Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
File:                     D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft (raw, json)
Hash identifier:          YvwYPhmY/yS7cuWMI/FRCh+anU7O/i25bYsAIRp/0Gg=
Subject key identifier:   7C:D0:19:5A:74:24:28:DF:FF:BD:22:E7:45:41:76:8B:EF:E0:31:78
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Certificate issuer:       /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial:       5C8CF9494F65E182BE28CF0CDDA8BFCBB0DCA867
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
Manifest number:          03F0
Signing time:             Thu 22 Oct 2026 02:35:25 +0000
Manifest this update:     Thu 22 Oct 2026 02:30:25 +0000
Manifest next update:     Fri 23 Oct 2026 04:59:25 +0000
Files and hashes:         1: 326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa (hash: 4pHWpyVZFpmDYYnCP3t+rPQ/bvOYzNkXDNdwOaC6vs0=)
                          2: D36546790928F44FF74C564231471FA1D8D2A97B.cer (hash: kVpdjHlqUkpecVHLJ38vw6Xmz09jsbiEcldhdU/zcpw=)
                          3: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer (hash: hjMiN5NA4RDFhIFmGTRUJv0QKbxVbSoKkWLb1JxBiHE=)
                          4: B113B31E9F01A2F41870E8C77492B18EBA830E07.cer (hash: dY9YO6OBP4MP/E8JLnAQ8jLu99Fqa8+yWttAesQ43o0=)
                          5: 326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa (hash: XlEJpkX+lkIwk5C+0FGUaa2L01QWuXpXj9eJFPaZWyc=)
                          6: 326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa (hash: L8Uw37dvp3Z9x8NXJrGGnSNmByuPo6gjafPTmXfheNc=)
                          7: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: 8KHKZ6yYYM4r4ctRfPeSiTlSU7jaEuT/g972q+E+CDU=)
                          8: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl (hash: SGMjq9sOoUGK4Gs75sCZ0OEG7nDhfEu+ACExsigA0ZY=)
                          9: 326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa (hash: NFvsPoacApBzdz+FlXYxKS+SrJRRGDFokmaNHzKzBOQ=)
                          10: 326130363a313238333a383131303a3a2f34362d313238203d3e20323135313437.roa (hash: b6S80x2wgRrbjnz20BvYv5vIJmicPbI+oJm+svVleIg=)
                          11: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: OHOa8pdQ/+cUDWoy8JYEhdO3yt3e1qfHEUXnAM/72Is=)
                          12: 326130363a313238333a383966303a3a2f34342d313238203d3e20323134303333.roa (hash: 6WFD40vAQLuTuf6auFlSJa8wA9t5Q+NnM26Q2D2tktc=)
                          13: 326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa (hash: aJxJdeQwMHofslUnDDqMw8h3IFJQNhUeWr0oOm65z48=)
                          14: 326130363a313238333a633131663a3a2f34382d313238203d3e20323131303636.roa (hash: zjVPAhp6+Y0ZXGnryErowWqTSn3vt1Dl/+J+eHpGuAk=)
                          15: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: v5viufJUSKWuwj+d/Y1XFSYcf+6nXu4aUZj9tnF4HUs=)
                          16: 326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa (hash: vPzCp2rjo49nQQnT9B2rqDxvXwwh+h9/WPiV7K6IlgQ=)
                          17: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: hcy3Tt1PX+G7kw2+jtkL+x9N9981T+sABXgB4+0IUVY=)
                          18: 326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa (hash: PEhenAX2nlmj27r2UpmJddvn+0j+/ZFXnNAuKFs/Dpk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8c:f9:49:4f:65:e1:82:be:28:cf:0c:dd:a8:bf:cb:b0:dc:a8:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
        Validity
            Not Before: Oct 22 02:30:25 2026 GMT
            Not After : Oct 23 04:59:25 2026 GMT
        Subject: CN=7CD0195A742428DFFFBD22E74541768BEFE03178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:5f:40:f2:76:96:bd:9a:04:f7:0e:9d:df:
                    f6:cd:cb:5a:e5:76:e1:e5:54:49:75:4a:05:59:f2:
                    ff:99:c8:85:b9:8f:b8:ea:f1:dc:9a:54:c2:72:d0:
                    ae:43:69:61:44:18:64:b6:1d:4a:71:1e:a1:e3:8b:
                    0d:48:74:3f:e5:6a:3d:de:71:ea:c5:5b:32:ed:98:
                    70:22:cf:c5:6e:f4:29:b2:d5:fb:a9:8f:ab:09:b0:
                    5c:43:c2:7c:a1:39:90:2b:d0:4b:ec:fd:84:99:13:
                    45:ca:a3:5f:34:ca:a1:d4:62:77:75:81:af:76:d2:
                    23:2b:a8:a0:53:0d:ec:4c:ae:48:95:19:aa:87:36:
                    17:59:39:0c:65:1a:cd:0f:f9:1c:0f:3f:98:37:b8:
                    ef:81:33:ee:11:49:38:56:1c:58:36:74:38:b2:f9:
                    35:c9:71:71:4b:53:a4:31:79:53:de:c5:24:22:b6:
                    86:3f:a1:dd:49:6a:dc:38:46:2f:97:af:1e:1b:7f:
                    96:60:e9:57:4b:c3:64:8a:93:b0:7a:13:bf:bc:79:
                    55:92:0f:79:55:84:f5:db:ee:91:fa:d7:2b:9d:7a:
                    61:3c:a1:05:3d:d6:ac:ad:17:91:f1:41:64:88:b4:
                    54:6f:95:ce:9b:fc:0e:20:8c:b2:19:36:d5:c5:67:
                    e2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D0:19:5A:74:24:28:DF:FF:BD:22:E7:45:41:76:8B:EF:E0:31:78
            X509v3 Authority Key Identifier:
                keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:54:90:81:67:24:78:49:37:09:78:a6:de:1f:78:3b:5d:16:
         cd:b3:d6:8a:6b:de:34:0d:57:6b:00:2f:ba:0b:b4:d7:d5:51:
         36:92:c0:0d:ec:7b:13:ac:3c:1d:70:41:96:a4:8e:2e:cd:b7:
         0a:81:ea:73:83:5a:f2:e4:7f:55:de:f4:9c:f7:bc:dc:87:d5:
         7e:d9:ab:75:2c:c3:15:98:90:56:57:03:ac:6f:7c:1f:39:6f:
         a3:cf:88:ef:8e:9e:45:b6:7d:51:94:0d:4f:18:1e:65:85:d1:
         41:d0:22:8a:85:27:d1:9e:5b:56:25:0a:fa:20:42:00:b3:ad:
         61:58:21:37:83:8b:3e:71:de:6e:c3:ca:03:40:d5:58:cf:14:
         8f:a6:53:02:73:0b:32:e4:ef:4c:d3:92:02:a5:38:52:e1:af:
         07:1b:82:d4:49:32:b3:35:44:d0:f3:0b:d8:7f:c1:f6:e8:8a:
         3a:85:0e:a3:82:71:a3:6c:cf:49:0a:ed:b3:2d:68:61:f5:bd:
         0e:1d:ef:89:9c:71:88:20:77:2a:ba:fe:b7:93:69:90:e0:55:
         3d:0f:2e:5a:75:ab:45:d7:d8:63:48:a5:6b:bc:1d:f5:ee:03:
         04:62:27:a9:a5:07:16:3f:f2:0b:09:88:20:48:47:a4:73:af:
         32:d4:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 06:08:16 2026 by rpki-client