Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
File:                     652C0199E6562FB6119E25923016982629C2108D.mft (raw, json)
Hash identifier:          4XaFMCptstIvGdniiEX5KJnZcIynGQAWQTNUrW1Bm/8=
Subject key identifier:   F4:97:8A:0E:A4:97:FA:DE:13:07:FF:41:FD:E2:B2:E4:CE:A7:B6:60
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       1C0EB2D16B188F5FEE5C6AE064F6E02B6BDFD677
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
Manifest number:          DE
Signing time:             Fri 27 Mar 2026 21:47:17 +0000
Manifest this update:     Fri 27 Mar 2026 21:42:17 +0000
Manifest next update:     Sun 29 Mar 2026 01:29:17 +0000
Files and hashes:         1: AS53808.asa (hash: WAEZrHuRhdK1Z36FrLyWoQXwLDK1zrdvX2vbKzmSJsU=)
                          2: 3230362e3235312e35322e302f32322d3234203d3e203332333436.roa (hash: 2HgLzd+gynGabzidkPluIBMAmXgeRg5AWmNASYFvWAg=)
                          3: 323630323a663932613a613437613a3a2f34382d3438203d3e20323136303536.roa (hash: 0Pqy++OUhFsmQuylEZfhVLwMq0m790qyN5/JFrzL8g8=)
                          4: 323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa (hash: JLb25ZxSGp5EpQKaxM3hHQNAFbR478I5lY6aepa0XPQ=)
                          5: 323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa (hash: gY/kBif7jhVfPZuIqYEp13QW/DiRe/GtQlvuralOCJs=)
                          6: 323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa (hash: eYJ5D/9jy4JCP/LWnKkem2A6/sqvpj4yLievQ5xZkqc=)
                          7: 323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa (hash: mTj4Kpj9skM4imBRREZv8jcja5D2jsvUqRlIxwoc3SI=)
                          8: AS198304.asa (hash: +rQdbqDMetYc7KkWOy7DXQ+dwSl7QVxC5ENne6yyO0o=)
                          9: 323630323a663932613a3a2f33322d3438203d3e203533383038.roa (hash: 4FkS6cxLOa3BJuHaPuW7A4f2/YG2W6yW4OgbVOHPnHE=)
                          10: 323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa (hash: HuKbQrOvcjKaYoy37BUB5dGKW0EZLAtznzlUcwdKtQQ=)
                          11: 323630323a663932613a6330303a3a2f33382d3438203d3e203430393239.roa (hash: X4uCLc+QUi4BlYjs6hSIP26jH4L3kRKB3mx5SEMVmvs=)
                          12: 323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa (hash: Jp73CAhT8X4qbMvWPriH8XdxbLv++q2700sN8D3HLOc=)
                          13: 652C0199E6562FB6119E25923016982629C2108D.crl (hash: nyDpavf8x6qxsB8t8n5+LpTF4mFpOffnfJ/ypnHIMKA=)
                          14: 32332e3137352e32342e302f32342d3234203d3e203533383038.roa (hash: 3g+bm1Ov3KS4q8fCecAmN/EtcwCqqHTyfkZNmIpgPag=)
                          15: 323630323a663932613a613437303a3a2f34382d3438203d3e20323038373534.roa (hash: JA+7vvkApnndXq6JQ4v/gpd5o6G7r0mhztl1imiG/Sc=)
                          16: 323630323a663932613a613437653a3a2f34382d3438203d3e20313530323839.roa (hash: 5jdaGtzWyEuE6pwfQTMlcahgSsIJf1oc0wSJrUGoFWM=)
                          17: 323630323a663932613a613030303a3a2f34302d3438203d3e20313938333034.roa (hash: YX1mxzfkZu8LGScEYjaMn4TI1hSQfjHgcc9tVmbWEew=)
                          18: 323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa (hash: d+oVpHutbFyQRry0VWAIg6yAHPeo2/Kc+Lvm+iA5ji0=)
                          19: 323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa (hash: 2EGlmklKNEj2X3VAACc5ImzmapK/a+f/dwpE/uH21pE=)
                          20: 32332e3137352e32342e302f32332d3234203d3e203434333234.roa (hash: D17tZy0W46+eBaikW356HvxnGVw+z5QvhP9P2uKPsGA=)
                          21: 3134392e3131322e3131372e302f32342d3234203d3e2030.roa (hash: wNF04zTzM01ZsoUyNOrqB+433Orn6dMaQ3nxpWytFbE=)
                          22: 323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa (hash: 7bJdTrlT6VfYPtZ524N64q5rra/HSG/apOSRN+7RXaM=)
                          23: AS40929.asa (hash: ciA+X/4qw1Ic44a6vCoUjQJ+5MIWaj+hDNcIh0l8Dk4=)
                          24: 323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa (hash: t859eM/21Ihz32sEe0c1AsW78lvki7bEFnJsJ550pww=)
                          25: 323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa (hash: BLqZYyTalxRWLkSRCH3NbfzX0BV/EB7yx8snEAYqCaA=)
                          26: 323630323a663932613a313331343a3a2f34382d3438203d3e20323034353138.roa (hash: +hGf1zwD/VOsHCtsdJm6vjqzA9Qar1hq3f+g1LScl20=)
                          27: 323630323a663932613a613436653a3a2f34382d3438203d3e20323034353335.roa (hash: ZTuzUBd8F+6HeeOFmS8JC85pek1UrzJEnRIsKAeVglc=)
                          28: 323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa (hash: kAoBY+HPJ+v2B5y0tTwW0KdPdiz3ZVlVKWhx52C/bb0=)
                          29: 323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa (hash: 33uUixA0uJZoNLjO6KgeYE3kw/aA7v5tf1atLI8laIQ=)
                          30: 323630323a663932613a613437663a3a2f34382d3438203d3e20343031383335.roa (hash: VR8n5OiM1XagsyzshXLRVRO8kZHjcaV2UvwohfY+qAQ=)
                          31: 3230362e3235312e35322e302f32322d3234203d3e203439333034.roa (hash: EVy9CWEs34kEUh8TkA4Rmz3njW+txDVeXC4tnInrqdQ=)
                          32: 323630323a663932613a613437313a3a2f34382d3438203d3e20323131373239.roa (hash: BYOSvSzHK3d/aeAGCn7LrqqSyr0aELRrR6V1K4HBENw=)
                          33: 323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa (hash: p2TAJ+SoheZVgt720I7qYK/LH2/2CMUTnLeIel9iBps=)
                          34: 323630323a663932613a3a2f33322d3438203d3e203434333234.roa (hash: F/3+/hcXQwWmQPT2L9BIEO/JJlFnHVZNoQMnNhm+tc4=)
                          35: 323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa (hash: nHGY9JwHA1gV3ZB01r0NsQMlXvaKKqpqjnW3pCpd9Fc=)
                          36: 323630323a663932613a613434303a3a2f34342d3438203d3e20323032373334.roa (hash: 7xduKNxFnF4F+moKthO8GxxT77HpW4VFZLxpGPnwP2Q=)
                          37: 323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa (hash: QXjsuQCqZvo7gSFq8pe5a2qbRx0ksORhzu/TOa4aKlE=)
                          38: 323630323a663932613a613437643a3a2f34382d3438203d3e20323130333532.roa (hash: 77eb0TAjk47MkAe5OX0t+bmIiF/5o238LUqAq2w/M6s=)
                          39: 323630323a663932613a613437393a3a2f34382d3438203d3e20323037353239.roa (hash: /qmxO62TEMzZ2vSC6btQrvhe0ZmEtLUcutZduW5u2X4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 01:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0e:b2:d1:6b:18:8f:5f:ee:5c:6a:e0:64:f6:e0:2b:6b:df:d6:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: Mar 27 21:42:17 2026 GMT
            Not After : Mar 29 01:29:17 2026 GMT
        Subject: CN=F4978A0EA497FADE1307FF41FDE2B2E4CEA7B660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:7b:17:bb:4e:4a:67:80:c4:52:7e:02:e8:
                    9d:bd:88:44:f6:c8:b7:dd:f2:dc:18:33:b0:6e:c3:
                    9c:1c:d0:ad:40:7a:fd:a3:93:fe:08:cf:48:a1:e1:
                    f3:32:17:ee:f5:ad:a6:8d:e9:45:bd:62:69:e7:a2:
                    c5:03:14:f4:8b:e7:ba:9e:53:59:f8:12:c1:c2:ad:
                    77:37:2c:0e:f5:31:b1:0b:e7:e3:68:1a:10:06:25:
                    c3:2d:f1:7f:8d:7a:e4:87:9a:73:f7:f6:12:cb:ac:
                    8a:f2:2a:5e:0c:65:d2:7d:01:c0:c5:bd:28:21:79:
                    0c:9b:d3:0b:70:32:3d:46:08:51:d8:8a:d9:4b:91:
                    c6:e9:a0:e2:08:0f:de:cf:69:e8:a3:44:bc:61:bb:
                    2c:dc:7a:ac:b4:61:ec:1b:a6:09:0a:5e:e0:4f:78:
                    bc:71:8d:d3:b0:8f:df:da:c7:ca:95:02:1d:27:61:
                    45:f5:49:cf:67:e3:3c:1f:e7:f9:ae:32:27:cc:79:
                    07:c8:44:48:5f:ad:82:2b:71:3a:10:af:da:22:d9:
                    d1:89:4c:8b:3a:f7:ef:5b:24:69:60:54:8d:c9:85:
                    9d:e0:97:33:07:1b:66:71:a6:03:f3:23:c6:7e:67:
                    6a:5f:5a:07:f1:53:45:b9:ed:39:14:7b:ea:b0:44:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:97:8A:0E:A4:97:FA:DE:13:07:FF:41:FD:E2:B2:E4:CE:A7:B6:60
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:eb:e3:50:78:c7:55:53:22:3f:2d:ec:fd:8f:7c:07:9b:c3:
         10:a6:45:08:f0:37:2d:cc:90:5c:21:bd:de:63:e5:c5:ad:15:
         48:e8:29:98:75:41:fd:23:cf:be:ef:8a:88:ce:61:ff:a5:a5:
         e2:48:69:cc:78:eb:9a:08:c6:71:82:57:5b:50:a9:99:91:70:
         5c:dd:a9:89:2d:bb:a6:6f:de:95:52:92:cd:ca:d6:7f:34:0b:
         2b:70:65:91:11:00:fe:5f:37:24:b5:0b:f5:7e:b4:8f:df:74:
         b5:bc:e0:c6:08:40:f7:8d:9f:5f:f2:4e:af:24:1d:d1:43:f9:
         9a:c8:61:dc:4e:72:d4:9d:64:d3:56:55:ca:69:fa:cc:fa:73:
         49:19:10:43:3b:6f:ba:0d:be:16:b6:fb:79:01:e4:0d:6d:33:
         7f:f4:7b:6d:fd:68:a8:d7:33:63:1f:bc:7b:96:5b:e9:b9:1c:
         40:df:97:e7:12:24:a2:02:49:09:04:9e:93:20:3e:36:b2:cd:
         57:74:86:e2:62:fa:40:3c:72:f4:38:8d:7b:b4:6a:ab:19:7e:
         34:24:bd:f0:c0:f8:61:7b:5d:76:65:ec:8f:73:d8:9b:3d:8f:
         7c:a6:b0:93:0f:fa:0b:bb:ff:57:f1:d3:e6:32:55:33:d8:30:
         6b:ab:03:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:28:41 2026 by rpki-client