Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
File:                     D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json)
Hash identifier:          gekcnfA3Xog0DqIjJHrtqV1vj8Zo41YiFKmufB3sfEk=
Subject key identifier:   82:45:DA:AA:8B:61:22:7C:65:1E:6E:96:C6:E1:A3:4A:39:A6:B5:3C
Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B
Certificate issuer:       /CN=D36546790928F44FF74C564231471FA1D8D2A97B
Certificate serial:       172BFDF75834DD3D5B887E5A46DD55676E752B4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
Manifest number:          9C
Signing time:             Wed 04 Mar 2026 21:41:15 +0000
Manifest this update:     Wed 04 Mar 2026 21:36:15 +0000
Manifest next update:     Fri 06 Mar 2026 00:49:15 +0000
Files and hashes:         1: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=)
                          2: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: w3ulJ/wAKPPYc6KYLs/CVxnD2C+EcynvAXvrNCVSfj8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 16:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2b:fd:f7:58:34:dd:3d:5b:88:7e:5a:46:dd:55:67:6e:75:2b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B
        Validity
            Not Before: Mar  4 21:36:15 2026 GMT
            Not After : Mar  6 00:49:15 2026 GMT
        Subject: CN=8245DAAA8B61227C651E6E96C6E1A34A39A6B53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:74:bd:1f:90:28:e4:44:d7:1e:0d:71:3f:
                    f6:aa:c7:c1:f4:37:f3:13:cc:63:01:df:4c:77:2a:
                    6a:33:ac:9d:25:c8:a6:38:98:04:6c:a3:f2:b9:be:
                    c1:59:2c:5f:85:79:0b:e6:bc:2c:50:1a:1b:78:91:
                    67:f0:4e:60:3e:ca:2f:50:7f:29:c3:33:85:f2:99:
                    40:f9:54:1a:0a:07:a9:89:e3:78:9c:a9:56:55:2e:
                    06:f5:25:1a:89:c2:eb:27:c3:4e:ab:80:a6:f1:a5:
                    fc:e6:fb:95:53:ab:01:a7:e2:ff:f3:4f:df:f3:c5:
                    77:7a:68:a0:61:97:35:05:a0:92:80:4a:d8:62:44:
                    d0:90:d0:fc:bc:6e:b6:16:5b:a5:9b:6b:ba:d5:1b:
                    75:09:bc:ba:2c:0b:a9:34:3f:40:2e:cd:31:24:4a:
                    76:14:16:cb:a9:6c:c4:09:d6:55:a6:e9:8c:3d:92:
                    34:28:71:5a:fc:80:ef:5f:eb:09:21:10:34:f8:65:
                    0a:63:41:7c:7c:16:bf:e0:7f:6c:29:33:cf:ab:78:
                    9f:df:33:c6:6d:cd:c0:21:c5:b1:10:34:09:6a:52:
                    0c:55:50:5d:9a:30:5e:dc:e0:18:c1:2a:15:59:c0:
                    9d:b0:ea:af:62:3f:65:75:61:b0:2e:f4:84:09:b7:
                    31:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:45:DA:AA:8B:61:22:7C:65:1E:6E:96:C6:E1:A3:4A:39:A6:B5:3C
            X509v3 Authority Key Identifier:
                keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a4:7e:12:22:62:9f:c4:9e:0d:25:4d:a4:72:79:27:37:c5:
         28:5a:d6:eb:d4:6d:bd:2f:12:54:c8:bf:c9:ae:8e:12:8e:f0:
         11:a3:73:c7:8c:31:1b:e6:68:1e:e2:d0:ae:bc:8a:f7:d1:65:
         5b:c0:a4:a3:96:3f:9f:70:77:89:4a:e8:26:6f:24:9b:e6:24:
         2e:8d:3a:07:f1:8b:c9:39:a9:6b:1c:a1:25:58:c5:18:4a:42:
         ed:da:83:3a:ed:16:3f:4a:8e:da:46:4c:71:5b:9b:c8:a2:00:
         6d:20:1a:29:40:71:1a:94:32:41:f2:d7:d7:f5:a5:53:60:a4:
         35:ea:8c:57:68:6c:93:49:e2:2e:4c:3e:ba:86:0d:b6:8e:ac:
         9a:6b:f8:68:96:e8:92:0b:0e:d6:db:23:e0:63:55:5e:91:9b:
         9d:87:dc:65:68:78:94:0a:95:f0:40:0e:45:6d:81:28:ef:08:
         eb:2a:ad:b1:fe:88:a0:f1:e8:cb:92:21:9a:88:5d:aa:e0:3c:
         a8:74:50:e5:f8:6b:91:af:a9:1c:e5:f4:c2:ae:53:c6:80:fa:
         6b:bd:93:ac:2c:4a:23:2e:38:3f:12:92:3a:77:08:a3:e7:91:
         fa:37:94:5a:4f:a7:2e:b6:0e:29:00:b1:4c:03:5a:40:0f:b4:
         f8:f9:27:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 01:39:34 2026 by rpki-client