Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
File:                     B75F3781BC9C2E7301754988659F92686704E570.mft (raw, json)
Hash identifier:          Fir0zCP6OMLO5I1p4KBYiDcEekQJNoAt8v5hc2CU3ec=
Subject key identifier:   BD:16:FC:1A:75:A2:49:66:DC:09:30:CD:E8:B9:01:48:80:EF:D5:0A
Authority key identifier: B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
Certificate issuer:       /CN=B75F3781BC9C2E7301754988659F92686704E570
Certificate serial:       370D38C5A41B84C70821B7CE6D8DE7EFD823B006
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
Manifest number:          A5
Signing time:             Sun 20 Sep 2026 20:42:20 +0000
Manifest this update:     Sun 20 Sep 2026 20:37:20 +0000
Manifest next update:     Mon 21 Sep 2026 21:43:20 +0000
Files and hashes:         1: 326131343a373538333a656635303a3a2f34382d3438203d3e20323135333735.roa (hash: QC+VLR1atMBjLZKqNKRIXRZjoNccmm6wjr6eMvg5Isw=)
                          2: 326131343a373538333a656635343a3a2f34382d3438203d3e20323139313130.roa (hash: iDftdBCsthJXN/ndb+q/GQx72Gzjt+eyR9jMDK8uFwA=)
                          3: B75F3781BC9C2E7301754988659F92686704E570.crl (hash: dcNiEDEO+WEwttAGEnfCpqsR2yIoqDawUKqLoP3ThlY=)
                          4: 326131343a373538333a656635313a3a2f34382d3438203d3e20323135333735.roa (hash: FZxMvnN2JvS0E7GRVuAh2S+maz7EiQ9+xRJngz4LUC0=)
                          5: 326131343a373538333a656635323a3a2f34382d3438203d3e20323135333735.roa (hash: SkNEqHKkgb9xaKNRo3z5v+C960c6kIipwLJBD5hMIP8=)
                          6: 326131343a373538333a656635333a3a2f34382d3438203d3e20323139313130.roa (hash: /nUry8et8sxqIBNM4RCPWBpdTl6L1a65u8Inqobujxc=)
                          7: 326131343a373538343a313030303a3a2f33362d3438203d3e20323139313130.roa (hash: g8fldf5+E2NiQG2t2rZiRlzT/xT38c/wIUeoDvqX1AA=)
                          8: 326131343a373538333a656636303a3a2f34382d3438203d3e20323135383238.roa (hash: jHx3oPogw+alCyId8KrXrlALGQwaM9lw4XrTBhR0WTI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0d:38:c5:a4:1b:84:c7:08:21:b7:ce:6d:8d:e7:ef:d8:23:b0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75F3781BC9C2E7301754988659F92686704E570
        Validity
            Not Before: Sep 20 20:37:20 2026 GMT
            Not After : Sep 21 21:43:20 2026 GMT
        Subject: CN=BD16FC1A75A24966DC0930CDE8B9014880EFD50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:4c:ba:7a:95:e7:35:41:83:e2:68:f8:05:
                    97:b6:c2:33:24:af:76:93:d1:68:e3:91:c2:ff:7b:
                    b6:5d:be:53:89:20:cc:ee:45:31:80:ae:8d:51:02:
                    9f:ea:95:97:c3:40:47:40:fd:ec:f9:19:ac:8a:8c:
                    f9:bc:68:1b:08:6c:4b:52:b1:26:8e:03:ef:d7:9f:
                    25:f6:41:84:7d:1c:9c:5b:b2:26:5b:51:99:bf:85:
                    2c:44:ef:36:c5:bc:35:87:9e:07:c6:f1:46:01:bb:
                    96:4d:0d:fa:06:0e:8d:6d:af:ea:17:88:0f:6d:41:
                    e8:cb:cf:f2:58:0f:38:e0:cd:8b:52:37:ff:e9:ba:
                    34:d1:8a:4b:91:78:b3:96:6d:fd:2a:06:8e:7e:e1:
                    65:f4:26:8e:0f:75:ec:90:56:f1:52:d1:9d:65:a7:
                    6b:81:1a:80:fa:ae:99:d0:63:22:d9:65:69:02:12:
                    d3:a7:78:5a:6c:23:54:d4:39:74:2b:c4:1d:25:7e:
                    39:0a:d8:88:c2:e5:41:47:2f:0a:da:05:5a:37:13:
                    27:87:63:be:65:8b:9f:fe:3d:bf:ac:ce:0a:93:33:
                    85:4c:45:f8:bf:85:c8:8b:81:ce:68:95:8e:34:8a:
                    2b:1c:40:f9:b6:23:d8:73:c5:19:d5:55:cd:12:c3:
                    69:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:16:FC:1A:75:A2:49:66:DC:09:30:CD:E8:B9:01:48:80:EF:D5:0A
            X509v3 Authority Key Identifier:
                keyid:B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6b:ae:cc:77:c1:b9:41:a6:6a:bb:40:84:41:cc:c3:50:56:
         81:7e:19:50:e5:68:ac:25:30:9f:95:9b:cb:92:5c:93:72:00:
         58:9c:df:fc:27:92:e5:82:a6:2d:97:69:d5:7f:8d:e0:c7:01:
         ec:fa:ac:71:71:d9:89:1c:7c:02:f2:bd:3b:d6:4a:0e:27:74:
         76:ee:a6:e5:e7:89:a9:89:fc:f0:24:25:0c:af:3f:3a:f6:11:
         9c:97:4a:84:eb:ac:43:08:a8:36:63:61:95:af:4a:a0:a7:2b:
         79:3c:b5:b9:fa:be:95:c0:fe:9a:ed:2c:ec:c4:16:d3:fc:46:
         0a:46:74:b4:7b:8b:fe:fa:4b:1e:c9:9b:72:27:40:6a:1f:1e:
         2c:42:f4:c0:0e:e1:28:1d:01:7e:bf:af:af:5e:37:3d:00:24:
         cb:0c:a7:f2:6a:4d:6c:d7:02:b6:3d:e5:b4:c2:a5:ae:c0:d1:
         4f:88:48:ac:38:61:c9:fc:ac:ef:40:37:83:88:9d:2a:e1:5b:
         a2:37:39:09:50:92:56:ea:b3:9a:dc:f7:bb:08:91:f6:ef:b6:
         65:14:3e:f7:c9:5d:da:cc:b3:04:12:8c:7d:fd:19:69:49:a7:
         a2:33:e3:fb:e7:d3:1a:d4:9c:73:0d:c2:67:d4:ea:e1:04:87:
         ff:da:ba:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:38:21 2026 by rpki-client