Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
File:                     FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft (raw, json)
Hash identifier:          XKiesij0MRGwzPjZI2dfYJypnBQtqONefvBaP2puPA0=
Subject key identifier:   D9:92:9D:B4:F7:63:C2:48:51:1A:43:F2:E4:0B:40:46:37:54:8B:1C
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Certificate issuer:       /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial:       044A737C4B227E7AAA14B3AD7170ED9D4C941BF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
Manifest number:          01A6
Signing time:             Fri 13 Mar 2026 03:08:46 +0000
Manifest this update:     Fri 13 Mar 2026 03:03:46 +0000
Manifest next update:     Sat 14 Mar 2026 06:33:46 +0000
Files and hashes:         1: 326130653a386630353a3a2f33322d3438203d3e203538323939.roa (hash: ChRxp218Ppp/Ar9+SBUoeijmvhXbTstmajQAxMCZzmU=)
                          2: 326130653a386630323a323038303a3a2f34342d3438203d3e20323134303736.roa (hash: o1sHOM85aoxtRyr6aKKyzQqnvJEqVYHtEe373/R2CXo=)
                          3: 326130653a386630323a663037393a3a2f34382d3438203d3e20323130313837.roa (hash: dNFYzs2vePQUYnK1iZf3GrO1RJCzVmPICuvkN8oJAvM=)
                          4: 352e3232362e3134362e302f32342d3234203d3e203538323939.roa (hash: qNr0TnWXn91io5Kf4S/eUzwAUX/WkTOzXp+VxijVCjY=)
                          5: 326130653a386630323a663037373a3a2f34382d3438203d3e20323136343338.roa (hash: 0wDfNPJqvA+PWPMia2e8wIOAU4RL4C4eaIizVk5R1m4=)
                          6: 326130303a363334303a343030303a3a2f34382d3438203d3e203538323939.roa (hash: 2cIUBbXFtw6TIW3gtkGzSlPyISGn3/RYjHd6OQ6VrYU=)
                          7: 326130653a386630323a663036363a3a2f34382d3438203d3e20323135353035.roa (hash: LPBTP/jDpzvg0Z9UZyRA+1t+dlm4veuYAcNSFYan70E=)
                          8: 326130653a386630323a663037333a3a2f34382d3438203d3e20323133363535.roa (hash: Tl52N7izEsdRdhc5kMlS6ir1Yn1LTpOCXum3f60Mmk8=)
                          9: 3138352e34342e38312e302f32342d3234203d3e203339343231.roa (hash: BF6S2GfzcRLVtvnyZ19+5dCLfsNDbMuOlEIUiJ5+jzQ=)
                          10: 352e3232362e3134342e302f32312d3231203d3e203538323939.roa (hash: fo9Lh+tNo20hmXbMUCX4eNXLCfhJfwiBBGLGaQ6kzuA=)
                          11: 326130653a386630323a663035643a3a2f34382d3438203d3e20323038383039.roa (hash: oWPgfClqLJmtjP9HFoFRJ3Kfk2UFVtgqMskCZsn9TQY=)
                          12: 326130653a386630323a663035393a3a2f34382d3438203d3e20323035323335.roa (hash: CWcQNSIGpripy8s4Nf/cYhkLzX7w0WzWCHT/Vic1htY=)
                          13: 326130313a3230653a3a2f33322d3332203d3e203431303531.roa (hash: dHo42eRURsQRPaktXGGvl5v6FK2mmQ17gzUqGLoOaR0=)
                          14: AS58299.asa (hash: KMjmOyGQ/eF8q5GfR/09kjoqklRt89GsOq9Vsrv6mS4=)
                          15: 326130653a386630323a663035653a3a2f34382d3438203d3e20323132363931.roa (hash: A7r1cVoo4oUOkYbEw9uDA1NktsxqPxWOdIqWNkrlFuE=)
                          16: 326130653a386630323a663035613a3a2f34382d3438203d3e2038303735.roa (hash: Ez2E/uch+T/3BpzRGTphtaZkGlomTkJSw4AzP0qioys=)
                          17: 323030313a3637633a323634383a3a2f34382d3438203d3e203133303330.roa (hash: gJcgXZCcNvkeeSlp/fGn07D0YciYEry1v6B6cF0VIYA=)
                          18: 326130653a386630323a663036393a3a2f34382d3438203d3e20323135333836.roa (hash: HoFrJZwmz+IQSsFxf0/iTNMNWhCP1l1iSLX+7mYxswY=)
                          19: 326130653a386630323a323164303a3a2f34342d3438203d3e20323033353238.roa (hash: Q2U2De5ddvOq28evrpXRTzpKGADb814yX/Aer+Rx9No=)
                          20: 326130653a386630323a663036653a3a2f34382d3438203d3e20323134393539.roa (hash: 8U5hM6zbvA6UwXoj7I/aljikdBIlHluJkwgjXrjgEYE=)
                          21: 326130653a386630323a663036373a3a2f34382d3438203d3e20323135353037.roa (hash: 4JWFiWnTyVJ0iIkC7hLvO9m92EGB13D+/DnKUVI33cM=)
                          22: 3139352e3133382e3230332e302f32342d3234203d3e203431363636.roa (hash: fBAsB9iklH/Sb7k957ejcCvRBRswa9KHrBO65FjWwFo=)
                          23: 326130653a386630323a663036663a3a2f34382d3438203d3e20323134393330.roa (hash: retHIJU+OEtxVBS8V8jgLUhkCyVMMNuYOtSiXFFGSio=)
                          24: 326130653a386630323a663035323a3a2f34382d3438203d3e20323030323430.roa (hash: 04ECiCHNYqCW1IoBRGK/e/JmplO6ax7d35zReWZE9Bg=)
                          25: 326130653a386630323a663030383a3a2f34382d3438203d3e2030.roa (hash: fJp6d/M39q8say69yK4LkNYhGNWz4AYomImaSPVBa54=)
                          26: 326131323a616638303a3a2f33322d3332203d3e203536383833.roa (hash: SqpLdUzG49Jud64fYEC0hiT3rT/sz4nQsAd6iQkoKk8=)
                          27: 326130653a386630303a663130303a3a2f34302d3438203d3e203439393333.roa (hash: Up83lk6REe+5I/MSrxX+h0LwJA3YHkAo3sS6jSKhUhM=)
                          28: AS41051.asa (hash: /I3blOoDipe9cn51PHXcllsS7iPiCuWfGkm9iM6k11w=)
                          29: 3138352e38362e3232342e302f32342d3234203d3e203439313932.roa (hash: R1iDu9WCL0q2IrJGzq/wt63LOyBWhh9M6puThqaZhTQ=)
                          30: 34352e31312e3234382e302f32322d3234203d3e203538323939.roa (hash: O743btv2VPrOrOHtFh7YgIpYcyBB9rY+g/nhh9nhNM8=)
                          31: 326130653a386630323a663037383a3a2f34382d3438203d3e20323034323134.roa (hash: wMBOWBkhmi0JxxhSCqgOSP0KaMwF4PNvXixGBPxRLQI=)
                          32: 326130653a386630323a663037353a3a2f34382d3438203d3e20323038343837.roa (hash: 65U9Ktm8EX794VdRMFOlvtnIyqnUI7f/TqgXTKd1bKA=)
                          33: 326130653a386630323a663031343a3a2f34382d3438203d3e2030.roa (hash: obP9cOFgkCC9L90//Sq40HdlSGiRlC5BZcMbttXxCEE=)
                          34: 326130653a386630323a663036323a3a2f34382d3438203d3e20323135383239.roa (hash: NoOro0tKfXqTsz7U86VS0JkPQpQfjzDiMY8ZybILVwA=)
                          35: 326130653a386630323a663037313a3a2f34382d3438203d3e20323134303736.roa (hash: vtIhMr2/EjZMKc1AuHEbxCTIiztqwWu9gj5RCT4Dj2k=)
                          36: 326130653a386630373a3a2f33322d3438203d3e203538323939.roa (hash: k8TgBsnEoYHU8KFFTe9PohRVgxzl0zqnNGYv8Ti0QB8=)
                          37: 326130653a386630323a663036383a3a2f34382d3438203d3e20323135343438.roa (hash: Mfp6t9SWbcw6G6m+NFCbQ7qowC8qmb6ogbuMibiyg24=)
                          38: 326130653a386630363a3a2f33322d3438203d3e203538323939.roa (hash: zHh6V2fVeukEnPHJ1wY8CvW5k/tv0+f8qlsMDai+btw=)
                          39: 3138352e3231312e34332e302f32342d3234203d3e203536383833.roa (hash: 0GGtulQgh58mdaZy9i43/jGy8cDbbjgf1fqq974LzcM=)
                          40: 326130653a386630323a323233303a3a2f34342d3438203d3e20323037333134.roa (hash: 6jhIQwYm0E6oLNNVH8K64qfsAzFCt9swfU252EHs/4E=)
                          41: 326130653a386630323a663037303a3a2f34382d3438203d3e20323134393031.roa (hash: d11TZnQ5XaIDQf6vMzp8hB7AKRISIPB85RCNYKtHr28=)
                          42: 326130653a386630323a663031333a3a2f34382d3438203d3e20323132323739.roa (hash: 4eYk1Ty5EDOQqQLmR52pun6zKGW8+gK9rNv5BFC9wpc=)
                          43: 326130653a386630323a323036303a3a2f34342d3438203d3e20323037393037.roa (hash: s9m/DVKJWK38M+MuT8fPIdoPQ6Gyphj3RbrRyxCbFhQ=)
                          44: 326130653a386630323a323066303a3a2f34342d3438203d3e20323132303038.roa (hash: On2eQpRsGAER0c03JWESje3izTAkMAmeRzawddcsDtc=)
                          45: 326130653a386630323a663035373a3a2f34382d3438203d3e2030.roa (hash: njfdmc7bB2u1Z0gjqHMQhp7pzO9UZSS/mQH/5jJ2TLI=)
                          46: 326130653a386630323a663033323a3a2f34382d3438203d3e2030.roa (hash: 0SNjGT3FE4qwY0N7Om+oXmskvlW5FVflR1RtYQQIklA=)
                          47: 326130653a386630323a663036633a3a2f34382d3438203d3e20323135303036.roa (hash: GIH0i9HY7MCsLMCthgM6Avjlr22qSSMsmbUWHqbY5A8=)
                          48: 326130653a386630323a663036643a3a2f34382d3438203d3e20323134393939.roa (hash: KNOQBupp9OxO/AHfd8hpigcVBg21D5+oWQx9k8gqPa8=)
                          49: 326130653a386630323a323039313a3a2f34382d3438203d3e20323030383237.roa (hash: 7nFTIPTUa21663wN+oGCOzqLYwVD8MNL+9gwQRt5xtM=)
                          50: 326130653a386630323a663035633a3a2f34382d3438203d3e20313938353538.roa (hash: mSxQlVqmsn8G4xV+Q3GxtjMMXD9Isz6WBWTTgtI5cY8=)
                          51: 326130653a386630343a3a2f33322d3438203d3e203538323939.roa (hash: nXjSmoIlXocjKVgAHLvasIUcpf6lI336vehWVull5rM=)
                          52: 3138352e38362e3232382e302f32332d3234203d3e203538323939.roa (hash: 890AdEnFU4YBNlCNp/5Ad5R0sKIy6AzHzJmChUqZzls=)
                          53: 3138352e34342e38302e302f32342d3234203d3e203339343231.roa (hash: UQetgJ8gkrizZ8Ee9Cz8vW5vh9g+HY6FYRsN52DUj8Y=)
                          54: 326130653a386630323a323138303a3a2f34342d3438203d3e20323030373238.roa (hash: rgLjPrXaPFMOxA9cqHCHxA7GzUvgcL1jtYtwsmzulTw=)
                          55: FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl (hash: IjWY9god1egXXNPBbt40exPZDaWpbqTw5xgNIGMVfZk=)
                          56: 326130653a386630323a663031313a3a2f34382d3438203d3e2030.roa (hash: Hsn319vpjP1SAymVY2rMLikxgngH0+QVpoQw3/5SnTA=)
                          57: 326130303a363334303a3a2f33322d3332203d3e203538323939.roa (hash: r7Nz5sTQ0srB/YDhKbCNr13tvMGVCwAnxfmWfTPFEmA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4a:73:7c:4b:22:7e:7a:aa:14:b3:ad:71:70:ed:9d:4c:94:1b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
        Validity
            Not Before: Mar 13 03:03:46 2026 GMT
            Not After : Mar 14 06:33:46 2026 GMT
        Subject: CN=D9929DB4F763C248511A43F2E40B404637548B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:99:24:9d:18:77:bb:cd:6d:ac:20:76:85:
                    a4:04:5b:db:f7:e2:93:88:14:b3:1a:72:45:56:89:
                    7d:c0:a1:1c:98:59:b2:1c:07:5d:6c:41:d6:87:65:
                    c3:9d:f7:02:17:5c:9d:68:1f:db:e6:8b:58:31:19:
                    3d:a3:04:52:a3:3b:8f:70:c8:f9:21:e5:9b:58:40:
                    e2:76:36:44:cd:27:ad:49:f4:37:13:a4:6b:c3:55:
                    0b:ac:aa:78:e2:12:70:ca:cc:53:d9:c3:15:30:80:
                    4c:0b:aa:e5:be:5e:ce:bf:68:fb:d5:23:f9:5f:ac:
                    70:a3:91:a1:16:e4:c2:a4:64:4f:1d:69:02:03:cf:
                    e8:85:e3:46:20:b9:68:19:25:75:23:60:74:38:3f:
                    56:e0:e0:c9:0d:27:8f:a6:48:a5:53:d3:a6:52:e1:
                    b7:85:65:15:fc:c3:db:70:4b:7e:52:7c:39:f6:a1:
                    73:21:7b:ee:2a:4e:ff:aa:60:8a:f4:e4:81:bb:59:
                    e5:2b:ab:28:6d:76:fa:ee:24:26:4e:f9:b8:bb:a0:
                    cd:a0:f9:4c:fa:f6:fc:e3:c5:5d:68:e3:e6:bf:66:
                    fe:0b:03:1a:5f:36:67:e5:d3:ab:21:4c:2c:98:a6:
                    bb:61:a2:d9:07:b2:00:fa:a1:22:a5:a2:20:c1:4a:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:92:9D:B4:F7:63:C2:48:51:1A:43:F2:E4:0B:40:46:37:54:8B:1C
            X509v3 Authority Key Identifier:
                keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:90:8a:a3:f8:43:aa:0c:ee:5f:0d:6c:a4:93:dd:e9:98:
         02:01:d2:0b:05:c5:6a:7d:8b:57:dc:6a:1b:ef:c1:8d:5d:9c:
         6d:a2:ab:ed:ec:74:99:e0:5b:14:d1:7a:dd:e7:bb:55:e4:f1:
         87:ef:7c:24:de:9e:9c:cd:db:01:99:8c:93:ba:c8:93:cd:28:
         0b:99:88:f0:db:0a:f8:cc:a8:0b:74:6a:fa:f1:3b:24:e4:3e:
         36:39:e7:c8:a3:ae:d0:79:51:e4:98:cf:92:3d:ce:30:ed:40:
         45:6b:e4:1e:99:ce:11:db:4e:ef:8c:7f:9b:ec:6a:e0:27:19:
         d3:4b:2e:99:9f:97:21:94:58:0c:60:88:50:28:5a:00:65:d5:
         9f:2d:dd:69:7c:1e:29:c3:20:2d:6d:26:16:0a:07:57:13:62:
         0b:29:a2:a4:1d:39:3c:84:10:6a:14:76:20:45:b2:57:de:e5:
         8a:37:05:5f:4b:e4:ca:72:97:1d:dc:b7:41:b8:d5:19:a4:11:
         5f:52:c0:8c:71:1a:38:b4:17:e0:81:85:5c:79:27:eb:c6:2d:
         8a:f2:b7:fb:a0:e4:3a:83:38:c7:8e:2d:52:9e:09:4a:4d:d8:
         3d:61:15:d2:fb:6a:15:24:7d:a5:ec:06:c0:2d:28:2b:c9:cc:
         0e:83:0c:47
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUBEpzfEsifnqqFLOtcXDtnUyUG/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjAzMTMwMzAzNDZaFw0yNjAzMTQwNjMzNDZaMDMxMTAvBgNV
BAMTKEQ5OTI5REI0Rjc2M0MyNDg1MTFBNDNGMkU0MEI0MDQ2Mzc1NDhCMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJZkknRh3u81trCB2haQEW9v3
4pOIFLMackVWiX3AoRyYWbIcB11sQdaHZcOd9wIXXJ1oH9vmi1gxGT2jBFKjO49w
yPkh5ZtYQOJ2NkTNJ61J9DcTpGvDVQusqnjiEnDKzFPZwxUwgEwLquW+Xs6/aPvV
I/lfrHCjkaEW5MKkZE8daQIDz+iF40YguWgZJXUjYHQ4P1bg4MkNJ4+mSKVT06ZS
4beFZRX8w9twS35SfDn2oXMhe+4qTv+qYIr05IG7WeUrqyhtdvruJCZO+bi7oM2g
+Uz69vzjxV1o4+a/Zv4LAxpfNmfl06shTCyYprthotkHsgD6oSKloiDBSoK1AgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQU2ZKdtPdjwkhRGkPy5AtARjdUixwwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYt
ZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0
NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGgukIqj+EOqDO5fDWyk
k93pmAIB0gsFxWp9i1fcahvvwY1dnG2iq+3sdJngWxTRet3nu1Xk8YfvfCTenpzN
2wGZjJO6yJPNKAuZiPDbCvjMqAt0avrxOyTkPjY558ijrtB5UeSYz5I9zjDtQEVr
5B6ZzhHbTu+Mf5vsauAnGdNLLpmflyGUWAxgiFAoWgBl1Z8t3Wl8HinDIC1tJhYK
B1cTYgspoqQdOTyEEGoUdiBFslfe5Yo3BV9L5Mpylx3ct0G41RmkEV9SwIxxGji0
F+CBhVx5J+vGLYryt/ug5DqDOMeOLVKeCUpN2D1hFdL7ahUkfaXsBsAtKCvJzA6D
DEc=
-----END CERTIFICATE-----
Generated at Fri Mar 13 16:47:46 2026 by rpki-client