Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft
File:                     3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft (raw, json)
Hash identifier:          I5Dcjb/ML63vDxFRsxOCoT3HuypzeYhoSX/TOPYHJKs=
Subject key identifier:   72:A5:7B:C2:5C:F8:C0:66:58:FE:FA:20:64:CE:FE:B3:06:CC:D7:43
Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29
Certificate issuer:       /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129
Certificate serial:       595BBB23A9FB26F693D89A5809E271532ED20F42
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft
Manifest number:          66
Signing time:             Wed 23 Sep 2026 16:09:35 +0000
Manifest this update:     Wed 23 Sep 2026 16:04:35 +0000
Manifest next update:     Fri 25 Sep 2026 07:22:35 +0000
Files and hashes:         1: 326130363a613030343a666630303a3a2f34382d3438203d3e20323134333434.roa (hash: Imul87Q0laBEeGR6b4JgXOeVMgCJd+ACSUs3lfjQcHw=)
                          2: 326130363a613030343a663330303a3a2f34342d3438203d3e20323134333434.roa (hash: r9x0/nErCsGq0USyqNIwYZx0Zz6rJMyg3ageBz9k7hk=)
                          3: 326130363a613030343a3130303a3a2f34382d3438203d3e20323134333434.roa (hash: 1XO6BaxJAehfczsdJQ8Rzbbou7d39qHfdDB4qDEUpn8=)
                          4: 326130363a613030343a666630323a3a2f34382d3438203d3e20323134333434.roa (hash: Rpoxo+W741nQxWdQnu6cWSiOcJwrjMgG3XrE0Jxxpgo=)
                          5: 326130363a613030343a663230303a3a2f34342d3438203d3e20323134333434.roa (hash: z92MdQiIZJ3sKcgs/C+2o9rNwmAHaLw2ex5q/qeFzig=)
                          6: 326130363a613030343a313030303a3a2f34302d3438203d3e20323134333434.roa (hash: M6nGBPKue6YCxf9SFh1T7J0FxLdC8JG0866fChE4pXs=)
                          7: 326130363a613030343a323130303a3a2f34302d3438203d3e20323134333434.roa (hash: HxFZfUTbrZHfmVNt1/vqaLBxMyvs1FhTf0T5G/ahvr8=)
                          8: 326130363a613030343a323030303a3a2f34302d3438203d3e20323134333434.roa (hash: 1D8X9kxUUskGkFIPDvUqS1a+r1AGrrO/CIdMtju/AtY=)
                          9: 326130363a613030343a3130313a3a2f34382d3438203d3e20323134333434.roa (hash: 2NZAbHY13xbv140pN3EL1ABNmOrvc/UVo8YH05InHBs=)
                          10: 326130363a613030343a666666663a3a2f34382d3438203d3e20323134333434.roa (hash: 35yf8q/WF+ftBqPGIIAa3y1w8C8sN/ndAbGwnqOMhUo=)
                          11: 326130363a613030343a666630343a3a2f34382d3438203d3e20323134333434.roa (hash: cTlyMWzn1otKgftLf6wz2nHMNohH5wLQR9+2Ig5i2Mc=)
                          12: 326130363a613030343a376166653a3a2f34382d3438203d3e20323134333434.roa (hash: L2NhANx5wsG7RkkEaUYspESRMYdf/CaWrDA0nOnXnvI=)
                          13: 326130363a613030343a666630333a3a2f34382d3438203d3e20323134333434.roa (hash: VelXelft33k12XYWNbcZyfGji313tB3O+se8Vz2O0Mg=)
                          14: 38352e3135352e3132362e302f32342d3234203d3e20323134333434.roa (hash: 0DB7s9al7RLpxWdRWQkg8WSpwyL2/PIxpLSTvn5HzAI=)
                          15: 326130363a613030343a663130303a3a2f34342d3438203d3e20323134333434.roa (hash: ukEukH98qa55+nHTcDyFZyqm8562MtPrS7Qu8JdsjfE=)
                          16: 3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl (hash: OrCVp4zkASUtWvKgSiMzgw1ZOr/+b7Cr3CM3If2zqu8=)
                          17: 326130363a613030343a666630313a3a2f34382d3438203d3e20323134333434.roa (hash: rj66gGeGCSu6M9bNO1IZ+A5V4bKw807AYT4Qm+efr9k=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5b:bb:23:a9:fb:26:f6:93:d8:9a:58:09:e2:71:53:2e:d2:0f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129
        Validity
            Not Before: Sep 23 16:04:35 2026 GMT
            Not After : Sep 25 07:22:35 2026 GMT
        Subject: CN=72A57BC25CF8C06658FEFA2064CEFEB306CCD743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:d1:7e:87:17:89:cb:d2:dd:c0:c3:0c:b0:
                    77:9e:7b:66:a4:4e:22:7d:f3:ef:a1:23:9d:da:45:
                    4f:12:c2:28:f7:c5:9f:89:c7:e3:b2:27:6c:10:31:
                    ed:33:a3:43:73:a9:35:00:50:f8:40:d5:0e:62:31:
                    50:cb:60:1c:b4:72:3b:0c:e7:00:4f:f4:15:f8:97:
                    f6:58:2f:e5:ce:59:2f:5e:ad:70:d5:e0:69:c1:6b:
                    90:6f:60:e4:63:de:ed:cc:31:b0:e1:41:5b:fc:49:
                    a5:7e:12:e1:5a:12:f3:de:8d:9d:00:90:61:79:88:
                    b9:6f:98:94:90:94:31:f7:f2:46:0c:75:b5:26:ed:
                    02:99:fd:82:d3:b9:de:5d:cd:f1:c6:a6:dc:30:ec:
                    e9:27:35:89:de:1c:f1:da:2f:7c:a1:31:4c:0d:fb:
                    64:80:57:a8:fa:ae:80:44:71:29:12:89:3e:d7:08:
                    48:54:46:99:14:10:5d:0a:22:fb:99:9f:45:64:31:
                    c7:66:38:15:7e:2b:68:64:47:85:f3:68:58:a2:b9:
                    66:74:a0:20:58:31:b9:f8:42:45:b9:78:dd:bc:44:
                    6b:86:4d:a2:8d:c5:fd:4c:51:2e:89:ad:1b:0c:0c:
                    1b:48:57:e3:49:88:bb:57:fb:5f:fe:44:4a:99:a9:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A5:7B:C2:5C:F8:C0:66:58:FE:FA:20:64:CE:FE:B3:06:CC:D7:43
            X509v3 Authority Key Identifier:
                keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d7:c6:94:59:13:83:aa:e3:05:97:42:5a:8f:06:7d:37:ec:
         f5:dd:cd:07:80:cf:7b:43:b9:a0:fc:1f:86:fc:09:f0:0f:16:
         09:b6:68:80:92:27:1f:f9:4a:39:ea:3a:c4:44:90:66:da:a7:
         91:0b:e2:da:6f:79:8e:9e:be:5a:a1:8d:af:89:2e:f8:9e:4f:
         e1:97:3b:1b:08:88:b0:c2:ad:a2:31:91:9e:76:89:b8:bf:3d:
         f1:59:db:9d:c7:78:84:d8:47:a4:8e:3c:ad:ff:6e:a4:4f:7a:
         67:96:b8:72:bb:e2:9e:e8:e1:1d:c7:75:e7:2f:7c:48:9c:9f:
         01:36:53:fb:36:39:f6:7d:35:84:a0:4b:66:6b:fc:45:32:99:
         ef:02:b1:58:99:30:6f:a9:23:04:2f:0b:f1:14:89:c0:6d:9d:
         ac:9f:91:1a:dd:c8:59:1e:d1:cd:85:90:0c:5e:ff:83:6f:0a:
         1d:2e:0a:e2:4a:a6:40:a5:0e:ce:a9:ff:37:95:3b:97:ae:87:
         6a:b3:db:72:fd:0c:7e:a8:34:46:de:75:ce:3c:92:89:39:bc:
         04:8f:83:ae:2e:cb:3e:81:17:32:a7:1d:8a:2e:6c:9e:01:93:
         b6:53:55:4e:92:44:36:3e:46:9b:1a:ee:94:ec:7c:35:ac:b9:
         d5:95:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:57 2026 by rpki-client