Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
File:                     6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json)
Hash identifier:          MvNDczubfw2VadOEFVYBprsH4Zq0anV6PgLRMU0vWOo=
Subject key identifier:   9D:1A:BC:67:7D:D5:A6:17:7D:C2:93:4F:01:0D:92:A3:60:1A:02:D2
Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62
Certificate issuer:       /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
Certificate serial:       22F65EC00A9D77DFF4FBBE0D3070AC8CB7BA666C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
Manifest number:          0214
Signing time:             Sun 15 Nov 2026 15:43:48 +0000
Manifest this update:     Sun 15 Nov 2026 15:38:48 +0000
Manifest next update:     Mon 16 Nov 2026 19:24:48 +0000
Files and hashes:         1: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: OI8GOe2+TkBj9rSGei3QzDvWunB1dmRCogAxQNNMVi8=)
                          2: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: jmVbrWhS87pJLsoQeufZ7UCKQBfBJ8HAH3nwPi92j24=)
                          3: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: VPCifaYotKDxeBBkkXW6HF/0neQ4fTWKc9o0aOWVmJ8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 09:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f6:5e:c0:0a:9d:77:df:f4:fb:be:0d:30:70:ac:8c:b7:ba:66:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
        Validity
            Not Before: Nov 15 15:38:48 2026 GMT
            Not After : Nov 16 19:24:48 2026 GMT
        Subject: CN=9D1ABC677DD5A6177DC2934F010D92A3601A02D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:dd:da:ca:a4:15:b4:0c:e0:44:c5:06:15:
                    7f:9a:03:c6:37:05:cd:d1:8a:52:cf:dc:f4:ff:69:
                    ac:0d:eb:f5:f3:c5:b1:63:f3:07:44:08:7d:31:36:
                    5a:d0:f6:17:c0:c0:3b:c3:66:d9:29:93:7c:2d:94:
                    49:fc:3f:d1:07:d8:12:17:02:f6:8f:af:72:f6:59:
                    57:5e:c9:f7:df:53:61:f7:4a:a9:52:8b:da:6f:74:
                    ff:47:4b:34:16:de:bc:f5:5d:4a:08:5c:28:55:c4:
                    ed:4b:7b:10:1c:1d:89:64:3b:7e:9a:52:48:ef:9d:
                    04:b8:10:f6:3e:29:00:f8:78:c8:ec:9e:cd:28:11:
                    c4:bd:31:a3:e8:e6:e0:0a:d4:87:76:31:2f:1d:fe:
                    f7:f1:83:5a:6f:c5:11:f1:e3:b8:2d:87:6b:9a:72:
                    fb:29:30:fd:f3:1b:6a:e3:51:0b:74:0b:19:7d:a7:
                    63:ce:52:e0:c0:62:97:95:c2:6b:7c:74:a2:dd:58:
                    16:da:ae:17:bc:52:f6:6d:00:03:8e:4d:3f:8d:c1:
                    4c:e8:83:7f:d2:c8:98:c9:81:ca:e5:0d:8c:ed:bc:
                    a3:17:d3:52:14:c5:d5:ec:ab:ce:97:94:b0:1b:9c:
                    70:f0:d2:48:18:e1:b9:94:6b:e4:30:93:4b:2b:ad:
                    5e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1A:BC:67:7D:D5:A6:17:7D:C2:93:4F:01:0D:92:A3:60:1A:02:D2
            X509v3 Authority Key Identifier:
                keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:10:e9:20:b9:22:94:36:fc:e2:78:03:44:0c:58:ca:54:08:
         9e:4e:91:39:7d:38:3c:11:13:d9:14:17:b2:7c:e1:ff:33:e5:
         12:92:14:37:fc:2e:56:8a:54:18:aa:2f:1d:97:2e:6d:dd:b1:
         08:67:c6:fe:08:1d:5e:78:d4:19:e6:65:fd:da:b0:2a:e4:01:
         c5:bc:d7:e9:8f:e7:17:17:b2:50:83:2d:23:74:6b:13:c0:a6:
         28:53:4e:7c:71:23:43:18:73:89:ab:58:10:68:64:38:46:49:
         48:c1:e4:05:dc:b0:dd:eb:af:8f:9d:f7:26:d6:88:7b:ba:f8:
         f4:a7:49:0a:cc:33:8d:a8:9e:f8:27:a0:6a:f0:ee:01:9e:f1:
         d2:3e:f7:02:2d:a9:48:06:c1:c2:f1:71:46:c4:6e:03:a3:8e:
         31:ac:ea:35:20:0d:91:b1:7b:7c:87:d5:37:36:5e:4a:ea:20:
         74:93:5c:0d:3d:dc:db:68:b3:98:0a:52:ff:f7:89:36:5f:49:
         3a:24:b7:f7:c6:2e:3c:58:db:43:57:4e:81:77:f5:f3:c9:a3:
         68:be:fb:b1:25:da:f2:9a:61:66:a7:fa:9d:8a:89:ef:c6:6c:
         a6:a9:7a:53:24:af:4a:0b:e2:66:f9:65:ac:15:42:c0:ec:95:
         55:04:4d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:54:15 2026 by rpki-client