Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
File:                     A912092CFA11F378852F52266C793AB678233205.mft (raw, json)
Hash identifier:          spPoQFWDqoBIRQOPuLOGkAnsmEiB6WeN5xhaL6642nI=
Subject key identifier:   E7:81:C3:58:C6:0B:3C:CC:87:6D:A5:D7:61:59:8F:1A:ED:DF:B3:AC
Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Certificate issuer:       /CN=A912092CFA11F378852F52266C793AB678233205
Certificate serial:       D8D5AEB45B7A6CCD1FDD4895492129397EC984
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
Manifest number:          0210
Signing time:             Sun 01 Mar 2026 20:27:55 +0000
Manifest this update:     Sun 01 Mar 2026 20:22:55 +0000
Manifest next update:     Tue 03 Mar 2026 00:14:55 +0000
Files and hashes:         1: 326130393a353463333a613130323a3a2f34382d313238203d3e20323135313437.roa (hash: vs9kXuBMMWCplaNsRIcMMGKaCF4FLRTK4Bq5jqpLQYc=)
                          2: 3131312e3233352e3135312e302f32342d3332203d3e20323135313437.roa (hash: vew4LNWCVofm5qe2BK5sopfMvrn3w6T63/5S4aLPNx0=)
                          3: 326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa (hash: m/KS3U1L5fK6/ozUyGVO/HofrXSxDH++GoaQCE6VLqY=)
                          4: 326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa (hash: /KjIFlpbNb1VbdyEsAMlwZ6y7EnP5aEMV+JQt9I/CYU=)
                          5: 326130393a353463333a613230303a3a2f34302d313238203d3e20323039383734.roa (hash: bwL4xPqc/uz8Pz2knWoJ8zvpAw8HB5XXWez7oPoDaEI=)
                          6: 326130393a353463333a613130343a3a2f34382d313238203d3e20323135313437.roa (hash: mqZWFx8mEs19q6avxgn8ro9WrQffoF4FToEMy+hXzM0=)
                          7: A912092CFA11F378852F52266C793AB678233205.crl (hash: OEB18USRKud7f58IRRwE/fSaaeLqURMWjncKPIObgiQ=)
                          8: 326130393a353463333a613130313a3a2f34382d313238203d3e20323135313437.roa (hash: 90FGOeqqLptd8qlXcfjJgcF07gJvM1oxc2QmHLuTM1Y=)
                          9: 326130393a353463333a613030303a3a2f34302d313238203d3e20323039383734.roa (hash: ca9GKU5mOXVUfI7Du4XvHpxs7R00F6F4l3yz+1HGWmo=)
                          10: 326130393a353463333a613130303a3a2f34382d313238203d3e20323135313437.roa (hash: 5vA7kcahmkhnv7Pjx7uA7TrGRG+XVrMF+mKhb2vEG5U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d8:d5:ae:b4:5b:7a:6c:cd:1f:dd:48:95:49:21:29:39:7e:c9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912092CFA11F378852F52266C793AB678233205
        Validity
            Not Before: Mar  1 20:22:55 2026 GMT
            Not After : Mar  3 00:14:55 2026 GMT
        Subject: CN=E781C358C60B3CCC876DA5D761598F1AEDDFB3AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:66:bd:84:2f:0d:bc:5a:6b:9a:98:51:12:2f:
                    c9:cf:f4:7e:6b:21:e4:f2:f2:f4:8d:5a:7c:66:a0:
                    be:57:09:c2:20:2d:8a:ca:21:06:14:41:a2:fa:63:
                    f8:22:e3:8f:b3:2e:58:be:b3:e3:05:dd:6e:cd:63:
                    3c:33:a1:96:35:93:5e:a6:88:2e:7b:0f:2b:ac:9a:
                    22:c6:41:ce:3b:12:bc:4b:a7:ea:58:a8:d6:9a:7f:
                    20:3b:af:4f:fe:36:38:13:6e:94:11:ae:e0:e7:aa:
                    d4:8a:7b:7a:82:fd:7b:ea:e7:f3:f2:7b:95:4a:e4:
                    14:f9:bd:bf:cb:5e:3e:3b:12:93:26:48:ac:bf:96:
                    c1:a5:75:30:77:33:04:73:77:17:7e:80:44:04:32:
                    56:31:b3:10:4c:c8:55:c4:71:4c:94:cd:56:24:b2:
                    6a:82:b7:90:76:62:f0:fb:3e:9f:d2:f3:0e:f8:15:
                    2f:86:be:e1:b4:11:35:98:60:cf:73:b5:49:b5:0c:
                    24:cb:4b:f6:e0:75:ff:c4:84:c6:d8:6c:c1:3d:47:
                    81:4a:b9:53:c0:a9:90:43:4f:77:67:01:24:92:6e:
                    07:7a:61:39:1f:8f:90:b3:3f:cb:b5:88:2b:63:70:
                    5f:9f:da:cf:9d:c2:b0:98:7b:15:e0:d0:09:a4:47:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:81:C3:58:C6:0B:3C:CC:87:6D:A5:D7:61:59:8F:1A:ED:DF:B3:AC
            X509v3 Authority Key Identifier:
                keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6f:d5:d7:35:ea:a4:53:5f:fe:77:92:de:15:40:e6:c5:f1:
         0f:21:e0:21:08:7b:65:16:60:3a:24:5b:4d:16:10:da:4b:f5:
         38:0b:66:75:32:d3:41:ba:f5:1f:ec:97:3b:71:e6:e7:71:78:
         55:23:af:b3:07:0d:fc:6f:df:40:12:f8:92:e8:71:c5:10:c5:
         5d:65:0f:9b:35:0b:f6:ca:89:ac:44:bd:d8:df:f1:95:e0:1a:
         da:18:ad:ad:8b:d6:6d:92:31:9c:ea:17:1a:03:34:f7:44:03:
         cc:85:b7:ae:a2:9f:c1:1d:a0:c9:50:9c:64:42:1f:d2:82:3d:
         86:be:41:0c:76:db:14:6c:b8:2d:ae:d2:d0:8c:3b:a1:a7:c9:
         64:8a:59:63:36:64:95:e7:26:92:68:e0:92:10:9c:88:9c:f6:
         50:c9:40:01:e0:f3:9e:54:eb:7f:ad:47:5c:36:62:39:0d:e6:
         3a:d1:fe:87:c6:70:23:44:73:91:6f:89:f1:ba:c6:4f:c8:aa:
         2d:26:d7:60:68:6b:58:0d:62:ee:40:cc:71:c6:9e:19:a4:63:
         bf:6d:31:7c:85:56:33:3e:e8:69:16:e6:5b:39:95:89:a7:51:
         5b:6f:9e:06:30:78:61:81:bc:83:98:bc:31:01:d5:de:e2:99:
         30:9e:d6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:31 2026 by rpki-client