Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
File:                     2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json)
Hash identifier:          AL3e1lF2HFwsTkhJluPuZLPz8w6vTSBvBB2TKHeCfiI=
Subject key identifier:   BA:AC:24:83:CF:4F:1B:DC:11:5B:7E:1B:44:3A:29:50:4E:1A:66:04
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Certificate issuer:       /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial:       77174601F4ABAB7F8654B26AFD0E1A20DE0B2AB0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
Manifest number:          03F8
Signing time:             Tue 14 Apr 2026 22:39:18 +0000
Manifest this update:     Tue 14 Apr 2026 22:34:18 +0000
Manifest next update:     Wed 15 Apr 2026 22:48:18 +0000
Files and hashes:         1: 3139392e3234312e36302e302f32342d3234203d3e203436373636.roa (hash: 4ZYkW/+NAwrD1ELCwQxEXepcoE4Wv3XF1vCdQrX3iE0=)
                          2: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: UAkAddbwt9iFm85K1ELuBkLomLKwc7hMpyyYhhtNJsY=)
                          3: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: hfPLPQW0RCv33ma51bvJk8w/CbhypODZthVk4Z+KIYw=)
                          4: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: OjHPIICPyVbfIBlYNuO+z73DdT1mDzhfg+JOFe+rCO0=)
                          5: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4WeoHWRvFw0AjbvhEY/m4kAMvgGDc13uyJpzQvCGzG0=)
                          6: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: LYgZcAysAqTVRfiLPXt05OGj2/jQNQyJSA64BahR3p0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 22:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:17:46:01:f4:ab:ab:7f:86:54:b2:6a:fd:0e:1a:20:de:0b:2a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
        Validity
            Not Before: Apr 14 22:34:18 2026 GMT
            Not After : Apr 15 22:48:18 2026 GMT
        Subject: CN=BAAC2483CF4F1BDC115B7E1B443A29504E1A6604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:6c:de:d1:5d:e6:19:6f:58:38:bb:a1:02:
                    dc:c7:4a:e6:7f:fc:9d:a0:db:23:ad:d6:53:a5:ea:
                    b1:34:e4:51:8a:f9:57:f2:d8:2b:bb:a7:b8:d2:e0:
                    73:4a:9a:9f:7c:df:4d:87:75:68:e1:1c:76:0e:84:
                    1f:4a:cf:b9:67:bd:80:ec:1d:6f:f0:92:8c:a7:54:
                    cd:f4:23:55:71:54:a2:d9:ec:88:15:17:58:d9:09:
                    52:24:ae:ae:32:27:96:6d:4f:cd:de:82:a1:a2:43:
                    84:e6:a8:56:a9:d7:48:eb:15:bf:0e:c0:c1:45:92:
                    6e:d1:f6:ac:4a:0c:0f:49:a7:4e:b0:9a:18:65:2b:
                    fe:de:85:40:05:af:ab:ab:ac:08:91:fa:92:0e:5c:
                    3f:b8:24:d2:e0:4a:f5:77:fa:d3:02:09:90:73:65:
                    13:ac:78:29:bc:cd:5e:ca:1a:8b:aa:e4:76:7b:c1:
                    ff:c8:83:19:ac:8f:dd:99:b7:93:de:6e:91:6b:8c:
                    62:cc:55:24:3c:aa:46:1c:74:e7:d9:ec:77:80:87:
                    82:62:2e:6c:c7:b8:45:4e:7c:e3:74:80:2c:a1:d7:
                    2f:69:d4:92:d1:32:69:8c:02:0c:ff:c3:31:a7:cb:
                    9c:09:7c:82:1f:b7:ca:f4:a2:e9:18:33:80:ba:29:
                    8a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AC:24:83:CF:4F:1B:DC:11:5B:7E:1B:44:3A:29:50:4E:1A:66:04
            X509v3 Authority Key Identifier:
                keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:2e:60:49:9e:6b:ea:41:b9:fb:95:b6:5d:52:33:9d:c8:
         66:3b:d1:36:89:fc:07:2e:40:e8:7f:09:02:ac:89:06:72:b4:
         0f:33:8f:a8:c0:df:1b:d0:44:65:a7:a7:00:77:df:85:0a:fa:
         e6:4d:0c:a2:f8:5d:af:ab:38:0d:0b:8b:02:a4:d8:e2:69:1d:
         8f:81:39:ef:33:4d:50:57:5f:bf:01:96:f5:34:ed:0a:c4:97:
         8d:8f:13:9d:75:68:6a:ed:fa:03:06:26:d8:12:06:5e:03:8f:
         f2:6a:01:6f:1e:97:6c:5c:51:9c:16:48:77:4d:ff:a5:9a:59:
         36:8b:98:0d:13:5b:5a:d9:63:5f:37:63:23:0f:08:c7:6e:53:
         bc:99:8f:39:b9:ff:a0:8d:55:33:53:dc:38:ae:50:b3:a7:25:
         9b:3f:c5:ce:6e:fa:ec:41:d2:e8:3e:a3:cf:3f:54:f7:cb:a6:
         fb:ce:c5:14:20:04:d7:84:92:6e:f3:b9:aa:db:e6:b7:33:76:
         fa:9e:91:63:8b:e6:ed:3e:10:61:16:11:f7:2c:c5:e8:6e:05:
         76:56:5b:31:7f:55:b8:bd:70:fc:6d:e1:77:3b:80:22:52:f1:
         e5:c9:1d:f0:13:f5:a3:bb:df:db:f4:81:de:84:55:3a:e4:55:
         67:9f:ec:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 08:28:28 2026 by rpki-client