Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          xkBCGVAAooI6YaEPsVYE9rHmg2XlvqcfIl73dNjh+CU=
Subject key identifier:   50:B1:B5:5B:05:3A:DA:77:C5:4C:1B:69:C7:BD:90:CD:FF:66:12:A5
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       747446D394CCFCEF16C91584D8A13E6E43F007CB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          03A0
Signing time:             Tue 17 Mar 2026 21:38:15 +0000
Manifest this update:     Tue 17 Mar 2026 21:33:15 +0000
Manifest next update:     Thu 19 Mar 2026 01:24:15 +0000
Files and hashes:         1: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: 5MfWWQM+u6v/dnPPsBwyuoQmtr6PE1VVIhj+9/hgtOk=)
                          2: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
                          3: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=)
                          4: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
                          5: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          6: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          7: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
                          8: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=)
                          9: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
                          10: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=)
                          11: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
                          12: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
                          13: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          14: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=)
                          15: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
                          16: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          17: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Mar 2026 01:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:74:46:d3:94:cc:fc:ef:16:c9:15:84:d8:a1:3e:6e:43:f0:07:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Mar 17 21:33:15 2026 GMT
            Not After : Mar 19 01:24:15 2026 GMT
        Subject: CN=50B1B55B053ADA77C54C1B69C7BD90CDFF6612A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:06:6c:97:0f:cf:31:d9:0e:d5:67:a8:b9:
                    25:32:0c:71:5d:0f:4d:b5:53:d7:33:1d:cf:b1:3a:
                    da:66:c1:66:f2:90:62:74:04:52:a7:af:80:f4:d9:
                    03:a4:35:eb:6b:a3:eb:d7:33:ee:d2:1d:28:6c:c8:
                    5c:c9:3c:8e:5d:12:67:ed:e7:d4:e4:b6:c6:d2:1c:
                    d3:89:3e:e2:3e:0a:32:b9:b9:b5:3a:df:61:2d:c6:
                    b1:29:87:c4:82:3a:dc:fc:58:56:94:56:24:2d:90:
                    7b:50:ef:2c:41:1c:c6:d1:f2:67:a5:8d:a9:cd:ee:
                    52:26:a1:3c:41:3c:2f:9b:19:a5:ae:e7:52:e1:32:
                    c8:61:0b:f4:49:1c:4b:da:ec:0e:c1:e6:62:ba:aa:
                    33:d1:43:86:c8:0a:2f:0a:e1:7d:ec:3f:6b:ab:ea:
                    99:10:31:29:68:8d:eb:9e:b6:85:1a:1d:7c:b8:30:
                    67:cd:6e:8e:93:c3:fc:d0:66:b9:74:95:70:8a:c4:
                    8b:74:b6:a6:24:67:5e:f9:de:4c:c1:bc:62:3c:fa:
                    03:5f:47:d5:18:3f:e1:ba:4e:cd:90:24:d4:0b:43:
                    5b:71:ea:69:3a:f0:ee:3b:c5:f1:5f:98:a0:a2:4d:
                    93:50:96:45:60:87:42:7a:c4:f2:cf:42:1f:dc:90:
                    ce:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B1:B5:5B:05:3A:DA:77:C5:4C:1B:69:C7:BD:90:CD:FF:66:12:A5
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a6:52:f4:c8:55:da:d5:0e:89:db:7e:73:f5:72:82:43:d3:
         b8:9d:c6:32:e8:a0:4e:9b:94:e0:3c:26:70:01:ef:b2:e1:49:
         3d:e2:79:88:c9:b6:b4:2e:96:52:81:f4:80:0a:8e:1a:1a:ac:
         b8:2f:b9:f3:e8:a4:9f:97:d5:4a:41:0f:28:ca:ee:2a:be:b5:
         a8:7b:de:fe:69:bb:bf:fe:fa:fe:14:33:90:de:f6:0e:bd:b7:
         aa:27:f6:5d:b0:66:ca:60:61:13:01:9c:89:d0:f3:1e:85:68:
         42:28:4c:61:7b:c5:51:d5:d9:4c:c7:48:11:3c:7e:f9:95:62:
         b8:31:0e:50:a1:ee:2c:bd:90:ec:d8:1b:8e:1b:06:fb:51:c1:
         d6:3f:88:61:ad:f2:38:62:92:da:93:83:a2:7f:54:54:74:d6:
         c4:67:6f:91:5f:1d:6e:93:36:3c:b3:4d:03:60:70:51:7f:5d:
         6a:43:b2:ac:b9:d9:c8:77:c2:6b:da:93:cd:43:69:ca:59:26:
         c0:0f:cc:4c:90:30:21:1e:3a:d7:cb:eb:b4:b7:ce:5a:80:ea:
         10:dd:a2:55:64:80:3a:27:eb:28:3d:6d:41:55:2a:18:49:bd:
         62:b1:c6:95:6b:65:65:aa:4c:35:9a:8c:d5:1f:34:e5:b5:47:
         14:34:8f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 11:14:01 2026 by rpki-client