Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
File:                     D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json)
Hash identifier:          QVpI4HDF7JyJIlsLUGaAo9lwjH2j4r/dQakQaGKlMY0=
Subject key identifier:   34:E3:1E:18:8C:14:2B:CE:4D:A6:1A:F1:83:DE:A3:BE:8D:94:A2:07
Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
Certificate issuer:       /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Certificate serial:       612477C48AC17CF5E66EFC5D7D8AC86C8533F582
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
Manifest number:          0500
Signing time:             Tue 12 May 2026 13:13:42 +0000
Manifest this update:     Tue 12 May 2026 13:08:42 +0000
Manifest next update:     Wed 13 May 2026 14:20:42 +0000
Files and hashes:         1: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: Xa94VPXxaKxQavq41HUhZQOU53EjRewYZdqWNPMbOkI=)
                          2: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: Lb+C3YJn54LxtUf0GyCu85JPoRsStAp6WFsAuvX2G+E=)
                          3: 3139322e37352e3139372e302f32342d3234203d3e203530323234.roa (hash: XWa1v4ip3kV+r3f119VGt2tZ+jfePtDqCwe/xpwhK0k=)
                          4: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: JmJilUihwUu08TYfGSfzL0zfIvIXh8rzI5gS2eIouIg=)
                          5: 3139322e37352e3139362e302f32332d3234203d3e20323131363635.roa (hash: EY02IPhkI+bUEpVH6oIXpq9tMDByZp2XBlblwJ3ORuk=)
                          6: 3139322e37352e3139362e302f32332d3234203d3e203539393933.roa (hash: KNSz4GsVtYNwvMtBZ3CvI93UcAzzIm+CEBGOCv59Ibc=)
                          7: 3139322e37352e3139362e302f32342d3234203d3e203139363830.roa (hash: yvXeEWRlMmnSNfIrbChtFM+svsvnH2vlOzvMg3QWUIM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 14:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:24:77:c4:8a:c1:7c:f5:e6:6e:fc:5d:7d:8a:c8:6c:85:33:f5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
        Validity
            Not Before: May 12 13:08:42 2026 GMT
            Not After : May 13 14:20:42 2026 GMT
        Subject: CN=34E31E188C142BCE4DA61AF183DEA3BE8D94A207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:53:aa:5a:92:46:95:4e:0c:2a:ef:fe:93:
                    e9:58:05:e4:cf:bf:cc:ea:9a:e2:8f:62:2f:be:f6:
                    9b:74:3d:52:c7:b9:f7:c7:16:a9:77:66:01:c6:a3:
                    65:87:a3:b6:55:e3:f5:30:c5:2f:88:4b:e0:a4:b3:
                    f4:3a:ed:5e:76:39:fb:3e:c9:cb:29:07:cc:8f:7f:
                    19:8c:02:3e:4c:79:53:d4:47:ad:58:0a:6d:b9:6d:
                    e7:29:0d:9f:fe:f5:98:1e:f7:39:9f:25:cc:5a:ef:
                    7d:1e:ad:67:91:e9:41:28:53:1c:df:73:2c:fd:a0:
                    c1:1e:c8:3a:63:53:ca:d9:f3:26:2b:a5:34:a9:fd:
                    0e:e9:6a:1e:94:40:cb:3b:56:de:46:a3:c3:93:ab:
                    23:8b:09:66:35:b9:bf:db:e2:6e:73:50:43:c4:98:
                    d6:3a:e9:4e:0e:18:1f:95:c7:76:76:c3:92:d7:85:
                    29:20:b7:51:ce:1c:83:48:b8:74:2b:30:8c:ee:e0:
                    f2:32:5f:e9:3e:07:9a:4e:e5:f4:27:ca:08:0b:2f:
                    3d:14:4d:3f:92:8a:17:39:bc:de:27:8d:d7:1f:bf:
                    10:ac:09:63:a0:b6:5c:91:ee:98:75:e6:7a:84:59:
                    6b:b1:72:ae:92:4d:c5:78:90:c0:63:b3:61:25:cc:
                    0a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E3:1E:18:8C:14:2B:CE:4D:A6:1A:F1:83:DE:A3:BE:8D:94:A2:07
            X509v3 Authority Key Identifier:
                keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:33:76:29:89:6d:08:e0:14:54:bf:89:0f:cb:ac:e6:82:0b:
         bd:15:cd:ee:46:44:7e:8f:d2:bf:81:1b:83:7f:f8:9d:b6:de:
         13:a8:09:12:dd:a3:10:28:b5:3e:87:9c:b3:e1:6d:d3:71:38:
         30:8e:15:82:df:a6:a3:99:9e:3c:b1:de:0d:c4:30:84:fd:3d:
         6b:c2:29:54:48:d3:2e:67:9a:25:58:11:71:ea:ed:d8:d7:ea:
         c8:4e:72:11:0c:4e:df:9b:18:89:84:8a:51:16:9c:1e:85:49:
         f8:17:2a:43:90:fb:6c:0b:d4:cd:6c:ef:37:56:dd:0f:e2:f7:
         ee:c7:23:65:36:dc:68:cf:eb:0a:28:fa:73:e2:10:74:4c:0c:
         6f:cf:e7:a7:04:d9:b5:82:77:f5:d1:76:e6:3b:7b:29:2b:f2:
         c4:6f:42:12:fc:6d:b9:3d:05:a7:58:b4:21:a8:5e:b3:80:b0:
         22:69:d8:83:6c:ce:13:7d:a0:0c:7f:8b:e5:34:03:db:dc:7c:
         ba:7e:15:4a:c5:72:57:71:18:95:3c:f9:f5:19:06:48:85:95:
         a3:e2:a7:b7:57:c3:56:1b:63:fe:53:0f:fb:c1:4f:ee:b4:11:
         64:83:fe:fc:85:b0:2e:f8:f5:69:f7:04:a8:53:ad:61:b7:a3:
         7a:cd:0c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:03:02 2026 by rpki-client