Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
File:                     6E57E27AC23C8932C53853BF557B28CD590488AC.mft (raw, json)
Hash identifier:          iQpt8nYHZfe/VO7nI0wutouJlQftMYzA2tRTOZZvWzc=
Subject key identifier:   09:CD:46:DE:20:08:41:92:5F:83:5D:E5:76:84:B0:91:84:46:07:4A
Authority key identifier: 6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC
Certificate issuer:       /CN=6E57E27AC23C8932C53853BF557B28CD590488AC
Certificate serial:       3E01862D66E90C0CF5BD6E97A06D39A80CB3AC99
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
Manifest number:          FD
Signing time:             Mon 02 Mar 2026 07:38:08 +0000
Manifest this update:     Mon 02 Mar 2026 07:33:08 +0000
Manifest next update:     Tue 03 Mar 2026 11:29:08 +0000
Files and hashes:         1: 6E57E27AC23C8932C53853BF557B28CD590488AC.crl (hash: pLrtyvvgNBWIcku3AktmFQFbakSQRjYvik8y9yui/yA=)
                          2: 326131343a373538333a663330303a3a2f34302d3438203d3e20323035303038.roa (hash: Pw4yBx8L2Vx0/YJcoRiVJ2ZHCDI/+/xVhxU2P0lxb8w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:01:86:2d:66:e9:0c:0c:f5:bd:6e:97:a0:6d:39:a8:0c:b3:ac:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E57E27AC23C8932C53853BF557B28CD590488AC
        Validity
            Not Before: Mar  2 07:33:08 2026 GMT
            Not After : Mar  3 11:29:08 2026 GMT
        Subject: CN=09CD46DE200841925F835DE57684B0918446074A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:06:8a:ba:d8:a7:72:84:6f:17:fe:eb:39:07:
                    1b:3a:3b:a5:b4:65:25:9b:7c:fe:35:4a:96:01:25:
                    51:50:b8:19:e1:f9:d5:d1:0d:25:e0:51:fe:a2:18:
                    9a:31:ba:32:57:30:60:72:5f:1f:c5:96:3e:5e:20:
                    01:f2:f8:ea:09:da:3f:71:46:b4:18:7d:04:25:66:
                    9d:a9:6c:8b:76:17:d5:9e:36:15:0f:78:b1:e6:1e:
                    10:e5:09:04:d8:d0:f0:9b:63:bf:42:77:54:2b:8d:
                    5e:1a:68:b6:9e:23:63:59:7a:93:b3:1b:84:3f:c9:
                    89:b5:20:cb:8d:74:33:2e:97:99:4f:d9:ea:a0:f6:
                    d6:fd:c5:e2:96:dd:d8:b1:42:84:40:48:e1:bf:97:
                    ce:32:11:65:8b:42:b2:87:c5:44:45:5c:48:6e:ad:
                    a0:1e:6b:da:7a:64:5d:23:5a:a1:c4:e4:11:1c:03:
                    d6:4f:e7:52:73:3f:c5:cf:19:68:19:8e:f8:0a:46:
                    8c:5c:a8:78:a8:21:0b:53:dd:46:9c:76:d1:8a:74:
                    e6:12:38:2f:ca:72:1b:6a:be:d7:65:95:5c:f4:fd:
                    d6:36:27:f9:09:96:ad:ec:29:be:ed:95:91:c5:c3:
                    67:2d:2e:a8:d2:9e:a0:04:15:e8:32:12:4c:2c:01:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CD:46:DE:20:08:41:92:5F:83:5D:E5:76:84:B0:91:84:46:07:4A
            X509v3 Authority Key Identifier:
                keyid:6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4d:ea:6d:ef:b8:40:7d:3b:ba:8e:57:ed:3a:3e:d6:0a:8f:
         28:58:ba:5c:79:c6:4b:66:ac:51:3e:4f:8d:6e:34:cf:22:98:
         77:e1:df:e1:67:3b:b4:0e:7b:be:a4:5b:1d:bc:00:38:fa:16:
         ad:07:fb:fc:bf:77:7b:7e:74:df:e0:55:be:6c:5b:0c:85:97:
         07:62:6c:fd:87:84:df:71:84:d8:d9:8c:e9:51:97:6e:d5:c8:
         f4:26:cd:2b:0d:af:67:71:0e:13:b4:93:1c:e5:7d:06:42:6a:
         58:0b:57:f6:5c:d3:3c:e6:ff:9e:69:9a:5a:62:14:ad:61:4f:
         58:22:8b:98:ea:25:ad:be:cc:b2:9e:67:06:89:5e:74:94:75:
         d3:c3:fd:2e:ed:2f:21:4e:dc:c6:50:be:77:58:2b:49:be:71:
         82:40:eb:3c:a1:85:c9:a0:d9:6b:f4:89:7b:ba:3c:f1:be:1e:
         d8:23:18:ad:e1:34:5e:40:f1:92:ba:db:58:41:a3:1f:38:3a:
         bf:6b:7c:ad:31:48:bd:c4:b2:6a:6e:d4:0d:56:89:a3:88:52:
         11:dc:30:4c:6c:28:00:a4:dc:18:3c:ed:da:0d:dd:cc:bc:94:
         4d:2e:33:8e:19:aa:43:c5:13:06:42:c2:05:fd:4d:45:ff:08:
         b6:68:c1:cc
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUPgGGLWbpDAz1vW6XoG05qAyzrJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU1N0UyN0FDMjNDODkzMkM1Mzg1M0JGNTU3QjI4Q0Q1
OTA0ODhBQzAeFw0yNjAzMDIwNzMzMDhaFw0yNjAzMDMxMTI5MDhaMDMxMTAvBgNV
BAMTKDA5Q0Q0NkRFMjAwODQxOTI1RjgzNURFNTc2ODRCMDkxODQ0NjA3NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmBoq62KdyhG8X/us5Bxs6O6W0
ZSWbfP41SpYBJVFQuBnh+dXRDSXgUf6iGJoxujJXMGByXx/Flj5eIAHy+OoJ2j9x
RrQYfQQlZp2pbIt2F9WeNhUPeLHmHhDlCQTY0PCbY79Cd1QrjV4aaLaeI2NZepOz
G4Q/yYm1IMuNdDMul5lP2eqg9tb9xeKW3dixQoRASOG/l84yEWWLQrKHxURFXEhu
raAea9p6ZF0jWqHE5BEcA9ZP51JzP8XPGWgZjvgKRoxcqHioIQtT3UacdtGKdOYS
OC/KchtqvtdllVz0/dY2J/kJlq3sKb7tlZHFw2ctLqjSnqAEFegyEkwsAfd5AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUCc1G3iAIQZJfg13ldoSwkYRGB0owHwYDVR0j
BBgwFoAUblfiesI8iTLFOFO/VXsozVkEiKwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw
Mjg0LzEvNkU1N0UyN0FDMjNDODkzMkM1Mzg1M0JGNTU3QjI4Q0Q1OTA0ODhBQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82RTU3RTI3QUMyM0M4OTMyQzUzODUzQkY1
NTdCMjhDRDU5MDQ4OEFDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8xLzZFNTdFMjdB
QzIzQzg5MzJDNTM4NTNCRjU1N0IyOENENTkwNDg4QUMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBITept
77hAfTu6jlftOj7WCo8oWLpcecZLZqxRPk+NbjTPIph34d/hZzu0Dnu+pFsdvAA4
+hatB/v8v3d7fnTf4FW+bFsMhZcHYmz9h4TfcYTY2YzpUZdu1cj0Js0rDa9ncQ4T
tJMc5X0GQmpYC1f2XNM85v+eaZpaYhStYU9YIouY6iWtvsyynmcGiV50lHXTw/0u
7S8hTtzGUL53WCtJvnGCQOs8oYXJoNlr9Il7ujzxvh7YIxit4TReQPGSuttYQaMf
ODq/a3ytMUi9xLJqbtQNVomjiFIR3DBMbCgApNwYPO3aDd3MvJRNLjOOGapDxRMG
QsIF/U1F/wi2aMHM
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:01 2026 by rpki-client