Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
File:                     391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft (raw, json)
Hash identifier:          c2ATn7THzwvF3iEPzntzQj1PUYLXAVb2IG7yXgnmV7Y=
Subject key identifier:   52:EF:97:54:1D:92:BC:91:34:2D:50:5F:E5:C2:65:00:9F:BF:44:AF
Authority key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
Certificate issuer:       /CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Certificate serial:       3054B3274EA51C1ED9B9B7EE08A553FBA20986E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
Manifest number:          4E
Signing time:             Fri 27 Mar 2026 20:30:06 +0000
Manifest this update:     Fri 27 Mar 2026 20:25:06 +0000
Manifest next update:     Sat 28 Mar 2026 22:18:06 +0000
Files and hashes:         1: 323030313a3637383a6139303a3a2f34382d3438203d3e20323135363835.roa (hash: f01olELinbK/WN+AKKfNEa3BaJPmtAdvY7LAPWQjTbg=)
                          2: 391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl (hash: dKnFwXqVgSavUf0gSvxPihpeM4GYWmQsbq4CDW4wdFQ=)
                          3: AS215685.asa (hash: YaDrA70r3c8UdJ/OHOv/yu3bJSTpuCNZQcfu9TFCX6c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 22:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:54:b3:27:4e:a5:1c:1e:d9:b9:b7:ee:08:a5:53:fb:a2:09:86:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
        Validity
            Not Before: Mar 27 20:25:06 2026 GMT
            Not After : Mar 28 22:18:06 2026 GMT
        Subject: CN=52EF97541D92BC91342D505FE5C265009FBF44AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6b:95:c0:c1:f6:7a:85:ad:8c:76:7a:1c:06:
                    55:89:3c:15:e0:80:e9:af:a3:bf:71:01:bd:e5:19:
                    fb:f6:31:be:ae:27:53:16:66:b1:96:25:fd:28:12:
                    a5:c1:e5:1e:ac:f9:1c:d7:48:5c:6f:97:5d:0a:30:
                    18:40:57:b9:bb:1e:13:78:47:38:1a:3d:10:50:aa:
                    5a:2d:56:f2:0e:db:98:0b:92:53:fe:72:13:0e:b0:
                    98:34:82:99:94:f5:3a:9a:b9:56:d8:45:b9:54:09:
                    6a:28:18:31:36:d6:31:78:15:f9:10:9d:e6:af:6c:
                    ad:2e:14:fc:21:2a:b4:dd:a5:45:15:30:f4:b3:93:
                    17:14:c3:5f:b3:94:17:a8:96:62:23:93:15:92:46:
                    67:b8:d8:fc:26:b4:a9:d9:6d:9f:4d:c4:68:0d:6a:
                    cb:92:fa:be:1d:04:f1:18:01:fd:7b:88:99:41:7c:
                    f8:5e:38:60:19:6a:1e:f1:2f:b1:50:97:ce:a6:b5:
                    1d:5c:50:d4:fa:e2:5c:f2:2c:36:f4:9d:c9:6d:1e:
                    e5:77:1a:b8:7f:80:39:e6:95:a0:1f:ea:3b:66:e1:
                    1f:16:14:48:2e:6d:3e:ca:8d:ee:57:96:25:92:18:
                    d1:eb:13:59:58:c8:5f:be:e5:98:ca:8e:ef:b3:f3:
                    c0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EF:97:54:1D:92:BC:91:34:2D:50:5F:E5:C2:65:00:9F:BF:44:AF
            X509v3 Authority Key Identifier:
                keyid:39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a1:6a:13:2e:2c:fd:0c:39:5f:aa:e8:36:79:6f:44:65:8c:
         c1:a6:8a:d5:51:7b:06:52:1f:79:29:06:6a:a5:3c:96:61:d7:
         69:92:90:5b:73:fc:0e:2c:bb:27:7c:7b:0a:cc:0a:17:db:05:
         2a:41:a7:bc:6c:5b:7d:58:e1:c0:60:76:b0:7b:9c:e4:9f:07:
         2d:dd:59:d3:20:84:96:1d:8e:b9:a4:76:85:79:c5:21:bb:12:
         25:de:7a:79:e6:23:f0:eb:a0:9d:d3:e3:30:51:f4:92:2c:83:
         b0:c7:e4:8a:81:42:72:2f:f3:5f:19:d9:6c:fc:22:3a:bb:61:
         4b:91:48:e0:cf:88:cd:59:56:3e:9c:40:2d:af:74:45:af:e4:
         09:89:b8:07:60:fa:63:5e:d7:64:b1:2a:c8:e7:04:e8:44:12:
         66:2a:68:57:c2:eb:f1:73:0b:f2:b0:91:65:38:0d:0e:e8:6b:
         bb:bb:36:16:4e:49:2b:24:e7:6b:1e:05:72:6b:bb:84:ce:33:
         7f:39:b7:af:ff:ed:ac:af:27:f1:0f:d6:26:e2:1c:16:18:33:
         11:14:3a:66:47:8b:5d:8c:89:9c:c7:c9:78:a0:99:05:ec:72:
         e0:b8:3b:0a:76:07:18:74:67:30:8e:7d:fc:20:28:9e:70:78:
         f2:b6:1c:78
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUMFSzJ06lHB7ZubfuCKVT+6IJhuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkxZjIwZjI2YWE2ZDYzNTk4ZmYzMDI1Y2RkYmRiNGI5
YzlhYjY3ZDAeFw0yNjAzMjcyMDI1MDZaFw0yNjAzMjgyMjE4MDZaMDMxMTAvBgNV
BAMTKDUyRUY5NzU0MUQ5MkJDOTEzNDJENTA1RkU1QzI2NTAwOUZCRjQ0QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDea5XAwfZ6ha2MdnocBlWJPBXg
gOmvo79xAb3lGfv2Mb6uJ1MWZrGWJf0oEqXB5R6s+RzXSFxvl10KMBhAV7m7HhN4
RzgaPRBQqlotVvIO25gLklP+chMOsJg0gpmU9TqauVbYRblUCWooGDE21jF4FfkQ
neavbK0uFPwhKrTdpUUVMPSzkxcUw1+zlBeolmIjkxWSRme42PwmtKnZbZ9NxGgN
asuS+r4dBPEYAf17iJlBfPheOGAZah7xL7FQl86mtR1cUNT64lzyLDb0ncltHuV3
Grh/gDnmlaAf6jtm4R8WFEgubT7Kje5XliWSGNHrE1lYyF++5ZjKju+z88CxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUUu+XVB2SvJE0LVBf5cJlAJ+/RK8wHwYDVR0j
BBgwFoAUOR8g8mqm1jWY/zAlzdvbS5yatn0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh
MzIwLzAvMzkxRjIwRjI2QUE2RDYzNTk4RkYzMDI1Q0REQkRCNEI5QzlBQjY3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09SOGc4bXFtMWpXWV96QWx6ZHZiUzV5
YXRuMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZTdmNzQ3ZS1m
ZjY4LTRmYTItYjJlMy1mNmVkZTU0OGEzMjAvMC8zOTFGMjBGMjZBQTZENjM1OThG
RjMwMjVDRERCREI0QjlDOUFCNjdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6FqEy4s/Qw5X6roNnlv
RGWMwaaK1VF7BlIfeSkGaqU8lmHXaZKQW3P8Diy7J3x7CswKF9sFKkGnvGxbfVjh
wGB2sHuc5J8HLd1Z0yCElh2OuaR2hXnFIbsSJd56eeYj8OugndPjMFH0kiyDsMfk
ioFCci/zXxnZbPwiOrthS5FI4M+IzVlWPpxALa90Ra/kCYm4B2D6Y17XZLEqyOcE
6EQSZipoV8Lr8XML8rCRZTgNDuhru7s2Fk5JKyTnax4Fcmu7hM4zfzm3r//trK8n
8Q/WJuIcFhgzERQ6ZkeLXYyJnMfJeKCZBexy4Lg7CnYHGHRnMI59/CAonnB48rYc
eA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:49:31 2026 by rpki-client