Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.mft
File:                     C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.mft (raw, json)
Hash identifier:          QKzTD2erNUxW/ASOUOMgfdMAPTLRJ6O/S4zLk6jEwxw=
Subject key identifier:   50:4A:41:85:AE:14:B6:03:AE:C7:0A:F8:53:A8:F0:E3:B6:D5:57:10
Authority key identifier: C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D
Certificate issuer:       /CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca
Certificate serial:       1EC184E5122DB7DD013561162BEFB63D80E98E9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.mft
Manifest number:          01DA
Signing time:             Sun 15 Nov 2026 03:16:45 +0000
Manifest this update:     Sun 15 Nov 2026 03:11:45 +0000
Manifest next update:     Mon 16 Nov 2026 05:02:45 +0000
Files and hashes:         1: 36342e3139302e3233372e302f32342d3332203d3e203233353037.roa (hash: 9d7We14BMYd8IlFZIeB7FSzTofvQV7VDAxO5OEwDCeA=)
                          2: 323630323a663730343a3a2f34302d313238203d3e203233353037.roa (hash: h6IzbBhIZNGCVCd6TJz6+WO1Mg61oXrRNyIMsqQYWc4=)
                          3: C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl (hash: Yr5vwGvu2qghxriBts6wVtmWpoJ27x+AEmYA+KpxULs=)
                          4: AS23506.asa (hash: bhGh+c3Ih2QuOJSgaxNsPUHR8xEaC/v1u3mjsEZ8kHk=)
                          5: AS23507.asa (hash: R8Y+7hFGzucocYdSgCovVHf1BJqRcfHZmoKLzB/DAJ4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c1:84:e5:12:2d:b7:dd:01:35:61:16:2b:ef:b6:3d:80:e9:8e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca
        Validity
            Not Before: Nov 15 03:11:45 2026 GMT
            Not After : Nov 16 05:02:45 2026 GMT
        Subject: CN=504A4185AE14B603AEC70AF853A8F0E3B6D55710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:1e:91:4b:01:6a:9b:53:0b:5a:f6:db:29:
                    b5:7b:44:31:28:c2:f4:ad:8c:a6:08:d8:9d:0a:56:
                    6b:fb:2d:0a:26:08:7a:65:bd:10:f6:ac:20:a2:41:
                    2a:23:a1:1c:bb:2d:f8:8d:4b:f3:4b:37:d4:e8:24:
                    c3:d2:0c:2d:fb:55:dd:d9:90:e8:b6:cf:64:a1:d3:
                    5f:a3:98:03:ea:d3:66:b0:6b:bb:99:d9:78:c8:d8:
                    ff:c0:3f:8a:fa:83:a1:a2:39:6f:73:63:05:34:05:
                    ec:7b:d6:5f:e3:1d:cb:69:51:c3:dd:f8:2f:b4:c1:
                    c1:dd:c1:42:53:02:6a:2a:00:f9:f1:64:ce:ec:57:
                    26:e3:fd:53:6e:77:18:2d:d1:cf:e3:19:12:5a:95:
                    80:25:0c:21:22:32:b4:91:e5:4c:8e:bc:93:ba:cc:
                    45:c4:99:65:cd:7b:75:ec:c7:d8:32:c9:a9:5e:ad:
                    d6:66:f1:73:d8:06:a3:64:4e:62:79:c4:16:20:0c:
                    da:e9:71:3e:a0:8f:49:bc:13:1a:0d:3a:c4:0a:f5:
                    f4:f6:5c:08:53:8b:57:37:f2:81:71:16:74:d0:02:
                    7f:1e:99:6e:d4:cb:7a:07:d1:a0:07:ec:c4:f3:92:
                    5e:46:b0:f7:b9:fd:ec:7b:32:af:8d:41:fc:9d:b6:
                    3e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4A:41:85:AE:14:B6:03:AE:C7:0A:F8:53:A8:F0:E3:B6:D5:57:10
            X509v3 Authority Key Identifier:
                keyid:C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b5:33:be:7e:88:0b:c1:66:0c:c2:42:b9:1e:1a:ea:fe:6a:
         9a:02:04:23:0a:5c:29:84:f3:46:f0:f3:fc:f9:d4:c1:f7:f3:
         5b:e9:16:75:6b:43:55:37:5d:d8:b2:3c:74:f5:ae:49:48:48:
         eb:6b:62:2c:ea:86:7b:2f:33:68:9f:ad:b2:39:cf:86:37:b6:
         d6:49:5a:45:87:6e:8a:a0:f1:21:74:d4:10:a3:76:06:a6:1d:
         c4:f3:f8:78:e0:9a:8c:ca:17:1a:65:8b:df:65:cd:a4:48:d8:
         7d:81:31:11:95:fd:d2:e7:4b:86:1c:75:92:d4:e2:4c:80:47:
         39:2f:68:5a:f2:35:1d:8c:51:a4:bb:6a:9a:e5:71:f1:b3:10:
         cb:9d:7d:f4:4d:03:29:a2:fb:4a:b4:7f:61:34:5c:fd:7c:85:
         00:6a:d3:04:5f:d9:57:ca:35:27:89:8b:0f:cd:f8:90:c3:a2:
         bd:5e:47:7c:39:aa:0e:2b:66:4c:87:f8:73:1d:31:af:ba:58:
         d5:e0:bc:43:ea:4f:f3:0c:6c:ae:8d:0b:86:95:3e:f0:93:4a:
         57:65:b9:dd:ba:47:4c:0c:e2:d0:b9:4f:62:23:43:df:05:8b:
         e6:53:96:70:d8:79:11:cb:64:13:29:0a:18:21:ea:9d:ad:e7:
         1c:40:57:a5
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUHsGE5RItt90BNWEWK++2PYDpjpswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjJiMTM5MWEwMGUyZDhlOTUyZmFhNGRkNzgwZGU5MTc2
ZDY1ZjkzMmNiZDg2YTY5Y2EwHhcNMjYxMTE1MDMxMTQ1WhcNMjYxMTE2MDUwMjQ1
WjAzMTEwLwYDVQQDEyg1MDRBNDE4NUFFMTRCNjAzQUVDNzBBRjg1M0E4RjBFM0I2
RDU1NzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqIekUsBaptT
C1r22ym1e0QxKML0rYymCNidClZr+y0KJgh6Zb0Q9qwgokEqI6Ecuy34jUvzSzfU
6CTD0gwt+1Xd2ZDots9kodNfo5gD6tNmsGu7mdl4yNj/wD+K+oOhojlvc2MFNAXs
e9Zf4x3LaVHD3fgvtMHB3cFCUwJqKgD58WTO7Fcm4/1TbncYLdHP4xkSWpWAJQwh
IjK0keVMjryTusxFxJllzXt17MfYMsmpXq3WZvFz2AajZE5iecQWIAza6XE+oI9J
vBMaDTrECvX09lwIU4tXN/KBcRZ00AJ/Hplu1Mt6B9GgB+zE85JeRrD3uf3sezKv
jUH8nbY+UwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFFBKQYWuFLYDrscK+FOo8OO2
1VcQMB8GA1UdIwQYMBaAFMVMVU1LCwRh2aAeKgblX8DsTtg9MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzZjNDNkM2E2LTdkMTMtNDg5NS05NTlk
LTQxOWI5YTZlYjM0Yi8yL0M1NEM1NTRENEIwQjA0NjFEOUEwMUUyQTA2RTU1RkMw
RUM0RUQ4M0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTct
NDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0w
ZGY4MTJmZjdkODcvMjJiMTM5MWEwMGUyZDhlOTUyZmFhNGRkNzgwZGU5MTc2ZDY1
ZjkzMmNiZDg2YTY5Y2EuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
NmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmViMzRiLzIvQzU0QzU1NEQ0
QjBCMDQ2MUQ5QTAxRTJBMDZFNTVGQzBFQzRFRDgzRC5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADS1M75+
iAvBZgzCQrkeGur+apoCBCMKXCmE80bw8/z51MH381vpFnVrQ1U3XdiyPHT1rklI
SOtrYizqhnsvM2ifrbI5z4Y3ttZJWkWHboqg8SF01BCjdgamHcTz+HjgmozKFxpl
i99lzaRI2H2BMRGV/dLnS4YcdZLU4kyARzkvaFryNR2MUaS7aprlcfGzEMudffRN
Aymi+0q0f2E0XP18hQBq0wRf2VfKNSeJiw/N+JDDor1eR3w5qg4rZkyH+HMdMa+6
WNXgvEPqT/MMbK6NC4aVPvCTSldlud26R0wM4tC5T2IjQ98Fi+ZTlnDYeRHLZBMp
Chgh6p2t5xxAV6U=
-----END CERTIFICATE-----