Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
File:                     60D5CF86368D32D8BD736410814916DA300E83CF.mft (raw, json)
Hash identifier:          00hUAyDHlSTcnEBy3GE/xSW1tut93mim6ivunnLpMGk=
Subject key identifier:   53:1B:D7:2E:5D:33:6C:10:8B:26:4D:7D:2F:46:C4:94:DA:A9:74:A6
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Certificate issuer:       /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial:       29407028C17E8211242F35B4B4CC7B4BF8989E9A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
Manifest number:          C6
Signing time:             Mon 21 Sep 2026 07:39:55 +0000
Manifest this update:     Mon 21 Sep 2026 07:34:55 +0000
Manifest next update:     Tue 22 Sep 2026 10:45:55 +0000
Files and hashes:         1: AS218885.roa (hash: lmbftI7uPwX2re286SXzaYJgk2ze0TG0pJEe3MwdD44=)
                          2: AS402288.roa (hash: 5hj/7PZQTGiCK6f7do/sM2E1Q5+fnlNhluVYOenygos=)
                          3: AS3223.roa (hash: gla7DtHK1OrkIGVDoA01+OL3aT0M7RlbtSvmDghbNT0=)
                          4: AS10648.roa (hash: QzGDG0Ww/qUGF7mkdsXh5AcoxsQKaochwHm2uLgp8So=)
                          5: AS148996.roa (hash: ZnMXv5b1geOEhnLX5L1Rq34UGDbv0MEJjTifLBtEe08=)
                          6: AS29802.roa (hash: KT6ZRsx/jQF6DHHkLdkG2KbRcpj858/4Isq60Xcx8Ws=)
                          7: AS21840.roa (hash: sUOfAiYdaM80gpangBMV6FhA0LpfgLts35SPQWzB0Cc=)
                          8: AS9304.roa (hash: DQGnE2D1z0J8FBSnh+Yo6t7MF9FUteVLpM6pbEoa3Jc=)
                          9: AS40676.roa (hash: nBaGqH7C3J6hVVl/hLrUaoZEzWKu3gb3dTaTOsqnhZ4=)
                          10: AS25369.roa (hash: 07eNZ9Na4Rf2PrzufpbjcaOrd3RSRkDtIOUkQ/zNhVY=)
                          11: AS205960.roa (hash: klvh7s/US/WhOVbuOD6eQFxaQjYezAJK98w9Jqytce4=)
                          12: AS402265.roa (hash: nepIyk75nH/AuxkdJagyuE6I7GsAJVUuqzG1lzehl1w=)
                          13: AS2856.roa (hash: lTN8/vt3smxEIcast1BeI+binYh2056gwzs5+WmQRuw=)
                          14: AS219427.roa (hash: TwUQQmBooplu5yiXjQi9me3qbDacU1EKCx3fBz9eL6E=)
                          15: AS152698.roa (hash: bFVhkaUjQpSE2LMSWn8jJ4/uGcOzPSD6/gOfreXyQmw=)
                          16: AS219393.roa (hash: FRpsVXspbxo6y6if4zWnPXjaRoZlpeYy0MqZvoAoVNo=)
                          17: AS140681.roa (hash: 4JCpOQrvL7qRzuxERggGyQ7ejQOtCYQW/neczGupCTw=)
                          18: AS214483.roa (hash: SPUe9FhPSX3hGSxN9xvgPo8hyrTOCSHNQfthlMB7BGY=)
                          19: AS219394.roa (hash: vzJcrg3ajNSV/DDqLPXW+cJV9GTjaQelCQvixE03OAI=)
                          20: AS197537.roa (hash: RF2pchDBjJN9zUOu0vF0M2+Wgu8SnpmLNvNxWilLYoY=)
                          21: AS6475.roa (hash: d6ROn/nCD56lej6Y1IiGDIfiFPYv5is5YCxb2AaX6pE=)
                          22: AS38186.roa (hash: dsuwn/3M2LUnV+IKnH32JptJyKflMmZT+0mNMEafWOA=)
                          23: AS13537.roa (hash: B6bD0yeqYN8EGr/gyMJQve2bVkdaNlpuA148S9ZRj44=)
                          24: 60D5CF86368D32D8BD736410814916DA300E83CF.crl (hash: hj8J9MESUbPJ00vomoU3ZfrVZHFcXv2uhV3KmMqGT9Q=)
                          25: AS834.roa (hash: aOsPngO8T8amG9QOlU6G9Hht7OrKJ8+iioPlp+XjqhY=)
                          26: AS147281.roa (hash: IZVvF/OYwyEBJUdJPV9TDMFi/4amZdJJxuhuDLrhQA0=)
                          27: AS31715.roa (hash: IgCz/N9E+w8nKuNJLUAbrE0l2DE1qoW2P/h+62/qPNU=)
                          28: AS199707.roa (hash: cqZNdPYfBW0SBV3E6mqQe2fod34zOXw2HSoa1nDu2yY=)
                          29: AS402215.roa (hash: U4zqGiRh2HKz7V2BVswG4BxWJSD8QZQJN6sTG6xQBqE=)
                          30: AS142240.roa (hash: WIfw/GycD6AYTvy/c/z8oyKQQNk3X4SaS3jBM2WLPUg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:40:70:28:c1:7e:82:11:24:2f:35:b4:b4:cc:7b:4b:f8:98:9e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
        Validity
            Not Before: Sep 21 07:34:55 2026 GMT
            Not After : Sep 22 10:45:55 2026 GMT
        Subject: CN=531BD72E5D336C108B264D7D2F46C494DAA974A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:43:2d:91:52:e5:2b:c4:4f:46:74:3e:24:3b:
                    d2:55:39:f7:57:f3:60:85:93:b0:6d:45:4f:fa:9b:
                    71:44:86:d2:6b:6c:e4:e8:45:73:e8:4c:b7:24:a9:
                    24:1a:38:74:ef:08:5a:66:c2:88:17:d6:8f:28:ec:
                    f7:1f:1a:7b:86:1b:42:81:22:cd:a9:d2:ba:aa:6d:
                    f1:72:ec:73:9e:e4:17:ce:9e:df:d5:7a:60:07:18:
                    da:3f:6f:3a:04:35:3e:dc:62:63:5c:83:82:e7:de:
                    6d:82:ae:69:2e:f3:a6:b4:ec:76:98:10:03:b9:14:
                    64:a1:8e:7d:26:20:2b:01:6e:64:42:29:4d:0d:df:
                    62:f5:d7:2d:e8:27:17:0a:12:93:e2:77:ca:8e:1f:
                    4e:84:f3:1d:a5:a8:fe:1d:63:e9:42:35:6a:e7:80:
                    7b:cd:b2:44:a6:a3:f4:f0:73:a2:28:3f:c1:40:6d:
                    7b:60:ce:cb:2b:83:80:4c:fd:7f:fb:e5:73:53:9f:
                    c4:35:7b:eb:25:89:ff:27:07:bb:e1:22:4e:f2:b7:
                    96:76:c9:95:5f:db:c8:4d:91:b1:6a:54:2c:f1:f9:
                    dc:a2:25:f2:f8:f4:d0:03:14:1d:92:20:db:5b:6a:
                    62:13:6e:13:f8:cd:bc:ce:d5:9d:0b:f5:41:d0:35:
                    c2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1B:D7:2E:5D:33:6C:10:8B:26:4D:7D:2F:46:C4:94:DA:A9:74:A6
            X509v3 Authority Key Identifier:
                keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d6:5c:3d:fd:4f:bd:81:07:d7:aa:3e:cc:34:10:32:34:b8:
         b1:c3:24:29:f1:60:f2:f0:31:ea:25:6c:40:bd:96:dc:61:cc:
         68:0f:2c:3f:3c:b9:94:51:78:5d:59:06:f5:36:f2:c7:c8:f2:
         ec:d8:0c:55:55:90:7b:fa:fb:89:53:73:56:34:d4:4c:b2:2a:
         e5:f6:c6:5f:7e:9b:7d:f8:ca:a1:87:5e:d3:91:8c:36:e6:84:
         de:79:02:25:6a:ea:ad:25:be:72:a4:d1:4e:ad:09:d9:02:3c:
         c3:af:ec:86:3b:cf:86:2e:19:98:9c:96:b4:2a:c8:57:76:af:
         e2:6a:03:17:6c:d3:d4:54:99:97:8f:69:94:4e:45:28:ef:69:
         6e:47:b1:dd:29:82:15:96:83:c1:56:5f:5f:02:03:8b:77:59:
         95:0b:03:b5:85:64:eb:66:a6:b1:40:23:d6:71:11:6b:ea:09:
         5f:75:e8:9a:67:36:d7:39:4f:14:01:d8:6c:f6:ef:d9:1f:4e:
         13:7e:46:ec:f4:ce:1f:f8:64:f8:d8:7a:d9:88:bf:aa:16:46:
         41:98:75:e6:0c:7f:27:50:5a:35:75:f9:0a:75:76:c7:f3:33:
         64:ce:ec:82:99:7e:da:e0:00:2d:78:9b:83:59:b8:dd:83:ab:
         be:a6:c6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:53 2026 by rpki-client