Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
File:                     6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json)
Hash identifier:          UgGAC4WQp985AdGY5jVwCKO9scPxJum+Cef4K51Byvc=
Subject key identifier:   80:81:CD:AF:33:46:A6:C3:8E:FD:7A:3F:BD:E5:68:3A:B2:39:ED:F5
Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E
Certificate issuer:       /CN=6003354361AF66B2F37153B9A7365EE572F6822E
Certificate serial:       3AEEB1D62933511019505C4E9E73AE53B74991DD
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
Manifest number:          024E
Signing time:             Fri 18 Sep 2026 21:50:42 +0000
Manifest this update:     Fri 18 Sep 2026 21:45:42 +0000
Manifest next update:     Sat 19 Sep 2026 22:58:42 +0000
Files and hashes:         1: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: Me4H7YZgZygEIvpxgeeEc04IMatngbdJsoUf/hlBlAQ=)
                          2: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: NWw/MZTRqkLkEBpmN97c8eB8n++CEogRYlgpDHJPjCI=)
                          3: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: LzTu6U40g1XTezmtW0NeoVe0srZk8dKNtz7kNoofjgM=)
                          4: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: g+zrmwdq6hWdyayuUZ4HEI1hjl4/P26SKw7jOnKO8XQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ee:b1:d6:29:33:51:10:19:50:5c:4e:9e:73:ae:53:b7:49:91:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E
        Validity
            Not Before: Sep 18 21:45:42 2026 GMT
            Not After : Sep 19 22:58:42 2026 GMT
        Subject: CN=8081CDAF3346A6C38EFD7A3FBDE5683AB239EDF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:29:d5:c2:5f:cc:18:7f:d9:a8:5a:3d:80:
                    95:27:de:2d:28:ce:19:be:cd:3b:ac:91:ea:ca:a4:
                    4b:fc:4c:f7:d6:ee:6b:20:e0:52:b9:60:6a:e4:31:
                    1d:83:1c:38:79:30:1f:54:25:f1:f5:10:c2:86:a3:
                    43:38:aa:18:9f:3c:d6:bb:0f:96:4e:d5:ba:33:9b:
                    e4:b7:ae:aa:35:48:65:f1:a9:51:9a:c8:6b:dd:c5:
                    e5:58:de:81:2d:43:fa:d9:48:41:63:9b:1b:21:7e:
                    58:c6:58:77:4d:6b:fc:1b:82:0e:df:44:30:e1:23:
                    ee:72:8d:8b:90:c8:37:93:21:76:24:65:37:e9:ff:
                    7a:3d:4e:a8:39:99:82:5c:b0:d9:88:7a:cc:a5:5b:
                    2d:c8:2b:5f:21:4a:cc:f2:9d:b7:28:37:f8:f6:6a:
                    f0:58:0d:db:f0:27:3f:b7:1f:e2:52:b7:95:13:16:
                    9a:bf:86:e7:64:1c:6a:33:6e:b0:c7:86:a3:65:c6:
                    dc:e4:62:67:4d:bc:c0:5f:27:14:0e:d7:e1:9b:94:
                    33:ea:a5:05:c9:04:96:37:fd:82:48:b7:ac:2c:e5:
                    50:db:79:33:d4:66:35:83:76:a3:7b:5c:20:18:dc:
                    bf:52:62:4b:d4:63:c0:71:76:b1:ab:01:2b:cd:9a:
                    3b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:81:CD:AF:33:46:A6:C3:8E:FD:7A:3F:BD:E5:68:3A:B2:39:ED:F5
            X509v3 Authority Key Identifier:
                keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:25:5b:4c:6c:45:2f:a1:d1:cf:15:ef:71:6e:7c:59:67:db:
         7e:3a:08:ce:11:af:c9:ae:dc:b2:56:b3:b2:17:b6:04:72:dd:
         fa:e9:0d:89:28:44:cd:2a:46:8e:9f:73:2b:16:59:d0:94:87:
         94:19:fe:f7:e6:24:df:1a:76:c8:65:14:28:dd:76:af:e8:20:
         65:80:9a:d7:c7:dd:05:10:f7:90:34:07:82:0d:f8:3c:b1:86:
         24:28:72:bc:d4:27:b7:69:9e:07:1a:8d:3f:9a:d2:cc:84:ea:
         d8:ec:2d:f1:26:09:5d:96:79:49:eb:49:52:79:50:3f:56:88:
         60:35:b4:0c:a2:d1:ff:de:b6:b5:b4:5c:c3:61:42:3b:90:ee:
         d8:26:35:f5:79:f6:23:d2:82:c2:24:b7:6c:81:6d:51:a4:e7:
         bb:11:31:c0:46:f1:01:41:30:5d:4b:60:ba:46:29:d5:63:5f:
         65:c8:ae:b9:e8:e2:a1:64:0b:c5:83:e5:da:77:83:0e:c4:9f:
         8f:b1:4b:ae:c3:e0:af:39:88:c1:32:71:59:bb:6f:70:4b:1a:
         5a:3a:bd:c6:4c:04:6b:a1:ce:15:a7:df:00:35:0c:f8:fe:5f:
         f0:fa:1e:5f:56:3b:30:94:7e:69:cb:c8:3f:fa:ae:c8:1f:61:
         dc:4d:c1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:10:33 2026 by rpki-client