Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
File:                     6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json)
Hash identifier:          VjshqwUVvPPLlSlK/8Q0EQ9ycKQtdUu/PbaIMQIF/hs=
Subject key identifier:   89:81:13:2C:1D:3C:49:BB:E6:A1:91:13:E6:E5:2D:E4:3A:1E:E9:27
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       4E16A2AEBDBC5B55A5DB4AE63A7A7DD6447112C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
Manifest number:          04E9
Signing time:             Fri 17 Apr 2026 23:14:20 +0000
Manifest this update:     Fri 17 Apr 2026 23:09:20 +0000
Manifest next update:     Sat 18 Apr 2026 23:30:20 +0000
Files and hashes:         1: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=)
                          2: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ZuqL+fdFsSzEWPLF+KldkjLdFZi3woWq3fujFGdDY0Y=)
                          3: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: GzrdTake5t0OKWth4S/rVQ4o3ezmsUv08UKjAIRFSGU=)
                          4: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: b9uDQIv17Mqj0faPNTNtrEIHppsSxn28riugd1hAwe4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:16:a2:ae:bd:bc:5b:55:a5:db:4a:e6:3a:7a:7d:d6:44:71:12:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Apr 17 23:09:20 2026 GMT
            Not After : Apr 18 23:30:20 2026 GMT
        Subject: CN=8981132C1D3C49BBE6A19113E6E52DE43A1EE927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:a7:78:09:17:c3:8f:85:56:9a:e4:f3:53:
                    ac:85:62:8c:1b:c4:e5:38:ee:e9:13:2e:47:8b:26:
                    23:8e:ce:e4:a2:0f:83:36:0e:d2:9b:98:cc:ec:24:
                    2e:fa:71:65:7f:68:92:53:7c:04:f5:57:7c:b0:84:
                    7c:6c:2c:d8:74:ec:a5:9b:95:4d:76:27:d3:78:38:
                    24:9e:c3:c6:b5:63:5f:25:fc:e1:31:64:16:91:9d:
                    87:53:a1:61:d1:c5:d2:42:37:4a:55:e2:f4:44:71:
                    75:21:66:40:9b:ab:42:5c:46:35:51:ac:5f:87:4b:
                    b8:14:5d:92:70:17:f8:f1:f3:be:6a:cb:3a:16:27:
                    63:c9:96:77:b8:0f:c5:c8:67:7b:60:c8:33:fe:48:
                    30:11:aa:68:41:b1:81:29:47:7c:00:20:dc:04:23:
                    ec:56:16:14:38:50:eb:f7:3a:be:94:61:0d:2c:1c:
                    d6:c2:4b:99:7c:39:28:32:a8:95:b5:63:b7:4f:6d:
                    c9:09:63:ea:5b:a0:96:3a:a8:ee:ad:31:3d:d2:10:
                    17:60:ce:c2:6d:93:11:65:67:13:c7:09:e2:76:79:
                    85:64:d5:53:f4:9c:2b:d2:c7:49:59:6f:29:9c:fc:
                    ae:39:dd:0b:a3:94:eb:d1:0a:34:39:27:6a:4d:5a:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:81:13:2C:1D:3C:49:BB:E6:A1:91:13:E6:E5:2D:E4:3A:1E:E9:27
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:42:30:48:f6:e3:18:9f:74:d3:9c:34:4e:5a:47:ad:96:fb:
         51:40:41:d3:8b:4d:d3:58:e2:00:28:67:d7:79:4c:5b:53:0b:
         c7:2e:a1:26:92:e3:15:e7:8e:1c:56:44:33:de:0e:bd:e1:bd:
         e9:ce:c4:f5:8c:a6:97:1e:26:b2:58:48:bd:4b:a0:b5:5e:53:
         5b:60:31:61:a9:a9:95:05:e3:ff:de:ee:98:61:42:e2:4b:00:
         aa:ec:6c:83:22:3e:82:bc:87:6f:a5:76:62:63:e7:b6:e8:87:
         3c:60:86:72:72:cb:a6:a0:eb:54:5f:0d:d9:34:8d:38:3d:16:
         69:27:8b:5d:c0:58:9c:77:77:cb:e9:75:bf:f5:ba:7e:0b:ba:
         63:cf:26:22:91:95:35:9d:b4:00:59:33:47:46:4f:b3:9a:35:
         87:68:f0:8e:2b:35:5e:41:67:f2:b6:4b:fd:1f:29:2e:3c:6a:
         63:79:75:95:ea:e9:5e:9e:17:4a:d9:76:62:d2:73:7a:f4:62:
         39:05:9a:25:ed:55:92:48:f7:e4:e0:04:6d:6c:7a:6c:e9:2b:
         df:ab:1d:cd:20:ac:07:c7:85:be:fa:48:b2:c0:c0:2e:1e:e1:
         c1:a1:69:f1:ea:5e:e0:55:99:c4:3b:67:b9:0d:2d:26:c4:a6:
         8a:1e:f8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:53:31 2026 by rpki-client