Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File:                     F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier:          mQMG/Mqa32mA9R8oFQPv2wwz63F2rvoJcCtpjoupkK4=
Subject key identifier:   DC:36:9D:79:72:9F:98:3E:1A:D8:C8:13:5E:98:89:7C:F4:DF:0F:1A
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer:       /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial:       39DD20FE46BCC683C69F77E09EE0ED41BC95A05A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number:          03AF
Signing time:             Mon 26 Oct 2026 16:57:20 +0000
Manifest this update:     Mon 26 Oct 2026 16:52:20 +0000
Manifest next update:     Tue 27 Oct 2026 17:40:20 +0000
Files and hashes:         1: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: V7It1R194wG2fKfWWlVdnzwed7rR2mdr0bGRnI9AxV4=)
                          2: 3137382e3133322e3139392e302f32342d3234203d3e20323035353434.roa (hash: mpzkLlbjKRbHs5eRz67NFc2yPvT9nevIdOaUOeBAM1c=)
                          3: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: oh+lVAwSd2AljftZGGwJ2AZ4594T7MDCS1XfeWnPKGg=)
                          4: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: EDWUUKhrOtu3UMAllaeIt1ZR8GH4cYzCKJWn6QZal8k=)
                          5: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: oMT5W+1A+v1pwvSVM/yS6Grj9zILUfxp/QJKJB7R/M8=)
                          6: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: MBztO8w9bm5wzqzKDfI65gL2GObfIUagWkGy+v8p1Mw=)
                          7: 352e3232362e3138392e302f32342d3234203d3e20323134343332.roa (hash: K8tasVMZPC8XCnfASfPGHgydq7gyNfePU1OJ6FJ9+yw=)
                          8: 3137382e3133322e3139352e302f32342d3234203d3e203232343237.roa (hash: QgvmMFuUdAiqbiI7YJRIvnHFDWl3E8S1w1OF0shY8uU=)
                          9: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: ORBhPdQs7bhbgbHqRNbRX9b7nVMMEM9/idQA84qjjeU=)
                          10: 3130392e3233342e3230392e302f32342d3234203d3e20323134313433.roa (hash: kfImODVrJ9DJfBDHIqmGZX0zk9Yq1KND0WLu9uNQXdY=)
                          11: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: O58U7PWZy8imeyXfNYpolxNqqGk5vQ/pfpTujarGxIw=)
                          12: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: JpGLComndw26SOL3sJbPNJ7i8ZI6iCFmvappx1PnQqM=)
                          13: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: 3WrBrAOV7SjPMl8BInuI3B0KtzI0JvDAuGMIMq+S9D8=)
                          14: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: JKIJigG3BXcrAZEbG3Fe3trmGG9NqmtEB7ri2hvrPKM=)
                          15: 3130392e3233342e3231322e302f32342d3234203d3e20313734.roa (hash: 9HNBf+LUgxtel5YdAqtqWUZ01j9gnH5Sgj9ujQE2GCs=)
                          16: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: uJEDxZm1l0+YcyFuGRmcGjOe89y2pFVQh//OE0DuSL8=)
                          17: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: foBoaKUPeMOXyMdgjQODzIp3g1QrOeZIcU4rmaW6W0Y=)
                          18: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y=)
                          19: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA=)
                          20: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: xfnBgMCFpR8WsSmanu6oXx69cY6n9Ufmkf4lgYTGZHc=)
                          21: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: LDqZZoLow0mbDS+Axbw5uzgHB6hrJjPXmfZptqZ1ClQ=)
                          22: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: +GFq+rHPW2NmU2P7WwLI7nlzu1G6+ACKfZdceph6rto=)
                          23: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI=)
                          24: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y=)
                          25: 352e3232362e3138342e302f32342d3234203d3e20313938353636.roa (hash: wcXEk356NPr5IlsVSUm/Cx3FeZe1mxJ7aYT2EVP7ZBs=)
                          26: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w=)
                          27: 352e3232362e3138362e302f32342d3234203d3e20323031313336.roa (hash: 9fdIPJo0eMjnKb22xK7IcX10k9v1+loDfWBv90zohJM=)
                          28: 3137382e3133322e3139332e302f32342d3234203d3e20323138383239.roa (hash: qLaDwBI1BZ2zG398ZRVTsFr0j0hBs/moxNHBTZQAZ1w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 17:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:dd:20:fe:46:bc:c6:83:c6:9f:77:e0:9e:e0:ed:41:bc:95:a0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
        Validity
            Not Before: Oct 26 16:52:20 2026 GMT
            Not After : Oct 27 17:40:20 2026 GMT
        Subject: CN=DC369D79729F983E1AD8C8135E98897CF4DF0F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:16:6c:8c:09:57:57:44:c0:09:bf:46:b8:
                    18:59:f2:ec:5a:82:e1:56:78:ef:d8:a9:b4:8d:56:
                    fd:22:ce:ee:ff:b6:7a:69:04:0d:3a:20:59:b0:6f:
                    a3:05:06:4f:8f:9a:63:6e:7d:dc:38:44:e5:e7:ac:
                    89:9a:b6:75:86:7a:d6:63:9e:bc:42:04:b0:61:79:
                    a0:1e:3a:0c:00:39:55:ff:2d:e7:fb:cd:ea:38:51:
                    94:90:8f:e3:14:11:83:89:c9:b0:d2:73:f1:cb:3b:
                    92:f1:ec:ee:19:b2:da:8e:a7:52:2e:e3:35:05:d4:
                    88:db:a2:43:a7:af:43:ae:2d:b4:a9:70:5f:e9:6c:
                    85:ca:ef:dc:13:f3:60:24:3e:fd:80:eb:79:1b:0a:
                    7a:53:bc:99:a5:81:12:fa:d3:c2:bd:be:de:7a:1e:
                    97:3c:50:f0:67:fa:dd:28:dc:bb:bf:dc:4b:c9:ef:
                    57:e3:09:55:3d:90:09:31:b1:e5:5b:c8:91:ea:0c:
                    0d:46:30:d9:74:62:7d:d6:57:4e:da:be:15:c8:95:
                    37:fe:73:8c:88:07:c1:b4:c1:97:79:73:f1:e3:82:
                    0e:bf:7a:d4:eb:d8:7c:f5:d1:cb:c3:5c:d9:75:e1:
                    97:1d:2a:18:f4:7e:18:df:04:8f:6c:9f:e5:26:e1:
                    a9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:36:9D:79:72:9F:98:3E:1A:D8:C8:13:5E:98:89:7C:F4:DF:0F:1A
            X509v3 Authority Key Identifier:
                keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1f:9c:a7:75:cd:b6:af:a3:8d:85:b5:92:b3:82:5c:96:0c:
         68:9b:00:a2:cd:06:94:04:67:04:00:8b:02:25:45:c8:76:60:
         13:71:40:e7:51:9e:07:1e:d9:fd:f4:ec:3e:fa:42:20:5e:3c:
         1c:31:55:57:b1:6d:76:19:32:f2:d2:ee:ba:0f:6c:de:d7:96:
         9c:43:8a:46:8b:08:9a:0b:22:00:ed:39:d1:6a:4d:64:48:05:
         d7:ba:72:56:58:1e:3a:af:0b:f5:65:a3:25:8f:66:6b:5b:88:
         9c:24:23:78:d3:68:cf:e4:19:ee:ce:8a:08:82:9b:3b:90:56:
         05:d8:62:2b:ee:f1:98:1c:85:72:5e:ec:39:cb:57:76:14:18:
         a0:83:18:61:fb:10:fd:f2:96:9d:9c:7e:d9:9f:6c:50:89:55:
         44:f5:74:21:0d:b5:d3:d4:2e:cc:51:d1:cc:08:52:81:ec:ac:
         84:e2:39:ab:71:c3:83:38:01:a5:bf:48:0a:bb:d9:2c:a6:ad:
         c8:fb:14:18:71:1c:96:6a:aa:42:b8:a2:ee:dd:3e:84:12:ad:
         71:d0:f1:35:0a:70:e8:8d:14:a1:b9:f0:18:dd:f0:06:9f:ce:
         86:0e:6c:51:c5:3e:c1:de:f8:56:b9:b4:b6:9f:58:fa:a8:d8:
         e3:87:0c:7c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOd0g/ka8xoPGn3fgnuDtQbyVoFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNjEwMjYxNjUyMjBaFw0yNjEwMjcxNzQwMjBaMDMxMTAvBgNV
BAMTKERDMzY5RDc5NzI5Rjk4M0UxQUQ4QzgxMzVFOTg4OTdDRjRERjBGMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmaBZsjAlXV0TACb9GuBhZ8uxa
guFWeO/YqbSNVv0izu7/tnppBA06IFmwb6MFBk+PmmNufdw4ROXnrImatnWGetZj
nrxCBLBheaAeOgwAOVX/Lef7zeo4UZSQj+MUEYOJybDSc/HLO5Lx7O4ZstqOp1Iu
4zUF1IjbokOnr0OuLbSpcF/pbIXK79wT82AkPv2A63kbCnpTvJmlgRL608K9vt56
Hpc8UPBn+t0o3Lu/3EvJ71fjCVU9kAkxseVbyJHqDA1GMNl0Yn3WV07avhXIlTf+
c4yIB8G0wZd5c/Hjgg6/etTr2Hz10cvDXNl14ZcdKhj0fhjfBI9sn+Um4altAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU3DadeXKfmD4a2MgTXpiJfPTfDxowHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05
MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx
OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALB+cp3XNtq+jjYW1krOC
XJYMaJsAos0GlARnBACLAiVFyHZgE3FA51GeBx7Z/fTsPvpCIF48HDFVV7Ftdhky
8tLuug9s3teWnEOKRosImgsiAO050WpNZEgF17pyVlgeOq8L9WWjJY9ma1uInCQj
eNNoz+QZ7s6KCIKbO5BWBdhiK+7xmByFcl7sOctXdhQYoIMYYfsQ/fKWnZx+2Z9s
UIlVRPV0IQ2109QuzFHRzAhSgeyshOI5q3HDgzgBpb9ICrvZLKatyPsUGHEclmqq
Qrii7t0+hBKtcdDxNQpw6I0UobnwGN3wBp/Ohg5sUcU+wd74Vrm0tp9Y+qjY44cM
fA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:14:21 2026 by rpki-client