Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File:                     38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier:          lS0BuX2QHf15q7kHtLQypRdNwwKx+OxdllVsD1kSS6Q=
Subject key identifier:   08:E1:28:8C:93:0B:A4:83:54:4D:58:8D:8B:FF:6D:B8:DF:97:CA:58
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer:       /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial:       0936696BC37CE470C10B4AADFBE606CA88E5BC62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number:          0271
Signing time:             Wed 04 Mar 2026 01:43:08 +0000
Manifest this update:     Wed 04 Mar 2026 01:38:08 +0000
Manifest next update:     Thu 05 Mar 2026 03:50:08 +0000
Files and hashes:         1: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=)
                          2: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=)
                          3: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=)
                          4: 3138352e35382e3135372e302f32342d3234203d3e20383333.roa (hash: tzOQO8vLFzcY60oR2+1zeQgoBpJx0WPId4HsH1i4ZPg=)
                          5: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=)
                          6: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=)
                          7: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: V0dBwOsoCRmudJOOtq7IQMYgdYQqmyX5iDS6QAUaGh0=)
                          8: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=)
                          9: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=)
                          10: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=)
                          11: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=)
                          12: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=)
                          13: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=)
                          14: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=)
                          15: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=)
                          16: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=)
                          17: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=)
                          18: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=)
                          19: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 03:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:36:69:6b:c3:7c:e4:70:c1:0b:4a:ad:fb:e6:06:ca:88:e5:bc:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
        Validity
            Not Before: Mar  4 01:38:08 2026 GMT
            Not After : Mar  5 03:50:08 2026 GMT
        Subject: CN=08E1288C930BA483544D588D8BFF6DB8DF97CA58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:a1:db:c8:1a:4b:45:b4:ba:bb:dc:68:cb:
                    3b:61:be:2b:9d:45:5d:b5:61:52:49:78:78:d8:26:
                    39:a7:f0:17:95:28:44:db:1f:14:be:ec:6c:b6:bb:
                    f8:af:b2:e3:a4:8a:67:cf:45:65:67:ed:9f:90:db:
                    e6:3f:89:2b:76:41:43:09:71:55:98:3c:2e:51:d1:
                    dc:48:b1:ae:ad:98:7f:65:57:a9:cc:3b:ae:80:ac:
                    d1:8e:fc:89:f0:c0:c5:ae:de:3a:dc:b8:c0:62:de:
                    79:5d:38:3f:da:6f:1e:aa:ba:c6:f4:47:a7:7d:19:
                    87:60:fb:82:7e:0a:09:73:14:ee:c1:07:5b:d0:93:
                    ec:ea:4a:d0:cb:66:77:46:41:65:62:51:8d:23:49:
                    79:f3:ba:8a:c9:91:42:6c:0f:00:6e:f7:73:45:26:
                    0f:8a:19:4a:e7:df:c2:26:80:a4:38:1d:b6:57:cb:
                    de:09:db:59:e9:15:0a:be:9a:a6:39:98:8d:46:1e:
                    62:5f:96:9d:80:89:46:a3:50:e9:55:2e:57:1d:08:
                    5a:e6:f5:8a:21:2b:0d:57:b7:fa:a7:3b:09:f7:33:
                    63:2c:c3:30:63:f4:6a:c9:d6:10:c3:9f:dc:fd:d6:
                    12:7c:46:9a:c5:3a:bf:ed:1c:d8:e2:0c:c3:c7:1a:
                    ea:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E1:28:8C:93:0B:A4:83:54:4D:58:8D:8B:FF:6D:B8:DF:97:CA:58
            X509v3 Authority Key Identifier:
                keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f1:c7:cd:bb:20:8d:55:9b:fa:05:e1:79:1d:27:29:7f:50:
         ed:52:0a:fe:4e:dc:0c:cf:d3:d2:3e:ec:49:71:9a:23:a3:4c:
         ab:6a:d6:af:ce:c5:77:7f:a5:6a:a4:51:48:72:a6:97:55:77:
         44:35:be:0a:12:7f:fc:d9:fd:d8:18:9d:db:04:66:ff:4b:2a:
         00:70:e3:d1:3d:d0:85:69:c4:78:24:86:b5:3c:e5:c2:0d:9a:
         db:b0:ba:7a:6e:86:5c:7e:0a:41:a7:92:c6:f4:76:ea:f1:e2:
         71:c5:3f:98:a0:1e:4b:5b:b9:cd:25:98:48:a6:d4:48:c2:84:
         56:b9:45:f7:64:fd:36:88:a5:d8:e8:9e:88:f9:ad:67:e6:0e:
         f2:64:d5:67:2b:55:d6:e3:2c:6b:dd:8b:3d:fe:53:b9:8c:e1:
         ec:5f:7d:3c:f0:28:a2:a0:56:0e:92:bb:e9:65:d6:b1:e9:c1:
         ba:de:f9:1f:97:90:c8:84:3f:a2:48:b3:c9:fe:73:eb:2b:69:
         5d:fb:d5:0a:5b:21:63:48:06:6b:3d:38:92:a4:41:71:ed:4f:
         5b:57:70:df:80:06:46:6e:ab:14:c1:c6:41:c7:05:34:bb:ce:
         71:34:bf:65:e2:2e:43:b7:72:d5:74:27:53:5f:88:d0:e5:07:
         38:af:d3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:06:34 2026 by rpki-client