Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
File:                     A912092CFA11F378852F52266C793AB678233205.mft (raw, json)
Hash identifier:          C0P9Dg+DE6u+bPJVXoeDhbiTfN0ATyo1r19W90pBX7c=
Subject key identifier:   A6:FA:B9:F0:D8:A9:5E:9D:FD:0F:E4:84:70:4C:B2:D7:F1:3C:7F:8A
Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Certificate issuer:       /CN=A912092CFA11F378852F52266C793AB678233205
Certificate serial:       2749AA087BA2B50AFBA4654909D41EA919022294
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
Manifest number:          0263
Signing time:             Wed 25 Mar 2026 22:31:37 +0000
Manifest this update:     Wed 25 Mar 2026 22:26:37 +0000
Manifest next update:     Fri 27 Mar 2026 01:33:37 +0000
Files and hashes:         1: 326130393a353463333a613130343a3a2f34382d313238203d3e20323135313437.roa (hash: mqZWFx8mEs19q6avxgn8ro9WrQffoF4FToEMy+hXzM0=)
                          2: 3131312e3233352e3135312e302f32342d3332203d3e20323135313437.roa (hash: vew4LNWCVofm5qe2BK5sopfMvrn3w6T63/5S4aLPNx0=)
                          3: 326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa (hash: /KjIFlpbNb1VbdyEsAMlwZ6y7EnP5aEMV+JQt9I/CYU=)
                          4: A912092CFA11F378852F52266C793AB678233205.crl (hash: QEBUlQn8q5c4Irm/E6mzygZ3R/6q0Wd4dr0Xoq1bRxw=)
                          5: 326130393a353463333a613230303a3a2f34302d313238203d3e20323039383734.roa (hash: bwL4xPqc/uz8Pz2knWoJ8zvpAw8HB5XXWez7oPoDaEI=)
                          6: 326130393a353463333a613130323a3a2f34382d313238203d3e20323135313437.roa (hash: vs9kXuBMMWCplaNsRIcMMGKaCF4FLRTK4Bq5jqpLQYc=)
                          7: 326130393a353463333a613030303a3a2f34302d313238203d3e20323039383734.roa (hash: ca9GKU5mOXVUfI7Du4XvHpxs7R00F6F4l3yz+1HGWmo=)
                          8: 326130393a353463333a613130313a3a2f34382d313238203d3e20323135313437.roa (hash: 90FGOeqqLptd8qlXcfjJgcF07gJvM1oxc2QmHLuTM1Y=)
                          9: 326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa (hash: m/KS3U1L5fK6/ozUyGVO/HofrXSxDH++GoaQCE6VLqY=)
                          10: 326130393a353463333a613130313a3a2f34382d313238203d3e20323037323532.roa (hash: Ilh1UAu+jca7lLH/J3OsImOkho4aJFpMyXWBFJO/olw=)
                          11: 326130393a353463333a613130303a3a2f34382d313238203d3e20323135313437.roa (hash: 5vA7kcahmkhnv7Pjx7uA7TrGRG+XVrMF+mKhb2vEG5U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:49:aa:08:7b:a2:b5:0a:fb:a4:65:49:09:d4:1e:a9:19:02:22:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912092CFA11F378852F52266C793AB678233205
        Validity
            Not Before: Mar 25 22:26:37 2026 GMT
            Not After : Mar 27 01:33:37 2026 GMT
        Subject: CN=A6FAB9F0D8A95E9DFD0FE484704CB2D7F13C7F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ff:dc:23:b6:c5:a4:a3:c6:3f:72:e4:bb:91:
                    83:e2:c6:ec:49:55:2c:d6:74:9c:d8:a5:b6:96:af:
                    b3:e8:0f:72:a1:78:95:55:37:22:33:e9:7f:5c:ab:
                    af:a7:65:28:6f:6f:9d:bd:23:f1:51:34:2a:d8:08:
                    ce:88:80:5e:c0:db:f0:c9:29:15:c4:1c:da:68:57:
                    81:18:cc:be:98:51:30:10:68:dd:49:ac:8c:d0:91:
                    5a:09:cd:7c:ee:66:9c:d5:12:d9:9d:db:34:fc:90:
                    01:48:ce:44:5f:ac:f8:da:c4:c0:f2:4f:0c:3a:10:
                    19:16:f1:dc:3e:14:d8:7d:72:10:0f:2f:23:3d:65:
                    d4:00:87:c6:ea:99:19:d3:c3:66:68:e8:0d:25:83:
                    b8:f7:66:82:c2:0d:ca:03:4d:9b:39:95:3d:45:de:
                    a9:53:67:42:a7:06:a1:b5:c4:0e:14:31:0f:a8:63:
                    aa:78:42:0d:22:ad:95:36:28:5a:c5:40:ee:e7:3b:
                    d9:d5:0b:07:ab:0d:ed:61:71:c5:86:44:a3:97:8e:
                    1a:03:e8:8c:5d:16:2c:dd:73:bc:4a:c7:86:f0:9f:
                    0d:5e:43:4f:00:05:c2:f0:a6:44:38:7e:26:3b:26:
                    39:16:17:1a:1a:eb:1d:64:68:c8:3f:ec:4b:c6:26:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FA:B9:F0:D8:A9:5E:9D:FD:0F:E4:84:70:4C:B2:D7:F1:3C:7F:8A
            X509v3 Authority Key Identifier:
                keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:92:d4:fe:82:16:bd:85:97:cf:3f:05:25:28:bd:77:70:02:
         2e:c9:f1:db:71:d2:17:93:14:df:de:bc:38:fa:ab:fe:49:78:
         87:88:a8:b2:50:c8:3f:9c:7e:53:89:ff:ba:cf:cd:a2:b4:3e:
         d0:a1:1c:f2:04:7f:b1:75:25:e9:15:0f:f8:d3:ef:64:09:67:
         fc:29:c8:b0:1c:f4:3f:db:66:05:6f:a4:8d:3f:60:f7:eb:6f:
         42:4a:57:fd:e7:65:b4:bd:8f:16:00:9f:c7:f8:78:0b:0a:41:
         9b:12:c0:b8:c3:de:ed:cf:9a:03:41:e2:2d:fc:f2:ec:e3:da:
         58:1f:58:2f:52:8a:4c:5e:ba:32:df:73:40:fe:6c:61:6e:10:
         22:bf:4b:e2:9d:82:36:8f:b0:af:ee:35:fb:d0:bf:28:46:6d:
         c0:8e:6d:c7:be:25:6a:35:12:66:d0:1c:c5:a8:89:ca:b0:65:
         8b:e2:89:64:0a:9f:e7:68:35:84:e5:79:b6:cc:da:ee:6c:6d:
         f7:fc:18:84:0b:3c:7f:e9:4a:35:25:71:b8:21:61:99:99:47:
         43:16:34:9c:ae:c8:df:b4:b7:23:1c:8f:14:66:d8:f5:88:7a:
         2a:3a:50:bd:a1:c9:40:7b:be:2b:db:25:49:11:10:f5:3d:5c:
         ce:44:ba:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:08 2026 by rpki-client