Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
File:                     45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json)
Hash identifier:          I/wG/sX2kKg1UhaqrBLURZQWithnhl1/707bIO4TIhQ=
Subject key identifier:   1D:00:62:4E:B1:3C:35:56:91:FA:53:DC:EC:05:D2:66:F9:EF:B6:CB
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Certificate issuer:       /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial:       39CC14EE3A6F6C5050879CBB49488D8E77BB6650
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
Manifest number:          021A
Signing time:             Sat 21 Mar 2026 03:57:23 +0000
Manifest this update:     Sat 21 Mar 2026 03:52:23 +0000
Manifest next update:     Sun 22 Mar 2026 05:26:23 +0000
Files and hashes:         1: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 5y1BpEcUWIqqauwo2u2KJKPFMCa0JPAhvtiDqGTVDHw=)
                          2: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: U7iNThQkzOazFO20cEnZ3jeJVGhPlXoN/qn3Pi641+U=)
                          3: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: ipi0vAcQv2svi+muK542zHAIeeVH19r0pk+yh9NadUY=)
                          4: 37372e38312e37392e302f32342d3234203d3e2035363530.roa (hash: chtAnXZi5q6GRUxpR5xO2uIiP96tdCrOBTIeDsoa8hE=)
                          5: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: wPa88HthyMje0FC4DyK9XcGEOLxJkylfsOcQDqr+i80=)
                          6: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: A3pVDR25ByDI5MeiQGGyctYtEVKjmHED5jwJjMlcbk4=)
                          7: 3139342e32362e32312e302f32342d3234203d3e2036303739.roa (hash: C+pqIVBYxtX1Vf4vHbq3YBGNZtxuHmXXj5v6GlxMx88=)
                          8: 3139342e32362e332e302f32342d3234203d3e20343031313930.roa (hash: LIKAmocMMAfJYEkBfDTJGvC18ZVuFHLl0Op0JOVO1hY=)
                          9: 3139332e3234362e3136352e302f32342d3234203d3e20323135373237.roa (hash: lSm6X66gNWDs/TTuCVneNTdg6ziFYnxT4m3l/GUHEaA=)
                          10: 3139332e3234362e3136352e302f32342d3234203d3e20323132383135.roa (hash: v4ysGluIX7l1o3oYHo6hoD+oU+wMieIX0KtE9SekExI=)
                          11: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: kBcBHXRMQfVwN+zg5BZ4LCUyMZ6cS1mQp15ihx19Joc=)
                          12: 3139332e3234362e3136352e302f32342d3234203d3e2035353131.roa (hash: dGzL7JETjjIym98dnO672H+l9ARVq+lFYDpH7EjSgtE=)
                          13: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: 9KgoKkAy+jHyb2KjQ0O4zctlP9PDcwOM1ntO/x2J7Vk=)
                          14: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: 5R59EysS9tL6UTIvemaJCrtszj6x6/cuKApXJ2KN9Lk=)
                          15: 3139342e32362e32312e302f32342d3234203d3e2035363530.roa (hash: p78KH8kgcBRXXFcw1mzLGQ6wEbtzI8eA56dk/vajAYc=)
                          16: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: QouC5FWUBHtZ4E7QwYAk/YLY1LKZrC4sUpRgQ8vSbSQ=)
                          17: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (hash: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=)
                          18: 3139342e32362e322e302f32342d3234203d3e2036303739.roa (hash: TjtnNTn7FpO9sB3IOcWEqbyB3qNOxAYh9NFcoqi1238=)
                          19: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: d5TxhwAkeXwrF6uRbXxfjKGJfxHDWIa7sLTALcjfvN4=)
                          20: 3231322e34372e33362e302f32342d3234203d3e2039333138.roa (hash: ZVXQWb7gEfqAkq16Ky0ZSqFCIZ2vC/M8/7YAMrFhXy0=)
                          21: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: 5I0vOu7kvIMlEY7Sq8XZtvSWHaZxS4B46RvJVyxx8WI=)
                          22: 3139342e32362e322e302f32342d3234203d3e2035363530.roa (hash: ZRXlceutGr+HdF7VzH6TN3nc+64+GLWiw3p0vss7mZQ=)
                          23: 37372e38312e38302e302f32332d3233203d3e203230383630.roa (hash: ENs1tyjr+QsCNkYiVs8CGb16BSmudiUVAdhDAu4V/ek=)
                          24: 3139342e32362e322e302f32342d3234203d3e20343031383338.roa (hash: hww+5Hf4jmFo7Au813kPo2lBtFDkf7ALOlVDrCFDow8=)
                          25: 3139332e3234362e3136352e302f32342d3234203d3e20323136313539.roa (hash: 6btW8oVMBrDCtZqv+Luv6y7+nYwucV6SF0bhOqSqdro=)
                          26: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: 2GU98PVW8A06wPHFP07dWrMXh03+0FNfaArisd+625g=)
                          27: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: Tv5q+rfM3afhLe0aBDFGLWT8PXWC4GLzMQF3H6VLFL8=)
                          28: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: MdPKw7OONGYXcOZWO/o2hEi1vtA1V+k+wu8N5c3I5aE=)
                          29: 3139332e3234362e3136342e302f32342d3234203d3e20313335333931.roa (hash: JL/dBZtc7cqNfBqDUBsHO8zmA5iOWu/V8229oSGf3qQ=)
                          30: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: ZWyLSTcE9mAQsDVjLP4sbforwwRF0gy7YQkGUCm2B9s=)
                          31: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: xdM7OBZ/9TbpR6di66FXGgK7azfT3ftRTjEe6Yt/SjQ=)
                          32: 37372e38312e37392e302f32342d3234203d3e2036303739.roa (hash: u0uKpeiU5ZpBWUsg2bqVMuJ+xilyXQyIO7XWxfYa1xw=)
                          33: 3139342e32362e32312e302f32342d3234203d3e20343031383338.roa (hash: W6OrrdK1OeSj0zhiikePRhbHjS9VOD7qyg5G4TQyO4k=)
                          34: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 02:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cc:14:ee:3a:6f:6c:50:50:87:9c:bb:49:48:8d:8e:77:bb:66:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
        Validity
            Not Before: Mar 21 03:52:23 2026 GMT
            Not After : Mar 22 05:26:23 2026 GMT
        Subject: CN=1D00624EB13C355691FA53DCEC05D266F9EFB6CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:65:09:92:4a:91:f2:62:83:11:b7:f1:ba:d3:
                    6a:23:ba:e0:b8:c3:63:cb:30:0c:2c:36:bf:ac:39:
                    57:64:51:8d:a1:c7:d3:25:08:98:d9:01:20:2b:97:
                    ff:0e:56:20:75:a8:34:c9:88:3f:5c:de:77:19:a1:
                    7b:ae:33:1f:26:69:e9:01:4b:88:31:f0:12:14:e4:
                    63:71:45:eb:a1:93:1f:15:48:97:ea:05:68:b3:13:
                    6c:55:8a:51:61:a7:33:37:32:3c:2b:25:95:16:cf:
                    88:9c:85:fb:9e:f9:82:97:d3:59:1b:53:78:77:12:
                    a6:1d:fc:88:d5:c8:6d:56:ce:04:5d:b7:18:ca:38:
                    23:5d:12:5a:1e:e6:7b:c6:1d:4d:93:8d:a9:01:9b:
                    d4:d6:71:b6:42:5b:54:43:ef:cb:ce:8b:52:56:54:
                    0b:21:e0:0c:6e:27:8e:16:9f:52:b2:25:73:47:56:
                    d4:fd:08:01:1a:a8:57:6f:2f:32:c4:e0:f4:ac:93:
                    38:c3:74:bf:5d:19:ad:1c:6a:6f:9f:3b:0e:cf:73:
                    a5:66:9d:c9:ef:83:bd:c8:ad:d7:6c:4f:e2:70:51:
                    6d:45:4f:c1:c1:fa:6a:dd:b8:93:0d:d4:a2:3e:b4:
                    30:8e:85:77:3d:a9:8b:e4:23:4f:9c:03:73:94:aa:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:00:62:4E:B1:3C:35:56:91:FA:53:DC:EC:05:D2:66:F9:EF:B6:CB
            X509v3 Authority Key Identifier:
                keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:db:20:4e:31:fd:f6:fb:07:95:f9:04:65:3e:81:0c:df:87:
         d7:a0:f8:2a:d1:31:83:6f:08:94:76:23:78:df:90:43:c5:82:
         6f:fc:ea:64:06:2e:36:05:29:68:21:ab:80:fe:9f:89:78:b2:
         f0:df:19:a9:e5:d7:4c:3e:c6:a6:4f:c5:ae:53:e8:92:b4:00:
         03:0b:99:84:a3:83:b4:76:55:72:ea:08:4b:7e:86:a0:39:c6:
         1f:b2:28:70:ca:b5:60:a8:89:51:9e:fd:43:b6:50:18:cc:ca:
         52:48:b9:87:ab:bd:89:6f:33:48:43:6a:e4:fe:ce:23:4b:f0:
         c3:ec:10:6b:6b:ab:5b:86:93:07:2e:1c:f9:cc:4b:8f:73:b9:
         23:39:49:4c:25:60:31:32:d6:8f:ad:a9:88:1f:ff:f3:b7:8f:
         43:e6:44:9f:ee:88:ae:6b:fa:34:e4:ab:3d:29:7a:92:65:8e:
         9f:db:8e:18:a0:04:ba:00:6c:5b:57:58:18:9f:3b:35:b4:79:
         5d:79:d4:3e:5f:93:45:d9:4c:1a:24:08:9f:ae:0d:9d:c2:f7:
         03:f9:bc:a7:35:fc:4a:3d:b3:b1:68:8a:19:e2:53:37:c8:d4:
         73:77:cb:85:19:7c:1f:ff:3a:a3:cb:9e:6d:00:ac:96:43:0c:
         55:d9:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:07:17 2026 by rpki-client