Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
File:                     B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json)
Hash identifier:          g4aSfGKa7G7YVKdzqGeYJ+25cQurWxTKL1Tn9auJtyw=
Subject key identifier:   1C:A9:C3:DF:56:F4:25:B8:6A:0B:C0:C9:94:17:F6:86:A2:F1:77:33
Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79
Certificate issuer:       /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679
Certificate serial:       35F3179BBB9CDCF3B4BCA4653B2E47FEFCBC9B78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
Manifest number:          01C5
Signing time:             Thu 04 Jun 2026 06:07:16 +0000
Manifest this update:     Thu 04 Jun 2026 06:02:16 +0000
Manifest next update:     Fri 05 Jun 2026 08:47:16 +0000
Files and hashes:         1: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=)
                          2: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=)
                          3: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=)
                          4: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: ZeaMDm0U8tdVGhZ/WPvPwZKFzPLgA8rdYpJKe682Qrs=)
                          5: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=)
                          6: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 05:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f3:17:9b:bb:9c:dc:f3:b4:bc:a4:65:3b:2e:47:fe:fc:bc:9b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679
        Validity
            Not Before: Jun  4 06:02:16 2026 GMT
            Not After : Jun  5 08:47:16 2026 GMT
        Subject: CN=1CA9C3DF56F425B86A0BC0C99417F686A2F17733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:51:23:62:da:3c:48:fb:8b:02:17:a5:e6:ea:
                    1c:2a:7c:39:27:b8:ef:07:58:77:7b:63:f4:58:e4:
                    3f:3d:8b:03:74:78:b4:50:4b:03:95:cb:15:ca:40:
                    4d:e1:20:00:fe:1d:b6:23:7e:e4:40:d0:55:d5:fa:
                    b5:30:f7:6a:50:63:47:72:7d:3c:66:46:38:d1:f4:
                    e6:2f:21:a4:7e:0c:2b:75:63:fc:6f:b9:2c:dc:db:
                    c1:88:e7:9e:3c:5b:2a:5b:26:98:e3:91:60:18:07:
                    3a:cd:76:a6:8a:8d:83:49:52:4e:f2:66:8c:27:2a:
                    19:73:0c:a3:dc:82:79:33:47:48:07:a9:e4:4e:e6:
                    b9:b6:02:7f:fd:e8:a4:5f:2b:a9:bf:38:76:69:e8:
                    b0:e9:e0:af:f7:ff:ca:61:3e:44:95:6b:2e:89:a0:
                    cd:86:0b:90:f2:c9:2d:84:31:bf:d8:d0:67:a6:5c:
                    f9:fe:81:04:24:90:ed:ab:7c:9d:d5:83:fc:38:6d:
                    bb:32:93:47:65:6a:2d:58:c5:34:3d:41:03:ba:8f:
                    3b:f1:a7:23:1b:19:48:df:e2:ef:37:28:e1:f1:52:
                    44:3f:71:40:df:c2:82:19:16:10:e6:10:cb:3f:63:
                    9a:8e:ed:c7:26:97:6c:1d:17:c5:63:b5:a7:b6:43:
                    4f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A9:C3:DF:56:F4:25:B8:6A:0B:C0:C9:94:17:F6:86:A2:F1:77:33
            X509v3 Authority Key Identifier:
                keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1d:44:43:2a:8a:55:e3:d4:36:07:fd:9a:b8:61:14:12:e0:
         aa:2c:4b:90:f9:f7:ea:77:fe:5d:11:91:d8:e0:01:36:fe:94:
         eb:85:ca:1c:39:21:88:e9:7b:fc:b0:09:b9:3a:f5:19:0c:1f:
         78:9a:3a:8a:b5:2f:94:df:35:24:5b:4b:43:aa:59:2a:70:36:
         07:81:55:b1:bb:2a:f3:2a:c3:80:26:0a:4e:ba:ae:95:ba:44:
         d9:6b:b3:98:12:15:a4:8a:95:3b:54:f7:76:c3:ca:e4:34:bc:
         3e:22:c5:26:93:75:95:64:df:00:75:19:e9:66:84:9d:3b:62:
         94:41:c5:eb:45:23:6b:da:bf:7f:f1:7f:4b:6b:40:59:0a:c9:
         e4:82:17:87:b5:d2:09:7b:33:d9:79:df:33:59:f5:79:a3:2c:
         cd:f0:ef:04:7c:61:b7:a6:ed:18:13:c8:47:a9:34:c5:85:d9:
         e1:9c:f1:8e:e6:69:e0:4e:ce:7c:94:91:5d:de:45:dd:5b:a3:
         63:fd:5c:f0:72:91:4c:23:5a:65:3a:83:15:d5:ab:80:0f:23:
         fd:b4:37:6d:86:38:cf:6b:14:89:c4:81:20:96:10:1a:b9:f3:
         98:a9:67:46:1e:e2:23:7b:ad:c7:ef:c4:c7:76:b4:99:aa:9a:
         ec:ac:64:15
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUNfMXm7uc3PO0vKRlOy5H/vy8m3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy
RkU2MjY3OTAeFw0yNjA2MDQwNjAyMTZaFw0yNjA2MDUwODQ3MTZaMDMxMTAvBgNV
BAMTKDFDQTlDM0RGNTZGNDI1Qjg2QTBCQzBDOTk0MTdGNjg2QTJGMTc3MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUSNi2jxI+4sCF6Xm6hwqfDkn
uO8HWHd7Y/RY5D89iwN0eLRQSwOVyxXKQE3hIAD+HbYjfuRA0FXV+rUw92pQY0dy
fTxmRjjR9OYvIaR+DCt1Y/xvuSzc28GI5548WypbJpjjkWAYBzrNdqaKjYNJUk7y
ZownKhlzDKPcgnkzR0gHqeRO5rm2An/96KRfK6m/OHZp6LDp4K/3/8phPkSVay6J
oM2GC5DyyS2EMb/Y0GemXPn+gQQkkO2rfJ3Vg/w4bbsyk0dlai1YxTQ9QQO6jzvx
pyMbGUjf4u83KOHxUkQ/cUDfwoIZFhDmEMs/Y5qO7ccml2wdF8Vjtae2Q0+VAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUHKnD31b0JbhqC8DJlBf2hqLxdzMwHwYDVR0j
BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1
NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG
ODRENzE0ODJGRTYyNjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8yL0IzRjE3MzdF
OTBGMjQwRDdBQkIzM0M3MkY4NEQ3MTQ4MkZFNjI2NzkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARHURD
KopV49Q2B/2auGEUEuCqLEuQ+ffqd/5dEZHY4AE2/pTrhcocOSGI6Xv8sAm5OvUZ
DB94mjqKtS+U3zUkW0tDqlkqcDYHgVWxuyrzKsOAJgpOuq6VukTZa7OYEhWkipU7
VPd2w8rkNLw+IsUmk3WVZN8AdRnpZoSdO2KUQcXrRSNr2r9/8X9La0BZCsnkgheH
tdIJezPZed8zWfV5oyzN8O8EfGG3pu0YE8hHqTTFhdnhnPGO5mngTs58lJFd3kXd
W6Nj/VzwcpFMI1plOoMV1auADyP9tDdthjjPaxSJxIEglhAaufOYqWdGHuIje63H
78THdrSZqprsrGQV
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:08:20 2026 by rpki-client