Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
File:                     D6D172D72D23BAC1F197C131AD720E6E8230B003.mft (raw, json)
Hash identifier:          SwdhwFki+Of1XQqdQT63/9YyxkVWsAXpQdTwLZ+0KMI=
Subject key identifier:   1D:12:CA:7E:CB:51:41:DF:F5:7B:D8:DB:3B:F5:87:D2:9E:AC:D0:D2
Authority key identifier: D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03
Certificate issuer:       /CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
Certificate serial:       674429467266FF4AD6603858C11A820BB767C85F
Authority info access:    rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
Manifest number:          38
Signing time:             Thu 28 May 2026 06:41:18 +0000
Manifest this update:     Thu 28 May 2026 06:36:18 +0000
Manifest next update:     Fri 29 May 2026 06:56:18 +0000
Files and hashes:         1: D6D172D72D23BAC1F197C131AD720E6E8230B003.crl (hash: HasB+jMgxvQsgrHYu7DIKSViKxbVHRpB8ey9m5l/v1U=)
                          2: 323630323a663530633a6330303a3a2f34382d313238203d3e20323035393431.roa (hash: cWyW4xHleqLk84rEzGTR8NRbqNQlRwAtCtLspkb3tV8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 06:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:44:29:46:72:66:ff:4a:d6:60:38:58:c1:1a:82:0b:b7:67:c8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
        Validity
            Not Before: May 28 06:36:18 2026 GMT
            Not After : May 29 06:56:18 2026 GMT
        Subject: CN=1D12CA7ECB5141DFF57BD8DB3BF587D29EACD0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:77:b5:f9:1b:bf:90:37:ea:7d:1d:1b:9f:
                    14:cf:80:a5:ef:c1:f5:61:3a:9e:8c:98:70:46:8a:
                    00:a9:b8:3d:ea:d7:72:80:10:d6:f9:1d:78:f3:7f:
                    41:11:dd:cd:4b:0a:18:1e:ed:50:81:52:82:8c:e2:
                    c1:a0:45:b2:c4:95:60:81:70:9b:55:3e:8b:59:5c:
                    83:a7:fd:72:34:bb:a1:4f:ea:80:ba:b9:09:f0:33:
                    b1:40:38:85:f3:51:47:fd:21:a5:be:b1:1c:21:16:
                    7d:38:1e:a5:a5:29:cf:88:bb:b3:2f:74:f9:70:08:
                    03:dc:32:ef:4b:a9:4b:2e:d0:a5:ee:a5:e6:e2:b0:
                    57:0c:5b:c0:34:aa:5f:d5:32:e8:74:e8:10:86:2c:
                    c4:00:f4:84:a0:b4:8f:81:01:9e:79:24:a9:12:6b:
                    9b:4e:79:2b:61:5d:f4:ad:c4:03:b6:37:86:1e:5c:
                    1d:c1:d9:e1:14:7d:32:d4:ae:12:02:26:20:19:45:
                    85:de:02:a8:81:aa:a4:cc:17:ae:7e:8b:06:93:7d:
                    77:05:8b:64:24:f1:7f:98:2e:cd:d1:68:7c:6b:09:
                    31:f5:7b:2d:e9:73:03:d8:70:fd:03:51:4d:54:6b:
                    27:42:7a:71:f1:75:d6:84:8d:ea:b6:a8:17:51:8e:
                    c2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:12:CA:7E:CB:51:41:DF:F5:7B:D8:DB:3B:F5:87:D2:9E:AC:D0:D2
            X509v3 Authority Key Identifier:
                keyid:D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:18:04:e2:3c:d6:b1:ea:1e:5e:f0:20:e3:7a:25:3b:9a:ef:
         8f:f3:27:ea:23:cb:98:77:13:2c:07:f0:82:98:ec:b8:cf:24:
         ab:e7:21:d8:93:9b:0c:35:3d:1c:69:0b:62:8a:cc:79:6b:e1:
         f0:48:c7:b9:ce:13:2d:c1:32:37:92:fb:f1:95:d9:29:c2:62:
         d5:03:fa:65:c4:8a:4c:83:d9:bd:3a:6a:a1:61:8b:8b:88:d1:
         5a:d9:68:40:ac:43:f4:b8:59:11:12:2d:a6:ca:35:bd:57:bf:
         70:13:7f:0e:2c:d2:f6:4d:e7:30:b6:0f:82:d1:e2:ee:f1:f3:
         dc:93:8d:38:1e:62:48:bc:64:ea:02:4f:8d:7c:78:96:03:b8:
         db:9c:41:9c:ef:65:62:ec:61:91:48:a2:63:54:8c:8e:31:3d:
         5d:6f:b9:d0:fc:29:c2:73:1c:3f:fc:65:e4:8f:68:7a:46:df:
         c2:e0:dc:b7:b3:bf:c6:eb:8a:e1:81:cb:a6:cd:e0:95:da:60:
         f5:72:59:dd:0f:3e:db:40:43:e1:69:d1:b0:4c:bd:30:5d:90:
         eb:9e:79:3a:b6:52:3b:0c:ee:5c:da:0a:1d:94:3e:ed:c0:44:
         41:69:5e:fc:a9:dc:39:a4:60:b5:72:79:7c:be:a4:26:54:bf:
         49:87:56:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 16:02:05 2026 by rpki-client