Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
File:                     D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft (raw, json)
Hash identifier:          oqVVM7AEBsQvwBMgsRcHbJMXJTar1fP0TSUi3crQgss=
Subject key identifier:   95:A2:58:C7:A1:FF:A8:FD:54:70:D1:00:5F:50:6B:26:2C:AE:DE:AF
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Certificate issuer:       /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial:       1BE071FAF95B36DB4185C129796968C71D7B6461
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
Manifest number:          020B
Signing time:             Sun 01 Mar 2026 11:41:11 +0000
Manifest this update:     Sun 01 Mar 2026 11:36:11 +0000
Manifest next update:     Mon 02 Mar 2026 14:07:11 +0000
Files and hashes:         1: 326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa (hash: 1Mq7zwNWFVrFO4xAnw5YP+F5xNQQ0SyBjbZkZrxTF84=)
                          2: 326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa (hash: w6mEbr64LdAB6p4ChAQnVfiw39Sxb+bv0QiR3+vbqY0=)
                          3: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: 1HZdS5easOTzXqx+g13vhM2s0dAHymCGMDkKOH0yoVM=)
                          4: B113B31E9F01A2F41870E8C77492B18EBA830E07.cer (hash: As5WhwUwLWI9JeIpt7PN+dgYM3VPE7epMSgJS8Fw8N0=)
                          5: 326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa (hash: hYctHpFLZLrdZbOQKdUp5gBu76GVnDNrzAlSQDHkf8o=)
                          6: D36546790928F44FF74C564231471FA1D8D2A97B.cer (hash: Yk51yNZZDrc+NxDYYI7+6vxfYJuE5Kc7CvebjeR4bSQ=)
                          7: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: NS2/G+GE49Imka70FRvnrWigl/cu3jsnXcP9mUuT9+I=)
                          8: 326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa (hash: ZxaQKtSoKlgJmO3J3XqDtpxRpsMoDdJh04xqfrfCdBY=)
                          9: 326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa (hash: huX32HgMgk4Y2C020+tWpyikLyAfVZ2TMuvxXCD12N4=)
                          10: 326130363a313238333a633131663a3a2f34382d313238203d3e20323131303636.roa (hash: MNB/IgLpAkC8BkMxVhMNWcW04HjOlc0Y//dSW/FFyhU=)
                          11: 326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa (hash: NbESZTGbsnyViyuGLC+8sRHMyf8Ojiq0F9ioTriEM2E=)
                          12: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: +z0Qc7b7Pm0YyOUO4LNkttIVrmFKBrkfbPc/zfrDGTk=)
                          13: 326130363a313238333a383966303a3a2f34342d313238203d3e20323134303333.roa (hash: VPyKJTdMnGQqSuzFbkFQ60iQgNT+2pht93oF2htafCQ=)
                          14: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl (hash: zxLbO6vQwedtDfqWa/fNRynJVBC2TyhfsN/EmmaqpeY=)
                          15: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: B3lCmzbMTTF4JEYaqxL5SocH8KSyx1ZOaOngpc1c9xY=)
                          16: 326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa (hash: SDzB93ZmXL/9JaeiFrClXOKOMdMaPjQdBjiuTrcER6c=)
                          17: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer (hash: E+mLqx7rEgzkPAUn5rJoLra7vStPRhm9ryAmKBFIvQ0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e0:71:fa:f9:5b:36:db:41:85:c1:29:79:69:68:c7:1d:7b:64:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
        Validity
            Not Before: Mar  1 11:36:11 2026 GMT
            Not After : Mar  2 14:07:11 2026 GMT
        Subject: CN=95A258C7A1FFA8FD5470D1005F506B262CAEDEAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:85:c5:ab:ab:a3:a0:2b:79:cb:d9:72:48:c1:
                    2b:6b:35:ef:2a:72:f8:32:06:fb:af:83:e9:57:fa:
                    a3:98:de:3f:61:bf:78:7d:b0:c5:d8:1b:55:ce:95:
                    85:0b:a9:a0:2b:fa:95:61:5e:c9:76:da:ef:b9:d4:
                    b5:d7:df:6b:65:ac:2f:af:ae:f1:6d:c2:ae:91:b7:
                    48:5c:70:e6:b0:f7:1a:b7:9f:a1:33:84:76:c4:18:
                    5e:92:23:9f:e1:1b:88:58:bf:ea:ab:49:52:42:72:
                    0f:89:16:c4:b4:52:26:17:86:d0:79:d3:7c:46:ff:
                    fd:28:e7:9e:8b:c6:6d:5b:5e:6f:bd:01:b2:69:46:
                    14:ff:10:f1:c5:6d:58:03:12:7f:6d:29:c3:1d:17:
                    1d:d9:d2:4a:9f:5b:48:21:49:95:14:34:f6:52:05:
                    44:b7:94:1d:a2:31:3d:a7:0c:14:65:8e:d3:52:22:
                    67:84:2e:99:ee:5e:58:60:09:e5:3c:6c:44:ab:bb:
                    cf:b5:e6:0a:1a:4f:c8:fd:ae:f4:80:71:8c:e0:2a:
                    48:9c:17:69:fb:2a:91:e9:c9:4b:cb:ae:db:93:97:
                    74:ff:34:29:cf:ba:e4:39:97:53:98:a8:ae:38:c9:
                    7c:21:39:82:bf:a5:bd:4a:4f:ab:ee:aa:ed:a4:94:
                    4c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A2:58:C7:A1:FF:A8:FD:54:70:D1:00:5F:50:6B:26:2C:AE:DE:AF
            X509v3 Authority Key Identifier:
                keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d3:37:b6:47:06:02:ad:20:d3:cb:ea:84:fe:d9:3d:f1:4c:
         eb:ef:95:c1:82:87:0a:34:87:08:46:0a:eb:ab:e3:dd:28:fb:
         9d:34:92:5c:7a:3b:56:82:d6:bc:e0:d9:51:0a:a3:93:e3:60:
         94:d4:20:86:d8:9b:b3:96:51:d3:50:b8:c0:88:3b:34:1c:c1:
         be:9c:44:80:4b:92:51:fc:10:4d:c3:44:5d:62:3f:32:74:9c:
         bd:28:3f:db:9a:7d:93:53:26:16:0a:35:c7:92:4f:9d:9c:ac:
         a5:db:c9:2a:ac:cd:79:f2:5a:44:d3:9e:3e:f7:ef:c7:2f:71:
         d8:d9:5b:e4:4d:07:49:86:32:ae:4c:7b:04:f8:34:82:5e:2b:
         12:0c:06:5f:52:4d:05:3d:4a:b6:cd:05:0e:b9:f3:5b:a9:6d:
         21:81:7d:2e:04:c8:cf:e3:c2:06:08:19:9a:a5:bb:25:71:1e:
         83:09:8d:e9:ae:2c:dc:f2:3c:55:cc:8c:ac:5f:8b:7f:1e:0e:
         fc:d3:aa:93:46:2c:81:b3:e3:57:6f:39:91:28:0f:50:04:d6:
         3f:43:bf:6b:e1:10:c3:57:84:03:8e:d0:e5:51:0c:3e:17:7f:
         76:e9:38:a8:78:d9:c3:f1:4c:ec:9b:5a:07:88:7d:5b:38:97:
         c4:13:5c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:44 2026 by rpki-client