Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
File:                     1DB41D8CB909418AA27BBDED06CFB5857401E676.mft (raw, json)
Hash identifier:          itN3ME6LA8h8tS+Fl1GxDoLbngqR+z4d2ioNfT3+1Vk=
Subject key identifier:   7D:03:9C:F0:BF:44:EE:B8:37:8C:68:4E:75:4A:E0:48:97:4A:8A:F1
Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76
Certificate issuer:       /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
Certificate serial:       501FD4E0640FED8EF891A6D14737196579EA0686
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
Manifest number:          36
Signing time:             Thu 09 Apr 2026 01:36:32 +0000
Manifest this update:     Thu 09 Apr 2026 01:31:32 +0000
Manifest next update:     Fri 10 Apr 2026 03:25:32 +0000
Files and hashes:         1: 1DB41D8CB909418AA27BBDED06CFB5857401E676.crl (hash: UxYCDg3yxSwwT09e12zsHWFDAm6OzIGTcQ0Fy02Q8BQ=)
                          2: 326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa (hash: l3HYulpvOKCiOuLe10nJcYG8DkTaBY5HNMplHWMB7TA=)
                          3: 326130363a613030323a3a2f33322d3438203d3e20323135373630.roa (hash: B2caQKU5/hAAuwc57KOaYg2QivgfXC87ZBxhpnuBwec=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 Apr 2026 03:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1f:d4:e0:64:0f:ed:8e:f8:91:a6:d1:47:37:19:65:79:ea:06:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
        Validity
            Not Before: Apr  9 01:31:32 2026 GMT
            Not After : Apr 10 03:25:32 2026 GMT
        Subject: CN=7D039CF0BF44EEB8378C684E754AE048974A8AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:59:d1:98:ff:4e:a0:13:ff:5f:e1:dc:b7:59:
                    9f:c4:3c:df:a7:b7:0b:dd:bb:66:35:b2:b5:2f:09:
                    c8:76:b4:34:7a:f7:84:80:b6:af:79:f5:dc:83:a9:
                    df:d9:cb:ad:c5:3e:d1:da:75:fa:19:fd:41:c3:ff:
                    93:c2:b9:cf:b8:3b:42:f6:c2:f7:25:22:87:6c:b7:
                    29:61:0a:65:3e:eb:3f:f2:09:3e:de:8c:ed:4f:41:
                    ee:50:e1:72:5a:21:2f:6d:77:b0:61:10:c2:c3:ca:
                    89:01:9b:01:8a:13:95:04:14:51:f5:2b:e0:49:cc:
                    5c:21:db:63:d7:22:ee:ed:12:54:18:9b:19:11:b1:
                    71:ab:f3:e8:c1:cb:5d:21:3d:1e:9e:bd:b3:a1:77:
                    66:92:b3:a3:a5:f4:79:28:4c:81:c9:4d:6d:a6:74:
                    b8:66:f4:0d:b3:5c:20:b4:02:6d:7d:c4:60:b0:91:
                    3f:c8:89:f0:e6:92:22:99:e4:a5:da:ab:3c:e5:10:
                    86:16:05:8d:8b:46:e9:46:7e:c5:89:7c:ca:a5:04:
                    c9:bd:30:c6:d2:d6:4e:18:43:88:ab:43:d4:6b:dd:
                    8b:48:35:3d:5f:4e:67:e1:b8:f8:88:69:c4:d4:58:
                    ae:9a:f4:35:ff:fa:02:9c:2c:c8:12:0d:e3:80:af:
                    8a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:03:9C:F0:BF:44:EE:B8:37:8C:68:4E:75:4A:E0:48:97:4A:8A:F1
            X509v3 Authority Key Identifier:
                keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:fb:58:52:e3:9e:f9:ba:74:b3:d3:c8:ba:87:ed:31:24:e0:
         91:40:01:61:52:4f:61:e4:b9:e9:6b:f1:ae:b3:8d:a4:66:27:
         bb:e0:aa:67:21:5a:23:b6:46:07:42:60:06:a2:44:c7:36:83:
         2a:1f:42:0c:c5:84:86:f0:36:3f:17:96:14:a0:5a:bf:33:a2:
         6a:1f:09:92:d6:b8:6b:da:5e:87:80:74:9a:35:c6:d3:19:88:
         dc:f1:1b:b2:b6:cc:58:57:95:80:a6:7c:60:24:0f:db:0d:a9:
         75:85:d0:8d:b4:b9:61:f7:13:f2:3c:c9:50:7a:51:9f:5b:e9:
         86:1d:b2:13:ff:3e:e9:39:d7:bc:7a:76:ed:53:c1:90:90:93:
         3c:35:81:0f:58:8b:22:4e:4a:07:98:df:f2:b1:37:db:1b:13:
         52:19:dc:11:8d:f4:09:5c:95:9d:ad:42:71:8d:c5:66:88:b4:
         70:0a:b1:da:2a:0d:bc:63:cc:19:31:65:52:33:14:f9:fe:1a:
         75:fd:63:66:4c:65:a1:c5:69:cb:eb:3d:82:78:d1:a4:06:f2:
         5b:73:64:eb:e8:43:22:b4:32:aa:9d:61:4f:d9:ee:c8:ec:e0:
         54:51:09:39:42:d9:b3:ee:59:00:b1:fd:2b:3d:b7:68:68:4f:
         15:1b:20:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 20:57:00 2026 by rpki-client