Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
File:                     1DB41D8CB909418AA27BBDED06CFB5857401E676.mft (raw, json)
Hash identifier:          h4M8r8995juAUPdkNRaQ5bhtq1GO1Abk/EiK5IF6n+A=
Subject key identifier:   8F:CB:32:9F:6C:1A:B7:FB:58:74:AB:33:00:A6:60:D2:74:E0:68:84
Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76
Certificate issuer:       /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
Certificate serial:       6A955EE7C8A71692963DE480F0A514C4CC8082FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
Manifest number:          74
Signing time:             Mon 25 May 2026 09:58:33 +0000
Manifest this update:     Mon 25 May 2026 09:53:33 +0000
Manifest next update:     Tue 26 May 2026 11:47:33 +0000
Files and hashes:         1: 326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa (hash: l3HYulpvOKCiOuLe10nJcYG8DkTaBY5HNMplHWMB7TA=)
                          2: 1DB41D8CB909418AA27BBDED06CFB5857401E676.crl (hash: 1GairqV01V7QtuaF5vHbf9XvHLXoeJUo+HPTeqZ2Bh0=)
                          3: 326130363a613030323a3a2f33322d3438203d3e20323135373630.roa (hash: B2caQKU5/hAAuwc57KOaYg2QivgfXC87ZBxhpnuBwec=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:95:5e:e7:c8:a7:16:92:96:3d:e4:80:f0:a5:14:c4:cc:80:82:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
        Validity
            Not Before: May 25 09:53:33 2026 GMT
            Not After : May 26 11:47:33 2026 GMT
        Subject: CN=8FCB329F6C1AB7FB5874AB3300A660D274E06884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2d:c2:e0:e6:5c:ae:56:5c:b1:0b:ba:90:4a:
                    e6:04:c6:12:84:44:e4:7a:1d:66:29:d7:79:3c:38:
                    b2:13:b0:bd:fb:23:01:31:fc:5d:7c:90:54:ed:ab:
                    38:fb:48:61:67:ae:6a:13:42:9f:bf:67:12:cb:16:
                    01:1f:5c:90:45:fc:1f:16:3b:04:34:7e:86:dc:cb:
                    f6:dc:db:ff:2c:fa:c4:0f:54:08:c6:b9:2b:fe:c9:
                    7b:be:78:39:11:54:16:54:38:d2:d4:38:1a:78:c5:
                    15:3e:95:1d:53:8c:8e:90:94:8f:80:11:14:75:cd:
                    87:2f:c0:c8:b3:36:e1:c3:fd:1a:bd:21:13:e9:56:
                    c9:da:63:36:af:25:72:bc:36:dd:2c:7f:86:fc:06:
                    f2:c8:1c:3e:09:1a:35:eb:e1:b5:11:cc:ed:93:f3:
                    0b:e9:c9:01:c2:64:b7:c4:6b:ab:b7:be:40:d5:95:
                    f2:37:d2:36:25:6d:08:c2:80:a6:c7:b7:b6:01:4f:
                    da:7c:e7:1a:fe:54:b8:17:e6:54:74:9a:fd:de:3a:
                    d5:0d:f7:23:60:d2:c4:33:41:83:8c:9d:c1:52:12:
                    e4:d2:b0:2e:4c:76:89:f2:c8:4d:b9:b7:52:80:6b:
                    95:d0:72:af:ad:d5:0e:db:f3:82:2a:35:64:3a:73:
                    38:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CB:32:9F:6C:1A:B7:FB:58:74:AB:33:00:A6:60:D2:74:E0:68:84
            X509v3 Authority Key Identifier:
                keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:44:50:78:8c:08:f4:4b:d2:23:74:14:c1:a0:08:46:20:ae:
         56:4a:ff:7b:53:3f:41:33:60:0b:7d:b3:09:a7:a4:8f:54:25:
         8f:66:f8:f9:50:a4:25:ff:a6:d7:c8:da:75:dc:b4:73:f1:87:
         52:01:8b:50:35:4d:3d:de:ad:fe:8c:89:81:8f:2b:6c:77:6b:
         3e:9c:66:9f:73:27:8c:23:1b:52:01:c0:c3:6d:95:b4:5f:64:
         6a:22:99:dc:fa:68:2a:e9:df:f2:83:88:6b:f1:58:2e:23:22:
         ef:bb:88:cb:d5:33:68:40:4f:c0:70:5e:d9:2d:45:62:a4:72:
         9e:c8:73:8a:92:ec:51:e0:19:cc:5d:05:a5:f2:d2:ba:01:bc:
         b8:4f:69:8e:cc:8a:6c:9b:77:7b:bd:6d:9d:1f:1c:23:28:92:
         37:75:07:dd:09:e3:8d:ca:2b:36:2d:05:4c:8b:24:5b:e2:88:
         ec:ee:0c:df:dd:4c:f5:d5:b7:0d:c1:36:09:dc:3e:67:71:a9:
         2a:cc:79:09:e6:3e:ad:e3:55:d4:ff:88:50:f0:8f:73:2e:8f:
         45:c0:7a:37:6a:d8:5c:78:95:93:8c:81:e1:d2:40:dd:1c:e5:
         e6:ed:ba:66:e2:7b:20:ea:80:49:39:c0:b6:f6:f9:a3:ce:3f:
         b9:c6:69:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 15:46:27 2026 by rpki-client