Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
File:                     A912092CFA11F378852F52266C793AB678233205.mft (raw, json)
Hash identifier:          chuyeoi/FIgu8cYHorrMDAnQ+nZ3z0qpmVPwhxX7d58=
Subject key identifier:   35:12:61:25:5C:7F:93:F4:93:10:B2:DD:C7:65:E2:EC:7D:2B:DF:E8
Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Certificate issuer:       /CN=A912092CFA11F378852F52266C793AB678233205
Certificate serial:       26328BC604B4786814E766754BE8F40D16E326F8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
Manifest number:          0219
Signing time:             Wed 04 Mar 2026 16:18:30 +0000
Manifest this update:     Wed 04 Mar 2026 16:13:30 +0000
Manifest next update:     Thu 05 Mar 2026 16:37:30 +0000
Files and hashes:         1: 3131312e3233352e3135312e302f32342d3332203d3e20323135313437.roa (hash: vew4LNWCVofm5qe2BK5sopfMvrn3w6T63/5S4aLPNx0=)
                          2: 326130393a353463333a613130343a3a2f34382d313238203d3e20323135313437.roa (hash: mqZWFx8mEs19q6avxgn8ro9WrQffoF4FToEMy+hXzM0=)
                          3: 326130393a353463333a613130323a3a2f34382d313238203d3e20323135313437.roa (hash: vs9kXuBMMWCplaNsRIcMMGKaCF4FLRTK4Bq5jqpLQYc=)
                          4: 326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa (hash: /KjIFlpbNb1VbdyEsAMlwZ6y7EnP5aEMV+JQt9I/CYU=)
                          5: 326130393a353463333a613030303a3a2f34302d313238203d3e20323039383734.roa (hash: ca9GKU5mOXVUfI7Du4XvHpxs7R00F6F4l3yz+1HGWmo=)
                          6: 326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa (hash: m/KS3U1L5fK6/ozUyGVO/HofrXSxDH++GoaQCE6VLqY=)
                          7: 326130393a353463333a613130303a3a2f34382d313238203d3e20323135313437.roa (hash: 5vA7kcahmkhnv7Pjx7uA7TrGRG+XVrMF+mKhb2vEG5U=)
                          8: A912092CFA11F378852F52266C793AB678233205.crl (hash: 2MO/zVh8TKiDxITWH/CXoqdPv0dpj8jXmXiVAFT4VYg=)
                          9: 326130393a353463333a613130313a3a2f34382d313238203d3e20323135313437.roa (hash: 90FGOeqqLptd8qlXcfjJgcF07gJvM1oxc2QmHLuTM1Y=)
                          10: 326130393a353463333a613230303a3a2f34302d313238203d3e20323039383734.roa (hash: bwL4xPqc/uz8Pz2knWoJ8zvpAw8HB5XXWez7oPoDaEI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 14:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:32:8b:c6:04:b4:78:68:14:e7:66:75:4b:e8:f4:0d:16:e3:26:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912092CFA11F378852F52266C793AB678233205
        Validity
            Not Before: Mar  4 16:13:30 2026 GMT
            Not After : Mar  5 16:37:30 2026 GMT
        Subject: CN=351261255C7F93F49310B2DDC765E2EC7D2BDFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:df:63:2c:3e:b8:04:5a:2b:a1:58:47:f1:8d:
                    70:23:a1:65:72:bd:77:a0:44:d0:24:a5:44:7b:00:
                    17:7c:26:15:63:f5:1a:85:04:ac:35:ca:03:5a:a7:
                    d6:54:b0:16:38:e0:bb:10:dd:50:d5:1c:2f:35:f3:
                    48:0b:7a:d3:81:aa:01:45:b3:e0:f0:01:ad:2a:19:
                    27:4e:a3:eb:0e:84:f5:29:68:39:b7:69:fa:61:8a:
                    30:f8:7f:7e:87:28:c5:da:94:0f:d2:d7:08:c6:37:
                    16:37:1b:5c:1b:b1:62:b0:38:56:55:22:da:40:4c:
                    f9:d8:7b:b9:cc:54:2d:b8:10:77:6c:a4:c2:9f:a9:
                    90:9e:ec:0c:fc:62:4b:55:d5:0a:1c:4d:81:55:01:
                    fc:b7:99:c7:1e:93:f5:d2:34:d8:97:ec:02:29:d3:
                    c7:ed:d2:2d:fb:3c:42:a6:aa:26:a7:b2:a7:93:80:
                    e1:03:6e:94:c0:41:8e:f0:0d:ba:ee:36:7b:3d:bf:
                    0e:2b:fb:11:d1:c3:e4:b6:1a:96:5d:72:95:c9:0d:
                    d2:14:60:03:a5:7e:5b:18:68:c0:14:6e:eb:e2:6d:
                    c7:81:19:5e:fd:9b:b0:d2:15:32:1c:eb:9e:e5:be:
                    45:fd:de:67:8e:b1:1a:be:56:a5:d3:25:1c:bc:bf:
                    60:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:12:61:25:5C:7F:93:F4:93:10:B2:DD:C7:65:E2:EC:7D:2B:DF:E8
            X509v3 Authority Key Identifier:
                keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c8:0c:e7:ad:fb:cd:29:17:56:1f:4e:fd:8e:c9:24:bf:0e:
         46:07:8b:b1:ad:7b:15:42:d1:29:fb:e4:7d:35:47:d0:7c:cd:
         6f:53:16:6a:be:7c:e0:aa:b7:8d:0f:64:5c:25:99:88:cd:96:
         7c:4a:0c:86:4d:bb:45:89:95:7d:24:fa:de:3b:c8:b4:76:2d:
         46:d1:55:30:37:d5:56:f3:65:69:fa:9f:97:6d:ef:5e:c8:51:
         27:6c:97:0f:b2:49:67:17:4a:f5:b8:08:9b:9f:a3:eb:48:af:
         b7:8a:6a:b8:2a:c8:96:f9:dd:29:0d:0f:28:59:93:b5:92:ca:
         37:7c:32:d0:72:42:d0:30:c4:90:bb:93:3a:e2:fe:d4:d1:c0:
         ed:f8:a9:0f:bb:1c:0e:67:e2:09:6b:22:3d:b2:b9:ae:d9:1b:
         15:d0:8a:f3:84:a5:d6:80:c6:a3:90:5d:e3:35:ee:6d:01:5a:
         fa:76:be:14:f3:bc:ae:f8:cb:70:2d:b1:4c:10:13:2b:c7:da:
         7f:ec:e0:51:fd:01:57:a7:4b:e4:7f:e6:6b:96:60:0f:cd:b1:
         6a:ed:7a:cb:f5:ea:40:6c:c4:bd:13:3e:86:05:62:f1:49:23:
         1b:8f:16:f8:64:15:4a:c4:70:e5:05:1b:64:04:05:fc:08:2b:
         94:d2:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 18:47:54 2026 by rpki-client