Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
File:                     6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json)
Hash identifier:          6MYtH0oiD1lHRN+WKneFYAfJwTUa8SbtGINbkKdu48U=
Subject key identifier:   FB:68:8D:F3:D0:7B:AC:94:7B:EA:64:CE:E1:05:0E:32:68:68:39:51
Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62
Certificate issuer:       /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
Certificate serial:       54299AB2271714D7538EEBEBF4EE097C4607BC95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
Manifest number:          01A8
Signing time:             Mon 24 Aug 2026 15:25:40 +0000
Manifest this update:     Mon 24 Aug 2026 15:20:40 +0000
Manifest next update:     Tue 25 Aug 2026 16:25:40 +0000
Files and hashes:         1: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: F1YcOIyuuyY/42QNQq/Dycnwaep9UB8JZjEHqfy50XY=)
                          2: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: OI8GOe2+TkBj9rSGei3QzDvWunB1dmRCogAxQNNMVi8=)
                          3: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: VPCifaYotKDxeBBkkXW6HF/0neQ4fTWKc9o0aOWVmJ8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Aug 2026 16:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:29:9a:b2:27:17:14:d7:53:8e:eb:eb:f4:ee:09:7c:46:07:bc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
        Validity
            Not Before: Aug 24 15:20:40 2026 GMT
            Not After : Aug 25 16:25:40 2026 GMT
        Subject: CN=FB688DF3D07BAC947BEA64CEE1050E3268683951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:1a:82:bf:a1:bf:06:ef:c8:a5:1d:9b:71:
                    af:b9:e5:3c:19:30:66:dd:3e:91:b2:9c:2c:45:26:
                    58:7a:b9:16:3a:f9:99:3e:93:9e:9e:10:66:33:90:
                    6d:8e:41:e1:cf:2e:5a:10:0c:1b:6a:7e:87:03:5a:
                    27:86:39:03:a3:78:34:ca:c5:c7:93:7c:3a:8e:89:
                    36:a8:b0:ad:9f:2d:ae:ed:d0:67:4d:dd:61:2c:a2:
                    f9:13:f5:60:d1:8e:4c:74:4d:1e:2c:5a:69:f9:93:
                    fe:69:be:01:62:25:b0:57:a1:6a:8e:a2:a4:90:26:
                    af:9e:c8:f5:95:32:b2:96:f3:fa:be:5a:74:df:2c:
                    00:d5:ec:d1:7b:d6:44:37:ca:2b:fe:f2:9a:47:63:
                    f0:1c:3f:4c:6d:2e:16:b4:41:b3:e2:38:1b:31:1f:
                    55:bd:05:d3:ac:16:3c:ec:0f:61:af:72:61:1c:80:
                    d0:4f:fd:8e:e8:c8:26:0f:dd:a3:96:0e:b4:03:e4:
                    2d:cc:09:68:fb:e7:e6:32:2c:17:d0:87:f6:45:63:
                    66:19:42:26:f8:a1:f1:56:2d:5a:37:95:8f:e0:0b:
                    ec:be:5a:ba:97:f3:45:bd:52:d5:9c:90:5f:cf:83:
                    04:da:07:e2:b1:c3:31:10:10:7f:3d:67:c9:8b:19:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:68:8D:F3:D0:7B:AC:94:7B:EA:64:CE:E1:05:0E:32:68:68:39:51
            X509v3 Authority Key Identifier:
                keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d5:b5:da:b6:85:ca:5b:49:b8:98:76:85:3f:33:fa:b1:76:
         ec:63:24:16:f9:c9:f3:fa:05:a8:e8:f9:67:40:61:a9:15:4d:
         8a:ee:ef:30:7b:7c:8e:d3:1b:b6:f9:d9:93:c4:2f:7f:93:90:
         80:94:f2:99:18:d7:a7:6d:1b:00:59:79:cb:12:e7:cc:83:62:
         ab:7f:78:a2:30:e7:75:4f:dd:18:55:03:10:97:fd:dd:ec:24:
         1c:d7:6f:2d:65:02:fb:0d:26:b4:c9:3e:0e:a0:26:88:3d:f6:
         5a:77:b4:3f:51:a2:18:b8:21:73:07:7c:89:5d:5b:76:d2:fd:
         86:54:10:7f:4e:e5:5e:b1:b3:d3:11:75:f0:9a:b2:c1:85:26:
         8a:8f:1e:91:fe:5b:36:f0:4b:88:db:e7:07:ca:63:76:43:05:
         7e:ca:25:f8:0e:7c:c7:5e:7e:50:e1:98:cb:5e:1b:71:92:9e:
         a5:41:b7:83:5d:05:7a:00:68:e5:e3:8a:5b:5c:b7:a6:c4:6f:
         1b:1d:99:38:cb:13:54:85:e7:2f:36:ef:57:de:6e:1f:09:1a:
         37:03:fc:4f:ff:24:84:c5:da:7f:bd:9f:7e:65:42:1b:1b:d4:
         fa:3c:b2:01:5c:e9:d9:e5:70:42:b9:b0:e2:07:fb:5a:2c:fe:
         29:bb:32:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:13:35 2026 by rpki-client