Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
File:                     3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json)
Hash identifier:          NCXlh4zqvoJ06GGVvfS/NFx22Bi4HtJyUZZqSIrO/Sk=
Subject key identifier:   FA:F1:1F:18:1C:75:3A:2F:88:6C:42:3C:B4:FE:6F:89:A6:DC:2A:7C
Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
Certificate issuer:       /CN=3537F961668E4765578095AB33A4351BB72C9A63
Certificate serial:       4D520FF74E707D7D4E7F4C1565EF9C7345E7D98B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
Manifest number:          64
Signing time:             Wed 29 Apr 2026 15:53:28 +0000
Manifest this update:     Wed 29 Apr 2026 15:48:28 +0000
Manifest next update:     Fri 01 May 2026 15:53:28 +0000
Files and hashes:         1: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=)
                          2: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=)
                          3: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=)
                          4: 326130363a313238323a35303a3a2f34342d313238203d3e20323035383438.roa (hash: OC/TIgS3EUwSF1HOLVrigQUtFIT/Fgbjxz6kNvqUJ94=)
                          5: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=)
                          6: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: jCBUaoCPJ+2oe7aTSQHkQfDN2TGP+t02WAGz4kjwpUM=)
                          7: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=)
                          8: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=)
                          9: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=)
                          10: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=)
                          11: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 06:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:52:0f:f7:4e:70:7d:7d:4e:7f:4c:15:65:ef:9c:73:45:e7:d9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63
        Validity
            Not Before: Apr 29 15:48:28 2026 GMT
            Not After : May  1 15:53:28 2026 GMT
        Subject: CN=FAF11F181C753A2F886C423CB4FE6F89A6DC2A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ab:b7:36:09:83:d1:2d:6d:64:f6:6f:76:2b:
                    30:35:41:03:db:27:d7:30:81:95:34:ca:ce:9d:7b:
                    e6:40:5d:75:01:02:40:fa:00:11:6d:49:74:46:bb:
                    ce:49:85:a9:e7:8b:97:a0:a1:f0:bf:9a:58:de:33:
                    97:b9:8a:f1:24:5f:5a:fc:59:12:26:d7:a6:98:a9:
                    0b:70:1a:92:8a:63:2f:c8:fe:f7:68:ab:3c:4b:c6:
                    d3:f3:7b:4e:7d:d8:79:02:19:79:b0:73:64:cb:37:
                    31:72:f0:51:7b:3c:2e:c1:85:7e:31:b9:35:a5:dd:
                    9a:d5:27:d5:b8:4a:06:58:6d:73:fe:66:2c:dc:4d:
                    3d:21:f6:c6:d9:3f:32:10:e1:0c:2d:0b:29:8e:da:
                    ac:a6:91:ab:c7:19:fa:22:3a:35:d7:f0:2a:dc:73:
                    cc:b3:96:4a:a0:69:84:b4:5f:a4:5c:39:67:3f:85:
                    86:8b:9e:d9:de:e7:f4:cf:c8:98:17:f3:d9:07:12:
                    8a:f8:0c:61:ec:e3:51:5e:2c:48:80:41:f4:a5:be:
                    6f:a1:6d:21:82:00:99:e4:22:17:5e:55:d3:5f:57:
                    0a:e6:45:d3:60:ff:3f:eb:13:80:4c:a1:29:89:86:
                    4e:2e:fc:43:07:3c:3a:db:da:a3:57:54:79:39:97:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F1:1F:18:1C:75:3A:2F:88:6C:42:3C:B4:FE:6F:89:A6:DC:2A:7C
            X509v3 Authority Key Identifier:
                keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:64:8d:dc:dd:30:38:f1:36:84:bf:5a:60:02:13:2d:c1:6c:
         2c:f8:8f:dc:da:6a:6f:a5:d5:f4:5d:c6:bd:94:84:da:ab:eb:
         17:15:79:2b:94:4b:d0:e2:a5:56:59:62:0f:65:02:c1:ff:94:
         2b:17:0a:d2:e6:80:66:26:5a:07:2d:2e:b8:bf:c0:34:16:0a:
         b5:da:39:5a:a8:91:1b:05:93:90:6c:ff:c8:66:47:90:5a:bc:
         3d:30:c6:a8:31:a1:61:70:63:5e:50:8b:fc:c0:27:8d:64:27:
         8e:7e:85:1d:1e:64:0a:b8:5f:47:d5:e6:cc:11:82:93:f5:39:
         85:ae:69:33:23:d3:91:c3:e8:e3:20:0d:00:b2:0a:b7:75:1f:
         61:22:48:80:0a:27:f1:06:f1:ae:46:6f:00:91:23:33:a8:3b:
         a6:56:92:c7:c5:79:2b:6d:ff:3a:b8:63:68:94:de:7f:0b:05:
         a1:5e:57:b4:db:61:6d:bb:ee:20:de:36:14:36:94:97:74:30:
         3b:b9:2f:08:e8:03:2e:a5:10:af:9b:b0:67:ff:b2:66:e6:3c:
         aa:21:9b:2a:94:82:ab:7c:ce:52:64:bc:a5:7a:8c:3f:a9:6d:
         d8:c8:31:b6:6f:11:76:db:16:fc:c9:ed:4e:c4:ad:e0:f1:c0:
         35:1e:0a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:45:50 2026 by rpki-client