Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
File:                     3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json)
Hash identifier:          n1EfiUNorblIkEs1d3d4iXqJURo39Kh9KIczcOdhXw4=
Subject key identifier:   FA:21:7E:88:70:F4:2D:3A:FA:F8:E9:37:D9:B2:0C:89:61:46:26:1D
Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
Certificate issuer:       /CN=3537F961668E4765578095AB33A4351BB72C9A63
Certificate serial:       6DD2C430164BD5711D9FF464E8675E7CBE225C2E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
Manifest number:          9D
Signing time:             Wed 22 Jul 2026 22:58:07 +0000
Manifest this update:     Wed 22 Jul 2026 22:53:07 +0000
Manifest next update:     Fri 24 Jul 2026 22:58:07 +0000
Files and hashes:         1: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=)
                          2: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=)
                          3: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=)
                          4: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=)
                          5: 326130363a313238323a35303a3a2f34342d313238203d3e20323035383438.roa (hash: OC/TIgS3EUwSF1HOLVrigQUtFIT/Fgbjxz6kNvqUJ94=)
                          6: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=)
                          7: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=)
                          8: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: q5lfRSwfY/V5Cux4ACPiJvb7wNVpfQ1g5pq8L0UxzHM=)
                          9: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=)
                          10: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=)
                          11: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d2:c4:30:16:4b:d5:71:1d:9f:f4:64:e8:67:5e:7c:be:22:5c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63
        Validity
            Not Before: Jul 22 22:53:07 2026 GMT
            Not After : Jul 24 22:58:07 2026 GMT
        Subject: CN=FA217E8870F42D3AFAF8E937D9B20C896146261D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:aa:98:55:c1:28:af:a1:8e:09:d8:44:8f:
                    25:7e:6e:5d:a5:f2:08:68:98:48:cb:56:02:b3:a1:
                    c0:fa:0d:1f:54:f0:a9:d8:6a:ba:0e:fa:b2:a9:c6:
                    2e:03:0f:98:ec:2a:5f:37:03:42:4e:bc:4f:89:45:
                    ca:bf:dc:1f:5d:f9:ca:e0:ba:0e:ad:6f:d8:b3:c5:
                    4b:f4:9e:91:5b:55:de:36:54:23:a1:09:b3:9a:b2:
                    ca:e1:a9:6a:3f:e2:94:46:2c:9c:79:e4:8c:f1:88:
                    8b:e8:e6:35:8f:5e:d7:12:74:4b:b5:85:c2:fe:a2:
                    bb:ad:4c:02:d5:de:14:74:0d:e5:9d:c2:a2:73:73:
                    16:fe:ea:84:eb:18:be:ec:be:cc:24:29:11:27:10:
                    52:26:1a:27:3e:a3:c5:7a:19:0e:ee:dc:9c:3a:a7:
                    f9:a8:73:28:84:2a:ab:ff:9c:e1:64:69:6f:57:d5:
                    9b:33:73:8f:af:3d:3c:89:9a:8f:43:ac:65:99:b2:
                    49:f1:81:2b:37:24:da:c0:1f:59:e8:47:60:f9:3f:
                    d8:49:c5:9c:1b:9e:06:97:79:90:37:50:2d:5b:df:
                    c3:29:ba:75:09:94:15:5f:86:29:4e:f3:0e:1c:46:
                    73:5c:43:65:7e:9f:bf:9d:32:5b:82:4f:cc:9f:ac:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:21:7E:88:70:F4:2D:3A:FA:F8:E9:37:D9:B2:0C:89:61:46:26:1D
            X509v3 Authority Key Identifier:
                keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:db:55:46:bf:5f:12:e0:dc:cb:41:be:98:95:38:14:fe:4e:
         7a:55:99:13:32:b8:79:26:c3:6f:5b:aa:8b:ea:56:64:08:24:
         f0:da:fe:c8:b2:39:25:10:c9:7b:fc:1f:d3:c8:8c:f5:2d:d9:
         f7:c6:b3:16:31:84:3b:01:11:6e:32:da:39:c2:30:9b:52:72:
         d4:a3:96:bd:95:34:29:6f:2b:98:f7:38:35:03:b4:49:76:ec:
         73:37:dd:5c:26:23:39:1a:18:6a:e6:44:ba:33:4a:a0:1a:2e:
         a1:85:1f:c1:69:b6:e6:89:35:bd:94:f7:14:91:c1:8d:34:81:
         20:26:88:70:68:32:b4:d0:dd:c0:cf:0b:a0:08:c0:16:fc:6a:
         4f:95:48:f9:20:76:c3:7f:20:f4:39:7d:1c:f9:18:76:6d:08:
         ba:82:67:f7:f2:c8:72:33:8f:a3:12:03:de:93:66:4f:6f:4c:
         e5:80:f3:07:80:63:c6:a9:1e:80:45:3f:fb:c2:d3:55:6b:88:
         04:5b:9b:38:e9:4e:4b:21:8d:7e:bb:93:ac:80:21:a2:6f:b4:
         bb:40:df:f0:a1:e1:73:65:b6:6e:f2:f0:c2:52:7b:85:7d:ac:
         2f:05:e4:ae:bd:f3:5c:d6:dd:da:01:67:25:db:0a:f8:4b:87:
         9d:50:18:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:29:06 2026 by rpki-client