Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
File:                     3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json)
Hash identifier:          ZtaxiCb95EvE/gVh82Dn7uP8Sq3SphfdvJ1cEM3t8NM=
Subject key identifier:   19:8B:EA:2C:2C:82:32:5F:44:DF:77:A3:A2:CF:F9:75:00:89:09:5D
Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
Certificate issuer:       /CN=3537F961668E4765578095AB33A4351BB72C9A63
Certificate serial:       3DABD869F38F40608C65B41D04FA4CC64713F727
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
Manifest number:          6C
Signing time:             Mon 11 May 2026 16:18:28 +0000
Manifest this update:     Mon 11 May 2026 16:13:28 +0000
Manifest next update:     Wed 13 May 2026 16:18:28 +0000
Files and hashes:         1: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: 6Bm0G6BnQGhQ54y50ft9O3oqlXJZMz6FL8yPFBzbbhQ=)
                          2: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=)
                          3: 326130363a313238323a35303a3a2f34342d313238203d3e20323035383438.roa (hash: OC/TIgS3EUwSF1HOLVrigQUtFIT/Fgbjxz6kNvqUJ94=)
                          4: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=)
                          5: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=)
                          6: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=)
                          7: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=)
                          8: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=)
                          9: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=)
                          10: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=)
                          11: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ab:d8:69:f3:8f:40:60:8c:65:b4:1d:04:fa:4c:c6:47:13:f7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63
        Validity
            Not Before: May 11 16:13:28 2026 GMT
            Not After : May 13 16:18:28 2026 GMT
        Subject: CN=198BEA2C2C82325F44DF77A3A2CFF9750089095D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:85:56:6c:56:bb:91:4a:4a:60:e3:50:09:
                    10:9c:de:03:36:56:d1:51:90:7c:2e:ff:72:76:2d:
                    9b:28:a1:7a:be:c2:79:f9:1b:59:0e:28:ed:79:aa:
                    de:ca:03:a5:05:41:c6:25:c5:05:3c:eb:8e:61:b5:
                    5e:9a:29:cb:5a:a5:ec:f1:11:7e:54:40:ad:03:0f:
                    b5:b0:cd:34:1e:5f:3d:a8:bf:33:bc:4b:6b:2c:ad:
                    72:bd:17:2c:c1:f4:86:e4:c2:4b:e9:38:cd:5a:47:
                    1b:26:8d:0f:3d:a7:8d:b8:9d:3f:df:de:32:36:cd:
                    e6:e0:31:79:ee:85:6e:08:63:93:42:5b:da:4e:2e:
                    0e:f2:c4:3f:a6:3c:09:cb:72:8d:a5:3d:66:2f:e7:
                    49:47:df:14:7a:13:19:d4:5d:bd:c8:8e:89:c1:56:
                    12:18:a2:39:ce:b8:c5:19:11:a2:79:6e:88:50:d6:
                    8b:e7:ae:ad:14:8c:76:22:0e:cd:73:fd:cc:a1:58:
                    e9:98:0a:3f:ae:23:d1:ea:7e:ad:e5:7b:63:54:b8:
                    e3:c7:91:dd:bd:34:1c:e8:bd:08:aa:de:69:d7:e3:
                    45:a1:0c:c2:f9:ff:a7:01:a3:47:6c:fa:0a:35:b4:
                    c4:54:75:28:26:0c:ad:cd:ae:26:46:c0:f0:fb:18:
                    6a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8B:EA:2C:2C:82:32:5F:44:DF:77:A3:A2:CF:F9:75:00:89:09:5D
            X509v3 Authority Key Identifier:
                keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f0:f4:2b:ac:ef:7e:60:b7:e1:58:72:ca:ef:9b:cb:07:e8:
         9d:fd:61:81:73:60:51:84:79:6f:34:22:6c:09:7e:44:92:ae:
         83:4c:67:24:11:4b:d0:9c:1f:49:b1:d5:3a:42:36:1a:d1:66:
         05:41:b5:14:9f:28:0d:33:54:76:d4:14:67:10:62:d7:0f:13:
         ec:47:7a:20:50:f0:9c:3e:4d:3e:05:e2:09:d2:b8:8d:69:14:
         99:24:eb:be:4c:09:44:55:56:e2:1e:3b:51:57:e5:c5:ef:8b:
         24:cf:ad:c5:67:89:aa:46:30:19:0b:3b:8a:ac:86:5e:e5:59:
         fd:31:31:2b:21:35:4d:5b:bb:8d:25:d6:0f:9e:95:ca:b4:06:
         b3:df:e8:8b:a1:2b:a2:11:b0:b5:e9:98:ad:2e:57:f6:d5:b7:
         bc:29:01:f8:af:a6:83:f4:b1:f2:08:5b:89:b8:d1:7b:8a:46:
         8e:50:3c:69:38:76:69:d8:55:dc:9e:fa:c9:8f:20:d5:18:a7:
         ff:ba:f2:66:d1:7b:83:31:4b:21:48:68:4b:58:ca:c5:e5:76:
         ae:a7:6c:84:d5:3c:af:0e:d3:4c:03:c0:9e:e8:bf:d8:22:38:
         42:72:f0:bf:9b:d9:44:f7:ca:d9:26:98:fe:d7:22:db:f3:f2:
         47:81:78:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:01:58 2026 by rpki-client