Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
File:                     D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json)
Hash identifier:          eq0fvoF2jNORxNsPaKA3El+Pwg02whe+i7P1rrK39E0=
Subject key identifier:   74:8B:BB:8B:B1:A3:23:46:54:AE:7C:27:78:B3:59:DD:58:B9:FA:5E
Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
Certificate issuer:       /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Certificate serial:       D81C75AB58FCF2A7472676F997B924F39AEFA3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
Manifest number:          04A3
Signing time:             Thu 05 Mar 2026 01:41:22 +0000
Manifest this update:     Thu 05 Mar 2026 01:36:22 +0000
Manifest next update:     Fri 06 Mar 2026 04:25:22 +0000
Files and hashes:         1: 3139322e37352e3139362e302f32332d3234203d3e203539393933.roa (hash: KNSz4GsVtYNwvMtBZ3CvI93UcAzzIm+CEBGOCv59Ibc=)
                          2: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: Lb+C3YJn54LxtUf0GyCu85JPoRsStAp6WFsAuvX2G+E=)
                          3: 3139322e37352e3139362e302f32332d3234203d3e20323131363635.roa (hash: EY02IPhkI+bUEpVH6oIXpq9tMDByZp2XBlblwJ3ORuk=)
                          4: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: Xa94VPXxaKxQavq41HUhZQOU53EjRewYZdqWNPMbOkI=)
                          5: 3139322e37352e3139372e302f32342d3234203d3e203530323234.roa (hash: XWa1v4ip3kV+r3f119VGt2tZ+jfePtDqCwe/xpwhK0k=)
                          6: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: QdLCci9/dr2q97ypNLrFUgseqzO8q87dh02tZdWrvbc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 04:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d8:1c:75:ab:58:fc:f2:a7:47:26:76:f9:97:b9:24:f3:9a:ef:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
        Validity
            Not Before: Mar  5 01:36:22 2026 GMT
            Not After : Mar  6 04:25:22 2026 GMT
        Subject: CN=748BBB8BB1A3234654AE7C2778B359DD58B9FA5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:4e:d0:09:6c:9c:1b:c0:b5:3f:56:58:31:
                    64:27:83:b3:85:de:e5:3c:52:25:04:3f:4c:7b:e7:
                    07:28:31:c0:b3:78:f6:76:3a:83:b2:e9:62:46:81:
                    0d:04:bf:8c:9f:e3:58:c0:eb:c6:b3:18:e5:80:19:
                    4d:d0:ba:e9:33:55:12:38:ae:ac:08:e8:22:f5:13:
                    6c:90:92:8c:d7:34:f4:6d:7d:b5:7b:33:ce:1e:90:
                    7e:34:3d:46:e6:37:b0:75:0a:d1:7a:6d:32:ec:a8:
                    75:2f:5c:48:53:41:a4:31:94:f9:12:36:a4:49:7e:
                    4f:79:71:17:a9:bf:05:84:be:09:ff:9e:08:5a:3e:
                    79:88:20:77:f9:77:4d:92:2f:1b:05:bf:07:c1:16:
                    36:c2:66:0e:6b:3e:78:38:df:0e:47:1b:94:24:c4:
                    fb:73:62:64:07:f3:2e:30:f9:7d:02:48:f5:64:d7:
                    19:e1:e3:16:84:04:3c:ee:fb:b8:21:3f:14:61:c5:
                    79:7a:b9:d7:9e:11:e5:e7:07:cf:75:c5:0c:37:a4:
                    d3:81:d1:ad:eb:89:62:b2:45:a0:80:71:53:1f:f4:
                    1f:09:01:59:b4:96:a2:27:70:65:46:1e:3a:fd:2b:
                    16:3a:c5:5a:b5:f9:98:76:95:6d:c2:2b:78:e5:54:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8B:BB:8B:B1:A3:23:46:54:AE:7C:27:78:B3:59:DD:58:B9:FA:5E
            X509v3 Authority Key Identifier:
                keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b1:be:dc:6e:47:8d:5b:70:39:94:01:28:2f:b8:53:2a:92:
         b9:a3:f6:73:e1:28:93:b0:55:c8:b8:46:39:b3:ae:fd:e6:d5:
         a5:96:63:23:81:34:ea:47:62:11:ab:b2:1d:8e:fe:a4:96:4c:
         0a:39:84:f0:85:95:ac:66:0c:88:a1:dd:90:d2:d2:b0:e6:ca:
         61:0b:4d:51:97:92:ed:da:0d:e6:ae:e0:6b:af:12:57:ca:c2:
         d1:a6:ca:16:74:b4:70:fe:01:cd:9d:4c:86:01:62:c0:36:97:
         72:f7:f4:49:e7:ee:df:91:42:38:28:bd:63:f8:41:b2:2d:2d:
         8e:c3:fb:dc:c1:90:a3:47:bf:9f:bd:63:f8:56:83:02:80:13:
         21:57:4c:ba:57:cc:ce:9c:f5:88:73:7c:9e:c3:3b:a0:b8:80:
         93:d0:4e:7e:93:ee:67:9b:1c:c7:9f:39:96:16:ee:8e:16:f3:
         6a:3b:5d:8e:06:33:fb:02:e1:63:6d:ce:24:05:61:01:7d:fa:
         b2:03:fc:3a:8d:bb:8b:50:6c:07:58:80:ae:54:bb:87:cb:5d:
         12:58:5e:6c:9b:cb:13:de:09:42:cf:4b:93:d9:fa:d1:c4:23:
         8b:12:fc:b3:b4:bc:b1:26:ea:16:69:d2:08:cf:9a:e6:d6:30:
         c3:a1:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 13:48:46 2026 by rpki-client