Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft
File:                     53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft (raw, json)
Hash identifier:          1zKdlbtLhXlM91Kx0e3QWV/KTF+uKqqCWi361xeGIcg=
Subject key identifier:   EE:64:86:4C:99:8D:B0:9F:62:A4:A9:DE:BD:FF:48:C6:A2:C6:7B:31
Authority key identifier: 53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92
Certificate issuer:       /CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292
Certificate serial:       4DFDB5FDC746B0CC6A2F56B2BF2E60CD6983D136
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft
Manifest number:          3B
Signing time:             Wed 07 Oct 2026 10:47:17 +0000
Manifest this update:     Wed 07 Oct 2026 10:42:17 +0000
Manifest next update:     Thu 08 Oct 2026 11:21:17 +0000
Files and hashes:         1: 326130353a646663363a3a2f33322d3438203d3e20323138393034.roa (hash: 5lbNdPAV2OZdblVdouY1xQHsnMnrbWb9RU2Hlj23tiI=)
                          2: 326130353a646663363a623030623a3a2f34382d3438203d3e20323034343634.roa (hash: 7qaijRAnDO130Uw/r+IdvM3XUs812mn6515r7VTR1c0=)
                          3: 326130353a646663363a636166653a3a2f34382d3438203d3e20323034343634.roa (hash: h+BlZJcH39WSX81B1N6InEzSXSznqGJxM3wZRfE20nY=)
                          4: 53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl (hash: AFpvJ+QJk35hzk5uvYxjaITMGNG0U5J5aORZS46DajA=)
                          5: 38352e3135352e3232372e302f32342d3234203d3e20323138393034.roa (hash: qfTzGyn1Nl6egVGluNuViZeCMzqs0wSyO6mE/CC+VUI=)
                          6: 326130353a646663363a3a2f33322d3438203d3e20313939373436.roa (hash: OtbysRIpUSZzrNDU2rC91LQkafnSJ3qxzRUMD/qfhMg=)
                          7: 38352e3135352e3232362e302f32332d3233203d3e20323034343634.roa (hash: +acmDmMWHtQlMdklcaxLw6taQI5sUlK4TK6h9skpvvE=)
                          8: 326130353a646663363a3a2f33322d3438203d3e20323034343634.roa (hash: B8nf9oQedHxo7Uvn7kFEa7TPHRWtKI8dySGByyx8kYk=)
                          9: 38352e3135352e3232362e302f32342d3234203d3e20323138383332.roa (hash: 1/jkEEeNOnP43ibyNPHAEJgCgm3Ka5HVhVqu++MU1P0=)
                          10: 326130353a646663363a3a2f33322d3438203d3e20323138383332.roa (hash: vkwaYaeWMNC1Ys7GO0AXyPEzVmDAxeBd8udglsBO7ZU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 11:21:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fd:b5:fd:c7:46:b0:cc:6a:2f:56:b2:bf:2e:60:cd:69:83:d1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292
        Validity
            Not Before: Oct  7 10:42:17 2026 GMT
            Not After : Oct  8 11:21:17 2026 GMT
        Subject: CN=EE64864C998DB09F62A4A9DEBDFF48C6A2C67B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:34:8f:f7:19:72:1e:c9:e0:74:97:e2:41:
                    f5:a5:11:c5:53:99:ae:22:51:59:5f:c3:be:1f:76:
                    d6:41:4e:a0:bd:e9:f7:d9:ed:b7:f7:a4:32:16:47:
                    21:bb:ce:14:2b:0c:bb:f2:95:a1:14:f3:bb:b9:6e:
                    68:2d:c4:4a:58:89:a5:69:89:16:9f:6f:3a:7f:a3:
                    1c:84:a3:ff:15:e5:e4:c5:53:3f:d8:46:a2:2a:c9:
                    d4:ee:45:33:00:19:e8:69:f6:fe:d8:59:b5:13:01:
                    a0:a2:59:ae:3b:f6:84:24:c9:19:b5:42:fd:da:24:
                    94:e8:2d:aa:98:6d:f2:0e:24:bb:85:2e:c5:34:da:
                    5f:b3:43:18:3e:13:69:da:59:23:e9:54:44:28:50:
                    7c:fb:e7:45:ac:e7:03:0b:1a:5e:85:d2:cd:a4:90:
                    8d:91:1b:f9:af:29:43:51:2e:90:f4:fd:c3:1b:cd:
                    c5:c7:0d:b6:28:ed:d4:37:50:ba:7c:fe:b8:19:eb:
                    68:95:fa:e9:03:fe:13:08:a5:a5:a4:e9:5d:ce:d6:
                    7a:cf:a7:8f:1c:fd:3b:85:ae:28:e9:60:44:d5:50:
                    8f:c1:10:0c:c5:fa:c2:aa:89:85:be:00:f9:d3:da:
                    65:d0:d1:78:01:8d:2e:9a:6a:84:28:c6:58:af:84:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:64:86:4C:99:8D:B0:9F:62:A4:A9:DE:BD:FF:48:C6:A2:C6:7B:31
            X509v3 Authority Key Identifier:
                keyid:53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0a:a4:f2:32:0d:04:2f:d4:32:e2:c9:8b:77:97:0e:e5:58:
         ac:26:79:f2:c2:a6:a9:9c:38:87:59:82:18:88:47:b1:e6:87:
         5a:1b:08:49:fb:8f:08:dd:5e:c9:27:11:8b:8d:24:9d:44:36:
         54:83:47:1b:da:8e:92:26:20:a8:71:53:15:5c:6c:eb:a6:76:
         f3:82:8e:b0:2d:25:bf:23:2e:3c:6f:9c:67:ec:9a:f5:ed:88:
         a8:b8:74:48:d1:3e:d9:2d:56:cb:48:23:83:2a:b5:8b:0d:4e:
         74:3c:e8:6d:71:e3:08:14:18:c8:fc:86:50:f1:d7:9d:bb:b4:
         7b:83:6d:3c:6b:b9:d8:cc:f4:df:18:da:a8:1c:04:31:27:2b:
         53:d1:54:0e:48:59:18:dd:dc:4d:83:ac:78:52:57:a7:55:24:
         82:f4:59:27:82:a2:62:c8:62:dd:70:cc:ac:1f:77:66:7e:68:
         cf:76:94:c8:67:ef:b8:e4:f6:e1:d5:6d:be:ff:9e:dc:91:2f:
         bb:99:a3:41:76:70:e8:1e:6c:66:f1:7b:a7:f6:32:1d:45:58:
         fd:25:0d:35:07:bf:1d:50:1b:ea:3e:42:b5:a9:94:41:65:96:
         de:e8:53:88:6d:1c:0a:bc:62:e9:bd:7a:70:85:02:27:af:76:
         9f:8d:84:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:16:53 2026 by rpki-client