Not Before: Sep 24 15:57:53 2026 GMT
            Not After : Sep 25 19:24:53 2026 GMT
        Subject: CN=D1631E9D1644DDFBE5734713658DADFE26C80BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:83:66:df:12:81:51:0e:b6:34:0a:e9:be:
                    eb:1c:6c:d6:3b:0d:43:11:91:6d:b9:d9:c6:75:9d:
                    a9:30:d3:cd:d3:12:cc:46:cf:8c:1f:72:99:81:60:
                    2a:d3:bc:d9:fe:ab:4c:16:45:7a:38:cd:0d:76:24:
                    eb:9b:5b:c3:a4:14:fe:fb:6c:99:32:68:b3:23:5a:
                    09:cb:26:2b:0d:9d:52:79:64:84:21:d2:35:e1:94:
                    e0:b0:f1:4a:de:fa:b2:ff:88:82:39:cc:ad:b4:63:
                    97:bd:ac:77:0f:b6:a4:11:82:6f:5a:69:7b:87:18:
                    90:8a:a1:c4:7a:87:d8:97:20:9a:5f:a7:e8:b9:04:
                    eb:b8:db:41:1b:f6:ff:0b:f5:c7:83:16:e0:08:81:
                    3e:c7:15:9e:47:68:be:22:a1:0c:35:62:a3:49:22:
                    5b:4e:e6:bb:f6:54:2b:e8:51:7e:3d:27:ff:63:ae:
                    b1:ec:38:6d:0b:d8:d0:aa:16:07:72:5a:a9:96:5b:
                    6d:84:71:c9:75:74:34:70:6c:26:29:c0:03:a0:17:
                    93:57:7a:ae:8d:9d:07:20:b8:1b:04:af:60:50:52:
                    46:c0:20:dc:05:af:8c:78:5d:82:10:8c:5c:19:d3:
                    e0:0d:d1:72:b8:97:3a:83:02:df:79:75:45:c4:40:
                    16:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:63:1E:9D:16:44:DD:FB:E5:73:47:13:65:8D:AD:FE:26:C8:0B:D7
            X509v3 Authority Key Identifier:
                keyid:B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5c:5a:63:97:1a:09:62:ad:e9:ec:fd:a3:38:4b:37:c1:bc:
         7f:7c:15:66:dc:73:10:bc:64:e9:e1:61:79:c0:21:6c:bb:ff:
         67:e6:8d:e8:12:57:58:13:09:cb:45:0a:c9:4f:00:b0:d3:c6:
         8b:b2:8d:79:d3:0d:e9:08:7d:66:04:f4:68:eb:ac:ff:15:30:
         6e:2a:21:a8:05:d0:9b:51:70:10:e0:c3:3e:e6:87:a8:f6:0f:
         b6:02:eb:bb:34:ca:54:0b:ce:f0:6b:18:d8:5f:0a:e2:df:9b:
         6d:44:8b:20:79:34:e9:7d:03:fd:d3:43:55:db:da:c5:71:18:
         bd:bd:a5:a9:8b:95:1c:7d:b2:c9:b0:ed:7d:09:e8:70:fe:6b:
         a5:86:4e:b8:c9:f9:57:f3:9f:7f:36:b3:d5:28:be:f3:9a:f3:
         93:b2:74:66:fe:52:da:ea:fa:16:49:80:bb:20:f7:2c:70:25:
         ad:fa:19:3a:99:90:b9:53:d7:80:2d:a7:95:a9:1d:91:e2:dc:
         69:32:28:9b:dc:73:b5:e1:fb:ea:02:01:5d:a2:1e:45:b3:23:
         00:15:c5:26:3d:04:47:0f:37:d5:be:1c:93:75:4b:49:9d:bf:
         37:8c:d5:81:7f:3c:33:fa:6e:5c:4a:0d:58:b7:19:df:37:d8:
         9d:ae:fa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:46:45 2026 by rpki-client