Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
File:                     94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json)
Hash identifier:          wh4u/8amiCKOLhd0k2C7+TbK8ZAVE4w1XmCORckMy5k=
Subject key identifier:   00:73:58:FC:CE:5E:A0:DF:E9:D0:0D:C9:ED:A6:A5:76:BE:56:18:2C
Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5
Certificate issuer:       /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5
Certificate serial:       19FBA49EB2F8073EC81357AF1530FD7E605239BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
Manifest number:          0271
Signing time:             Sat 28 Feb 2026 22:38:30 +0000
Manifest this update:     Sat 28 Feb 2026 22:33:30 +0000
Manifest next update:     Mon 02 Mar 2026 00:58:30 +0000
Files and hashes:         1: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: kx3ayya4lPrQllp+nogQF65nwTl1whhZEUlAaHtTvAM=)
                          2: AS153176.asa (hash: YcrzTg+SBKdEmHSIK1udwefH81IvEnVPIpXsuF8j4aw=)
                          3: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: Ehhb6kk7SnVS6NFWjHhPeHA7BzolngzGsH9w+SmagEY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 00:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fb:a4:9e:b2:f8:07:3e:c8:13:57:af:15:30:fd:7e:60:52:39:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5
        Validity
            Not Before: Feb 28 22:33:30 2026 GMT
            Not After : Mar  2 00:58:30 2026 GMT
        Subject: CN=007358FCCE5EA0DFE9D00DC9EDA6A576BE56182C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:8d:ae:5f:91:95:e0:50:da:94:53:54:dc:
                    03:44:85:3d:c1:34:19:ee:7b:33:cf:f5:aa:84:0a:
                    55:9c:a1:10:df:b9:96:df:56:d7:98:01:48:fd:7d:
                    c6:08:f2:8f:ef:41:c6:3e:27:50:5f:9b:86:61:99:
                    3a:c7:74:70:d4:cb:55:fd:cd:73:fe:3e:3c:89:cb:
                    ec:58:17:22:64:cd:3a:ca:91:d6:6e:57:45:48:1b:
                    f0:4b:43:1e:94:a9:92:d1:4e:0f:42:57:dd:bc:27:
                    eb:da:f2:20:61:65:38:7c:19:f5:ca:58:fa:27:8e:
                    58:bb:73:ee:a3:51:4b:3b:26:7c:39:70:23:7e:2c:
                    6d:8d:b6:3d:65:aa:aa:86:c6:7a:ec:25:4d:68:93:
                    0d:4e:1c:9b:a8:f1:30:15:b2:4b:42:06:98:d3:ec:
                    bb:f4:ab:90:71:12:5d:9a:5b:9c:62:de:4b:f6:c9:
                    b9:a6:f3:ce:18:24:03:51:4d:79:0c:8f:e1:cd:4c:
                    a4:fe:15:27:7d:09:76:03:80:0e:2e:d0:7b:b9:22:
                    58:60:54:d2:51:14:6c:c5:1a:36:95:03:cc:9d:9c:
                    f3:85:09:6b:fb:00:6b:cf:c0:ad:fb:05:d2:bd:7c:
                    49:20:b1:8e:e6:da:54:67:de:83:ae:07:72:29:77:
                    5a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:73:58:FC:CE:5E:A0:DF:E9:D0:0D:C9:ED:A6:A5:76:BE:56:18:2C
            X509v3 Authority Key Identifier:
                keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:12:97:94:09:5f:d2:f2:ac:5f:99:ed:f4:e5:87:20:7d:
         e0:47:58:07:d0:99:2f:c0:49:94:2b:4a:4e:92:29:db:47:c3:
         b9:66:17:83:32:30:e3:94:d4:48:a0:0f:0c:dc:0b:ae:97:a3:
         d1:a8:a7:84:62:0d:36:29:e4:a1:38:71:10:31:60:f2:69:75:
         62:ee:a2:ea:3c:9b:4f:36:4e:77:59:fe:d4:71:49:05:ad:b4:
         9f:81:e2:ba:c2:92:08:07:4d:d5:73:0f:4c:82:95:0b:30:94:
         33:c9:c4:bb:75:26:d1:08:99:57:df:71:22:d8:aa:de:16:ef:
         89:88:ca:f2:20:67:bb:65:ba:dd:85:13:ad:d4:6c:b0:ea:d4:
         68:31:0b:6a:93:f2:6a:d0:7f:d0:93:93:0b:10:46:21:66:0d:
         e0:ae:08:86:95:a0:a5:5b:35:e5:7c:4e:7c:2b:60:e3:26:dd:
         b8:44:a2:d3:22:c5:9b:e8:61:dc:8b:fe:70:30:23:f3:7d:d7:
         3e:f8:74:96:33:39:9c:e1:d9:77:75:29:bc:e8:b0:45:bc:6c:
         44:94:80:f5:bc:10:54:dc:bc:87:13:f7:14:65:05:93:c4:c8:
         ba:ab:99:6d:76:03:ff:c8:a0:79:1f:52:d2:6d:4a:44:ab:6b:
         8e:9b:6e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:06 2026 by rpki-client