Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft
File:                     3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft (raw, json)
Hash identifier:          q8LfKctwVbjKIPR+vJ42gZZm34SeLvHZ70CQ6DzgN0Q=
Subject key identifier:   C9:9F:49:61:93:F7:71:3C:B1:13:DD:5C:0F:A8:92:2C:91:77:04:34
Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29
Certificate issuer:       /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129
Certificate serial:       31A3E5E533CBAF6DB230964B103928C6D080EE32
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft
Manifest number:          62
Signing time:             Mon 21 Sep 2026 08:54:20 +0000
Manifest this update:     Mon 21 Sep 2026 08:49:20 +0000
Manifest next update:     Tue 22 Sep 2026 22:28:20 +0000
Files and hashes:         1: 326130363a613030343a663230303a3a2f34342d3438203d3e20323134333434.roa (hash: z92MdQiIZJ3sKcgs/C+2o9rNwmAHaLw2ex5q/qeFzig=)
                          2: 326130363a613030343a3130303a3a2f34382d3438203d3e20323134333434.roa (hash: 1XO6BaxJAehfczsdJQ8Rzbbou7d39qHfdDB4qDEUpn8=)
                          3: 3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl (hash: swpsI93bdIViMg7gpq5zNEjtXndRI+dwlR4MjGeHy2s=)
                          4: 326130363a613030343a666630303a3a2f34382d3438203d3e20323134333434.roa (hash: Imul87Q0laBEeGR6b4JgXOeVMgCJd+ACSUs3lfjQcHw=)
                          5: 326130363a613030343a666630333a3a2f34382d3438203d3e20323134333434.roa (hash: VelXelft33k12XYWNbcZyfGji313tB3O+se8Vz2O0Mg=)
                          6: 326130363a613030343a666630313a3a2f34382d3438203d3e20323134333434.roa (hash: rj66gGeGCSu6M9bNO1IZ+A5V4bKw807AYT4Qm+efr9k=)
                          7: 326130363a613030343a323130303a3a2f34302d3438203d3e20323134333434.roa (hash: HxFZfUTbrZHfmVNt1/vqaLBxMyvs1FhTf0T5G/ahvr8=)
                          8: 326130363a613030343a313030303a3a2f34302d3438203d3e20323134333434.roa (hash: M6nGBPKue6YCxf9SFh1T7J0FxLdC8JG0866fChE4pXs=)
                          9: 326130363a613030343a666630323a3a2f34382d3438203d3e20323134333434.roa (hash: Rpoxo+W741nQxWdQnu6cWSiOcJwrjMgG3XrE0Jxxpgo=)
                          10: 326130363a613030343a663130303a3a2f34342d3438203d3e20323134333434.roa (hash: ukEukH98qa55+nHTcDyFZyqm8562MtPrS7Qu8JdsjfE=)
                          11: 326130363a613030343a666630343a3a2f34382d3438203d3e20323134333434.roa (hash: cTlyMWzn1otKgftLf6wz2nHMNohH5wLQR9+2Ig5i2Mc=)
                          12: 38352e3135352e3132362e302f32342d3234203d3e20323134333434.roa (hash: 0DB7s9al7RLpxWdRWQkg8WSpwyL2/PIxpLSTvn5HzAI=)
                          13: 326130363a613030343a376166653a3a2f34382d3438203d3e20323134333434.roa (hash: L2NhANx5wsG7RkkEaUYspESRMYdf/CaWrDA0nOnXnvI=)
                          14: 326130363a613030343a663330303a3a2f34342d3438203d3e20323134333434.roa (hash: r9x0/nErCsGq0USyqNIwYZx0Zz6rJMyg3ageBz9k7hk=)
                          15: 326130363a613030343a666666663a3a2f34382d3438203d3e20323134333434.roa (hash: 35yf8q/WF+ftBqPGIIAa3y1w8C8sN/ndAbGwnqOMhUo=)
                          16: 326130363a613030343a323030303a3a2f34302d3438203d3e20323134333434.roa (hash: 1D8X9kxUUskGkFIPDvUqS1a+r1AGrrO/CIdMtju/AtY=)
                          17: 326130363a613030343a3130313a3a2f34382d3438203d3e20323134333434.roa (hash: 2NZAbHY13xbv140pN3EL1ABNmOrvc/UVo8YH05InHBs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a3:e5:e5:33:cb:af:6d:b2:30:96:4b:10:39:28:c6:d0:80:ee:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129
        Validity
            Not Before: Sep 21 08:49:20 2026 GMT
            Not After : Sep 22 22:28:20 2026 GMT
        Subject: CN=C99F496193F7713CB113DD5C0FA8922C91770434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:8e:4e:9d:73:07:62:93:a0:07:ac:c4:3d:
                    0a:ea:b6:af:14:ca:c0:14:01:fa:72:42:40:7b:eb:
                    c3:3b:ae:cc:09:d3:ad:34:d1:8d:63:ac:5b:c3:a4:
                    f1:a4:83:5b:9f:02:c9:9a:a4:17:ee:8e:7b:2a:22:
                    f7:c6:bd:c4:4b:8d:c6:8b:bc:9a:91:42:be:15:6a:
                    b4:15:9e:00:e3:37:20:cc:79:0c:cb:84:0a:9d:13:
                    b9:c0:00:4d:b7:09:b0:cc:49:4b:65:a3:d2:00:94:
                    7d:e1:bb:16:d7:13:26:3f:ab:48:7d:17:37:d6:17:
                    0d:34:80:ae:37:65:19:f2:9e:8a:02:61:62:1b:31:
                    51:b7:00:79:7b:8a:0e:c1:39:fe:fd:3d:78:65:63:
                    b6:ed:69:8f:7d:c1:f1:c3:e8:52:5a:c7:61:ae:65:
                    4b:77:c4:b1:b6:34:54:6e:d4:83:88:72:ff:3b:f0:
                    82:1f:48:27:54:b6:f1:8a:25:32:8d:5f:91:21:cb:
                    10:bb:17:48:72:44:bf:5f:10:e8:25:2b:79:e2:2f:
                    f9:b3:f3:56:49:33:13:e7:27:05:90:09:04:ae:1f:
                    31:29:51:6f:24:d9:ba:72:8d:be:ff:be:81:be:73:
                    e8:0a:07:12:75:58:9e:d7:d9:3e:5c:64:50:f4:08:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9F:49:61:93:F7:71:3C:B1:13:DD:5C:0F:A8:92:2C:91:77:04:34
            X509v3 Authority Key Identifier:
                keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5b:d1:96:bb:ba:65:fe:7a:d9:de:fa:7e:40:b3:fa:3c:e9:
         b9:26:e6:ce:51:5b:b3:fe:70:d9:8f:64:54:81:c2:76:82:c1:
         b4:71:2f:f4:94:df:19:73:3e:66:9e:b8:33:19:07:ff:1e:7f:
         9d:aa:6d:b1:5f:7b:31:cf:f1:38:9f:48:38:8c:47:8e:10:3b:
         b4:82:9d:82:4d:33:ea:9c:2d:74:40:01:16:5b:58:36:b0:49:
         00:cc:9e:23:1d:4e:78:c1:c1:d8:93:92:0b:46:06:c2:8e:34:
         79:44:78:43:dc:30:7a:2e:58:90:2f:06:d9:90:f8:69:91:cd:
         67:82:bd:c7:0f:6a:89:0c:ae:15:ef:d8:06:e6:36:90:d3:91:
         27:6c:0f:c9:92:7d:0e:08:20:ee:f9:b2:5d:2b:03:8c:a3:75:
         73:81:15:10:5b:ce:0d:16:5b:1e:68:56:99:dd:c2:eb:e8:c3:
         29:4f:0c:aa:b5:99:7a:55:86:3e:ae:ff:76:a9:bf:f5:e4:bd:
         c6:cf:b5:a8:d6:ad:1c:37:ce:98:17:f6:b3:ab:ab:74:88:a1:
         a7:a2:33:c5:25:5e:47:4b:ae:94:33:65:bb:be:5a:24:4d:30:
         ed:36:68:1f:19:53:1f:62:74:56:ce:f0:d3:67:de:37:bd:a8:
         8c:2d:21:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:19 2026 by rpki-client