Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
File:                     3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json)
Hash identifier:          pNMewyGlHuFmOdrXvm7p6qoaw4ITOdh7euvaI0Ro2zk=
Subject key identifier:   D4:DA:2C:55:7F:16:A2:8B:A5:46:F0:24:95:F2:58:16:CD:86:63:FC
Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
Certificate issuer:       /CN=3537F961668E4765578095AB33A4351BB72C9A63
Certificate serial:       0E1B94DD93C1FBB9F1F264C17C3838C0DE2951BF
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
Manifest number:          3E
Signing time:             Wed 04 Mar 2026 01:28:04 +0000
Manifest this update:     Wed 04 Mar 2026 01:23:04 +0000
Manifest next update:     Fri 06 Mar 2026 01:28:04 +0000
Files and hashes:         1: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=)
                          2: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=)
                          3: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=)
                          4: 326130363a313238323a35303a3a2f34342d313238203d3e20323035383438.roa (hash: OC/TIgS3EUwSF1HOLVrigQUtFIT/Fgbjxz6kNvqUJ94=)
                          5: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=)
                          6: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=)
                          7: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=)
                          8: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=)
                          9: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: C+/THYStlaIvsg1GTbPf9TwTdf7QAUqrDd3WleS7Ixs=)
                          10: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=)
                          11: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 14:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1b:94:dd:93:c1:fb:b9:f1:f2:64:c1:7c:38:38:c0:de:29:51:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63
        Validity
            Not Before: Mar  4 01:23:04 2026 GMT
            Not After : Mar  6 01:28:04 2026 GMT
        Subject: CN=D4DA2C557F16A28BA546F02495F25816CD8663FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:22:33:ab:8b:30:32:f0:45:da:60:db:57:
                    c3:c9:ab:0e:47:f0:9e:a0:f7:41:6a:8a:99:b8:c7:
                    4d:74:bc:03:64:0f:83:36:73:7a:d5:7d:c7:f5:0b:
                    36:ba:31:d2:b7:2d:85:5c:23:66:97:75:a7:0a:a1:
                    0d:80:b6:7d:ae:0c:cb:78:68:d2:23:75:cd:a2:be:
                    8f:19:f2:2c:46:23:5c:04:0f:dc:b8:92:cd:79:3e:
                    82:a0:83:38:fd:c7:a7:00:fb:70:33:5e:3a:00:33:
                    45:29:63:48:a2:71:a1:36:b4:35:90:ff:fc:0b:7b:
                    4f:9c:73:a9:ae:25:de:3b:22:d4:95:1e:a7:bb:97:
                    b2:d1:1b:79:d8:73:e2:83:af:33:c0:9e:93:15:69:
                    0a:b6:bf:d1:2e:68:f9:c2:84:c2:d5:ed:7c:8b:0a:
                    27:53:6e:20:94:82:87:b2:55:4f:8c:6b:c3:91:9c:
                    71:b3:40:46:d2:6b:f4:4d:c1:dd:b4:99:27:2d:36:
                    3f:58:41:50:79:11:1b:73:2b:7a:2c:ff:da:ae:bc:
                    01:29:ed:43:33:fd:14:2e:7c:36:9b:1a:10:5c:53:
                    40:f9:d8:0f:64:88:ba:28:08:7c:2d:5c:bc:5a:52:
                    9e:81:a6:54:24:f0:7c:f6:4f:ea:27:26:5d:ba:f5:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DA:2C:55:7F:16:A2:8B:A5:46:F0:24:95:F2:58:16:CD:86:63:FC
            X509v3 Authority Key Identifier:
                keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4d:da:bb:65:00:fa:4a:33:bb:42:14:d8:9c:53:ed:20:aa:
         b1:ca:65:b9:70:8a:50:0e:6e:98:56:61:8a:aa:74:ef:b9:ea:
         1b:f3:6a:6b:14:e0:41:1b:5d:62:71:ed:b9:c4:96:0a:42:f5:
         df:79:d5:05:67:dd:8c:c1:33:88:cc:f5:99:24:e1:27:f8:f9:
         09:52:b3:ab:78:e9:52:e7:46:e1:1d:2c:2a:0f:4b:32:c0:08:
         ec:45:61:18:8c:be:08:0d:65:bc:60:fb:e3:bf:dc:ed:db:38:
         55:26:22:79:be:a3:f4:b9:53:c6:ac:49:73:f5:7f:75:0e:a6:
         5a:ad:57:03:d6:ca:4d:f1:fc:0d:ff:27:29:ee:06:7b:bc:82:
         2d:0c:c6:1d:5d:94:5a:98:9b:c5:b2:98:a0:dd:d8:de:8b:3c:
         b3:e5:a7:e6:17:05:a6:9a:99:02:87:83:49:5e:dc:31:44:aa:
         a5:1c:1e:03:12:fc:a3:2f:4d:b6:19:98:d5:9e:67:16:99:9a:
         06:80:91:5c:6c:79:85:1c:5f:ed:a1:80:db:04:3a:60:e2:a0:
         36:83:c0:28:a2:9b:e4:d8:bd:1c:a0:25:de:28:a9:4f:a2:05:
         70:d3:ec:dd:22:96:43:92:74:b5:b5:67:43:dd:9e:0c:61:a4:
         c7:f6:d9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:04:22 2026 by rpki-client