Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
File:                     D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft (raw, json)
Hash identifier:          Y1BAm7uHAUnJJbH4Vh2VwgGciRYWNtVyJ54vE+l87JY=
Subject key identifier:   57:15:0C:4D:B9:72:1B:CC:52:A8:F2:F6:09:13:DE:7B:63:49:03:48
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Certificate issuer:       /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial:       36FD4147A78CC0D6CBACE312D401A4661024F230
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
Manifest number:          03F3
Signing time:             Sat 24 Oct 2026 05:50:25 +0000
Manifest this update:     Sat 24 Oct 2026 05:45:25 +0000
Manifest next update:     Sun 25 Oct 2026 09:38:25 +0000
Files and hashes:         1: D36546790928F44FF74C564231471FA1D8D2A97B.cer (hash: kVpdjHlqUkpecVHLJ38vw6Xmz09jsbiEcldhdU/zcpw=)
                          2: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl (hash: 0rhHquraW5ryTTEmPfEdrqlGCU8aV7MW0ZGInK3gvnk=)
                          3: 326130363a313238333a383966303a3a2f34342d313238203d3e20323134303333.roa (hash: 6WFD40vAQLuTuf6auFlSJa8wA9t5Q+NnM26Q2D2tktc=)
                          4: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: 8KHKZ6yYYM4r4ctRfPeSiTlSU7jaEuT/g972q+E+CDU=)
                          5: 326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa (hash: aJxJdeQwMHofslUnDDqMw8h3IFJQNhUeWr0oOm65z48=)
                          6: 326130363a313238333a633131663a3a2f34382d313238203d3e20323131303636.roa (hash: zjVPAhp6+Y0ZXGnryErowWqTSn3vt1Dl/+J+eHpGuAk=)
                          7: 326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa (hash: 4pHWpyVZFpmDYYnCP3t+rPQ/bvOYzNkXDNdwOaC6vs0=)
                          8: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: OHOa8pdQ/+cUDWoy8JYEhdO3yt3e1qfHEUXnAM/72Is=)
                          9: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: v5viufJUSKWuwj+d/Y1XFSYcf+6nXu4aUZj9tnF4HUs=)
                          10: 326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa (hash: PEhenAX2nlmj27r2UpmJddvn+0j+/ZFXnNAuKFs/Dpk=)
                          11: 326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa (hash: XlEJpkX+lkIwk5C+0FGUaa2L01QWuXpXj9eJFPaZWyc=)
                          12: 326130363a313238333a383131303a3a2f34362d313238203d3e20323135313437.roa (hash: b6S80x2wgRrbjnz20BvYv5vIJmicPbI+oJm+svVleIg=)
                          13: 326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa (hash: NFvsPoacApBzdz+FlXYxKS+SrJRRGDFokmaNHzKzBOQ=)
                          14: 326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa (hash: vPzCp2rjo49nQQnT9B2rqDxvXwwh+h9/WPiV7K6IlgQ=)
                          15: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: hcy3Tt1PX+G7kw2+jtkL+x9N9981T+sABXgB4+0IUVY=)
                          16: 326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa (hash: L8Uw37dvp3Z9x8NXJrGGnSNmByuPo6gjafPTmXfheNc=)
                          17: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer (hash: hjMiN5NA4RDFhIFmGTRUJv0QKbxVbSoKkWLb1JxBiHE=)
                          18: B113B31E9F01A2F41870E8C77492B18EBA830E07.cer (hash: dY9YO6OBP4MP/E8JLnAQ8jLu99Fqa8+yWttAesQ43o0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 22:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fd:41:47:a7:8c:c0:d6:cb:ac:e3:12:d4:01:a4:66:10:24:f2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
        Validity
            Not Before: Oct 24 05:45:25 2026 GMT
            Not After : Oct 25 09:38:25 2026 GMT
        Subject: CN=57150C4DB9721BCC52A8F2F60913DE7B63490348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:32:6e:6a:74:cf:9e:66:fa:f4:82:85:ef:59:
                    c6:c9:a7:33:3b:5b:5e:fa:0e:6a:de:46:d0:0b:60:
                    12:00:e6:a6:0a:d1:a9:c4:72:3c:08:bf:cf:b4:8c:
                    b7:1d:34:ce:42:e4:9e:0b:b5:52:51:98:90:62:bf:
                    04:4e:3b:07:67:b5:24:35:94:a8:3b:0a:40:17:ef:
                    af:a5:d1:cd:c6:b1:5a:74:06:04:1a:9c:31:d5:a1:
                    5e:f7:7b:09:09:42:75:6f:17:54:12:2c:ec:aa:b6:
                    57:c8:1b:af:de:ef:43:3f:17:67:bc:82:a2:93:9b:
                    d8:32:f1:97:47:9a:2d:17:da:77:70:2c:0d:e5:32:
                    6e:5d:7a:fa:59:09:2f:ea:31:fa:81:ce:ff:7a:34:
                    66:c5:ca:88:cc:35:02:a6:73:63:e4:25:40:06:e2:
                    ab:13:a4:33:08:1b:61:c1:71:d1:ce:41:83:cd:12:
                    02:76:95:43:22:6c:59:8e:66:c4:c3:1a:96:67:b9:
                    28:77:e6:03:5c:5e:67:bb:60:e3:4a:64:f6:b9:f6:
                    4d:30:39:d3:d9:5b:e4:d8:c6:c1:65:f0:30:05:6a:
                    81:f6:7a:da:af:d3:85:e3:1c:49:7d:01:28:44:2b:
                    ab:bc:c4:51:ec:74:9c:99:d4:a0:b7:a7:68:c0:8b:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:15:0C:4D:B9:72:1B:CC:52:A8:F2:F6:09:13:DE:7B:63:49:03:48
            X509v3 Authority Key Identifier:
                keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:62:73:e2:01:ce:9b:c4:c8:50:31:58:1c:0f:aa:7e:d0:2f:
         79:ae:15:7a:16:c6:bd:bb:92:60:8b:e8:4b:38:6d:06:e9:8f:
         c5:56:ce:a4:19:8d:77:be:ef:fa:2f:03:8c:40:ca:a5:d7:5e:
         10:99:7c:fd:ef:9f:60:32:b0:e2:7e:ca:21:03:97:ee:d9:fa:
         63:c7:59:22:bc:fb:c7:c0:01:6e:94:21:3c:b3:0c:d1:a1:14:
         6f:e5:6d:31:55:b3:b9:75:a1:8d:8f:90:f7:ac:a1:6f:a1:8f:
         75:7a:4c:08:7a:a8:8f:fd:55:de:c8:fc:74:7d:62:50:15:df:
         c3:3c:9e:02:1d:12:1f:b1:ea:2e:01:08:4b:d2:56:25:29:48:
         ad:c2:bd:1d:03:22:4f:33:2c:9d:05:37:69:00:86:ef:7d:ee:
         cd:fd:51:07:5c:67:2a:5a:ae:d3:da:e5:10:ed:46:72:85:ad:
         47:d7:bc:85:f3:82:40:a3:3c:f1:4e:40:0e:e6:b2:bd:07:e0:
         aa:67:d9:d3:09:0f:cb:5d:75:3a:05:f7:00:c8:9d:fc:59:69:
         58:20:b2:0e:4b:d3:1e:0e:e2:64:8b:74:8d:7f:94:a3:53:b4:
         8f:0e:4b:44:e7:07:f6:5d:08:5a:f8:16:60:a9:ea:c9:a5:77:
         e6:6a:f1:73
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUNv1BR6eMwNbLrOMS1AGkZhAk8jAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz
QTdBOEIyQzAeFw0yNjEwMjQwNTQ1MjVaFw0yNjEwMjUwOTM4MjVaMDMxMTAvBgNV
BAMTKDU3MTUwQzREQjk3MjFCQ0M1MkE4RjJGNjA5MTNERTdCNjM0OTAzNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeMm5qdM+eZvr0goXvWcbJpzM7
W176DmreRtALYBIA5qYK0anEcjwIv8+0jLcdNM5C5J4LtVJRmJBivwROOwdntSQ1
lKg7CkAX76+l0c3GsVp0BgQanDHVoV73ewkJQnVvF1QSLOyqtlfIG6/e70M/F2e8
gqKTm9gy8ZdHmi0X2ndwLA3lMm5devpZCS/qMfqBzv96NGbFyojMNQKmc2PkJUAG
4qsTpDMIG2HBcdHOQYPNEgJ2lUMibFmOZsTDGpZnuSh35gNcXme7YONKZPa59k0w
OdPZW+TYxsFl8DAFaoH2etqv04XjHEl9AShEK6u8xFHsdJyZ1KC3p2jAi7JzAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUVxUMTblyG8xSqPL2CRPee2NJA0gwHwYDVR0j
BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz
YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB
MDY0M0NBQzNBN0E4QjJDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82L0Q1NEQ0NDNC
NjdDMUNDNUVBMUI1NDQ2RUEwNjQzQ0FDM0E3QThCMkMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBeYnPi
Ac6bxMhQMVgcD6p+0C95rhV6Fsa9u5Jgi+hLOG0G6Y/FVs6kGY13vu/6LwOMQMql
114QmXz9759gMrDifsohA5fu2fpjx1kivPvHwAFulCE8swzRoRRv5W0xVbO5daGN
j5D3rKFvoY91ekwIeqiP/VXeyPx0fWJQFd/DPJ4CHRIfseouAQhL0lYlKUitwr0d
AyJPMyydBTdpAIbvfe7N/VEHXGcqWq7T2uUQ7UZyha1H17yF84JAozzxTkAO5rK9
B+CqZ9nTCQ/LXXU6BfcAyJ38WWlYILIOS9MeDuJki3SNf5SjU7SPDktE5wf2XQha
+BZgqerJpXfmavFz
-----END CERTIFICATE-----
Generated at Sat Oct 24 11:12:58 2026 by rpki-client