Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
File:                     D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json)
Hash identifier:          ++JuBKi4vR33fMn8CQQdrq5vCh2+0eXAUOtsxkrN6WU=
Subject key identifier:   2D:6B:B4:95:D6:8D:F7:FD:C3:35:70:E3:B1:CC:7E:26:C6:DB:6D:06
Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B
Certificate issuer:       /CN=D36546790928F44FF74C564231471FA1D8D2A97B
Certificate serial:       3FBC1961C5BF36AFE07D2E6CB0AB174D79BC4693
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
Manifest number:          01B0
Signing time:             Sun 27 Sep 2026 16:40:03 +0000
Manifest this update:     Sun 27 Sep 2026 16:35:03 +0000
Manifest next update:     Mon 28 Sep 2026 20:06:03 +0000
Files and hashes:         1: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: JAclb+xoH2Q6JDKWc8GlT+/Jynw3j6haQIY5XOcgbCQ=)
                          2: 326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa (hash: dEQxNzWGRiNVE6wnRySg0Zjbuji/RIwRR1DUgWYNf80=)
                          3: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 18:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bc:19:61:c5:bf:36:af:e0:7d:2e:6c:b0:ab:17:4d:79:bc:46:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B
        Validity
            Not Before: Sep 27 16:35:03 2026 GMT
            Not After : Sep 28 20:06:03 2026 GMT
        Subject: CN=2D6BB495D68DF7FDC33570E3B1CC7E26C6DB6D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:15:db:44:e3:bd:04:c9:2e:f0:81:57:3b:
                    21:88:8c:8f:1b:23:42:3b:70:ef:da:2a:12:d7:d4:
                    31:08:8d:4f:14:7e:91:11:8e:19:66:b0:d4:43:3a:
                    84:2c:35:d4:46:7e:44:60:e9:ed:06:64:08:79:01:
                    a3:fa:4e:68:45:41:f1:2e:7f:f2:4f:4d:35:34:7f:
                    5d:91:7a:8e:91:22:eb:e8:6c:dd:54:c9:cf:5f:f3:
                    90:d9:64:05:38:01:56:a2:89:aa:37:47:30:db:73:
                    01:d0:a1:e2:fd:2c:82:6a:00:f4:3f:09:11:0c:7a:
                    2c:17:25:b6:d1:79:3a:2b:c4:a2:77:c8:72:f9:6b:
                    c4:d8:53:24:e7:0a:fe:6a:86:4f:15:4b:4e:f1:15:
                    3b:84:d8:f9:f5:cb:b0:ca:64:17:c6:a1:b5:8b:5f:
                    1c:31:05:3d:67:d8:0d:f4:8a:ea:66:56:3e:99:b7:
                    f2:aa:9a:47:5b:bb:fa:80:7e:3f:c9:82:5d:d1:91:
                    4f:88:f0:0c:59:63:83:7b:88:26:5e:f8:a6:81:a4:
                    e6:f4:03:1b:c9:d3:92:b3:f5:9b:76:12:c9:fa:c9:
                    a2:af:87:de:89:ee:2d:ad:49:b9:e8:04:c1:cf:26:
                    d1:95:2e:79:c2:96:3f:2e:e2:4b:49:67:37:c1:86:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6B:B4:95:D6:8D:F7:FD:C3:35:70:E3:B1:CC:7E:26:C6:DB:6D:06
            X509v3 Authority Key Identifier:
                keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2f:bb:6b:74:70:6e:40:e1:63:11:4e:86:25:24:c7:64:dd:
         53:3d:9e:b7:05:d2:ff:59:c4:f1:81:17:96:5a:7d:3f:a1:f1:
         e3:d3:bb:31:48:c8:f9:f4:f6:f5:df:dd:4d:cc:f3:27:d9:bb:
         55:d0:b8:18:59:4a:1e:ef:9a:1c:57:99:42:ec:55:0f:6d:fc:
         9c:c8:7d:9a:27:6a:c8:88:59:ad:c4:76:c5:0d:73:b2:f7:a4:
         14:9f:9f:3d:8c:6b:3a:ef:68:8b:e7:a5:b0:8c:69:1a:e7:ea:
         94:5d:bd:dd:3c:47:c8:05:64:80:38:99:b9:15:3c:73:3c:77:
         f7:d0:45:09:57:32:b2:ac:88:eb:40:42:96:0b:b6:1d:bf:5e:
         80:cc:39:0f:65:6b:41:44:26:40:8e:38:71:42:b2:ff:f2:3f:
         b2:13:e4:c3:ae:a3:2b:64:de:f7:22:c5:39:14:6c:c8:2f:3d:
         0f:76:43:1d:02:d4:d7:8c:4d:27:27:1e:6c:88:f7:9f:bc:58:
         fb:eb:8a:36:77:67:2b:70:5f:f6:0f:22:1c:3d:55:8f:46:49:
         cd:4b:ed:2f:46:8d:fc:6b:df:9f:c2:14:e1:ec:2e:21:a9:59:
         c6:8d:75:83:a0:51:cc:7b:70:e8:94:71:5a:5c:34:b5:2c:37:
         a7:aa:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:35:08 2026 by rpki-client