Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
File:                     0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json)
Hash identifier:          iEm/87pKiaE+k0Tg2QmM3rmrQM7NZ88qsFIxs9uOZqM=
Subject key identifier:   D3:69:BD:CC:A8:3E:4A:26:F7:FB:FD:6D:73:0E:A5:96:69:21:EB:D9
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Certificate issuer:       /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial:       16502BDE9DAAEE9693FAE40838EFF8F3CE237982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
Manifest number:          02BC
Signing time:             Sat 21 Mar 2026 06:22:35 +0000
Manifest this update:     Sat 21 Mar 2026 06:17:35 +0000
Manifest next update:     Sun 22 Mar 2026 07:19:35 +0000
Files and hashes:         1: 3139352e35382e3134352e302f32342d3234203d3e203137343333.roa (hash: eHTOtIuDBTIVqfM4qOnIATmNiGNzwSelAsR/FAYQ0kQ=)
                          2: 3135302e3235312e3232392e302f32342d3234203d3e20323135313532.roa (hash: HUonHMUSHlk9aqJ/sQc6wral71Jta8wOY6iN7ui+u0E=)
                          3: 3139352e35382e3134382e302f32342d3234203d3e203633303233.roa (hash: oBeeeU3GnT2oMITYsHzfevINcnN3rBvPI2W5i1+sVPw=)
                          4: 33312e39392e3230362e302f32342d3234203d3e20323130343935.roa (hash: OC80Hx5Gq1jN6Ym5UmCqnC8fGlp8VQazYJOfXpnB8WU=)
                          5: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=)
                          6: 3138352e3231332e3234382e302f32342d3234203d3e2037353336.roa (hash: 3Ow4dhqcQd/FeupsTtXE+3P69G/MvUe02J04AXHX428=)
                          7: 3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa (hash: iQ9RYSqOmsvIqARX4nqI9wEFn//drkKsHCDo7XaSdTU=)
                          8: 3135302e3235312e3233312e302f32342d3234203d3e203633313939.roa (hash: nOdkF2oLzkeUcWgIM8F3FhA8vX9MjMTAnEFAB1UxJHg=)
                          9: 33312e39392e3230372e302f32342d3234203d3e20323030393139.roa (hash: Sx4gimOMm/cDt00enlx4Don8b0BAMFnFutmPQSumeeM=)
                          10: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: A919/Bekrj6rZbVlRAQ3zY8i9Bm4Qio6XVxQpWLOfQM=)
                          11: 3139352e35382e3134392e302f32342d3234203d3e203633313939.roa (hash: 9jUqhgLq8QIEEJxJiMALs0wsvhfDs1EJyMuRSJoW+38=)
                          12: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: PbuFJWIaFPfS/fUezjEhjeDUJ1OpDE0MDCs7HAI2pDY=)
                          13: 33312e39392e3230322e302f32342d3234203d3e20323133363530.roa (hash: 0Bngyrmrdfz47mx/mnuSCDuWlf2EDWIUujRrINoh4uI=)
                          14: 33312e39392e3230312e302f32342d3234203d3e20323133363530.roa (hash: LZe/oPKdzHBDXdq7jgdrUvSsiw189QvXVXiPjXqJiLQ=)
                          15: 3139352e35382e3135312e302f32342d3234203d3e203633313939.roa (hash: SGjGhzMt3scH9rugBQZ4G2NPX5nHaRwO3AhJMExF7aU=)
                          16: 3135302e3235312e3232342e302f32342d3234203d3e20323134303235.roa (hash: XyD5J0WH/sjYz14lGhzyoY5+Ij2l+T4JX6OVkLo4EQo=)
                          17: 3139342e33342e3235322e302f32342d3234203d3e203439353831.roa (hash: CdOWg7XQ7TdzzLDF2E3vbhyf4TDBRs7VuKir2QIc0i4=)
                          18: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=)
                          19: 3135302e3235312e3232362e302f32342d3234203d3e20323135313532.roa (hash: l88xld5hN+Vt1T/nwJ0n59xsdfmhHbKR2AdJBNoWlgw=)
                          20: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: WxHcRq5WCH3YmKS5+Il6T1ro4Oc3AucTAyVboxN6cYg=)
                          21: 33312e39392e3230302e302f32342d3234203d3e20323032303736.roa (hash: 9aCU0WrowHQDEddqo+4gFdH5kjWR15/2+hM8MI1EWF8=)
                          22: 3135302e3235312e3232382e302f32342d3234203d3e20343032313836.roa (hash: bq5jg07HJ8FOTQ2/zMutzRp2lBLV9j0f+dqxY6EcQ5E=)
                          23: 3139352e35382e3134362e302f32342d3234203d3e20343032313836.roa (hash: ORRSzvs2QEdncOPZuD+oGmv+utaq99nlS9NDrNT0GCE=)
                          24: 3138352e3231332e3234382e302f32342d3234203d3e203231383539.roa (hash: l5LzFYeAYRpBxI6rZTLSPCbjfPY+STOvzGpAtsNNCfk=)
                          25: 3139352e35382e3134342e302f32342d3234203d3e203332383738.roa (hash: qHIHvPNlCIdk61FIk0B9gnFq0+9BXxWoP+p4QKGLamE=)
                          26: 3139352e35382e3134342e302f32342d3234203d3e20313938303837.roa (hash: yv5KHuxJ7GUJMda2TuZyOF1TkQigXEfccqGNah7Vf+c=)
                          27: 3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa (hash: cvWbud/Q3B4zVr3PrPYyxiTjcQyvCffxgDgg+5VMZYE=)
                          28: 38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa (hash: Mdj3IIZJ097ibJGhSOfHP4GOBLdG4jAp1zNpVSxesFg=)
                          29: 3135302e3235312e3233302e302f32342d3234203d3e20323134363638.roa (hash: 5oRkZNHY5jOHApMzLJhjusPpBUXkcMRnJe0gClp6VvQ=)
                          30: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: GEbFfS+LLMgocx0zl/qOrB6oO+BgTD8IsbF49GAbNus=)
                          31: 3139342e33342e3235342e302f32342d3234203d3e203531383532.roa (hash: za0HM3w55tiDFbhPrhUh3FtVd5oKhUm8JuFZ8lH0DiA=)
                          32: 3135302e3235312e3232372e302f32342d3234203d3e20323133373334.roa (hash: Fe/5va/u8EIzw3SYKhB486KbEr9PrZMEi8IrwZOE4AM=)
                          33: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: e8st7u1dKspmUZDQTf+HMZ5aHldHWssH6orNpIFBohM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 07:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:50:2b:de:9d:aa:ee:96:93:fa:e4:08:38:ef:f8:f3:ce:23:79:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
        Validity
            Not Before: Mar 21 06:17:35 2026 GMT
            Not After : Mar 22 07:19:35 2026 GMT
        Subject: CN=D369BDCCA83E4A26F7FBFD6D730EA5966921EBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:e5:56:54:56:1b:80:8c:53:10:26:26:ff:
                    b7:b4:c7:d4:18:07:83:c7:72:8b:87:c5:6b:04:04:
                    fe:29:1a:f1:47:45:20:c2:dc:33:05:4c:08:6b:f5:
                    cd:c1:10:30:8a:d7:e7:c5:64:b5:09:6d:98:6e:0a:
                    90:50:73:07:f7:bc:2c:9a:a5:fb:4a:71:15:8c:76:
                    77:55:d0:ac:23:51:51:db:a6:c4:fe:6c:05:3e:bd:
                    71:65:92:66:4b:20:98:2a:e0:53:5f:55:38:fb:89:
                    4a:c5:72:55:a1:60:c1:5d:33:cf:f8:26:0a:0d:b6:
                    e1:74:6f:84:f6:d7:7f:43:7a:0a:ba:c4:84:50:53:
                    7b:06:c8:01:73:e8:d5:c4:11:52:60:e2:e7:11:3f:
                    bc:44:ed:03:4d:0d:25:83:9a:5d:b2:04:e7:ea:50:
                    d1:38:dc:17:82:e0:5f:98:de:b8:80:0e:f2:36:cf:
                    a9:18:65:52:b0:62:da:28:4c:70:ca:be:52:ff:6c:
                    f5:85:dc:3e:86:c9:96:9f:7e:6d:c9:94:eb:6a:71:
                    aa:23:ac:63:3c:de:af:d4:45:aa:01:99:8f:fe:42:
                    11:92:f4:7a:cc:ac:28:60:c1:54:8b:33:ab:bb:20:
                    eb:ad:87:8d:00:20:3b:ad:04:14:a2:ad:5a:94:62:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:69:BD:CC:A8:3E:4A:26:F7:FB:FD:6D:73:0E:A5:96:69:21:EB:D9
            X509v3 Authority Key Identifier:
                keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:89:85:ff:5e:0e:00:2f:2b:f2:49:2d:24:54:da:74:46:99:
         d1:c5:bb:cd:fa:f2:d8:96:c8:6a:e1:02:5f:72:47:13:d3:2f:
         8f:1f:b9:0c:71:64:89:1d:6e:51:3c:20:ba:26:a3:68:98:07:
         e4:07:05:ff:05:67:96:59:eb:ae:5f:81:55:88:1c:0e:2c:69:
         c4:bb:e9:c9:3d:dd:40:00:ae:40:16:e9:0a:c0:fc:e0:7d:51:
         8b:a0:27:19:45:08:e0:78:6f:03:40:2b:4c:9b:c9:67:f6:44:
         ca:25:73:ef:c3:cf:86:2d:e7:e2:17:dd:45:20:f5:87:54:2d:
         c8:96:22:36:38:5e:55:62:ab:3b:15:fc:99:7e:75:64:8c:6c:
         be:8b:45:90:5f:72:70:73:fe:a7:97:c8:bb:ec:0a:95:ec:9d:
         f0:42:34:92:43:7d:40:ff:be:b4:62:96:21:05:dd:36:89:c9:
         f8:2a:20:72:ca:d2:36:b6:21:d3:fb:85:34:1f:08:75:48:81:
         21:86:d8:d3:1a:76:65:90:43:03:63:9b:a5:20:71:80:54:01:
         df:dc:e3:36:52:d1:4d:6f:af:7a:a7:de:ca:13:2c:23:a9:33:
         73:a3:77:0f:7b:52:14:18:a1:35:e3:18:da:58:da:e6:75:87:
         d4:aa:c8:97
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFlAr3p2q7paT+uQIOO/4884jeYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjAzMjEwNjE3MzVaFw0yNjAzMjIwNzE5MzVaMDMxMTAvBgNV
BAMTKEQzNjlCRENDQTgzRTRBMjZGN0ZCRkQ2RDczMEVBNTk2NjkyMUVCRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuuVWVFYbgIxTECYm/7e0x9QY
B4PHcouHxWsEBP4pGvFHRSDC3DMFTAhr9c3BEDCK1+fFZLUJbZhuCpBQcwf3vCya
pftKcRWMdndV0KwjUVHbpsT+bAU+vXFlkmZLIJgq4FNfVTj7iUrFclWhYMFdM8/4
JgoNtuF0b4T2139Degq6xIRQU3sGyAFz6NXEEVJg4ucRP7xE7QNNDSWDml2yBOfq
UNE43BeC4F+Y3riADvI2z6kYZVKwYtooTHDKvlL/bPWF3D6GyZaffm3JlOtqcaoj
rGM83q/URaoBmY/+QhGS9HrMrChgwVSLM6u7IOuth40AIDutBBSirVqUYlw5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU02m9zKg+Sib3+/1tcw6llmkh69kwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03
YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG
ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYImF/14OAC8r8kktJFTa
dEaZ0cW7zfry2JbIauECX3JHE9Mvjx+5DHFkiR1uUTwguiajaJgH5AcF/wVnllnr
rl+BVYgcDixpxLvpyT3dQACuQBbpCsD84H1Ri6AnGUUI4HhvA0ArTJvJZ/ZEyiVz
78PPhi3n4hfdRSD1h1QtyJYiNjheVWKrOxX8mX51ZIxsvotFkF9ycHP+p5fIu+wK
leyd8EI0kkN9QP++tGKWIQXdNonJ+CogcsrSNrYh0/uFNB8IdUiBIYbY0xp2ZZBD
A2ObpSBxgFQB39zjNlLRTW+veqfeyhMsI6kzc6N3D3tSFBihNeMY2lja5nWH1KrI
lw==
-----END CERTIFICATE-----
Generated at Sat Mar 21 19:09:46 2026 by rpki-client