Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft
File:                     CE62AFC506F1860480AAF6A723393278644CFD7F.mft (raw, json)
Hash identifier:          SRUQ6TO/8lVZyWzfhUBe7XlHs/t+nPD8zKPm1nH4KvU=
Subject key identifier:   3F:5F:46:86:34:8D:4D:F4:BC:53:55:E7:FC:25:89:36:8F:17:DB:12
Authority key identifier: CE:62:AF:C5:06:F1:86:04:80:AA:F6:A7:23:39:32:78:64:4C:FD:7F
Certificate issuer:       /CN=CE62AFC506F1860480AAF6A723393278644CFD7F
Certificate serial:       1E3B25BFF194DE25FDEE18E13E21B207F03F95BF
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft
Manifest number:          62
Signing time:             Fri 17 Apr 2026 18:40:06 +0000
Manifest this update:     Fri 17 Apr 2026 18:35:06 +0000
Manifest next update:     Sat 18 Apr 2026 20:44:06 +0000
Files and hashes:         1: 326130663a363238333a663030303a3a2f33362d3438203d3e20323135363835.roa (hash: bftpMskrnD/aa36IYmV90P4CJu+vNDx21LpK22sMgD4=)
                          2: CE62AFC506F1860480AAF6A723393278644CFD7F.crl (hash: Ve8KZof8DPHlyvrinXi7Q0oyswJGqbpjT5C/DusQw1A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 08:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3b:25:bf:f1:94:de:25:fd:ee:18:e1:3e:21:b2:07:f0:3f:95:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE62AFC506F1860480AAF6A723393278644CFD7F
        Validity
            Not Before: Apr 17 18:35:06 2026 GMT
            Not After : Apr 18 20:44:06 2026 GMT
        Subject: CN=3F5F4686348D4DF4BC5355E7FC2589368F17DB12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:76:96:03:02:65:24:bf:53:87:c5:93:de:
                    0f:a8:a1:fd:58:17:c0:3b:2a:cb:f2:78:bc:77:de:
                    ef:e1:3c:92:ac:27:c0:e1:cb:67:49:44:c7:04:e2:
                    c6:d9:50:79:a6:2f:63:c0:dd:81:fb:6b:21:15:9e:
                    3b:12:33:69:40:89:05:64:6e:0d:55:6d:dd:a1:a2:
                    16:03:37:34:60:f0:85:20:08:f7:70:03:81:4d:69:
                    5d:4b:03:27:20:61:4f:1b:35:66:cf:e7:71:0b:d7:
                    56:17:d7:da:8c:60:07:1d:9d:e0:82:f9:98:59:c8:
                    14:d9:8e:ed:a4:61:9f:6a:49:8b:5c:a2:b5:e6:52:
                    a3:02:b4:c8:39:07:4f:fd:2d:7d:d1:99:3a:13:4c:
                    2b:9b:e8:cc:9a:db:54:6b:6e:14:a4:24:a1:3c:60:
                    ab:72:a4:df:f6:64:48:56:91:94:01:1b:85:ba:74:
                    59:5e:32:a6:63:d7:e5:80:42:53:3f:68:4e:ba:4a:
                    c5:74:2c:03:df:ca:45:3e:8c:ba:87:61:15:3e:a0:
                    53:48:ff:89:4b:f8:98:21:e9:77:9d:7a:f9:4d:55:
                    3d:2d:a9:39:b8:37:f1:74:e0:e3:f1:9f:e3:ef:00:
                    2f:83:8e:77:c7:ad:73:ee:be:bb:d5:4a:95:e5:2f:
                    2f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5F:46:86:34:8D:4D:F4:BC:53:55:E7:FC:25:89:36:8F:17:DB:12
            X509v3 Authority Key Identifier:
                keyid:CE:62:AF:C5:06:F1:86:04:80:AA:F6:A7:23:39:32:78:64:4C:FD:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3c:8b:62:91:8c:4d:15:94:ce:9e:6d:89:08:ce:a9:4c:14:
         ba:13:3f:6f:d1:37:d8:90:a7:61:5c:c3:1f:e7:f0:59:6f:e1:
         dd:82:d4:b4:08:a9:08:4c:50:98:6e:8a:fe:07:eb:ae:19:81:
         d7:a2:a9:23:aa:fb:80:b9:ff:62:f5:11:51:6c:fc:63:42:5e:
         e6:e4:8e:a9:ef:31:50:f4:69:dd:10:b5:0e:cb:cc:71:f5:aa:
         3f:21:f3:09:41:22:cc:89:8c:1c:95:08:24:8d:5b:f5:e3:0c:
         b3:c3:32:61:2a:4d:00:a1:01:9c:1f:0d:33:18:37:20:49:8f:
         c6:87:23:59:2d:e6:8c:82:2e:5c:33:96:6e:1a:7f:4c:4b:47:
         7e:ff:9d:22:15:28:fc:c7:bb:49:6d:af:51:9c:fd:0d:fd:6b:
         e4:3b:d0:8b:42:a2:66:09:71:a5:b6:07:e1:d6:88:f7:a9:35:
         d2:2c:9b:d4:72:a8:71:6b:a8:37:bd:37:8d:d6:2f:ac:64:5b:
         81:6f:97:80:3d:2f:db:b6:01:5d:74:05:75:89:b4:82:dd:7f:
         b4:94:81:69:d6:8f:a7:fd:38:1c:17:a1:b1:bb:c6:79:2b:a3:
         50:01:c7:48:9d:0c:d7:43:2c:ad:83:e3:de:02:bb:33:b4:41:
         d2:86:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:00:51 2026 by rpki-client