Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
File:                     D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json)
Hash identifier:          jdhG9fRELViJhCTSRtV4fHZYnbZYSnYpe0S9NVMJcIg=
Subject key identifier:   F5:8B:E4:08:B5:0D:15:C4:D8:C9:A1:37:4B:A1:B6:54:92:A5:4A:2C
Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B
Certificate issuer:       /CN=D36546790928F44FF74C564231471FA1D8D2A97B
Certificate serial:       7090270F214B513D14884E6497070DF8BAAC7D8C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
Manifest number:          D8
Signing time:             Fri 17 Apr 2026 05:52:32 +0000
Manifest this update:     Fri 17 Apr 2026 05:47:32 +0000
Manifest next update:     Sat 18 Apr 2026 09:38:32 +0000
Files and hashes:         1: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: BveGeN/J7iKNR1ZED8GKCZbCrNyIDzrhYWTb/mBzmiI=)
                          2: 326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa (hash: dEQxNzWGRiNVE6wnRySg0Zjbuji/RIwRR1DUgWYNf80=)
                          3: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:90:27:0f:21:4b:51:3d:14:88:4e:64:97:07:0d:f8:ba:ac:7d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B
        Validity
            Not Before: Apr 17 05:47:32 2026 GMT
            Not After : Apr 18 09:38:32 2026 GMT
        Subject: CN=F58BE408B50D15C4D8C9A1374BA1B65492A54A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1a:10:1c:6f:b2:1e:af:bb:9a:bb:2d:07:2c:
                    80:71:ec:2b:b4:2e:11:b5:70:34:fd:b4:0d:03:b9:
                    e9:64:64:44:88:54:47:54:5e:8a:5e:e9:cd:53:af:
                    5e:d9:f4:66:91:c8:52:c8:dd:6e:3c:41:c1:e6:58:
                    7a:e9:1d:76:7f:cc:e7:e7:d2:bc:03:4a:be:23:ed:
                    5e:ba:7b:80:31:96:06:39:33:da:dc:14:f1:19:f5:
                    16:2d:e5:1c:f9:ce:20:7e:40:4e:aa:de:34:b5:27:
                    e5:bb:d3:be:78:47:bc:23:1d:93:6f:25:4b:ff:22:
                    67:e5:8f:57:23:a7:21:b2:26:b2:a7:c6:4c:15:f1:
                    98:30:c7:ca:b0:8e:59:cd:34:16:f7:11:00:80:e0:
                    6d:c5:0a:59:f7:2b:cf:5f:7a:1c:c0:88:59:40:36:
                    94:7a:98:f8:8b:d9:84:d3:31:6d:b2:17:54:87:34:
                    e6:6d:03:18:c9:1e:ca:99:a4:7e:67:92:b1:bb:29:
                    83:c2:0e:28:0e:59:44:b2:7d:76:62:ce:8c:ca:d4:
                    f7:7e:10:07:73:3f:94:6b:65:6a:ac:c4:7e:b9:52:
                    7a:5c:25:f1:98:49:49:5f:8e:20:2e:20:69:52:98:
                    e7:99:e0:80:99:3a:2e:f5:f3:40:bb:49:40:30:68:
                    81:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8B:E4:08:B5:0D:15:C4:D8:C9:A1:37:4B:A1:B6:54:92:A5:4A:2C
            X509v3 Authority Key Identifier:
                keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:97:54:aa:a0:07:ab:75:de:b2:0d:11:1f:a0:73:d0:48:9e:
         fc:a1:18:13:e6:80:e5:04:20:af:cf:39:e2:a7:60:48:d5:a6:
         ae:b4:4a:cb:8f:b1:b5:a7:0e:a4:16:f9:c3:aa:e1:11:1f:14:
         40:c8:ee:1d:ab:d2:cd:58:51:bb:26:a4:b0:35:48:11:1f:ab:
         fa:6d:5c:b3:66:08:82:fe:ae:9c:8e:b2:cc:39:2b:35:14:1b:
         34:c1:9e:26:98:b6:25:2a:21:ea:4c:2d:c0:80:dc:bc:77:7c:
         b7:09:ba:16:1e:ba:70:c2:53:55:8d:f8:ea:41:bd:23:2d:2b:
         5c:3c:8a:e0:a8:9f:47:3d:b7:92:81:6e:a1:35:e1:b7:9f:9f:
         33:10:0b:ce:43:a6:ad:3c:11:f7:a1:1e:eb:f2:86:a0:78:5b:
         9a:98:89:08:9a:c7:5a:d9:52:08:c2:56:11:7e:39:42:57:7a:
         34:5c:0e:6a:ce:64:5a:9e:76:71:fa:8d:e1:d5:d0:cb:46:ec:
         43:c4:f6:29:8f:e3:13:7a:c2:ef:11:e9:f2:82:d7:de:fb:d7:
         67:d7:e1:fe:31:45:ef:0b:ae:58:99:6a:36:6a:38:9e:47:d0:
         9c:3d:83:b5:5a:7f:d0:c6:61:aa:44:17:e4:c6:84:ba:7e:5f:
         a2:2a:f5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:00:40 2026 by rpki-client