Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
File:                     6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json)
Hash identifier:          c2WXtJlr2UJNMQTiiaiSk5nT67umGucD9b85BDTiXRk=
Subject key identifier:   DD:BD:60:50:CC:0C:9B:87:74:ED:B6:F6:B1:F5:30:42:9A:FA:14:6F
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       1DA13A19EF8E6F34F6EC02B239328A51DC319B1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
Manifest number:          04BD
Signing time:             Mon 16 Mar 2026 04:38:02 +0000
Manifest this update:     Mon 16 Mar 2026 04:33:02 +0000
Manifest next update:     Tue 17 Mar 2026 07:48:02 +0000
Files and hashes:         1: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=)
                          2: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: l0s8Kb22dFulopa9sgFLBKs6TC4RwF+NWy86O1HszR4=)
                          3: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ZuqL+fdFsSzEWPLF+KldkjLdFZi3woWq3fujFGdDY0Y=)
                          4: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: b9uDQIv17Mqj0faPNTNtrEIHppsSxn28riugd1hAwe4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Mar 2026 07:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a1:3a:19:ef:8e:6f:34:f6:ec:02:b2:39:32:8a:51:dc:31:9b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Mar 16 04:33:02 2026 GMT
            Not After : Mar 17 07:48:02 2026 GMT
        Subject: CN=DDBD6050CC0C9B8774EDB6F6B1F530429AFA146F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:30:4f:50:66:ed:0b:10:fb:a9:f8:06:44:e1:
                    bc:e3:4b:20:69:26:0e:2d:9c:28:5c:32:40:6a:b1:
                    ed:57:b8:c5:68:d9:79:a0:95:6e:ab:40:76:af:d0:
                    70:a3:0f:be:41:8e:71:8a:19:68:70:fa:dd:1a:0b:
                    bb:40:aa:ff:45:e0:c3:82:de:c5:4c:d4:62:a3:2d:
                    61:74:4c:b9:b3:e4:4b:f0:31:d8:1d:9c:49:9a:6d:
                    00:22:ca:3c:1e:f7:6c:e3:1e:8a:a3:73:7f:cd:56:
                    0d:e4:f8:24:8c:97:ec:54:ce:9a:a6:1d:d4:8a:1b:
                    55:27:0f:3d:83:e7:5a:51:a7:f8:21:12:5a:4e:e6:
                    0a:9f:16:1f:ff:21:4c:71:2a:57:05:f2:5a:58:ff:
                    4a:6e:aa:99:d2:d7:32:8e:2c:83:3b:22:de:5d:f2:
                    1d:eb:fd:0f:75:80:7a:29:f3:af:6a:40:f3:71:09:
                    2c:77:12:22:e9:05:71:6e:3a:3e:de:64:9f:b1:53:
                    5e:2d:37:9c:aa:85:03:ea:90:76:f7:9b:7d:29:6d:
                    88:8c:b6:0f:d2:a5:30:63:21:24:e6:19:cf:61:32:
                    a8:21:4a:c3:13:60:6e:b2:5b:7f:b2:58:5c:89:e3:
                    65:b5:a6:6c:c8:40:f0:c3:4c:b3:46:f6:86:d1:ea:
                    da:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BD:60:50:CC:0C:9B:87:74:ED:B6:F6:B1:F5:30:42:9A:FA:14:6F
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:02:78:a5:71:5f:89:65:a9:48:a6:2d:0c:7c:0a:aa:de:cf:
         a4:7e:4d:4c:ac:59:c4:a8:03:57:b5:aa:50:6c:e4:d0:a8:d5:
         b1:42:1e:f8:de:63:20:de:fd:e3:cd:a7:2a:34:b9:c0:b6:19:
         42:6a:d3:56:f8:00:6e:fc:be:a1:2b:32:c4:02:56:c7:dd:9b:
         64:e4:37:83:cf:38:46:88:3e:ba:4d:6e:28:47:1d:23:14:fd:
         b2:4f:9f:6a:fd:8d:50:53:cb:ac:84:71:2b:32:d8:03:b4:67:
         67:8c:64:44:4f:c5:d6:b7:f9:df:51:9c:15:f2:d8:b7:60:71:
         99:75:0f:3f:0f:2a:b1:11:89:76:01:0d:48:a7:46:da:6a:e8:
         7d:2f:66:0d:04:45:f1:c4:c9:1c:98:37:be:81:d9:a3:36:9e:
         e6:6a:2e:18:75:76:4f:96:3e:ca:ce:7b:d2:2b:81:9e:ec:ee:
         5b:91:b5:d2:1a:c4:fd:aa:00:a5:dc:cd:46:b3:45:1b:2d:ff:
         ed:4e:a6:ee:62:a6:78:21:3d:90:bb:eb:2e:b0:b8:8f:88:b9:
         39:f8:eb:59:8c:fd:84:13:bb:ba:c3:85:8f:13:9e:0b:0d:f6:
         bd:c8:63:12:b5:c9:35:3a:32:43:4b:84:54:01:27:bb:1d:a7:
         bf:e9:7d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 19:37:15 2026 by rpki-client