Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
File:                     D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft (raw, json)
Hash identifier:          a80lcA0JyXDEfFWXmQ0zDSdqiZuy6dP2JzpRBcX6U4c=
Subject key identifier:   63:90:23:71:5A:96:D6:4D:76:45:91:0B:33:04:90:C3:12:7D:38:EB
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Certificate issuer:       /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial:       2A13C3435EC5824C34BED5C72BDAA7F8F459C12F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
Manifest number:          0373
Signing time:             Tue 28 Jul 2026 08:49:39 +0000
Manifest this update:     Tue 28 Jul 2026 08:44:39 +0000
Manifest next update:     Wed 29 Jul 2026 10:55:39 +0000
Files and hashes:         1: 326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa (hash: NbESZTGbsnyViyuGLC+8sRHMyf8Ojiq0F9ioTriEM2E=)
                          2: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: 8KHKZ6yYYM4r4ctRfPeSiTlSU7jaEuT/g972q+E+CDU=)
                          3: 326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa (hash: SDzB93ZmXL/9JaeiFrClXOKOMdMaPjQdBjiuTrcER6c=)
                          4: 326130363a313238333a633131663a3a2f34382d313238203d3e20323131303636.roa (hash: zjVPAhp6+Y0ZXGnryErowWqTSn3vt1Dl/+J+eHpGuAk=)
                          5: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer (hash: E+mLqx7rEgzkPAUn5rJoLra7vStPRhm9ryAmKBFIvQ0=)
                          6: 326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa (hash: ZxaQKtSoKlgJmO3J3XqDtpxRpsMoDdJh04xqfrfCdBY=)
                          7: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: NS2/G+GE49Imka70FRvnrWigl/cu3jsnXcP9mUuT9+I=)
                          8: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: v5viufJUSKWuwj+d/Y1XFSYcf+6nXu4aUZj9tnF4HUs=)
                          9: 326130363a313238333a383966303a3a2f34342d313238203d3e20323134303333.roa (hash: VPyKJTdMnGQqSuzFbkFQ60iQgNT+2pht93oF2htafCQ=)
                          10: 326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa (hash: 4pHWpyVZFpmDYYnCP3t+rPQ/bvOYzNkXDNdwOaC6vs0=)
                          11: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl (hash: bwfrDPKCw9WS3zXzH58QUxPZFXlGLk8lRsYYU7rYFis=)
                          12: 326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa (hash: w6mEbr64LdAB6p4ChAQnVfiw39Sxb+bv0QiR3+vbqY0=)
                          13: D36546790928F44FF74C564231471FA1D8D2A97B.cer (hash: Yk51yNZZDrc+NxDYYI7+6vxfYJuE5Kc7CvebjeR4bSQ=)
                          14: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: OHOa8pdQ/+cUDWoy8JYEhdO3yt3e1qfHEUXnAM/72Is=)
                          15: 326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa (hash: huX32HgMgk4Y2C020+tWpyikLyAfVZ2TMuvxXCD12N4=)
                          16: 326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa (hash: 1Mq7zwNWFVrFO4xAnw5YP+F5xNQQ0SyBjbZkZrxTF84=)
                          17: B113B31E9F01A2F41870E8C77492B18EBA830E07.cer (hash: dY9YO6OBP4MP/E8JLnAQ8jLu99Fqa8+yWttAesQ43o0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 09:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:13:c3:43:5e:c5:82:4c:34:be:d5:c7:2b:da:a7:f8:f4:59:c1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
        Validity
            Not Before: Jul 28 08:44:39 2026 GMT
            Not After : Jul 29 10:55:39 2026 GMT
        Subject: CN=639023715A96D64D7645910B330490C3127D38EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:2d:9d:ca:41:b1:cf:f0:9e:55:af:73:f4:
                    87:05:fa:c1:cf:6b:82:9e:4a:52:6c:3a:75:7e:10:
                    8c:fd:54:f2:2a:b0:b9:f9:9a:92:92:bc:b4:a0:9e:
                    27:f2:74:fa:a4:cc:81:3c:7f:d3:30:5b:66:46:a1:
                    4d:1b:bb:7a:f6:9b:78:23:49:b1:81:8d:27:5a:04:
                    82:3c:b5:dc:99:c5:75:04:e0:6c:e4:4c:b1:d0:8d:
                    62:52:57:dd:c4:8a:8d:dc:e9:1d:c9:33:bb:2f:0f:
                    6c:e1:0d:05:1f:4c:4e:cd:11:6b:77:e8:15:b4:84:
                    74:cc:b0:49:31:cf:ae:fe:cd:d8:8b:ce:0a:4a:79:
                    d0:c7:de:70:47:8e:d9:0b:61:49:e7:c7:a0:16:9f:
                    f8:45:5e:a6:fc:5d:5f:8f:1d:c4:58:5e:66:52:9a:
                    ff:f5:2f:1a:eb:8f:b4:e0:0c:e7:7b:58:b5:13:e9:
                    63:80:f4:9f:f7:c4:c5:53:4d:73:32:18:d1:94:70:
                    77:89:70:e4:0d:e4:f1:22:cf:20:be:c3:45:62:24:
                    e3:3a:16:ce:f8:7c:de:5e:2a:a8:aa:e6:b5:e3:63:
                    95:74:af:05:90:cd:58:4d:65:70:bd:42:14:9d:21:
                    8b:b7:e7:15:f5:5c:00:6d:78:16:a9:39:f7:74:ec:
                    9b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:90:23:71:5A:96:D6:4D:76:45:91:0B:33:04:90:C3:12:7D:38:EB
            X509v3 Authority Key Identifier:
                keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:84:e3:32:ac:01:e6:7b:5f:c6:07:30:58:15:6b:a9:24:7b:
         f5:2c:76:72:95:80:7d:44:5e:6a:02:5b:1a:d4:3a:af:e1:85:
         89:3c:c9:9e:fd:e8:eb:9c:ef:8d:74:86:a1:00:69:ff:9d:42:
         b6:33:5e:40:69:12:af:59:a0:ca:e6:e5:5f:a5:5a:9d:19:8d:
         1c:a5:21:f3:c8:7a:72:31:8d:d0:00:d5:f4:09:09:c3:16:ca:
         01:80:8d:1a:d3:0e:26:33:e3:f2:d1:9d:fb:8d:d6:58:a5:98:
         67:2a:86:79:9b:3d:f5:95:9c:af:76:ce:d0:0f:d5:ea:86:40:
         ea:7b:d6:64:48:f2:9a:a2:7c:44:1f:e4:dd:21:a3:51:bf:a7:
         29:41:f6:bc:84:67:54:3e:9b:fd:cc:79:d1:e0:e1:88:fe:f3:
         35:e6:83:b3:92:68:db:c7:c5:26:3a:6c:a5:84:a9:4e:e5:ca:
         ca:7e:80:69:75:ee:c3:b8:54:fa:69:42:b6:85:79:60:ce:7b:
         83:25:67:89:1c:5c:45:20:7e:11:97:cb:2f:94:6f:3b:0b:19:
         e2:cb:65:10:4d:2a:f7:5e:84:7f:10:be:bb:cd:93:d2:22:30:
         ef:14:72:9a:aa:1f:8f:eb:0d:3c:83:83:7a:ba:bd:2b:32:3d:
         fe:89:ef:cf
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUKhPDQ17Fgkw0vtXHK9qn+PRZwS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz
QTdBOEIyQzAeFw0yNjA3MjgwODQ0MzlaFw0yNjA3MjkxMDU1MzlaMDMxMTAvBgNV
BAMTKDYzOTAyMzcxNUE5NkQ2NEQ3NjQ1OTEwQjMzMDQ5MEMzMTI3RDM4RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Cy2dykGxz/CeVa9z9IcF+sHP
a4KeSlJsOnV+EIz9VPIqsLn5mpKSvLSgnifydPqkzIE8f9MwW2ZGoU0bu3r2m3gj
SbGBjSdaBII8tdyZxXUE4GzkTLHQjWJSV93Eio3c6R3JM7svD2zhDQUfTE7NEWt3
6BW0hHTMsEkxz67+zdiLzgpKedDH3nBHjtkLYUnnx6AWn/hFXqb8XV+PHcRYXmZS
mv/1Lxrrj7TgDOd7WLUT6WOA9J/3xMVTTXMyGNGUcHeJcOQN5PEizyC+w0ViJOM6
Fs74fN5eKqiq5rXjY5V0rwWQzVhNZXC9QhSdIYu35xX1XABteBapOfd07JvXAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUY5AjcVqW1k12RZELMwSQwxJ9OOswHwYDVR0j
BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz
YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB
MDY0M0NBQzNBN0E4QjJDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82L0Q1NEQ0NDNC
NjdDMUNDNUVBMUI1NDQ2RUEwNjQzQ0FDM0E3QThCMkMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwhOMy
rAHme1/GBzBYFWupJHv1LHZylYB9RF5qAlsa1Dqv4YWJPMme/ejrnO+NdIahAGn/
nUK2M15AaRKvWaDK5uVfpVqdGY0cpSHzyHpyMY3QANX0CQnDFsoBgI0a0w4mM+Py
0Z37jdZYpZhnKoZ5mz31lZyvds7QD9XqhkDqe9ZkSPKaonxEH+TdIaNRv6cpQfa8
hGdUPpv9zHnR4OGI/vM15oOzkmjbx8UmOmylhKlO5crKfoBpde7DuFT6aUK2hXlg
znuDJWeJHFxFIH4Rl8svlG87Cxniy2UQTSr3XoR/EL67zZPSIjDvFHKaqh+P6w08
g4N6ur0rMj3+ie/P
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:38:16 2026 by rpki-client