Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File:                     F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier:          IUw5mnadO5Z28WNXG0cP5w7IKGdV/UXmoAjoZQi9ibo=
Subject key identifier:   E4:AF:5F:A2:34:AB:C5:6F:C5:6A:E7:9E:E0:8D:32:E3:90:26:EA:87
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer:       /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial:       21FF16AD407D27D5B2702B96EE9288A726209629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number:          0264
Signing time:             Fri 13 Mar 2026 04:42:23 +0000
Manifest this update:     Fri 13 Mar 2026 04:37:23 +0000
Manifest next update:     Sat 14 Mar 2026 05:13:23 +0000
Files and hashes:         1: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: foBoaKUPeMOXyMdgjQODzIp3g1QrOeZIcU4rmaW6W0Y=)
                          2: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=)
                          3: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=)
                          4: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=)
                          5: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=)
                          6: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: zF5vtY5ZU3KHcRy+FQX7xaMDnJJVjBqba81pLZ1Y9sw=)
                          7: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=)
                          8: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: xfnBgMCFpR8WsSmanu6oXx69cY6n9Ufmkf4lgYTGZHc=)
                          9: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y=)
                          10: 3130392e3233342e3230392e302f32342d3234203d3e20323134313433.roa (hash: kfImODVrJ9DJfBDHIqmGZX0zk9Yq1KND0WLu9uNQXdY=)
                          11: 3137382e3133322e3139362e302f32342d3234203d3e20333933393432.roa (hash: D28ld5kVJceea0qzm5GNZqptmPyuFgFAFujny6boKiE=)
                          12: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=)
                          13: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=)
                          14: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=)
                          15: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: g0HR3CrBWD7c96+vrs4TgM7+nplGfauLE7gBOh8WqYo=)
                          16: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: 3WrBrAOV7SjPMl8BInuI3B0KtzI0JvDAuGMIMq+S9D8=)
                          17: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA=)
                          18: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=)
                          19: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=)
                          20: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: YrYAkcMHUInGqt6VwGEvHstEbPxGeJ1mUpEw6r8HXYo=)
                          21: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: uJEDxZm1l0+YcyFuGRmcGjOe89y2pFVQh//OE0DuSL8=)
                          22: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: EDWUUKhrOtu3UMAllaeIt1ZR8GH4cYzCKJWn6QZal8k=)
                          23: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: BSTbx9NRftehGX7dsv5BX6onmmpsKJtVOHvBBhUYkJA=)
                          24: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI=)
                          25: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=)
                          26: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y=)
                          27: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=)
                          28: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w=)
                          29: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 05:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ff:16:ad:40:7d:27:d5:b2:70:2b:96:ee:92:88:a7:26:20:96:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
        Validity
            Not Before: Mar 13 04:37:23 2026 GMT
            Not After : Mar 14 05:13:23 2026 GMT
        Subject: CN=E4AF5FA234ABC56FC56AE79EE08D32E39026EA87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:04:2e:9b:a7:9a:ac:11:8f:05:4b:58:ed:
                    fc:06:f0:d5:74:68:22:9c:25:69:65:aa:9c:ea:38:
                    10:4c:e6:4b:34:91:fe:f2:4d:fb:d9:09:a0:1e:7b:
                    41:b3:e7:2f:96:07:bc:5e:45:1c:9a:8e:6f:58:b9:
                    5a:39:2a:78:64:b7:70:66:2f:5a:11:9d:eb:e7:41:
                    cb:4d:dc:f5:14:ca:f1:81:71:f2:5f:a7:5d:50:86:
                    bf:85:ff:61:e7:92:ec:73:86:b9:d8:48:b2:9b:e2:
                    29:08:ff:9d:42:47:3c:33:30:7c:dc:f1:55:0b:81:
                    e0:d5:07:27:2a:04:71:63:5f:09:56:c2:ac:db:8d:
                    85:05:b4:dc:f6:f3:02:07:12:e5:fa:64:48:01:5b:
                    d9:3b:07:d4:ef:77:4d:5f:d8:77:db:f3:df:a3:75:
                    dd:40:6b:9f:20:d5:a9:8c:ff:57:c6:cc:91:7a:65:
                    75:7b:0d:f8:ed:46:1b:66:91:0a:dd:fa:b9:c0:4d:
                    c2:4a:26:12:90:0a:6b:bb:59:45:aa:b1:47:14:dc:
                    a6:8f:a1:b1:35:5d:4f:96:f1:dc:37:c2:d9:78:b1:
                    73:f7:ae:cf:cb:19:ab:5d:1a:e3:0c:51:8b:3e:ee:
                    89:50:1e:a8:02:4d:8a:4e:f2:e1:99:fb:5e:78:0b:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AF:5F:A2:34:AB:C5:6F:C5:6A:E7:9E:E0:8D:32:E3:90:26:EA:87
            X509v3 Authority Key Identifier:
                keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:75:0e:26:36:23:f2:a7:bd:a3:41:76:a5:8d:a0:70:6d:5a:
         56:cf:6a:09:b7:d5:a1:45:b6:c3:99:a5:1d:6e:b6:0c:d4:c0:
         f5:16:68:cf:d6:17:87:85:ed:50:30:d5:82:75:ca:39:cb:5e:
         f4:ec:11:68:39:0b:cf:3f:eb:49:f7:ed:79:cf:ad:3d:02:75:
         8e:9a:78:80:f9:b7:b9:ce:70:fa:ac:c0:9e:51:64:27:95:0a:
         4c:46:48:4e:69:a2:99:98:1f:6e:69:f2:70:2d:58:08:ba:55:
         25:d8:60:31:a7:d2:b6:02:f1:21:25:88:35:56:1e:65:7a:9c:
         09:03:ee:c9:bc:98:b6:39:a6:54:34:7d:74:ae:8e:d6:d1:91:
         d7:b4:3b:67:88:cb:99:39:f7:5b:6b:49:31:28:a7:9d:dd:2d:
         c2:fe:48:67:10:39:4d:06:96:a3:18:a4:09:e4:a4:b3:ca:8c:
         7c:f0:5e:05:46:32:b4:3b:b6:2c:fa:ae:f6:e6:a9:7a:43:15:
         19:fa:fb:60:5f:3d:d1:89:74:9f:e7:cf:6a:20:ed:0f:ad:00:
         26:d5:4d:7e:f2:c7:15:fa:97:af:94:88:dc:47:6d:40:49:a2:
         f8:02:79:5b:d7:44:7f:f1:3a:a6:f8:a4:06:9d:ea:43:18:10:
         e6:8f:10:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:30:00 2026 by rpki-client