Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
File:                     D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft (raw, json)
Hash identifier:          n2ecWdOCPStbrlY/VHjQBLPjnQS6jw3Cqm5uCELzLFQ=
Subject key identifier:   FA:41:72:E3:17:42:59:AD:05:39:EE:47:A4:95:C5:84:68:F0:3C:E8
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Certificate issuer:       /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial:       1073F601C553FFAF8303F3ECE700974C09E8457E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
Manifest number:          03C0
Signing time:             Sat 19 Sep 2026 23:25:01 +0000
Manifest this update:     Sat 19 Sep 2026 23:20:01 +0000
Manifest next update:     Mon 21 Sep 2026 02:23:01 +0000
Files and hashes:         1: 326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa (hash: NFvsPoacApBzdz+FlXYxKS+SrJRRGDFokmaNHzKzBOQ=)
                          2: 326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa (hash: PEhenAX2nlmj27r2UpmJddvn+0j+/ZFXnNAuKFs/Dpk=)
                          3: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: OHOa8pdQ/+cUDWoy8JYEhdO3yt3e1qfHEUXnAM/72Is=)
                          4: 326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa (hash: L8Uw37dvp3Z9x8NXJrGGnSNmByuPo6gjafPTmXfheNc=)
                          5: 326130363a313238333a633131663a3a2f34382d313238203d3e20323131303636.roa (hash: zjVPAhp6+Y0ZXGnryErowWqTSn3vt1Dl/+J+eHpGuAk=)
                          6: 326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa (hash: vPzCp2rjo49nQQnT9B2rqDxvXwwh+h9/WPiV7K6IlgQ=)
                          7: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: 8KHKZ6yYYM4r4ctRfPeSiTlSU7jaEuT/g972q+E+CDU=)
                          8: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: v5viufJUSKWuwj+d/Y1XFSYcf+6nXu4aUZj9tnF4HUs=)
                          9: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: hcy3Tt1PX+G7kw2+jtkL+x9N9981T+sABXgB4+0IUVY=)
                          10: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl (hash: j6xkniThd3oL1+V9Ub8C5tj0uPM8yhB+CcWvsb2FY8k=)
                          11: D36546790928F44FF74C564231471FA1D8D2A97B.cer (hash: Yk51yNZZDrc+NxDYYI7+6vxfYJuE5Kc7CvebjeR4bSQ=)
                          12: 326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa (hash: SDzB93ZmXL/9JaeiFrClXOKOMdMaPjQdBjiuTrcER6c=)
                          13: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer (hash: E+mLqx7rEgzkPAUn5rJoLra7vStPRhm9ryAmKBFIvQ0=)
                          14: B113B31E9F01A2F41870E8C77492B18EBA830E07.cer (hash: dY9YO6OBP4MP/E8JLnAQ8jLu99Fqa8+yWttAesQ43o0=)
                          15: 326130363a313238333a383966303a3a2f34342d313238203d3e20323134303333.roa (hash: 6WFD40vAQLuTuf6auFlSJa8wA9t5Q+NnM26Q2D2tktc=)
                          16: 326130363a313238333a383131303a3a2f34362d313238203d3e20323135313437.roa (hash: b6S80x2wgRrbjnz20BvYv5vIJmicPbI+oJm+svVleIg=)
                          17: 326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa (hash: 4pHWpyVZFpmDYYnCP3t+rPQ/bvOYzNkXDNdwOaC6vs0=)
                          18: 326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa (hash: huX32HgMgk4Y2C020+tWpyikLyAfVZ2TMuvxXCD12N4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 02:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:73:f6:01:c5:53:ff:af:83:03:f3:ec:e7:00:97:4c:09:e8:45:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
        Validity
            Not Before: Sep 19 23:20:01 2026 GMT
            Not After : Sep 21 02:23:01 2026 GMT
        Subject: CN=FA4172E3174259AD0539EE47A495C58468F03CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:1a:84:4c:93:08:94:3b:3e:2b:a8:b7:04:
                    41:4b:74:96:4e:2a:85:0f:ff:7d:d8:2e:bc:ef:4e:
                    6c:00:6a:27:87:0f:86:0a:d0:cc:a2:a2:72:a6:12:
                    d0:81:57:f4:2c:6b:d3:48:f7:8d:cc:04:17:91:b1:
                    47:93:6c:b7:ca:c8:2d:0d:18:cc:e7:51:7f:76:01:
                    0a:cd:70:46:57:a0:98:2e:f9:eb:d2:ab:71:47:90:
                    87:44:f2:cb:a2:d9:1d:87:13:1a:ea:b2:2f:6b:7c:
                    00:74:ed:31:2b:22:f3:e8:12:5e:41:03:f0:f6:d8:
                    cb:4a:c3:3e:47:2c:2c:7c:f7:24:46:9c:11:b8:b9:
                    2f:06:f7:53:7f:99:ae:8a:84:30:f1:1b:3f:3d:42:
                    d7:7c:94:90:0f:b1:33:a4:a3:f1:36:74:d9:e7:20:
                    7d:85:24:ab:f8:73:28:58:f2:fc:27:14:d1:b3:c5:
                    5f:71:0f:a4:c5:c3:01:57:a8:a3:e5:63:37:13:f3:
                    b7:64:de:6f:3a:14:09:0c:38:5e:e5:06:ba:0c:3c:
                    dc:fd:7e:33:cd:ab:36:73:10:ff:b0:53:0e:14:4a:
                    48:e8:00:2f:d3:af:8e:fd:a0:f9:a7:6e:03:09:33:
                    fb:7f:39:cd:7f:e6:5c:6e:8e:ed:97:6f:51:ce:cb:
                    c9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:41:72:E3:17:42:59:AD:05:39:EE:47:A4:95:C5:84:68:F0:3C:E8
            X509v3 Authority Key Identifier:
                keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:61:68:7f:39:99:45:3c:4b:df:dd:7c:ef:83:7d:65:77:e5:
         63:9a:ed:5e:16:17:81:2d:5d:d0:e8:c1:06:ab:06:e6:1a:0e:
         43:cc:29:f5:3e:05:95:b2:39:fb:8d:bc:e1:2f:e4:00:b9:1d:
         b5:2d:e9:2e:f0:dc:58:9c:bf:19:f6:13:c4:22:b0:50:af:ac:
         a4:ee:49:ff:6d:07:48:26:e6:d7:37:b5:af:cc:07:ab:0d:99:
         53:71:39:a5:8e:6c:96:cc:29:61:1c:8a:e2:7c:d9:d6:3a:bb:
         76:c6:f7:4f:d8:05:a2:d5:e4:84:b9:a9:07:49:66:1d:6f:83:
         50:31:cb:5f:79:a5:14:95:14:36:34:7d:8b:e6:8c:59:4d:4a:
         2e:6d:fe:34:b6:58:2e:0d:d3:4e:db:89:b7:91:59:9f:20:38:
         ae:a8:f5:98:3f:bb:9b:ef:7a:30:e0:c7:07:0b:a3:66:6f:db:
         ac:80:23:cb:5a:f6:b0:5d:28:2d:42:2f:62:e0:fd:8f:65:b1:
         d6:af:ed:69:d2:6f:8c:8a:3d:03:e1:60:aa:c2:2c:55:15:dc:
         58:37:8f:b5:1f:86:fb:a1:20:98:65:24:af:62:4c:c0:11:b4:
         18:b1:ce:15:02:dc:29:25:a2:71:0c:5b:7d:d1:1d:d4:67:8b:
         21:f8:3b:6c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUEHP2AcVT/6+DA/Ps5wCXTAnoRX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz
QTdBOEIyQzAeFw0yNjA5MTkyMzIwMDFaFw0yNjA5MjEwMjIzMDFaMDMxMTAvBgNV
BAMTKEZBNDE3MkUzMTc0MjU5QUQwNTM5RUU0N0E0OTVDNTg0NjhGMDNDRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqxqETJMIlDs+K6i3BEFLdJZO
KoUP/33YLrzvTmwAaieHD4YK0MyionKmEtCBV/Qsa9NI943MBBeRsUeTbLfKyC0N
GMznUX92AQrNcEZXoJgu+evSq3FHkIdE8sui2R2HExrqsi9rfAB07TErIvPoEl5B
A/D22MtKwz5HLCx89yRGnBG4uS8G91N/ma6KhDDxGz89Qtd8lJAPsTOko/E2dNnn
IH2FJKv4cyhY8vwnFNGzxV9xD6TFwwFXqKPlYzcT87dk3m86FAkMOF7lBroMPNz9
fjPNqzZzEP+wUw4USkjoAC/Tr479oPmnbgMJM/t/Oc1/5lxuju2Xb1HOy8nBAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU+kFy4xdCWa0FOe5HpJXFhGjwPOgwHwYDVR0j
BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz
YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB
MDY0M0NBQzNBN0E4QjJDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82L0Q1NEQ0NDNC
NjdDMUNDNUVBMUI1NDQ2RUEwNjQzQ0FDM0E3QThCMkMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbYWh/
OZlFPEvf3Xzvg31ld+Vjmu1eFheBLV3Q6MEGqwbmGg5DzCn1PgWVsjn7jbzhL+QA
uR21Leku8NxYnL8Z9hPEIrBQr6yk7kn/bQdIJubXN7WvzAerDZlTcTmljmyWzClh
HIrifNnWOrt2xvdP2AWi1eSEuakHSWYdb4NQMctfeaUUlRQ2NH2L5oxZTUoubf40
tlguDdNO24m3kVmfIDiuqPWYP7ub73ow4McHC6Nmb9usgCPLWvawXSgtQi9i4P2P
ZbHWr+1p0m+Mij0D4WCqwixVFdxYN4+1H4b7oSCYZSSvYkzAEbQYsc4VAtwpJaJx
DFt90R3UZ4sh+Dts
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:04:07 2026 by rpki-client