Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
File:                     D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json)
Hash identifier:          YfuXOm7cX0m+wX1lmyYPivTFeN2fPkQrNkMA1L1sEqg=
Subject key identifier:   39:9B:5B:15:5B:7B:30:AF:F5:CE:B3:83:42:8D:43:82:18:F6:1A:BE
Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
Certificate issuer:       /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Certificate serial:       14740E820EC898EE98DB4F1D1F7A2CA35C6B9AD5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
Manifest number:          04DD
Signing time:             Fri 17 Apr 2026 06:29:39 +0000
Manifest this update:     Fri 17 Apr 2026 06:24:39 +0000
Manifest next update:     Sat 18 Apr 2026 09:24:39 +0000
Files and hashes:         1: 3139322e37352e3139372e302f32342d3234203d3e203530323234.roa (hash: XWa1v4ip3kV+r3f119VGt2tZ+jfePtDqCwe/xpwhK0k=)
                          2: 3139322e37352e3139362e302f32332d3234203d3e203539393933.roa (hash: KNSz4GsVtYNwvMtBZ3CvI93UcAzzIm+CEBGOCv59Ibc=)
                          3: 3139322e37352e3139362e302f32342d3234203d3e203139363830.roa (hash: yvXeEWRlMmnSNfIrbChtFM+svsvnH2vlOzvMg3QWUIM=)
                          4: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: Xa94VPXxaKxQavq41HUhZQOU53EjRewYZdqWNPMbOkI=)
                          5: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: IKZsZOl6X/++4meY1bPPWRIOa5Xg06G1xoacydkSWsY=)
                          6: 3139322e37352e3139362e302f32332d3234203d3e20323131363635.roa (hash: EY02IPhkI+bUEpVH6oIXpq9tMDByZp2XBlblwJ3ORuk=)
                          7: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: Lb+C3YJn54LxtUf0GyCu85JPoRsStAp6WFsAuvX2G+E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:74:0e:82:0e:c8:98:ee:98:db:4f:1d:1f:7a:2c:a3:5c:6b:9a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
        Validity
            Not Before: Apr 17 06:24:39 2026 GMT
            Not After : Apr 18 09:24:39 2026 GMT
        Subject: CN=399B5B155B7B30AFF5CEB383428D438218F61ABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:a6:2b:6a:61:9f:3e:7e:98:e6:c7:de:33:
                    51:41:a2:90:f9:f5:3a:4d:b3:0f:9c:18:fb:47:8e:
                    41:64:04:13:45:1d:23:b0:e3:44:2a:3e:ea:1c:bc:
                    d6:4c:34:8a:db:58:c4:33:3c:7d:c3:bb:21:80:39:
                    20:2d:f4:ed:b8:55:7d:d8:49:df:19:43:11:c2:b8:
                    99:62:b4:78:ac:e0:68:57:22:2f:60:85:11:9d:ab:
                    81:dc:1e:c1:ee:22:aa:35:f4:5f:76:5d:9d:b0:c4:
                    7a:25:1b:ee:ec:88:77:3c:21:36:f7:6c:b2:6c:91:
                    69:33:f4:ff:1c:52:ec:c1:8d:d6:8d:a1:0b:ea:f6:
                    09:0f:d1:98:17:c5:1b:e0:37:9f:71:a5:23:52:49:
                    a0:f0:03:8b:77:c8:18:d5:aa:e6:ad:90:32:d8:fb:
                    02:2e:5b:cb:52:4b:55:1a:0b:38:7a:4b:41:e4:52:
                    56:0a:e3:f6:3b:47:cc:14:97:86:04:20:3e:ef:75:
                    51:b5:d3:80:aa:25:29:b0:a9:e5:3b:6e:86:14:f3:
                    05:84:c4:7b:68:b4:98:72:01:e3:60:03:06:78:19:
                    a3:15:28:00:a7:3b:43:2c:3c:61:9f:a1:6d:cb:37:
                    27:4a:55:e9:33:27:96:ec:f4:dc:17:53:72:a9:fc:
                    43:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9B:5B:15:5B:7B:30:AF:F5:CE:B3:83:42:8D:43:82:18:F6:1A:BE
            X509v3 Authority Key Identifier:
                keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:cb:3e:8c:8f:d4:9b:28:cb:4d:13:e6:5a:11:a6:b0:d7:84:
         1f:d0:dd:ae:34:f1:33:62:35:67:78:70:2d:09:58:24:5f:6a:
         1a:c7:48:b6:bd:e3:9c:12:31:4d:dc:06:4f:ff:92:4d:3d:48:
         91:40:9f:83:87:f5:9e:8b:ec:a5:63:9e:cf:f7:cf:4b:ab:71:
         01:83:c4:a1:ab:7f:c5:41:f4:ed:6e:9c:06:bb:b8:bc:15:f9:
         da:29:63:8f:68:e9:22:b2:5f:46:e6:1f:64:05:68:a6:5c:cd:
         53:ad:b5:d1:13:56:7a:ad:5d:c4:42:e6:74:4d:d9:1e:7c:7e:
         4b:90:ea:19:42:1f:c6:50:b2:43:9d:17:53:f0:8e:e6:99:fa:
         63:82:1d:5d:f3:fc:02:43:24:99:cd:4f:4d:ba:dc:50:05:fb:
         e7:72:d3:f5:03:84:a6:d9:0a:3d:f5:3f:80:31:d9:db:9d:1f:
         66:6c:7f:3c:df:da:5c:e4:c2:fd:82:4a:78:22:ec:a6:93:7d:
         e0:b2:cd:3d:ff:92:53:26:ac:25:d1:3b:1a:87:fe:f3:55:fb:
         47:65:0f:c6:46:2c:5e:3b:f8:8f:57:ba:40:bc:c6:da:6d:38:
         5f:f5:15:66:ed:97:ab:eb:30:d5:c3:86:0f:0d:aa:f5:21:70:
         27:2a:11:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:22:50 2026 by rpki-client