Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
File:                     2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json)
Hash identifier:          5DgeEZ4ITtyGwNs7mtAAt+KH3a0mCW/9B6up8T9nxHo=
Subject key identifier:   FD:6B:B7:A8:A9:D4:F8:B4:75:1C:F5:D7:84:35:A3:56:3A:68:64:DA
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Certificate issuer:       /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial:       36173FB2155AF0DE6817FA9AF2DA0AB27CC80E29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
Manifest number:          03DD
Signing time:             Wed 25 Mar 2026 07:21:16 +0000
Manifest this update:     Wed 25 Mar 2026 07:16:16 +0000
Manifest next update:     Thu 26 Mar 2026 10:10:16 +0000
Files and hashes:         1: 3139392e3234312e36302e302f32342d3234203d3e203436373636.roa (hash: 4ZYkW/+NAwrD1ELCwQxEXepcoE4Wv3XF1vCdQrX3iE0=)
                          2: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: pN+V7s4jF1ZNty8eqJzrGzC0bcRYTCeTpeSYhInFFdM=)
                          3: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: hfPLPQW0RCv33ma51bvJk8w/CbhypODZthVk4Z+KIYw=)
                          4: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: UAkAddbwt9iFm85K1ELuBkLomLKwc7hMpyyYhhtNJsY=)
                          5: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4WeoHWRvFw0AjbvhEY/m4kAMvgGDc13uyJpzQvCGzG0=)
                          6: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: LYgZcAysAqTVRfiLPXt05OGj2/jQNQyJSA64BahR3p0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:17:3f:b2:15:5a:f0:de:68:17:fa:9a:f2:da:0a:b2:7c:c8:0e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
        Validity
            Not Before: Mar 25 07:16:16 2026 GMT
            Not After : Mar 26 10:10:16 2026 GMT
        Subject: CN=FD6BB7A8A9D4F8B4751CF5D78435A3563A6864DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4d:23:ab:5d:94:ce:4e:e4:80:0c:0d:0e:21:
                    26:1e:f4:a2:2f:72:ca:df:b5:f3:e6:b0:68:15:5b:
                    53:ba:51:c2:5a:56:4a:fd:44:a7:87:95:08:53:44:
                    40:a8:9d:75:5b:8e:f9:01:5a:31:cc:29:27:8b:be:
                    db:f8:33:aa:3b:41:d3:9d:cd:b1:2e:f4:c5:a3:54:
                    17:49:df:e8:f5:89:f9:0e:b1:c1:64:3a:61:39:38:
                    d6:28:ec:d2:2e:04:d5:da:cc:f4:77:a4:32:83:7d:
                    cd:a4:c0:0b:24:28:5c:b9:74:71:dd:60:20:76:8f:
                    5b:84:d2:88:15:ec:6e:ce:df:5e:b1:f4:fc:c9:8d:
                    46:ea:9f:00:0e:8d:2c:ce:48:8b:11:d9:27:93:ac:
                    9d:a0:cf:36:ca:a2:28:e9:0c:2b:0d:71:8d:fc:a2:
                    56:48:75:b5:fb:16:61:af:b9:22:6c:f9:e8:6e:4e:
                    f0:e0:f4:f2:2e:85:7e:9b:46:82:16:ef:e4:cf:ed:
                    5c:47:d5:52:99:a9:c2:5b:be:d5:02:75:a7:0a:97:
                    b8:fe:06:97:76:ba:9c:d4:51:95:c4:e6:d7:28:05:
                    a5:13:10:2d:b2:fb:ba:60:6e:08:b8:0e:fa:3b:5e:
                    24:a4:9f:5b:bb:93:52:81:4d:cf:a6:b7:a6:05:61:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6B:B7:A8:A9:D4:F8:B4:75:1C:F5:D7:84:35:A3:56:3A:68:64:DA
            X509v3 Authority Key Identifier:
                keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3d:f7:5a:71:7e:d1:ea:07:7c:dd:c4:5e:21:0e:09:19:9d:
         95:d1:86:1d:84:7a:71:cd:7a:67:ac:3b:3d:d9:fc:42:fd:3e:
         d2:ff:af:0e:79:d0:f2:52:84:d4:89:73:0d:51:c0:3b:33:7b:
         7d:bf:66:71:09:0d:93:ea:ba:22:c0:85:0f:7f:8f:ef:49:55:
         53:b9:59:01:a3:68:45:0a:c2:f5:91:cc:f6:f2:5b:6f:b1:b8:
         f2:8d:75:08:de:ea:8c:52:d9:36:a5:e3:fc:28:85:8c:c1:7d:
         e1:7b:60:96:ad:12:ee:c3:e4:db:37:21:f3:b7:98:df:a3:bb:
         02:5c:6e:03:ff:27:96:d2:8d:11:0a:eb:b8:7b:23:ba:cf:d1:
         fd:d9:5f:d9:7d:2e:02:75:70:4f:21:de:8e:e6:01:8f:60:28:
         a0:7e:ca:b2:89:66:d2:3e:fb:ad:2e:a2:7f:62:91:be:ac:22:
         06:11:68:9f:92:96:4f:38:71:31:df:18:5a:db:db:18:b5:0d:
         6c:69:85:ba:a7:6b:ed:9c:84:1f:85:e4:a5:60:5a:63:c9:53:
         32:f8:9c:dc:31:c0:c8:3c:25:25:64:62:de:33:cb:f6:d2:7f:
         a0:1d:09:a7:60:8d:e3:17:54:a7:31:c7:30:1e:7a:97:3f:3f:
         2d:ca:a9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:07 2026 by rpki-client