Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
File:                     D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json)
Hash identifier:          91SIFQ9rB+K5DjAtDY+CFkWS0l/BzeVOq2HRbqD6qag=
Subject key identifier:   29:B9:04:2A:F9:65:35:A3:78:C1:C7:88:A5:E1:88:A4:90:7E:42:07
Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
Certificate issuer:       /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Certificate serial:       65436EB9142594110D9A58FB2C67E7A9A7AF3EEB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
Manifest number:          0560
Signing time:             Thu 23 Jul 2026 11:40:24 +0000
Manifest this update:     Thu 23 Jul 2026 11:35:24 +0000
Manifest next update:     Fri 24 Jul 2026 14:10:24 +0000
Files and hashes:         1: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: mO0Vg8JgOG0Dna0OG5r8TDNCK186egN9HsB500UV4Uw=)
                          2: 3139322e37352e3139362e302f32332d3234203d3e203539393933.roa (hash: KNSz4GsVtYNwvMtBZ3CvI93UcAzzIm+CEBGOCv59Ibc=)
                          3: 3139322e37352e3139372e302f32342d3234203d3e203530323234.roa (hash: XWa1v4ip3kV+r3f119VGt2tZ+jfePtDqCwe/xpwhK0k=)
                          4: 3139322e37352e3139362e302f32342d3234203d3e203139363830.roa (hash: yvXeEWRlMmnSNfIrbChtFM+svsvnH2vlOzvMg3QWUIM=)
                          5: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: Xa94VPXxaKxQavq41HUhZQOU53EjRewYZdqWNPMbOkI=)
                          6: 3139322e37352e3139362e302f32332d3234203d3e20323131363635.roa (hash: EY02IPhkI+bUEpVH6oIXpq9tMDByZp2XBlblwJ3ORuk=)
                          7: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: Lb+C3YJn54LxtUf0GyCu85JPoRsStAp6WFsAuvX2G+E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:43:6e:b9:14:25:94:11:0d:9a:58:fb:2c:67:e7:a9:a7:af:3e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
        Validity
            Not Before: Jul 23 11:35:24 2026 GMT
            Not After : Jul 24 14:10:24 2026 GMT
        Subject: CN=29B9042AF96535A378C1C788A5E188A4907E4207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:6d:c3:38:6d:5b:44:c0:20:0a:99:3f:fc:
                    77:c2:f6:49:9f:7f:10:fb:39:68:17:bd:ab:69:07:
                    dc:74:d6:a6:35:7f:90:b2:73:68:eb:6d:68:55:0d:
                    d9:18:34:7c:09:93:27:92:6e:0c:fd:93:82:44:b7:
                    70:b9:35:44:7c:37:42:65:c1:d1:2e:88:eb:a5:9f:
                    8a:7c:48:c0:55:17:42:cb:6a:d2:07:4b:2f:8a:39:
                    68:19:3c:28:a5:4a:e7:76:e1:81:28:27:1d:e4:dd:
                    bd:ec:19:4c:ea:3c:ef:20:55:fd:0e:f2:fb:d1:98:
                    1c:94:d4:4e:62:f5:b3:7c:b7:a0:cf:d4:ed:4e:5e:
                    02:c5:d6:03:d5:a3:4f:26:31:ff:d0:c7:25:fd:b9:
                    3c:79:29:33:45:8c:80:14:11:96:02:70:8d:dc:e4:
                    ad:13:a0:54:62:a8:00:f7:cc:22:f4:a1:b1:96:86:
                    27:b6:39:c3:1f:a5:16:5d:78:0d:72:1f:4e:1c:19:
                    b6:12:c7:cd:ad:56:86:9c:ec:30:60:0f:33:19:2f:
                    3c:ff:cf:28:83:11:f9:37:aa:6c:c8:c9:e3:32:72:
                    58:bd:95:a3:25:52:76:c0:a3:73:c1:26:f3:2b:b7:
                    71:d9:71:3e:de:1f:6f:dc:39:8d:bb:b6:ec:18:7e:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B9:04:2A:F9:65:35:A3:78:C1:C7:88:A5:E1:88:A4:90:7E:42:07
            X509v3 Authority Key Identifier:
                keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:16:2b:e3:58:93:56:a6:e8:69:ff:90:c6:e4:ed:a6:d6:
         9d:67:00:29:44:8d:1c:5a:53:73:6b:59:66:8b:8b:fe:b0:59:
         e1:db:b6:ec:ba:14:22:6c:1a:5e:e7:e2:63:fe:68:d0:4c:19:
         3c:c9:6c:cd:7b:c5:38:58:67:ce:b4:ee:2e:92:66:8a:95:6e:
         95:22:90:d2:7e:10:57:e9:ef:44:e6:10:3f:12:4b:0b:9f:27:
         fe:c5:97:ab:5b:62:8b:d2:32:06:bb:80:e0:62:b4:72:b1:b1:
         d5:57:6f:01:f3:84:42:58:91:c0:77:69:9c:9c:97:7b:5f:1f:
         e5:4e:66:a5:99:7e:74:40:17:57:25:64:44:a9:58:02:41:69:
         8f:7c:ce:a9:46:a0:4d:04:dc:37:81:0c:78:a9:93:94:1c:07:
         22:c6:90:3a:b3:94:0a:e2:97:56:19:4e:ff:03:c1:d0:df:b3:
         09:ba:65:8c:47:50:93:49:f5:58:56:0e:15:bb:ea:a5:11:d5:
         21:22:c4:bb:21:49:00:b9:b2:59:cc:31:11:e6:d6:50:06:fc:
         d0:24:16:da:ce:75:fd:35:f8:d0:cf:39:16:9e:17:a8:52:0e:
         f3:66:62:16:1c:1c:5d:be:88:f4:a5:e6:fc:6e:45:e3:4e:cf:
         23:41:e8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:46 2026 by rpki-client