Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
File:                     1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json)
Hash identifier:          9FTqtk8wiBPwf124LfeRjiQoKdXdiELkNX+mFenzc/4=
Subject key identifier:   09:A4:36:34:B6:C4:BF:6F:54:E8:CE:E5:6E:F4:DA:82:59:12:B9:BD
Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
Certificate issuer:       /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Certificate serial:       2AEDDC788E312BDAE69A6AAB8E89E170B24B8DE9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
Manifest number:          02E8
Signing time:             Tue 28 Jul 2026 18:56:44 +0000
Manifest this update:     Tue 28 Jul 2026 18:51:44 +0000
Manifest next update:     Wed 29 Jul 2026 19:55:44 +0000
Files and hashes:         1: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: uT+NwPbVKc5sZXDTfAnZ7NBSduHWPZF9xzdlVQV9EOs=)
                          2: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: Kk9CSrNwPsOKUe+v4ZVIi4qEv+Arhq2bOgPkVNwdmaU=)
                          3: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: 5NqZHrqVruAMz6KYjbzv903TP3Du/TFRNl5Uu+JLsuw=)
                          4: AS396064.asa (hash: cAeYdN5heQs8v01bwix2n+Gj5dtpfs2v8sBmWZq4WBE=)
                          5: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: Z2jD3VINYTdHMOj4nmNVTe/5sL8IguqmdU3mt9uFLwU=)
                          6: 3135352e3130332e3235302e302f32342d3234203d3e20323132303334.roa (hash: vFsfLtXifEPclvz93gDK73bkEeIrvx8m8FwVJdoxlHk=)
                          7: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: UEvy/Fk/6V0NUZWmLYAvbYkSNSZ7wnUqypnNnCctoPE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:55:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ed:dc:78:8e:31:2b:da:e6:9a:6a:ab:8e:89:e1:70:b2:4b:8d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
        Validity
            Not Before: Jul 28 18:51:44 2026 GMT
            Not After : Jul 29 19:55:44 2026 GMT
        Subject: CN=09A43634B6C4BF6F54E8CEE56EF4DA825912B9BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:4b:17:90:9f:45:66:b2:1e:14:a8:bb:3b:
                    6e:1d:9b:d8:a1:eb:3c:89:59:a9:98:87:7f:49:8c:
                    ee:da:75:80:81:32:d8:23:8f:af:c9:4e:83:de:b4:
                    93:80:29:1d:0f:71:f0:c1:8f:36:a2:be:8b:2a:57:
                    11:cb:bf:55:d8:a7:47:10:8a:bd:68:68:ce:a3:78:
                    01:97:ee:02:d7:c0:eb:51:0b:cd:b5:8c:97:cc:14:
                    9a:38:f7:2d:ac:32:7f:6e:68:4c:e7:06:4b:0c:a4:
                    53:32:3d:f0:ed:ad:8e:a4:75:02:ea:e1:f1:64:45:
                    bc:e5:bc:ac:af:24:e5:15:a8:d1:5d:6a:58:e4:a8:
                    2f:31:89:6e:27:29:35:76:74:00:db:31:62:dc:05:
                    a1:89:5c:38:1c:d0:25:73:60:0b:76:4c:18:22:00:
                    0a:5e:81:fd:d1:74:69:e2:d8:cf:ed:02:42:5c:55:
                    0f:7d:cb:c7:ee:98:ba:5c:1c:31:f6:fd:12:25:ff:
                    01:3d:eb:8c:bb:24:95:b0:e5:f3:53:65:44:95:f0:
                    1e:9f:7b:1a:10:90:66:b5:f2:ed:98:78:e9:88:d6:
                    e4:ef:da:b5:ec:34:16:9e:dc:fa:19:9f:ad:8a:6c:
                    c1:2d:1a:c3:0e:0b:c3:3a:56:34:01:c5:f2:ea:1e:
                    d9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A4:36:34:B6:C4:BF:6F:54:E8:CE:E5:6E:F4:DA:82:59:12:B9:BD
            X509v3 Authority Key Identifier:
                keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:1d:13:d1:7c:9f:88:41:33:4b:68:f1:45:3d:8e:c8:c7:cf:
         17:2d:8f:2e:cf:14:98:39:3f:87:67:33:56:40:c2:81:7f:c9:
         ac:c1:cf:87:b1:f4:05:55:68:82:87:da:19:a2:19:dd:e1:04:
         81:11:a9:34:d3:a5:6d:ae:35:02:7b:d1:38:1b:9c:70:9d:61:
         26:e7:f2:23:82:19:67:70:68:08:c4:87:e3:bf:49:4a:43:6d:
         f0:4e:c0:0c:25:2e:9e:fe:49:f0:44:a8:5e:34:4d:3c:8a:2f:
         78:e0:4c:6c:bc:e1:0a:96:d3:1f:57:58:bf:8c:5e:f7:91:06:
         2c:db:0a:e4:8d:16:2d:52:a8:e8:33:cd:db:48:cb:b7:80:e9:
         ff:6e:5b:c6:18:c5:bd:6b:e4:0a:95:89:6d:eb:a0:4c:a4:4d:
         08:55:cd:db:a4:8e:34:79:ec:82:0a:83:27:37:00:a9:77:1b:
         55:27:a8:37:e0:d9:a9:ca:ed:44:24:cf:17:54:89:bc:c4:00:
         b2:96:0f:8f:b2:94:70:0e:a8:3f:f3:06:d0:a5:cb:28:36:cd:
         85:56:80:83:01:c5:98:d3:cf:66:4e:72:2b:fa:95:a1:fe:b9:
         af:54:e6:a1:c1:a8:d7:ec:89:ec:8a:04:af:ee:7e:f6:cb:5c:
         89:d2:29:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:42:33 2026 by rpki-client