Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
File:                     3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json)
Hash identifier:          FbamEyQfZhMU1alRsNJII+NTs8fLfWKEX9/tCCtpSjE=
Subject key identifier:   1A:6B:E9:12:2E:F8:A8:E5:2C:D0:F0:B5:5D:6D:79:37:6A:08:2A:3A
Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
Certificate issuer:       /CN=3537F961668E4765578095AB33A4351BB72C9A63
Certificate serial:       39AF326B4600122D1DDBBD6AFB210D12C0176E96
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
Manifest number:          C6
Signing time:             Tue 22 Sep 2026 05:33:42 +0000
Manifest this update:     Tue 22 Sep 2026 05:28:42 +0000
Manifest next update:     Thu 24 Sep 2026 05:33:42 +0000
Files and hashes:         1: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=)
                          2: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=)
                          3: 326130363a313238323a35303a3a2f34342d313238203d3e20323035383438.roa (hash: OC/TIgS3EUwSF1HOLVrigQUtFIT/Fgbjxz6kNvqUJ94=)
                          4: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=)
                          5: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=)
                          6: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=)
                          7: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=)
                          8: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=)
                          9: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: VutnD5+SD4u1DCLCqg5FR8PsTJTiDfg1OR7OqtIJAps=)
                          10: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=)
                          11: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 05:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:af:32:6b:46:00:12:2d:1d:db:bd:6a:fb:21:0d:12:c0:17:6e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63
        Validity
            Not Before: Sep 22 05:28:42 2026 GMT
            Not After : Sep 24 05:33:42 2026 GMT
        Subject: CN=1A6BE9122EF8A8E52CD0F0B55D6D79376A082A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:20:57:df:e7:a4:59:0b:ed:be:3a:bc:75:
                    18:44:81:00:48:cb:cf:ea:35:21:40:5d:71:f0:35:
                    43:86:16:f8:39:27:1e:a6:af:9a:38:d4:48:e3:35:
                    60:e8:c7:45:a8:fa:83:d8:0e:30:20:60:50:2e:af:
                    a3:b4:b3:3b:09:00:7d:ed:4e:1b:9a:e4:a5:47:24:
                    35:1d:2e:50:09:3b:1e:a4:23:c5:a7:84:a6:05:f3:
                    0f:54:27:f8:53:06:ac:9c:8a:b8:32:06:bf:64:1f:
                    23:a2:11:b9:e1:b1:ad:1a:79:a7:24:1c:c4:54:0c:
                    4d:78:e9:0c:0f:e7:9c:c6:62:ae:c2:64:fa:94:b6:
                    cc:ba:a4:ad:b0:37:83:0c:0b:dd:c6:05:2f:66:38:
                    e3:07:fc:33:d9:ac:bf:c5:ee:16:d3:ea:54:c2:c6:
                    45:6b:d1:11:0c:be:d2:87:d9:7e:0c:f4:d4:2b:ce:
                    1c:27:d9:43:1d:18:66:ba:eb:6d:d4:a1:5e:73:93:
                    19:fc:74:6c:2a:4e:ac:df:2d:59:93:ae:42:60:77:
                    d4:52:1d:30:45:b8:1a:a6:f8:54:b5:e0:bb:b8:5c:
                    b7:db:20:18:92:7e:5d:b4:2e:20:53:b7:21:e9:da:
                    b3:9f:1e:bf:7e:f6:d2:b8:36:59:61:75:d7:6c:ad:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6B:E9:12:2E:F8:A8:E5:2C:D0:F0:B5:5D:6D:79:37:6A:08:2A:3A
            X509v3 Authority Key Identifier:
                keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:97:85:a6:bc:ab:ec:07:9d:5d:8b:08:7c:e3:c1:d5:a2:d4:
         e5:6d:ae:3b:71:fe:dd:88:11:23:82:04:e3:65:2d:4e:52:de:
         52:e4:e4:4c:18:ed:c8:8a:86:0a:a5:18:0b:18:3f:a8:4e:6a:
         4a:9c:8e:ac:55:bb:fd:bf:c8:80:c3:f0:cc:3c:d1:ba:ed:e6:
         dc:2c:f6:5a:ef:89:c4:7c:fa:a2:4d:0a:73:d1:9c:b8:13:92:
         8e:da:03:e8:cc:30:ba:59:e7:53:c4:e1:5f:30:49:09:3c:32:
         59:41:a8:ca:01:65:a2:ac:da:ad:5d:6f:4e:d2:36:c4:aa:44:
         4e:61:84:cc:28:12:51:33:9f:7c:ec:c9:27:88:f6:3b:2f:aa:
         fc:af:4c:d9:04:a2:5b:83:14:72:3b:87:84:da:1e:da:4f:56:
         ef:1e:89:3c:e7:e5:d0:22:6b:44:e3:78:c8:e5:23:25:d8:0b:
         bb:51:d5:01:13:f7:39:dc:92:d8:93:01:ad:14:39:8a:4f:93:
         fc:e4:1c:89:63:ec:83:5a:94:0c:86:51:95:7f:5a:43:35:87:
         b3:d4:4c:b2:28:4e:4d:42:35:c9:9f:2f:e6:5f:af:2e:9d:48:
         a1:d3:46:6f:97:4c:91:1a:9b:ae:9e:f7:64:eb:26:83:a9:62:
         73:c1:54:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:36:41 2026 by rpki-client