Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
File:                     6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json)
Hash identifier:          caqm9MShb7vV3cLaOFnU32oOKBD1MaM7D3DFyV94nAI=
Subject key identifier:   40:64:D3:10:4D:B5:72:68:92:04:B6:4C:38:E9:74:3F:E4:A6:8C:97
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       4A3B591AE74A9FD4079CF10D0D4ACC95C45E7CCC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
Manifest number:          05C4
Signing time:             Sun 27 Sep 2026 16:39:05 +0000
Manifest this update:     Sun 27 Sep 2026 16:34:05 +0000
Manifest next update:     Mon 28 Sep 2026 19:39:05 +0000
Files and hashes:         1: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: bIpLCNbkXciiaWzFa58/qh/69RjQZp2QOw/cCW3vuDY=)
                          2: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: UDd+t9EsJDfNHobscIjEAVbA3kTERYkXQAx3CJo6hDs=)
                          3: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: b9uDQIv17Mqj0faPNTNtrEIHppsSxn28riugd1hAwe4=)
                          4: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ZuqL+fdFsSzEWPLF+KldkjLdFZi3woWq3fujFGdDY0Y=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3b:59:1a:e7:4a:9f:d4:07:9c:f1:0d:0d:4a:cc:95:c4:5e:7c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Sep 27 16:34:05 2026 GMT
            Not After : Sep 28 19:39:05 2026 GMT
        Subject: CN=4064D3104DB572689204B64C38E9743FE4A68C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:53:16:06:3b:94:65:0b:4e:9f:f2:24:2e:
                    f3:3a:de:38:e1:27:e8:65:3a:bf:a7:f2:70:2b:45:
                    42:eb:41:51:ba:c0:c0:86:b0:db:c4:68:7e:19:d3:
                    24:95:e4:8d:42:6c:d0:5e:ea:da:58:ed:65:37:81:
                    ee:bb:f5:8f:e1:2a:56:b5:4f:bd:15:c4:7d:33:47:
                    9d:23:33:a8:bd:bf:2f:0a:68:45:11:31:c9:7a:d7:
                    e3:e3:72:7b:de:20:05:31:58:49:0f:1d:d2:3d:0f:
                    31:14:c2:46:5f:30:06:53:6f:a7:56:e6:c2:89:2d:
                    75:c4:d8:e6:ee:7f:da:bb:90:59:db:b2:cb:74:7f:
                    62:d3:05:e0:be:7b:ed:0c:a5:6a:e5:57:23:b9:17:
                    8f:0e:da:e8:d6:e2:24:b9:22:30:17:71:83:55:2c:
                    34:8c:bb:9f:a2:64:ba:74:00:94:4b:cf:c8:80:33:
                    85:d1:4c:b6:04:e3:e1:33:a7:a5:3f:a5:e0:f7:e4:
                    66:63:d2:f4:1c:f7:e2:5b:4d:bb:6e:25:ab:fe:6c:
                    33:6c:cf:59:a2:7e:48:e7:e4:26:96:e1:ff:ba:8b:
                    d9:7d:0b:fd:91:5b:62:2c:2f:42:36:78:21:4e:78:
                    f3:44:b9:54:ca:55:a0:74:bf:0d:eb:c1:f3:f3:1d:
                    2e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:64:D3:10:4D:B5:72:68:92:04:B6:4C:38:E9:74:3F:E4:A6:8C:97
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:69:a3:99:e8:f8:d1:bc:27:80:53:81:88:a6:08:2a:8b:aa:
         b2:5b:9c:63:21:f6:d6:26:20:a6:2d:42:10:99:20:d4:85:ee:
         b8:43:8f:8b:ff:51:18:03:de:fd:f2:12:1b:f2:84:35:1c:ff:
         cf:47:31:87:64:55:b7:86:ba:30:af:aa:0e:48:16:9e:92:ca:
         68:5c:6a:7b:ca:15:83:ef:8b:bf:1f:34:4d:75:1f:25:87:c4:
         4a:10:c3:b3:c4:ba:77:6d:af:40:20:af:43:4a:0b:3f:86:b1:
         85:89:62:f4:41:a9:98:80:9a:43:1a:ac:12:d4:07:24:a9:15:
         a4:36:49:f1:7b:57:91:3e:4b:38:c8:2b:55:9e:a7:c4:60:9b:
         b1:ff:ca:34:73:03:3d:5f:be:9e:9a:80:fc:09:d8:40:02:c0:
         f3:fa:82:ef:7d:af:74:78:58:1f:5d:6c:e9:2e:59:ec:51:76:
         78:20:a1:ea:50:7f:4d:a4:17:bd:05:03:49:bb:f0:52:c8:ab:
         57:85:36:79:57:28:42:18:25:bb:db:a3:35:1b:12:62:fa:16:
         2b:06:ac:1d:44:67:f4:7f:1d:69:eb:ac:51:da:47:3a:69:34:
         5c:46:2c:b1:71:ca:5c:a0:c1:b1:0f:16:a3:b0:93:53:20:f0:
         66:38:92:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:36:28 2026 by rpki-client