Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
File:                     3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json)
Hash identifier:          dy6337mBdL08ayg0gjGRcBvFHg1hXZiVz3VdjzeaoZI=
Subject key identifier:   01:86:31:77:A6:66:12:A4:74:6B:6D:88:8A:32:3A:D4:6D:90:E8:71
Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
Certificate issuer:       /CN=3537F961668E4765578095AB33A4351BB72C9A63
Certificate serial:       51694BA91C7BD7588AF2A6704B28615EABCA90DC
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
Manifest number:          D0
Signing time:             Wed 07 Oct 2026 05:58:42 +0000
Manifest this update:     Wed 07 Oct 2026 05:53:42 +0000
Manifest next update:     Fri 09 Oct 2026 05:58:42 +0000
Files and hashes:         1: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=)
                          2: 326130363a313238323a35303a3a2f34342d313238203d3e20323035383438.roa (hash: OC/TIgS3EUwSF1HOLVrigQUtFIT/Fgbjxz6kNvqUJ94=)
                          3: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=)
                          4: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=)
                          5: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=)
                          6: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=)
                          7: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=)
                          8: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=)
                          9: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=)
                          10: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=)
                          11: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: DqKTnfBzALS1QyFRidRdwSZRdO8uK9xpe4Ow3+3j1o0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 05:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:69:4b:a9:1c:7b:d7:58:8a:f2:a6:70:4b:28:61:5e:ab:ca:90:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63
        Validity
            Not Before: Oct  7 05:53:42 2026 GMT
            Not After : Oct  9 05:58:42 2026 GMT
        Subject: CN=01863177A66612A4746B6D888A323AD46D90E871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:0b:ac:bc:a1:9e:fd:d7:49:bc:af:85:45:
                    8b:50:a1:f4:ad:ff:e7:2f:e3:88:24:75:0d:cd:d9:
                    c2:3b:40:4d:f8:aa:14:54:f3:51:69:ec:5c:e2:2f:
                    15:8e:72:7e:b8:50:e0:3d:e0:8e:93:a2:29:4b:f2:
                    9d:65:3a:71:cb:1e:b0:99:14:25:72:6c:37:49:42:
                    45:08:e4:fb:5e:ad:46:cb:3b:89:7c:62:17:74:23:
                    7d:f1:40:1c:13:40:5e:85:e3:60:d2:bd:2c:73:c8:
                    c4:52:c0:10:fe:f1:ad:20:24:5e:a0:4e:54:b8:6d:
                    78:d7:61:3e:12:b6:a3:09:8c:ca:58:ab:5f:e1:7d:
                    ea:1c:58:a4:8d:85:78:f0:41:13:3c:63:69:6f:56:
                    af:e1:16:95:f9:82:98:b5:43:87:1d:21:f4:9b:0a:
                    e8:b4:2a:6c:07:76:8e:7f:6e:67:eb:e3:7d:bb:db:
                    c9:f8:b0:f3:79:51:a8:fb:ac:68:2f:5e:50:e1:94:
                    f1:bd:8e:67:d3:c0:70:73:f8:4c:b0:70:44:2f:34:
                    cc:3c:e9:65:19:a1:f7:ef:a2:af:e8:b1:73:46:dc:
                    dc:d2:89:f9:80:d0:a1:89:58:11:bc:1b:17:06:94:
                    9f:c7:1c:15:b4:c0:d9:4c:55:e3:b4:54:4f:4b:14:
                    78:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:86:31:77:A6:66:12:A4:74:6B:6D:88:8A:32:3A:D4:6D:90:E8:71
            X509v3 Authority Key Identifier:
                keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:72:1a:75:92:11:89:3f:7f:d7:a4:9d:46:e4:29:6e:0a:0d:
         48:55:e6:b3:34:6c:c0:0e:c1:4c:ad:c9:f5:67:76:7b:f6:35:
         5b:44:e5:6d:67:91:d3:ee:88:40:f4:f9:17:fd:28:60:ee:d8:
         69:39:99:4d:ed:54:79:98:c3:05:c1:f6:2c:73:3b:ea:9c:99:
         a9:9e:93:e7:17:f6:94:0c:8e:99:2d:80:31:47:47:09:2a:fc:
         f2:88:40:89:30:ca:4d:a5:04:1a:a5:05:9c:a7:15:d5:4a:d2:
         f0:81:39:f6:d7:34:a3:77:89:16:34:01:98:2b:9e:88:38:72:
         48:7d:73:c1:c4:48:c1:ac:3e:1e:2b:73:58:f2:c9:53:ca:ea:
         53:0a:a8:94:e3:14:98:6b:36:8e:db:ae:33:3f:1c:31:fd:4d:
         9c:a3:22:50:06:3e:95:87:93:64:f6:d4:01:44:de:b4:92:36:
         fb:08:ab:90:7b:dd:d7:7e:9b:bf:c2:bb:24:6f:f5:75:3f:2d:
         16:51:5e:0b:b1:0a:20:2d:77:63:da:a3:e0:57:ac:d2:10:0a:
         b6:6b:9e:53:6b:f4:52:d0:44:8b:8c:22:dc:93:2d:39:00:d7:
         81:66:62:c6:97:ec:b3:55:04:b6:de:8a:29:80:83:1c:05:f0:
         6b:e8:b4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:32:01 2026 by rpki-client