Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
File:                     B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json)
Hash identifier:          8bjnYptXsEc2AvDzGsj+VexXXrLIZy0bTX+zA6EEags=
Subject key identifier:   1E:A3:E2:6D:8B:DD:08:71:DD:2B:4A:31:56:A1:DA:4A:E8:E7:48:C8
Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79
Certificate issuer:       /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679
Certificate serial:       38E791CC7D3A14EEAB8C14E953DA0E38A69797BA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
Manifest number:          025A
Signing time:             Wed 23 Sep 2026 07:58:13 +0000
Manifest this update:     Wed 23 Sep 2026 07:53:13 +0000
Manifest next update:     Thu 24 Sep 2026 11:24:13 +0000
Files and hashes:         1: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: UXWml1Lhai6XsZe/+0NNX1kVxg/g2Ofeo4uBVrbG2X4=)
                          2: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: apK/0hsVpmhUeemtv6EK//BPPuH/vapkmzdJ2BaKCqI=)
                          3: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: pBcgsCzE8VSZrRxLNHX2La9Up2EYDGqL+n7eIiT6ks8=)
                          4: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: iwoYZhylLRyGGuc3nrlVE4dmniVHDpFsit+R9hN9VHo=)
                          5: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: vWVn4Krh8HFG73AqoAv0VK8xxfGftrDUl+DwuXFUflE=)
                          6: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: eylv3pM8cCS5agfH8t/3YdzCfQAg5TuoUu9iOo1hCUQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e7:91:cc:7d:3a:14:ee:ab:8c:14:e9:53:da:0e:38:a6:97:97:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679
        Validity
            Not Before: Sep 23 07:53:13 2026 GMT
            Not After : Sep 24 11:24:13 2026 GMT
        Subject: CN=1EA3E26D8BDD0871DD2B4A3156A1DA4AE8E748C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:0d:c0:3c:62:9f:aa:63:89:82:06:f8:c0:
                    97:33:41:4a:57:60:87:ef:c7:c1:ab:0c:4a:ac:5e:
                    6e:76:f3:15:4f:b8:6b:48:34:76:79:9c:0b:e8:4c:
                    90:9e:4c:cf:2a:00:47:52:b3:c2:b5:eb:f7:ce:c1:
                    2f:e2:bf:0f:82:c1:e7:a2:95:14:8b:dd:79:e6:15:
                    d5:cd:f2:c0:74:18:75:53:2e:00:48:4a:78:e2:47:
                    ca:aa:4e:91:50:2d:3d:aa:88:b6:0e:68:5b:96:84:
                    6f:79:03:2d:2c:63:25:09:90:b1:4e:4f:9c:47:b7:
                    79:3f:3b:2a:aa:da:91:f2:8e:64:7f:ca:89:d3:0d:
                    aa:1c:ba:11:f9:78:84:a4:88:07:68:82:a1:2c:3a:
                    00:88:b9:2c:69:3d:7c:1f:b1:70:9c:0e:48:5e:20:
                    8c:8a:9e:56:b4:08:95:f7:c0:6c:82:16:b8:c9:90:
                    75:a2:a9:71:71:a8:6d:b8:88:49:4c:9b:ce:6d:ba:
                    d5:80:ae:0d:78:65:ed:bd:d4:ed:1a:f5:ee:1e:7f:
                    b6:6f:94:71:3a:de:86:38:4d:9a:b8:dd:ad:4f:e7:
                    64:8d:37:bd:e5:52:8f:0c:df:53:87:a1:1e:75:c8:
                    6e:7a:8c:cb:fc:bc:5a:f1:b3:41:9e:9f:03:5d:96:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A3:E2:6D:8B:DD:08:71:DD:2B:4A:31:56:A1:DA:4A:E8:E7:48:C8
            X509v3 Authority Key Identifier:
                keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4b:7b:90:d2:f6:ef:b0:20:84:da:3c:49:74:60:a8:27:e2:
         46:6f:e3:72:8e:12:13:40:00:59:52:6b:bf:64:3a:03:5d:cc:
         26:0b:ce:c4:fe:b9:59:7f:bc:d9:5c:2b:6d:10:72:e9:ea:63:
         26:d3:29:ce:f3:17:43:39:fb:35:5b:c0:1a:bf:56:2d:3b:33:
         5c:4b:84:79:da:c6:28:e8:3e:9c:6e:94:9f:c9:17:de:87:b1:
         4a:ce:07:03:8b:06:4f:5d:ff:96:04:6a:28:49:f2:e3:75:da:
         49:28:3b:8e:57:b8:43:26:c0:c0:d6:12:98:ea:b6:b2:73:f1:
         67:98:6b:ec:0c:d8:3a:7b:18:e4:48:fb:08:92:60:30:4b:e8:
         33:72:b8:5e:1c:1e:5b:3a:12:7e:b7:f1:5f:54:62:f6:0b:7f:
         77:54:33:6a:66:f6:69:d7:40:a6:27:d3:d3:6a:a0:0e:91:e8:
         f7:49:33:98:00:70:78:db:7a:13:99:1f:40:2f:e2:fa:57:df:
         00:eb:e4:7b:1a:78:5d:59:6b:b7:a6:b2:9b:04:4f:ae:6c:b2:
         9a:c1:7a:57:d9:61:05:b5:a5:19:e0:ab:c3:54:0d:6a:8d:32:
         70:09:18:6b:a4:45:a8:15:ce:ed:eb:6e:0a:81:13:19:8a:fa:
         50:ff:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:19:25 2026 by rpki-client