Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
File:                     3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json)
Hash identifier:          H0uJ+6DU8/J2mCv29PNiwjaQWLzXDMU0YwvZ6ikj8mE=
Subject key identifier:   89:FF:AF:CF:CD:26:E1:E9:9C:25:39:DD:C9:60:08:52:BB:35:0F:CD
Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A
Certificate issuer:       /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
Certificate serial:       521A2319E0719AD150D04B1EB9F3C8DE17920545
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
Manifest number:          0364
Signing time:             Fri 12 Jun 2026 12:32:20 +0000
Manifest this update:     Fri 12 Jun 2026 12:27:20 +0000
Manifest next update:     Sat 13 Jun 2026 14:36:20 +0000
Files and hashes:         1: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: uS9rqFKZ07mB8+YZnPlfGTxqPhMI6sgRdMjKP2z7h/I=)
                          2: AS402536.asa (hash: xuG+rFCTeYrWpHyA7Wqh+96IF5sUkS4DX7TKTpujn3k=)
                          3: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: 5MUl9FdsAfub+xompueGsMZ6YKcTEg+DUUPIDxm0jh4=)
                          4: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: huw/azfVtTuGJ+KiuQkTd/zUzlN/Io2KIFdebZxScmw=)
                          5: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1a:23:19:e0:71:9a:d1:50:d0:4b:1e:b9:f3:c8:de:17:92:05:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
        Validity
            Not Before: Jun 12 12:27:20 2026 GMT
            Not After : Jun 13 14:36:20 2026 GMT
        Subject: CN=89FFAFCFCD26E1E99C2539DDC9600852BB350FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:44:5d:f4:80:4b:81:1b:40:8f:cf:5d:8f:
                    b6:c0:cf:13:51:f9:ff:7b:2d:fc:98:09:82:46:69:
                    f2:fc:7a:6d:e8:90:f2:5c:76:4a:f3:4c:6a:cb:e6:
                    34:02:5b:aa:eb:50:5a:7c:4a:ef:9c:7e:b5:9c:e9:
                    0c:bd:2a:5e:93:cd:5a:03:65:5e:06:53:6c:f8:62:
                    e1:50:48:be:a0:14:2d:77:f7:f8:52:fa:7d:17:bc:
                    01:48:32:f2:b0:be:bd:fc:73:8c:e8:80:e9:5d:73:
                    00:f5:61:1a:d2:fa:b9:51:d0:d4:c9:49:a3:5c:0d:
                    df:8f:87:c6:58:a8:08:4b:76:41:ee:f7:be:df:e2:
                    51:d3:65:7d:ba:58:be:fc:56:e5:f8:67:a5:2b:b1:
                    15:f6:20:bf:38:37:36:88:0a:fb:a6:4d:46:99:dd:
                    00:5c:80:c0:8e:be:b6:8b:5c:1e:85:97:5b:6f:73:
                    22:bb:63:02:7a:ee:ac:94:aa:e0:29:5b:c9:2b:05:
                    37:08:a6:bb:b6:8b:4b:ae:80:44:83:70:ca:e8:c2:
                    f9:5c:8e:1d:e0:dc:cb:eb:8d:eb:5a:9d:f8:27:3c:
                    29:a2:bf:97:74:3b:bd:cd:e0:07:0d:7a:08:df:68:
                    0d:a8:0f:84:48:f8:62:84:5e:4e:51:cf:7a:31:8e:
                    97:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FF:AF:CF:CD:26:E1:E9:9C:25:39:DD:C9:60:08:52:BB:35:0F:CD
            X509v3 Authority Key Identifier:
                keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:8f:40:ed:73:a2:e5:40:81:d6:ff:3e:50:9a:36:08:b3:8a:
         79:68:0a:09:51:a3:a0:2c:d2:2b:57:1a:cd:9b:bc:9f:05:ed:
         ff:a9:da:85:54:67:57:a2:3e:d4:9a:29:59:8a:94:9b:5a:ce:
         c8:a3:fa:21:b2:6a:be:13:a0:94:63:9f:87:74:bc:19:08:fd:
         d3:64:b1:7a:d7:ae:f3:df:9a:6e:53:65:a2:d3:83:b0:ee:9e:
         49:e7:a5:2e:3f:70:d6:c7:f6:9f:e4:5e:2e:72:42:50:a6:84:
         06:34:20:70:39:b2:80:48:a5:1e:15:4c:c8:14:ec:93:77:8e:
         b2:70:40:f5:14:2e:7f:6e:bd:eb:4e:33:d3:30:72:73:75:78:
         26:b2:ce:d9:6e:8e:ea:d6:92:e2:42:d6:fd:0d:5f:29:79:d0:
         87:70:45:2b:10:17:fa:a0:ea:d0:aa:52:7d:d4:bd:59:d7:3a:
         84:b1:0a:f3:69:7c:a3:c6:ec:58:6f:38:fc:74:b4:34:7b:f1:
         74:04:14:a0:87:c2:14:95:85:3e:b9:95:9f:93:4e:fb:50:ed:
         66:16:a9:cc:9d:09:ed:c8:04:d5:11:0c:68:ce:ce:be:d9:a0:
         76:57:d9:fa:14:05:62:a5:64:8a:c7:0c:30:2b:37:be:c3:10:
         44:7d:dc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:28 2026 by rpki-client