Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
File:                     A912092CFA11F378852F52266C793AB678233205.mft (raw, json)
Hash identifier:          VwAJZYiL73I19v4twLgo06QPiMuKnbUkE2l3s06fNjM=
Subject key identifier:   AF:F9:73:74:29:1D:BD:BF:E8:76:29:09:2D:28:2D:50:E5:F5:29:6F
Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Certificate issuer:       /CN=A912092CFA11F378852F52266C793AB678233205
Certificate serial:       1F4649010256512D7DEF139FC26071EAF6380186
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
Manifest number:          0262
Signing time:             Wed 25 Mar 2026 16:18:53 +0000
Manifest this update:     Wed 25 Mar 2026 16:13:53 +0000
Manifest next update:     Thu 26 Mar 2026 16:47:53 +0000
Files and hashes:         1: A912092CFA11F378852F52266C793AB678233205.crl (hash: nbcbF5/ubVL95SKcnFFA7TnEOi2Rclv+3fmWOxNnUgA=)
                          2: 326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa (hash: /KjIFlpbNb1VbdyEsAMlwZ6y7EnP5aEMV+JQt9I/CYU=)
                          3: 326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa (hash: m/KS3U1L5fK6/ozUyGVO/HofrXSxDH++GoaQCE6VLqY=)
                          4: 326130393a353463333a613130303a3a2f34382d313238203d3e20323135313437.roa (hash: 5vA7kcahmkhnv7Pjx7uA7TrGRG+XVrMF+mKhb2vEG5U=)
                          5: 326130393a353463333a613130323a3a2f34382d313238203d3e20323135313437.roa (hash: vs9kXuBMMWCplaNsRIcMMGKaCF4FLRTK4Bq5jqpLQYc=)
                          6: 326130393a353463333a613130313a3a2f34382d313238203d3e20323037323532.roa (hash: Ilh1UAu+jca7lLH/J3OsImOkho4aJFpMyXWBFJO/olw=)
                          7: 326130393a353463333a613030303a3a2f34302d313238203d3e20323039383734.roa (hash: ca9GKU5mOXVUfI7Du4XvHpxs7R00F6F4l3yz+1HGWmo=)
                          8: 326130393a353463333a613230303a3a2f34302d313238203d3e20323039383734.roa (hash: bwL4xPqc/uz8Pz2knWoJ8zvpAw8HB5XXWez7oPoDaEI=)
                          9: 326130393a353463333a613130313a3a2f34382d313238203d3e20323135313437.roa (hash: 90FGOeqqLptd8qlXcfjJgcF07gJvM1oxc2QmHLuTM1Y=)
                          10: 3131312e3233352e3135312e302f32342d3332203d3e20323135313437.roa (hash: vew4LNWCVofm5qe2BK5sopfMvrn3w6T63/5S4aLPNx0=)
                          11: 326130393a353463333a613130343a3a2f34382d313238203d3e20323135313437.roa (hash: mqZWFx8mEs19q6avxgn8ro9WrQffoF4FToEMy+hXzM0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:46:49:01:02:56:51:2d:7d:ef:13:9f:c2:60:71:ea:f6:38:01:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912092CFA11F378852F52266C793AB678233205
        Validity
            Not Before: Mar 25 16:13:53 2026 GMT
            Not After : Mar 26 16:47:53 2026 GMT
        Subject: CN=AFF97374291DBDBFE87629092D282D50E5F5296F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:c4:77:f2:52:06:23:37:c4:b5:3f:c8:a7:
                    38:eb:a8:16:cb:39:b1:1e:dd:a2:5a:2a:ea:6c:3c:
                    c8:be:6d:ff:7f:39:35:0b:e5:9e:61:30:6f:f5:de:
                    7b:2a:56:99:28:32:96:38:5f:ba:25:a1:c9:99:1f:
                    be:b3:58:cb:3d:2b:b1:4b:49:68:88:b1:24:44:d8:
                    e4:b3:98:4c:ef:29:24:28:11:86:ab:cb:fe:69:ef:
                    13:8c:d3:c1:49:e1:28:72:9c:fb:ec:08:51:dd:90:
                    8b:eb:cd:34:fb:3a:92:eb:1f:52:02:e7:86:9e:93:
                    7e:45:59:13:e6:38:08:91:f0:55:4d:9b:b5:b8:01:
                    bc:0d:dc:4d:ae:a3:27:0c:f1:5b:d5:f6:4a:6a:f7:
                    ed:32:b4:24:4a:77:2a:c2:43:0e:a2:95:4f:1c:2b:
                    a4:9d:51:28:15:01:f0:8e:53:32:e9:55:42:81:c9:
                    4e:20:96:68:42:05:89:04:29:89:78:ba:18:4e:1f:
                    c6:db:e1:0a:01:7c:ae:7a:c6:8c:1b:99:eb:e9:fc:
                    e3:fc:c6:9e:56:9e:5a:6f:a7:21:a9:91:c4:69:20:
                    9d:39:c9:ec:d9:85:9b:94:cc:0c:f7:97:04:d4:33:
                    63:bb:e4:9d:87:09:8e:2c:c9:d0:24:a5:cf:58:e3:
                    84:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F9:73:74:29:1D:BD:BF:E8:76:29:09:2D:28:2D:50:E5:F5:29:6F
            X509v3 Authority Key Identifier:
                keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:89:b8:2b:2b:2e:f8:9f:42:24:7e:2a:a5:ec:f5:8d:72:75:
         45:8e:8f:ad:6f:89:75:6c:b1:49:90:03:05:76:85:ef:01:65:
         8d:09:d3:31:d9:27:17:9f:26:54:be:7e:69:e3:11:d4:51:c4:
         a5:20:81:13:d9:cd:77:04:84:7c:d4:82:e0:3e:72:b6:33:9b:
         a6:b4:f9:d7:e6:8e:f9:91:78:25:cc:5b:cf:e9:57:8c:60:54:
         bc:44:8b:67:27:86:68:d9:54:f6:b0:7d:6e:66:5a:a7:f5:4b:
         d6:76:b3:79:f6:c2:13:fb:f1:ad:93:9a:56:e0:31:75:4c:98:
         aa:ab:94:58:f1:b8:03:fd:3b:6a:02:ec:f5:f8:c8:a6:32:89:
         21:eb:b3:6a:e2:e2:57:03:01:c7:f6:99:bf:95:9a:21:3f:88:
         47:cb:06:93:56:96:c6:74:3c:cf:42:41:5b:1a:4f:e2:b7:a3:
         08:08:86:84:e3:c6:e2:c6:97:5c:44:60:56:8d:fb:57:0b:eb:
         61:98:35:64:3e:d4:3b:24:08:02:b6:7c:c3:3c:5e:a5:9b:ce:
         11:a1:80:df:f3:90:3b:17:74:84:f5:7a:73:71:55:ce:c0:5d:
         f4:8a:d5:b7:da:37:8a:52:c8:d0:de:40:17:cd:cb:20:ab:0a:
         f7:43:eb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:24:36 2026 by rpki-client