Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
File:                     D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json)
Hash identifier:          pZZGF17P6A1w4BPKIs5VgOsSxhVo2g6qexu5cC73rXQ=
Subject key identifier:   6E:2D:E9:16:CC:69:E8:1C:9C:67:1C:1C:0C:03:27:7E:D5:1E:83:43
Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B
Certificate issuer:       /CN=D36546790928F44FF74C564231471FA1D8D2A97B
Certificate serial:       1CD21457E48D7F6C47C0080AB30B0466D3372B59
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
Manifest number:          0158
Signing time:             Thu 23 Jul 2026 06:09:39 +0000
Manifest this update:     Thu 23 Jul 2026 06:04:39 +0000
Manifest next update:     Fri 24 Jul 2026 07:16:39 +0000
Files and hashes:         1: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: GyymDPQhnVh6sYnWgvgX0jzclMGFrj+3hVB5se8YUFU=)
                          2: 326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa (hash: dEQxNzWGRiNVE6wnRySg0Zjbuji/RIwRR1DUgWYNf80=)
                          3: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 07:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d2:14:57:e4:8d:7f:6c:47:c0:08:0a:b3:0b:04:66:d3:37:2b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B
        Validity
            Not Before: Jul 23 06:04:39 2026 GMT
            Not After : Jul 24 07:16:39 2026 GMT
        Subject: CN=6E2DE916CC69E81C9C671C1C0C03277ED51E8343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:56:49:6a:64:79:b4:6c:ea:78:88:72:d5:
                    0d:0e:c9:c7:88:e3:70:cb:40:72:45:8e:6b:f4:5b:
                    74:60:2d:11:d7:a6:34:05:03:3d:88:12:4d:63:e5:
                    ee:44:8f:d9:fa:59:3e:58:9d:4a:6c:01:6f:8c:48:
                    f7:8e:d2:42:f1:c0:07:61:31:c6:54:62:7b:e0:f4:
                    26:24:85:db:d7:2e:c0:62:a1:0f:a5:98:99:65:84:
                    59:3b:5e:34:9e:87:fa:12:df:d0:d8:79:da:29:30:
                    8e:cb:0e:a0:15:0a:4e:07:9d:82:78:bd:60:2a:95:
                    5b:61:a8:c8:18:b9:db:a8:3d:1d:db:ad:05:68:a8:
                    95:49:77:22:0b:bd:b8:a0:be:e7:49:b8:00:0d:c2:
                    3a:d5:b0:9c:9f:41:a4:32:e6:43:2a:8a:71:85:e1:
                    f2:e2:b9:d4:6f:5a:46:ad:01:8f:41:e5:91:5d:85:
                    33:77:3c:40:83:3b:37:00:5f:fa:7b:94:bb:c1:0f:
                    5b:e3:bf:90:bf:4f:36:5c:0f:45:3e:e7:bc:1c:32:
                    82:81:f5:63:9b:ea:8a:4d:3a:f5:c3:b4:0d:ef:6b:
                    50:f1:c3:cd:81:d9:57:8e:dc:c1:7c:fc:8f:53:c6:
                    44:83:8a:4e:5d:32:c5:a1:ce:bb:96:e8:56:6d:9d:
                    0b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2D:E9:16:CC:69:E8:1C:9C:67:1C:1C:0C:03:27:7E:D5:1E:83:43
            X509v3 Authority Key Identifier:
                keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0c:29:40:a9:50:ef:2e:30:71:7f:df:f5:7f:3b:1b:90:bc:
         b6:dd:83:c1:fd:fb:84:38:37:9a:23:b9:f5:79:a8:02:89:4d:
         9e:eb:da:03:d9:12:ad:9c:5f:b1:00:2d:b1:42:ef:0f:d2:2b:
         87:36:47:69:bf:cc:8b:f7:45:77:49:f3:df:0a:0c:73:b8:a4:
         ca:c9:0c:4a:c0:4e:11:ba:f9:39:4e:62:7b:0b:c0:33:ba:5f:
         2d:fa:e2:83:9c:88:26:db:c7:fb:a8:dd:00:5b:a3:9e:d1:76:
         43:2c:38:0f:e0:68:af:12:df:85:78:38:41:ac:f0:47:30:e3:
         88:d5:bb:d4:cc:81:c0:3e:f7:74:90:b2:73:1d:f8:cd:85:3d:
         0e:2d:bb:77:7b:ad:71:75:04:52:dc:a0:98:c5:13:bd:ef:df:
         e8:f9:aa:c3:f9:88:3d:16:53:0a:72:8b:b5:aa:c4:1e:82:d7:
         50:4f:1d:53:66:a1:59:f9:cc:80:9f:14:a3:61:b0:17:18:3e:
         92:2b:0c:ec:14:18:50:0a:e1:79:f3:db:9c:a2:42:56:c3:bf:
         5a:78:8b:35:e7:98:2c:be:a6:5a:3e:10:39:ac:c7:71:f0:4d:
         11:d1:54:55:4d:ba:2c:e5:0d:f4:1d:29:5f:cc:d6:f3:b1:e6:
         f8:dd:af:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:51 2026 by rpki-client