Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
File:                     1DB41D8CB909418AA27BBDED06CFB5857401E676.mft (raw, json)
Hash identifier:          Lcy9g8jxRWlPZTBm3NOpnpxUilKTUuOMtgtRoJIHy6s=
Subject key identifier:   0B:DF:65:8D:A2:93:8F:AE:77:62:EB:1A:84:99:ED:11:8E:C1:7E:65
Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76
Certificate issuer:       /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
Certificate serial:       26115AC1FE5016004B15377FAE23A0384AC08ED3
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
Manifest number:          8D
Signing time:             Sat 13 Jun 2026 11:50:36 +0000
Manifest this update:     Sat 13 Jun 2026 11:45:36 +0000
Manifest next update:     Sun 14 Jun 2026 13:13:36 +0000
Files and hashes:         1: 1DB41D8CB909418AA27BBDED06CFB5857401E676.crl (hash: IgkvYVy6jBtWKijFRbDVkFHisYWrWzedZbD7vzwur5I=)
                          2: 326130363a613030323a3a2f33322d3438203d3e20323135373630.roa (hash: B2caQKU5/hAAuwc57KOaYg2QivgfXC87ZBxhpnuBwec=)
                          3: 326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa (hash: l3HYulpvOKCiOuLe10nJcYG8DkTaBY5HNMplHWMB7TA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:11:5a:c1:fe:50:16:00:4b:15:37:7f:ae:23:a0:38:4a:c0:8e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
        Validity
            Not Before: Jun 13 11:45:36 2026 GMT
            Not After : Jun 14 13:13:36 2026 GMT
        Subject: CN=0BDF658DA2938FAE7762EB1A8499ED118EC17E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:b9:a1:0a:80:78:a5:94:eb:8c:42:a5:bb:
                    1a:c0:95:0d:cc:a3:d3:9f:e9:25:8a:30:49:42:16:
                    73:64:2e:df:1a:1c:4d:6d:fc:83:b3:d4:71:af:0d:
                    3c:9c:08:3d:28:e8:60:75:2d:5f:ce:75:ff:88:a0:
                    60:e4:6c:46:d8:3a:64:db:3b:1d:40:a5:5c:3d:21:
                    c4:66:97:92:cf:48:aa:b3:70:c9:8a:7e:8b:2d:d2:
                    a3:1c:b1:27:56:b7:3c:c7:19:a2:91:ac:b9:a2:09:
                    ce:f4:5b:c2:7d:3f:1b:ab:53:93:c6:80:b4:cd:1e:
                    69:5f:47:5a:ce:41:57:c4:d9:4c:35:2c:dd:3b:84:
                    af:f0:70:3c:af:2e:7e:10:fe:5a:0f:ce:4e:99:71:
                    42:50:61:44:57:38:17:3b:ce:07:b1:26:d2:65:d8:
                    fd:e8:d1:16:76:fe:09:52:9a:24:34:78:9c:e4:af:
                    2c:ed:14:0a:da:50:ab:54:1e:e0:33:38:3b:0a:7e:
                    08:7a:08:77:0b:3e:8e:67:6f:d1:d8:d1:7b:00:62:
                    e1:fa:cb:ea:e4:c1:f9:e7:c4:71:44:64:f5:87:05:
                    10:f2:73:ac:c1:1c:a4:78:ee:be:1e:dc:fc:6f:db:
                    eb:2d:85:6f:e6:c3:26:ed:b2:ee:81:78:7d:f5:aa:
                    4d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DF:65:8D:A2:93:8F:AE:77:62:EB:1A:84:99:ED:11:8E:C1:7E:65
            X509v3 Authority Key Identifier:
                keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:19:0e:dc:46:ec:b0:eb:05:9c:9a:cb:13:7b:eb:41:c7:c6:
         64:31:1f:c2:4e:08:91:bb:df:69:c7:0a:9f:71:a1:8e:d4:6c:
         5e:9a:6e:0c:9e:7e:cb:7a:44:f2:8e:cf:b7:c9:7c:d7:6b:64:
         a8:c5:6d:15:6d:69:b5:21:f4:9b:eb:34:9d:4d:eb:a1:b1:de:
         a9:71:90:a2:a7:ef:3f:31:51:7f:5c:25:1f:47:fa:81:65:42:
         81:3f:12:bf:76:d5:cb:e7:f4:92:8d:ca:e9:6f:a3:84:a3:b3:
         e0:a4:2b:4b:23:6c:06:b7:b3:e9:93:85:28:54:fa:59:53:73:
         de:71:e5:b6:8b:52:26:7f:53:b0:af:59:36:72:3e:93:a5:cc:
         3f:76:87:81:a5:47:d0:d9:4b:75:a1:2a:c4:92:6a:e2:ca:d7:
         94:30:48:cc:f0:1b:cf:5c:bf:2a:1d:47:dc:75:ca:7f:7e:af:
         4f:59:8c:65:4e:9f:8a:c3:ad:c2:a5:bf:46:a8:42:0b:10:63:
         73:fe:cb:a3:f7:93:df:70:6a:60:bf:aa:5a:8c:b9:d4:42:d7:
         69:b8:07:e5:28:c3:d4:0a:98:89:46:b6:2d:33:f8:36:12:62:
         d2:ad:70:af:69:da:2d:6f:a1:c3:37:3b:1c:1e:0c:f1:b9:7d:
         19:e3:26:40
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUJhFawf5QFgBLFTd/riOgOErAjtMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3
NDAxRTY3NjAeFw0yNjA2MTMxMTQ1MzZaFw0yNjA2MTQxMzEzMzZaMDMxMTAvBgNV
BAMTKDBCREY2NThEQTI5MzhGQUU3NzYyRUIxQTg0OTlFRDExOEVDMTdFNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxLmhCoB4pZTrjEKluxrAlQ3M
o9Of6SWKMElCFnNkLt8aHE1t/IOz1HGvDTycCD0o6GB1LV/Odf+IoGDkbEbYOmTb
Ox1ApVw9IcRml5LPSKqzcMmKfost0qMcsSdWtzzHGaKRrLmiCc70W8J9PxurU5PG
gLTNHmlfR1rOQVfE2Uw1LN07hK/wcDyvLn4Q/loPzk6ZcUJQYURXOBc7zgexJtJl
2P3o0RZ2/glSmiQ0eJzkryztFAraUKtUHuAzODsKfgh6CHcLPo5nb9HY0XsAYuH6
y+rkwfnnxHFEZPWHBRDyc6zBHKR47r4e3Pxv2+sthW/mwybtsu6BeH31qk3dAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUC99ljaKTj653YusahJntEY7BfmUwHwYDVR0j
BBgwFoAUHbQdjLkJQYqie73tBs+1hXQB5nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2
ZDAzLzMvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAxRTY3Ni5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAx
RTY3Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y
NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMy8xREI0MUQ4Q0I5MDk0MThBQTI3
QkJERUQwNkNGQjU4NTc0MDFFNjc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhkO3EbssOsFnJrLE3vr
QcfGZDEfwk4IkbvfaccKn3GhjtRsXppuDJ5+y3pE8o7Pt8l812tkqMVtFW1ptSH0
m+s0nU3robHeqXGQoqfvPzFRf1wlH0f6gWVCgT8Sv3bVy+f0ko3K6W+jhKOz4KQr
SyNsBrez6ZOFKFT6WVNz3nHltotSJn9TsK9ZNnI+k6XMP3aHgaVH0NlLdaEqxJJq
4srXlDBIzPAbz1y/Kh1H3HXKf36vT1mMZU6fisOtwqW/RqhCCxBjc/7Lo/eT33Bq
YL+qWoy51ELXabgH5SjD1AqYiUa2LTP4NhJi0q1wr2naLW+hwzc7HB4M8bl9GeMm
QA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:29:02 2026 by rpki-client