Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
File:                     D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft (raw, json)
Hash identifier:          tbMleoIYU4KePuJfNRGtTE2VL0XOKoxBsMECtAgv0yg=
Subject key identifier:   05:D9:8F:BC:F3:98:CE:C5:4D:D2:EE:DE:E4:50:BC:3A:D8:AC:3D:1B
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Certificate issuer:       /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial:       36920DEF789F5060CD2883A1059EE4DDADBB3A47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
Manifest number:          036A
Signing time:             Tue 21 Jul 2026 13:29:39 +0000
Manifest this update:     Tue 21 Jul 2026 13:24:39 +0000
Manifest next update:     Wed 22 Jul 2026 17:27:39 +0000
Files and hashes:         1: 326130363a313238333a383966303a3a2f34342d313238203d3e20323134303333.roa (hash: VPyKJTdMnGQqSuzFbkFQ60iQgNT+2pht93oF2htafCQ=)
                          2: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl (hash: MbDwAf4AukS7oBQseFCxvnbIe5NVJRPeFMH7w9UifY4=)
                          3: 326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa (hash: NbESZTGbsnyViyuGLC+8sRHMyf8Ojiq0F9ioTriEM2E=)
                          4: 326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa (hash: ZxaQKtSoKlgJmO3J3XqDtpxRpsMoDdJh04xqfrfCdBY=)
                          5: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: v5viufJUSKWuwj+d/Y1XFSYcf+6nXu4aUZj9tnF4HUs=)
                          6: 326130363a313238333a633131663a3a2f34382d313238203d3e20323131303636.roa (hash: zjVPAhp6+Y0ZXGnryErowWqTSn3vt1Dl/+J+eHpGuAk=)
                          7: B113B31E9F01A2F41870E8C77492B18EBA830E07.cer (hash: dY9YO6OBP4MP/E8JLnAQ8jLu99Fqa8+yWttAesQ43o0=)
                          8: D36546790928F44FF74C564231471FA1D8D2A97B.cer (hash: Yk51yNZZDrc+NxDYYI7+6vxfYJuE5Kc7CvebjeR4bSQ=)
                          9: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: OHOa8pdQ/+cUDWoy8JYEhdO3yt3e1qfHEUXnAM/72Is=)
                          10: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: 8KHKZ6yYYM4r4ctRfPeSiTlSU7jaEuT/g972q+E+CDU=)
                          11: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer (hash: E+mLqx7rEgzkPAUn5rJoLra7vStPRhm9ryAmKBFIvQ0=)
                          12: 326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa (hash: 1Mq7zwNWFVrFO4xAnw5YP+F5xNQQ0SyBjbZkZrxTF84=)
                          13: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: NS2/G+GE49Imka70FRvnrWigl/cu3jsnXcP9mUuT9+I=)
                          14: 326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa (hash: SDzB93ZmXL/9JaeiFrClXOKOMdMaPjQdBjiuTrcER6c=)
                          15: 326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa (hash: huX32HgMgk4Y2C020+tWpyikLyAfVZ2TMuvxXCD12N4=)
                          16: 326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa (hash: w6mEbr64LdAB6p4ChAQnVfiw39Sxb+bv0QiR3+vbqY0=)
                          17: 326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa (hash: 4pHWpyVZFpmDYYnCP3t+rPQ/bvOYzNkXDNdwOaC6vs0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:92:0d:ef:78:9f:50:60:cd:28:83:a1:05:9e:e4:dd:ad:bb:3a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
        Validity
            Not Before: Jul 21 13:24:39 2026 GMT
            Not After : Jul 22 17:27:39 2026 GMT
        Subject: CN=05D98FBCF398CEC54DD2EEDEE450BC3AD8AC3D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e7:65:c3:cc:02:d6:21:bf:d8:65:fd:da:a7:
                    77:1f:a7:17:01:aa:7b:42:06:86:7c:ab:52:7a:3c:
                    07:c5:d3:0d:71:85:b9:4a:db:34:19:31:c9:e2:5c:
                    e9:a0:a1:a4:0a:69:86:66:b9:0c:ca:ea:1b:1b:2f:
                    d0:bf:ce:4e:9e:50:ac:aa:9f:6c:44:a5:3a:3a:cf:
                    e2:af:53:05:5b:d1:e8:ae:c5:84:2e:11:b5:c1:3a:
                    db:49:e4:0a:42:4b:ae:60:81:a7:75:f8:9b:e0:54:
                    fc:82:61:1b:0a:58:07:0f:e0:9b:f4:08:31:c4:c0:
                    d8:08:7f:80:4f:67:38:f5:11:03:b3:0c:5f:0d:b1:
                    e4:98:98:fd:5b:52:26:0c:ef:e3:14:29:ed:bb:9d:
                    e8:29:d0:11:91:82:c2:1c:3e:44:e5:ee:3a:c8:9d:
                    11:c7:9c:7b:33:bf:49:52:28:3a:e3:ed:f5:c9:76:
                    1b:7f:3b:8e:0d:3d:dc:2b:99:14:62:d2:2c:5e:8d:
                    73:bf:95:e3:71:79:36:cc:6d:13:11:4b:64:bd:aa:
                    5f:e6:33:85:db:9a:3e:9b:fb:d8:4d:ac:35:b5:52:
                    1c:3b:38:9d:05:65:a0:c1:72:b1:35:9c:da:1b:95:
                    44:59:2d:db:31:22:37:b0:fa:52:c7:f3:1e:02:6f:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D9:8F:BC:F3:98:CE:C5:4D:D2:EE:DE:E4:50:BC:3A:D8:AC:3D:1B
            X509v3 Authority Key Identifier:
                keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ef:db:cf:b8:97:dd:83:c3:21:43:66:e0:b9:db:ba:4d:bc:
         7e:fa:94:98:4a:f6:93:4a:c2:c8:6a:1d:31:ed:f3:4a:eb:87:
         e4:31:15:24:bc:cb:20:54:3b:f6:bd:ef:e0:75:76:6c:68:e7:
         fe:18:51:f1:fd:01:22:5e:39:73:e5:1b:05:e8:14:2a:3b:9b:
         7b:a2:d7:d9:3c:84:db:f7:50:e3:e2:7e:92:79:06:a2:19:17:
         7a:3f:3d:9e:4f:e3:cf:ee:4f:0a:f5:f2:28:21:46:e2:78:2c:
         70:f6:54:c8:72:60:b1:9b:5f:59:25:09:ac:7a:bc:7a:15:8e:
         02:96:f3:3d:28:81:0b:88:0e:48:f7:c0:14:4b:c3:b2:cb:87:
         f4:fd:1a:81:6e:35:21:fa:5e:e3:09:6f:84:64:9c:71:56:c0:
         94:f5:fc:cb:cf:0b:85:0d:b6:51:f4:10:72:f8:47:f3:82:5d:
         71:ea:2e:6b:18:1d:cf:6c:a6:97:dd:49:15:0d:27:2d:a0:6c:
         c3:4e:64:6c:33:9b:cc:e4:a8:7f:c6:36:51:a7:50:04:37:fb:
         01:6a:06:73:1f:31:17:d5:f5:8c:86:35:a9:5d:37:2e:c8:82:
         eb:66:a8:f9:18:94:90:13:51:8f:f1:16:91:49:28:34:57:ac:
         a1:86:47:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:18:58 2026 by rpki-client