Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File:                     1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier:          XhfEeRwweRldwnvoL2rTBnA1zNXO8oNUf6jaL+X4eGM=
Subject key identifier:   19:D3:64:FF:08:9F:9E:05:B3:A4:14:9A:1C:9F:3C:CE:AB:F0:1B:D6
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer:       /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial:       3DAF5FD8BF95C7205A3CC1ACFCE0595F0AD72EB0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number:          0358
Signing time:             Thu 12 Mar 2026 21:52:21 +0000
Manifest this update:     Thu 12 Mar 2026 21:47:21 +0000
Manifest next update:     Sat 14 Mar 2026 00:03:21 +0000
Files and hashes:         1: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: egKkDwjG9bdT7xr+5cDa/uHPMpdHmI1UYFvtEdOY3MU=)
                          2: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=)
                          3: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=)
                          4: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=)
                          5: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=)
                          6: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=)
                          7: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=)
                          8: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=)
                          9: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:af:5f:d8:bf:95:c7:20:5a:3c:c1:ac:fc:e0:59:5f:0a:d7:2e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
        Validity
            Not Before: Mar 12 21:47:21 2026 GMT
            Not After : Mar 14 00:03:21 2026 GMT
        Subject: CN=19D364FF089F9E05B3A4149A1C9F3CCEABF01BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:21:0b:ef:c1:64:94:ed:51:c5:14:9c:ed:57:
                    4f:b4:32:82:59:58:8d:8c:18:cb:84:6e:b9:19:a7:
                    37:60:04:d1:de:ed:9a:fd:a6:c6:57:75:f7:35:49:
                    d7:e3:f3:a1:bf:99:3c:cb:d3:cf:f3:73:e1:43:fb:
                    9f:bc:18:e2:93:26:3e:2c:81:44:d4:87:6f:55:4a:
                    01:62:d2:20:e4:fe:f7:e6:80:99:2f:ea:20:ee:22:
                    6c:82:b7:68:78:42:d4:38:1e:38:e8:9b:d0:16:26:
                    a3:14:ea:6b:29:ee:92:1b:93:a4:e5:f7:c3:4b:db:
                    ea:57:ed:d9:d5:a1:c6:b1:da:4e:6a:8a:03:2b:60:
                    ec:99:f4:80:e6:df:8e:d9:11:04:96:17:77:b3:40:
                    20:7f:c8:1e:26:ef:96:93:2f:66:31:db:2f:42:ba:
                    f6:fc:d7:c0:67:66:aa:91:d5:98:20:16:7c:76:10:
                    88:04:68:7d:5c:33:3a:17:ed:44:e4:34:0b:30:16:
                    59:5c:50:93:54:01:00:bf:ea:53:9b:fb:91:63:b9:
                    00:c0:2c:df:b0:2e:31:1e:31:0a:fa:24:e7:eb:95:
                    0e:f7:6d:19:fa:25:e1:35:04:6b:32:9b:a3:fc:83:
                    b0:05:d9:1f:53:c6:0b:b3:2c:64:1d:2a:6b:34:93:
                    91:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D3:64:FF:08:9F:9E:05:B3:A4:14:9A:1C:9F:3C:CE:AB:F0:1B:D6
            X509v3 Authority Key Identifier:
                keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:86:2a:52:33:c4:88:69:e6:10:b7:22:84:f5:ea:42:3e:a4:
         8d:6b:64:67:ea:bc:ee:48:66:92:62:74:1e:03:81:7b:7d:ae:
         10:2b:17:6f:2b:5f:56:b3:cc:6d:f8:fa:70:9d:99:d0:69:31:
         33:8a:f5:ec:46:b9:9e:05:a4:2f:ff:5b:09:42:9a:03:bb:df:
         91:fe:31:c3:5a:6c:3a:39:99:69:99:29:73:96:d8:49:e8:ac:
         05:c5:2e:fc:d5:77:44:38:ab:7c:41:a3:f6:74:1a:8c:31:6f:
         16:7b:c4:1d:3b:2c:c8:84:13:8a:cc:63:b8:db:be:9d:01:ba:
         1c:5f:b8:b4:a0:60:c8:b3:27:d8:fe:f0:ef:a6:b1:1b:64:fc:
         ba:51:de:92:e7:74:41:d4:04:7e:0a:86:2c:7b:0f:34:69:67:
         5b:20:71:da:be:c5:b2:eb:bc:23:58:06:70:98:61:80:da:40:
         78:e2:c3:3b:3b:4c:d8:87:0a:98:5f:15:12:7e:8d:53:66:27:
         a4:b2:08:33:39:c6:fc:ca:08:49:3a:8a:5c:84:f2:2a:22:64:
         57:1c:91:ba:80:3a:73:6a:b8:25:74:c9:59:03:dd:97:21:8e:
         08:6c:16:0e:18:8c:0f:f1:02:70:d3:97:7c:b8:c1:52:c0:3b:
         3f:72:05:48
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUPa9f2L+VxyBaPMGs/OBZXwrXLrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC
RUM4OTBCQjAeFw0yNjAzMTIyMTQ3MjFaFw0yNjAzMTQwMDAzMjFaMDMxMTAvBgNV
BAMTKDE5RDM2NEZGMDg5RjlFMDVCM0E0MTQ5QTFDOUYzQ0NFQUJGMDFCRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVIQvvwWSU7VHFFJztV0+0MoJZ
WI2MGMuEbrkZpzdgBNHe7Zr9psZXdfc1Sdfj86G/mTzL08/zc+FD+5+8GOKTJj4s
gUTUh29VSgFi0iDk/vfmgJkv6iDuImyCt2h4QtQ4Hjjom9AWJqMU6msp7pIbk6Tl
98NL2+pX7dnVocax2k5qigMrYOyZ9IDm347ZEQSWF3ezQCB/yB4m75aTL2Yx2y9C
uvb818BnZqqR1ZggFnx2EIgEaH1cMzoX7UTkNAswFllcUJNUAQC/6lOb+5FjuQDA
LN+wLjEeMQr6JOfrlQ73bRn6JeE1BGsym6P8g7AF2R9TxguzLGQdKms0k5F9AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUGdNk/wifngWzpBSaHJ88zqvwG9YwHwYDVR0j
BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi
ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1
MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy
NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRhipS
M8SIaeYQtyKE9epCPqSNa2Rn6rzuSGaSYnQeA4F7fa4QKxdvK19Ws8xt+PpwnZnQ
aTEzivXsRrmeBaQv/1sJQpoDu9+R/jHDWmw6OZlpmSlzlthJ6KwFxS781XdEOKt8
QaP2dBqMMW8We8QdOyzIhBOKzGO4276dAbocX7i0oGDIsyfY/vDvprEbZPy6Ud6S
53RB1AR+CoYsew80aWdbIHHavsWy67wjWAZwmGGA2kB44sM7O0zYhwqYXxUSfo1T
ZieksggzOcb8yghJOopchPIqImRXHJG6gDpzargldMlZA92XIY4IbBYOGIwP8QJw
05d8uMFSwDs/cgVI
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:11:35 2026 by rpki-client