Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
File:                     D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json)
Hash identifier:          nA0OXSw5htw6zMhq+NFxM427d2tgPeb2xW5drksEUFs=
Subject key identifier:   B9:A2:BB:6B:09:5B:61:71:25:84:FC:3D:E5:A8:E5:46:F8:4D:7E:21
Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B
Certificate issuer:       /CN=D36546790928F44FF74C564231471FA1D8D2A97B
Certificate serial:       4A3C080BECD60873F3FECB9F399EC73C90CCE0DD
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
Manifest number:          0160
Signing time:             Tue 28 Jul 2026 23:49:39 +0000
Manifest this update:     Tue 28 Jul 2026 23:44:39 +0000
Manifest next update:     Thu 30 Jul 2026 00:10:39 +0000
Files and hashes:         1: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: 6vMPGJ9vV2tDTlRwsG/QFwY0eONS7Y525nRR8dZUU4A=)
                          2: 326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa (hash: dEQxNzWGRiNVE6wnRySg0Zjbuji/RIwRR1DUgWYNf80=)
                          3: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3c:08:0b:ec:d6:08:73:f3:fe:cb:9f:39:9e:c7:3c:90:cc:e0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B
        Validity
            Not Before: Jul 28 23:44:39 2026 GMT
            Not After : Jul 30 00:10:39 2026 GMT
        Subject: CN=B9A2BB6B095B61712584FC3DE5A8E546F84D7E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:16:87:2c:44:36:7c:a1:3e:ca:07:87:8c:
                    60:e0:69:52:d6:d2:5c:85:d2:ee:06:2f:dd:7b:c0:
                    07:87:35:9a:fb:a2:3d:05:55:c6:d2:ce:b7:3d:89:
                    8e:d3:95:b3:a5:a7:66:f9:6b:f2:e3:4a:a6:1c:37:
                    55:f7:1b:7f:a1:cf:6f:26:a9:51:48:b8:99:c3:f1:
                    ad:4f:b9:fb:fc:30:c1:58:cf:23:f3:92:ef:a6:89:
                    88:28:28:0a:6a:1f:82:e3:4b:cf:24:df:ab:c9:24:
                    f7:f5:cc:60:70:30:c2:f5:d5:a2:5a:98:79:1c:2e:
                    b1:14:ca:71:c0:0e:f3:1f:d3:e8:75:77:f4:f7:17:
                    2a:9c:96:d6:32:fc:ea:0d:f5:30:ff:19:a2:ff:0f:
                    a2:e5:e2:83:e2:dd:eb:9a:31:6b:cb:3c:c6:f3:5a:
                    c8:b0:0e:6e:a0:42:41:e1:d4:2d:99:fc:9e:c9:9c:
                    84:f1:6d:39:0e:d1:e7:8e:20:33:8c:64:83:4b:a7:
                    a0:9c:d0:8d:00:c1:20:44:3b:57:4a:9a:e9:26:b7:
                    1c:b9:e0:3c:d5:c0:f7:ad:f7:d6:e6:bd:59:6f:36:
                    32:86:fb:e3:4f:b9:6c:bb:5a:86:44:90:99:29:84:
                    34:7d:aa:e6:cb:a3:84:ab:60:c4:86:3c:be:35:bd:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A2:BB:6B:09:5B:61:71:25:84:FC:3D:E5:A8:E5:46:F8:4D:7E:21
            X509v3 Authority Key Identifier:
                keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c8:a1:f0:51:99:ef:99:3e:12:2f:a2:d0:1f:4c:2e:08:69:
         a4:5d:5c:e8:8c:38:26:41:46:35:27:3f:ac:6b:48:db:2f:08:
         c1:66:4f:4a:2c:3f:e2:c2:6b:12:cf:a7:c9:55:fa:34:49:f8:
         ad:eb:27:8a:b3:08:84:25:92:66:1f:37:ec:53:f9:ad:14:38:
         78:3d:40:8a:a8:ce:b4:ad:46:84:15:26:c7:da:43:1b:75:ae:
         ca:6b:af:29:40:05:ca:e8:e5:ba:37:52:ae:e1:91:4e:4e:2f:
         a4:a8:ba:f5:32:a4:47:60:3f:9b:b4:52:41:3b:02:b5:c6:81:
         81:60:c0:14:70:9f:ef:10:79:ad:e3:45:6e:e6:d0:3e:d9:c9:
         06:27:c9:ef:41:59:ce:b5:38:ba:ad:73:6c:56:c0:05:5d:df:
         19:2d:80:39:23:4a:31:41:1d:40:0c:8d:69:70:0c:b1:ab:d9:
         50:96:db:b0:df:62:64:a5:77:48:89:22:46:97:76:7f:04:4c:
         c1:63:cf:25:9a:ef:04:8b:70:04:be:4f:70:03:48:61:89:d4:
         dd:65:c7:0a:dd:dd:1e:9a:9c:8f:e2:fd:98:20:6d:10:61:02:
         68:ab:78:11:27:00:1c:0c:44:02:b2:9a:bb:58:61:ae:4d:60:
         ac:1f:f3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:09 2026 by rpki-client