Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
File:                     1DB41D8CB909418AA27BBDED06CFB5857401E676.mft (raw, json)
Hash identifier:          7YRiz8EaLAZvwgYSGyEtjtNQpIKKXt/LEoACYCNvA20=
Subject key identifier:   64:6C:02:34:32:26:F5:2B:5E:26:43:1E:61:CD:60:0E:7F:09:CC:56
Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76
Certificate issuer:       /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
Certificate serial:       28E632A423093CFD9B31F8D2A90C9160DF6442BF
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
Manifest number:          B2
Signing time:             Fri 10 Jul 2026 06:42:39 +0000
Manifest this update:     Fri 10 Jul 2026 06:37:39 +0000
Manifest next update:     Sat 11 Jul 2026 09:36:39 +0000
Files and hashes:         1: 326130363a613030323a3a2f33322d3438203d3e20323135373630.roa (hash: B2caQKU5/hAAuwc57KOaYg2QivgfXC87ZBxhpnuBwec=)
                          2: 326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa (hash: l3HYulpvOKCiOuLe10nJcYG8DkTaBY5HNMplHWMB7TA=)
                          3: 1DB41D8CB909418AA27BBDED06CFB5857401E676.crl (hash: bFJEPfWZd6X8si6oxRMaIZj42Fw19aNPZVR2M3mrJ2I=)
                          4: 326130363a613030323a313233343a3a2f34382d3438203d3e20323034303835.roa (hash: /ueeiuIrHkj1UebpJT499/7uExjS/xhzsRdxFHL+OLs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Jul 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e6:32:a4:23:09:3c:fd:9b:31:f8:d2:a9:0c:91:60:df:64:42:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
        Validity
            Not Before: Jul 10 06:37:39 2026 GMT
            Not After : Jul 11 09:36:39 2026 GMT
        Subject: CN=646C02343226F52B5E26431E61CD600E7F09CC56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c8:10:f8:17:32:1a:3b:4f:65:31:c7:21:2d:
                    97:d5:f0:2e:e8:8f:ef:7f:83:d4:62:97:c8:d9:c2:
                    5a:a0:34:de:cb:8e:4e:46:af:ce:83:78:fc:8f:7b:
                    70:a3:79:40:99:cb:34:6d:3f:cb:70:b9:76:88:6f:
                    32:b4:25:e1:e1:1a:8b:be:c4:b9:46:ab:80:4f:b3:
                    6d:57:b5:c8:2c:89:dc:a1:31:85:d6:51:17:9d:b7:
                    85:fe:d9:c0:89:37:47:18:16:a3:2f:00:2a:66:c9:
                    ec:5b:5f:ca:49:0d:88:ef:08:62:84:9c:58:32:86:
                    17:1c:da:ec:c3:31:5d:39:2e:2b:17:f1:a1:6d:88:
                    cc:35:23:04:0d:ec:8e:7a:6b:3a:40:7e:f2:92:b3:
                    86:43:1b:2d:48:6d:8c:0e:9f:ec:17:9a:53:9e:82:
                    34:36:fd:51:16:03:a6:1d:58:11:84:69:e6:eb:1e:
                    5a:0c:00:67:5e:11:7c:13:f1:a2:e3:90:fd:11:dd:
                    82:5e:17:00:6b:31:fd:67:34:cd:ed:f4:f4:6f:df:
                    23:05:29:e1:ac:dd:d5:19:db:6a:32:58:8d:9a:7c:
                    c0:bf:2c:c3:42:52:a1:15:51:1c:13:82:b7:16:06:
                    42:c2:ae:2b:26:af:8a:78:ae:bc:e7:f9:bb:ee:97:
                    1b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6C:02:34:32:26:F5:2B:5E:26:43:1E:61:CD:60:0E:7F:09:CC:56
            X509v3 Authority Key Identifier:
                keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:70:7b:88:5c:93:98:70:7e:6a:51:5c:55:70:dd:23:07:77:
         5c:0b:b2:55:9f:a0:17:91:72:7e:81:e4:e5:83:08:55:a1:b1:
         47:11:6b:99:dc:08:d7:aa:ea:19:6b:3e:d9:73:37:de:8f:f8:
         19:d7:23:8d:cf:f6:8a:cb:b8:2f:d3:44:b5:60:8f:c5:2c:b2:
         24:f6:d0:b7:1b:81:bb:95:de:1e:6a:10:3e:12:75:52:5d:a1:
         ec:3a:d4:94:6e:86:3c:0f:c8:cd:ec:a9:51:be:ee:3c:91:ed:
         ef:53:4b:28:a5:dc:d7:de:33:40:9a:1b:3c:57:b4:cb:f8:f9:
         f6:94:38:e9:66:b0:ab:2f:58:84:82:ff:b5:4a:91:a0:6e:0d:
         da:56:e9:79:6a:9a:2f:d1:2e:cc:01:78:36:a2:c1:07:59:1b:
         25:a7:44:0d:28:20:49:e1:38:73:29:98:d1:87:c3:f6:f7:ec:
         83:fb:da:34:15:4a:61:6f:7d:fd:fc:c3:9e:d2:7c:b6:97:bb:
         6a:b3:7d:b5:49:c9:6c:84:67:c1:c1:d2:4f:2c:9f:9f:09:ea:
         9f:dc:e1:df:f6:b0:ea:5a:8a:3c:e4:f7:01:70:4d:03:75:79:
         01:b1:a2:24:e5:3d:d8:08:dd:52:37:d6:e4:36:b4:11:49:37:
         d3:67:c8:29
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUKOYypCMJPP2bMfjSqQyRYN9kQr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3
NDAxRTY3NjAeFw0yNjA3MTAwNjM3MzlaFw0yNjA3MTEwOTM2MzlaMDMxMTAvBgNV
BAMTKDY0NkMwMjM0MzIyNkY1MkI1RTI2NDMxRTYxQ0Q2MDBFN0YwOUNDNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDryBD4FzIaO09lMcchLZfV8C7o
j+9/g9Ril8jZwlqgNN7Ljk5Gr86DePyPe3CjeUCZyzRtP8twuXaIbzK0JeHhGou+
xLlGq4BPs21XtcgsidyhMYXWURedt4X+2cCJN0cYFqMvACpmyexbX8pJDYjvCGKE
nFgyhhcc2uzDMV05LisX8aFtiMw1IwQN7I56azpAfvKSs4ZDGy1IbYwOn+wXmlOe
gjQ2/VEWA6YdWBGEaebrHloMAGdeEXwT8aLjkP0R3YJeFwBrMf1nNM3t9PRv3yMF
KeGs3dUZ22oyWI2afMC/LMNCUqEVURwTgrcWBkLCrismr4p4rrzn+bvulxuLAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUZGwCNDIm9SteJkMeYc1gDn8JzFYwHwYDVR0j
BBgwFoAUHbQdjLkJQYqie73tBs+1hXQB5nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2
ZDAzLzMvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAxRTY3Ni5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAx
RTY3Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y
NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMy8xREI0MUQ4Q0I5MDk0MThBQTI3
QkJERUQwNkNGQjU4NTc0MDFFNjc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXB7iFyTmHB+alFcVXDd
Iwd3XAuyVZ+gF5FyfoHk5YMIVaGxRxFrmdwI16rqGWs+2XM33o/4Gdcjjc/2isu4
L9NEtWCPxSyyJPbQtxuBu5XeHmoQPhJ1Ul2h7DrUlG6GPA/IzeypUb7uPJHt71NL
KKXc194zQJobPFe0y/j59pQ46Wawqy9YhIL/tUqRoG4N2lbpeWqaL9EuzAF4NqLB
B1kbJadEDSggSeE4cymY0YfD9vfsg/vaNBVKYW99/fzDntJ8tpe7arN9tUnJbIRn
wcHSTyyfnwnqn9zh3/aw6lqKPOT3AXBNA3V5AbGiJOU92AjdUjfW5Da0EUk302fI
KQ==
-----END CERTIFICATE-----
Generated at Fri Jul 10 15:13:56 2026 by rpki-client