Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft
File:                     7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft (raw, json)
Hash identifier:          9tiJTqwgVGzTzxhkydt+oSADi7qp/HZ1hBvOVQF4YpU=
Subject key identifier:   85:AB:4B:FB:F2:70:E0:27:DA:8D:CD:CB:F9:81:76:FC:74:1D:6F:52
Authority key identifier: 7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE
Certificate issuer:       /CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c
Certificate serial:       0B113C6724FF9CF9627B47F980369EA89BB950B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft
Manifest number:          010B
Signing time:             Sun 27 Sep 2026 20:28:54 +0000
Manifest this update:     Sun 27 Sep 2026 20:23:54 +0000
Manifest next update:     Mon 28 Sep 2026 22:30:54 +0000
Files and hashes:         1: 323630323a663431313a3a2f34302d3430203d3e20343032333338.roa (hash: yUUqL7xUwt1yHriW5PMoX0e0rvGQY+O+Hz486/mwTRA=)
                          2: 32332e3135352e3133322e302f32342d3234203d3e20343032333338.roa (hash: fzU4rchNeg+A4G9P3a1X+ynK3vpCJlAGbjn8hVUYXUY=)
                          3: 32332e3135352e3133322e302f32342d3234203d3e20323135323438.roa (hash: c3hWnS8DoW546xPA3c5dq6uKI5KCkqswjLoTTVqVVsI=)
                          4: AS402338.asa (hash: fRRD4r5kaNjHND51fPwEZ9rXuJ7FC/HeY1ljfUmNo/U=)
                          5: 7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl (hash: ZuTvXxLrr9rgNt/QfIBvVKGiyXYukYr6IALpaUtjo7Y=)
                          6: 323630323a663431313a3a2f34302d3430203d3e20323135323438.roa (hash: 4LMUXuzPxDG0l50qzDgI+GtWvlNgbqsRRyik2rkKxrI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 22:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:11:3c:67:24:ff:9c:f9:62:7b:47:f9:80:36:9e:a8:9b:b9:50:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c
        Validity
            Not Before: Sep 27 20:23:54 2026 GMT
            Not After : Sep 28 22:30:54 2026 GMT
        Subject: CN=85AB4BFBF270E027DA8DCDCBF98176FC741D6F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:93:47:4d:ed:0b:29:0b:1d:1e:fd:bc:15:
                    da:62:65:49:64:fb:ae:fa:56:b1:41:d0:ff:4c:27:
                    8f:35:0b:3d:50:80:47:3d:b8:02:65:f4:55:d4:f9:
                    e1:ec:10:9a:92:7b:2d:62:f4:cd:e7:ad:5b:24:17:
                    9e:e6:b6:85:f4:b1:be:d2:03:32:db:61:83:03:ab:
                    f7:ac:c2:a9:79:31:82:c5:06:d4:4c:4a:85:14:d0:
                    41:c6:fe:b8:8d:cb:21:6c:cd:3e:fb:02:02:bb:0d:
                    11:5e:1e:0c:47:08:a5:8e:5a:b6:6b:f6:2f:f0:8e:
                    6f:89:00:15:0e:f5:c8:82:29:7e:a4:cd:f4:2b:21:
                    d3:d7:28:05:3d:4a:e1:83:a8:ff:3f:a8:1a:ac:92:
                    fc:29:90:b7:fe:42:fe:f7:2a:76:a8:1f:d1:df:63:
                    63:8b:b1:8a:17:03:1e:7c:e6:90:d5:9f:f5:3d:a4:
                    45:2d:b2:07:6b:8a:79:ab:86:ab:b3:03:79:b4:dc:
                    e4:33:f2:29:a3:20:89:74:18:03:cd:5c:0e:a5:73:
                    26:5c:84:8b:72:18:71:7f:68:f0:23:41:02:10:3a:
                    c1:a1:77:58:e4:c5:18:11:10:32:17:62:85:c7:1c:
                    13:32:69:36:62:98:7f:4f:ed:ae:63:49:00:6d:92:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AB:4B:FB:F2:70:E0:27:DA:8D:CD:CB:F9:81:76:FC:74:1D:6F:52
            X509v3 Authority Key Identifier:
                keyid:7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:43:41:0a:7a:10:74:f1:ef:a0:c5:73:ce:56:d2:9e:8d:51:
         d8:9d:45:09:d5:7b:96:78:96:f7:69:70:43:f9:98:86:69:89:
         c6:0f:28:d1:75:d8:e7:9a:0b:43:1e:cd:5b:5b:2c:cf:82:e8:
         82:6f:d9:6f:bd:38:33:f4:62:46:17:30:6f:a4:4a:b8:8d:50:
         df:30:72:ef:09:34:31:f6:dd:37:99:63:7e:ee:ff:15:94:85:
         ce:31:30:17:c8:4a:5f:ac:ec:a9:97:48:53:a6:f7:2b:83:65:
         bf:87:46:0d:d7:58:16:d6:aa:ca:12:9b:29:a8:f8:f3:a5:51:
         39:88:71:d4:d5:b9:bd:ab:18:d9:4a:93:db:02:1b:a3:af:0a:
         ee:58:e8:1c:cc:e9:3c:f4:d8:c7:a2:a1:7e:6e:3a:76:bc:a3:
         7f:2a:92:bf:70:e7:a4:99:35:25:75:fb:fa:09:11:56:a6:d6:
         54:db:4d:33:d5:f5:5c:57:a0:1e:53:bc:97:6a:35:5c:f5:74:
         91:54:65:b0:97:c5:31:9b:a4:57:e8:01:42:d5:29:cb:5b:76:
         b7:c7:ee:05:6a:55:8a:00:0a:51:f3:57:6a:89:f0:9a:8b:13:
         da:b7:95:be:a4:74:bc:59:03:9a:a3:3c:8d:bb:0e:06:01:dd:
         7e:8f:2f:52
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUCxE8ZyT/nPlie0f5gDaeqJu5ULcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmUxYmJiN2U3ZmVmOWViYmUyY2YwY2FkNDc2NDZlNmFk
N2JkOTU1MmMzMGNlZTBiOWMwHhcNMjYwOTI3MjAyMzU0WhcNMjYwOTI4MjIzMDU0
WjAzMTEwLwYDVQQDEyg4NUFCNEJGQkYyNzBFMDI3REE4RENEQ0JGOTgxNzZGQzc0
MUQ2RjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobeTR03tCykL
HR79vBXaYmVJZPuu+laxQdD/TCePNQs9UIBHPbgCZfRV1Pnh7BCaknstYvTN561b
JBee5raF9LG+0gMy22GDA6v3rMKpeTGCxQbUTEqFFNBBxv64jcshbM0++wICuw0R
Xh4MRwiljlq2a/Yv8I5viQAVDvXIgil+pM30KyHT1ygFPUrhg6j/P6garJL8KZC3
/kL+9yp2qB/R32Nji7GKFwMefOaQ1Z/1PaRFLbIHa4p5q4arswN5tNzkM/IpoyCJ
dBgDzVwOpXMmXISLchhxf2jwI0ECEDrBoXdY5MUYERAyF2KFxxwTMmk2Yph/T+2u
Y0kAbZK3hwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFIWrS/vycOAn2o3Ny/mBdvx0
HW9SMB8GA1UdIwQYMBaAFHr6IjtiOLDMY3T3/omUNk+/j1TeMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0
LTU4MGQxMzY5YjdjNC8yLzdBRkEyMjNCNjIzOEIwQ0M2Mzc0RjdGRTg5OTQzNjRG
QkY4RjU0REUuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUt
NGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80NjU1M2FkMC1mYzE5LTRmMjgtOGVlMi1i
NWNmZmQ0MzAzMDAvNmUxYmJiN2U3ZmVmOWViYmUyY2YwY2FkNDc2NDZlNmFkN2Jk
OTU1MmMzMGNlZTBiOWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
Y2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzIvN0FGQTIyM0I2
MjM4QjBDQzYzNzRGN0ZFODk5NDM2NEZCRjhGNTRERS5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGtDQQp6
EHTx76DFc85W0p6NUdidRQnVe5Z4lvdpcEP5mIZpicYPKNF12OeaC0MezVtbLM+C
6IJv2W+9ODP0YkYXMG+kSriNUN8wcu8JNDH23TeZY37u/xWUhc4xMBfISl+s7KmX
SFOm9yuDZb+HRg3XWBbWqsoSmymo+POlUTmIcdTVub2rGNlKk9sCG6OvCu5Y6BzM
6Tz02MeioX5uOna8o38qkr9w56SZNSV1+/oJEVam1lTbTTPV9VxXoB5TvJdqNVz1
dJFUZbCXxTGbpFfoAULVKctbdrfH7gVqVYoAClHzV2qJ8JqLE9q3lb6kdLxZA5qj
PI27DgYB3X6PL1I=
-----END CERTIFICATE-----
Generated at Mon Sep 28 07:04:26 2026 by rpki-client