Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
File:                     D6D172D72D23BAC1F197C131AD720E6E8230B003.mft (raw, json)
Hash identifier:          +TAK8JV5Kf7PWHZB31unVIUGEFJpo6cJ5Ebhi98Fya4=
Subject key identifier:   84:73:41:4E:91:06:FB:17:89:74:D4:FA:91:C3:DA:74:80:CB:56:EB
Authority key identifier: D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03
Certificate issuer:       /CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
Certificate serial:       262897C9119ADC0953E802D55F6FBB2FDC08A2B8
Authority info access:    rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
Manifest number:          DF
Signing time:             Mon 21 Sep 2026 11:55:01 +0000
Manifest this update:     Mon 21 Sep 2026 11:50:01 +0000
Manifest next update:     Tue 22 Sep 2026 14:31:01 +0000
Files and hashes:         1: D6D172D72D23BAC1F197C131AD720E6E8230B003.crl (hash: QbYrq1NzJXpGZNKmaLJLVInFMbNfCUw5adnf117kfV0=)
                          2: 323630323a663530633a6330303a3a2f34382d313238203d3e20323035393431.roa (hash: cWyW4xHleqLk84rEzGTR8NRbqNQlRwAtCtLspkb3tV8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 05:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:28:97:c9:11:9a:dc:09:53:e8:02:d5:5f:6f:bb:2f:dc:08:a2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
        Validity
            Not Before: Sep 21 11:50:01 2026 GMT
            Not After : Sep 22 14:31:01 2026 GMT
        Subject: CN=8473414E9106FB178974D4FA91C3DA7480CB56EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:a3:09:75:ac:4e:de:ee:d3:5c:a1:eb:6e:
                    92:57:7f:87:d4:f2:66:8e:56:5b:00:93:2e:d0:63:
                    b6:2b:89:e9:c3:d9:b5:c4:ad:5f:61:33:8d:3c:9e:
                    f6:11:c3:4b:e6:3b:7d:ba:cc:19:d6:13:f1:f2:1b:
                    00:7b:d8:99:4e:a9:02:93:3d:59:d4:fd:13:9c:29:
                    ac:2d:ee:78:76:ba:32:8a:8e:ed:2c:a4:ad:28:82:
                    cd:29:d4:80:80:54:b5:fc:00:c9:ba:82:03:87:6a:
                    70:01:43:c0:76:c5:85:0f:b1:7a:91:c3:33:ff:e3:
                    12:45:77:6a:41:82:72:9d:da:88:b7:47:79:6e:48:
                    ea:3d:a1:37:90:aa:79:a2:c7:eb:26:c3:87:61:ea:
                    fb:53:b6:11:47:7d:1d:33:28:68:35:49:57:b2:72:
                    00:b7:e0:35:2b:39:a4:ef:c8:44:ea:43:0e:52:0e:
                    ca:6c:94:6b:57:b0:6d:3d:a1:c2:8e:f6:ad:c3:d9:
                    1b:a7:16:41:d2:c7:33:a5:cf:a6:5f:72:40:95:ff:
                    6f:68:de:a2:24:2a:6b:3a:ff:2c:cb:8a:d4:18:34:
                    de:b9:71:43:5d:02:e4:d9:e0:0a:01:13:d3:35:a5:
                    b8:11:42:f5:e1:07:eb:b7:ed:97:41:7c:e2:8d:bd:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:73:41:4E:91:06:FB:17:89:74:D4:FA:91:C3:DA:74:80:CB:56:EB
            X509v3 Authority Key Identifier:
                keyid:D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:28:74:0a:34:c5:73:7b:40:e6:ba:4f:58:27:9e:f5:26:bf:
         a7:a7:ec:84:e9:62:5b:d7:29:b1:ee:46:00:8d:01:58:35:3a:
         62:fd:4e:a3:6b:25:3e:fc:95:9e:43:0d:5b:2e:d4:15:14:0e:
         5b:e1:15:4f:9b:72:83:9b:4a:75:72:1e:41:07:45:c3:25:76:
         d5:8c:47:2a:e3:80:b5:13:b3:15:03:9a:fb:87:23:db:ca:90:
         d0:e9:aa:1f:f1:26:b3:0b:bc:49:dd:00:04:fe:5c:3c:ca:ad:
         5e:5f:dc:ac:dc:58:be:83:af:be:2b:1c:5e:1d:a5:e8:9b:44:
         95:3e:21:74:ec:45:bf:02:03:36:67:49:3c:ea:a4:03:4a:f6:
         f4:ec:d6:f6:43:c7:f2:39:4e:1b:0c:7f:64:5d:19:f7:3a:d8:
         d3:c1:0d:11:bf:fd:61:30:6e:38:7c:6b:93:0e:23:d6:6c:f6:
         2d:95:99:14:d2:66:b4:3b:59:fe:5a:05:5e:9f:96:65:bf:47:
         a1:57:5e:fd:db:20:ee:48:c6:2b:17:26:a5:7d:08:35:1e:d9:
         70:c1:4e:b8:09:80:83:c8:c0:59:0d:a1:d0:d1:03:08:ea:58:
         8c:ac:a2:43:00:68:a1:23:5e:cb:d6:21:bf:e9:5b:ea:d4:f1:
         53:a1:fd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:59:41 2026 by rpki-client