Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
File:                     D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json)
Hash identifier:          e0zQcjwP3EfiQC6IS1Jlv3+eBTJSPTb/gGCsy2BneUU=
Subject key identifier:   CA:79:02:5D:92:56:0A:5F:79:14:A3:D6:D6:F5:D6:8C:43:5F:FA:0F
Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
Certificate issuer:       /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Certificate serial:       12A95B38B84559F88DEDC9F9F075899A0AC53ACC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
Manifest number:          05AF
Signing time:             Sun 20 Sep 2026 10:15:54 +0000
Manifest this update:     Sun 20 Sep 2026 10:10:54 +0000
Manifest next update:     Mon 21 Sep 2026 10:57:54 +0000
Files and hashes:         1: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: pWmvzXNm6t5gmyaLl8B+EkY9aNsRxYy9WpaBpaaz/XA=)
                          2: 3139322e37352e3139362e302f32332d3234203d3e20323131363635.roa (hash: EY02IPhkI+bUEpVH6oIXpq9tMDByZp2XBlblwJ3ORuk=)
                          3: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: Xa94VPXxaKxQavq41HUhZQOU53EjRewYZdqWNPMbOkI=)
                          4: 3139322e37352e3139362e302f32342d3234203d3e203139363830.roa (hash: yvXeEWRlMmnSNfIrbChtFM+svsvnH2vlOzvMg3QWUIM=)
                          5: 3139322e37352e3139362e302f32332d3234203d3e203539393933.roa (hash: KNSz4GsVtYNwvMtBZ3CvI93UcAzzIm+CEBGOCv59Ibc=)
                          6: 3139322e37352e3139372e302f32342d3234203d3e203530323234.roa (hash: XWa1v4ip3kV+r3f119VGt2tZ+jfePtDqCwe/xpwhK0k=)
                          7: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: Lb+C3YJn54LxtUf0GyCu85JPoRsStAp6WFsAuvX2G+E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a9:5b:38:b8:45:59:f8:8d:ed:c9:f9:f0:75:89:9a:0a:c5:3a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
        Validity
            Not Before: Sep 20 10:10:54 2026 GMT
            Not After : Sep 21 10:57:54 2026 GMT
        Subject: CN=CA79025D92560A5F7914A3D6D6F5D68C435FFA0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3f:ec:a6:2e:96:b9:99:13:6d:12:38:57:39:
                    e2:a1:98:fb:0a:d0:c0:4e:ca:36:22:0f:5e:53:49:
                    27:d2:8d:9d:96:a4:1c:bb:1d:00:75:4a:7f:7d:81:
                    5c:be:10:c2:10:2a:75:a7:43:7d:26:16:58:9e:09:
                    4d:9b:17:9c:f3:96:22:ae:eb:80:3e:a6:17:d6:bc:
                    89:75:c3:ad:38:fc:da:e0:dc:f4:0c:d1:88:1d:dd:
                    15:1f:53:f6:7a:ca:ca:2e:95:56:bb:0d:5d:b5:93:
                    8a:1e:d1:b6:1f:30:96:36:9f:8a:a7:00:c7:2d:66:
                    f0:88:e2:38:93:33:b1:3d:75:04:c2:d5:df:cf:76:
                    c9:bd:6d:0b:fe:21:87:86:83:c6:7c:63:d2:63:0b:
                    d9:76:25:79:b8:7f:d5:1f:e6:18:db:2a:16:03:83:
                    95:cd:dc:c9:56:78:1d:f4:62:ab:fb:08:02:52:ed:
                    41:80:1f:30:e0:6c:99:b5:12:a6:f4:3e:10:30:fc:
                    aa:4f:d3:44:43:98:25:2f:62:bc:0a:9f:8e:e6:a5:
                    28:46:c1:a2:ea:0d:76:43:1f:af:e6:7a:64:19:72:
                    90:c5:f8:62:06:14:29:5a:fc:9d:15:c3:0d:be:dd:
                    14:fb:65:50:ec:ed:c3:a2:13:b9:eb:b3:4e:8a:a4:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:79:02:5D:92:56:0A:5F:79:14:A3:D6:D6:F5:D6:8C:43:5F:FA:0F
            X509v3 Authority Key Identifier:
                keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8e:16:11:62:1a:70:8e:93:de:10:fd:05:ef:98:b2:62:b5:
         3b:93:8c:16:88:45:15:39:79:f6:c1:90:10:f1:63:12:af:e6:
         16:bd:04:61:e7:3d:f2:6e:74:a0:b8:40:8a:c5:99:12:10:01:
         f7:13:b3:96:c4:f1:36:fe:c5:e4:98:cb:78:3b:f4:e2:7d:9c:
         a3:7f:25:ed:1a:5e:88:b0:74:ac:6e:db:14:15:7f:07:c4:6f:
         95:86:ea:21:35:fc:8b:d1:d8:89:8b:09:b6:1a:a3:05:07:41:
         ae:ed:7e:c2:91:62:ae:0e:a9:4c:c2:f2:4f:3d:e4:1f:0f:65:
         95:91:3c:18:1e:0e:9a:78:34:d4:6d:b7:0f:3a:b1:33:e8:0f:
         f0:11:1f:f2:7d:cf:49:b9:19:5a:da:34:8b:18:4f:54:18:33:
         10:64:0c:21:5c:43:0c:9c:17:b8:da:7d:01:9d:88:34:b3:26:
         e6:c7:e2:0b:fa:9e:48:ba:f3:81:b5:68:6c:ba:54:d9:48:49:
         81:32:5d:7f:c3:06:a1:33:c0:3a:c7:08:54:ca:54:12:f0:6f:
         2a:f3:16:38:11:4a:1e:af:dd:85:3b:5b:10:58:12:b9:69:e7:
         13:96:46:37:d3:b3:e6:d8:e8:1c:3c:cf:c8:a2:7f:33:9a:1d:
         4d:aa:40:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:35:47 2026 by rpki-client