Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          C4WvBgyiIX+F/YMO0YcLZUKR3S6NyFYwBLaeNVJ2YHM=
Subject key identifier:   3A:2F:61:7A:E4:FB:7E:30:B1:B6:CC:A6:3B:B1:13:33:AB:FA:90:DD
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       7C9B55DB4A2D36A5B3190BC99DF40F1B9F7F9CF0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          0391
Signing time:             Fri 06 Mar 2026 12:33:41 +0000
Manifest this update:     Fri 06 Mar 2026 12:28:41 +0000
Manifest next update:     Sat 07 Mar 2026 14:57:41 +0000
Files and hashes:         1: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          2: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          3: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
                          4: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
                          5: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          6: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          7: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
                          8: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
                          9: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=)
                          10: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=)
                          11: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
                          12: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          13: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=)
                          14: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
                          15: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
                          16: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=)
                          17: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: bMwlTmgdlxBdPkVegz3T2T+5S2Ly3SYR917UgpJ0Nb4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 14:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9b:55:db:4a:2d:36:a5:b3:19:0b:c9:9d:f4:0f:1b:9f:7f:9c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Mar  6 12:28:41 2026 GMT
            Not After : Mar  7 14:57:41 2026 GMT
        Subject: CN=3A2F617AE4FB7E30B1B6CCA63BB11333ABFA90DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7e:52:c4:5d:1c:32:c3:36:97:89:25:91:6f:
                    4d:9d:d1:08:00:67:3a:3d:eb:c4:61:38:59:94:75:
                    77:90:ab:16:67:ea:00:c7:cc:9a:08:22:f7:6d:af:
                    11:f4:f5:c3:54:a8:88:8c:f0:48:0d:c8:09:6e:87:
                    30:7f:f8:a8:a2:24:63:1d:65:c8:ac:37:ce:8b:db:
                    1b:b0:a7:ff:7d:4d:fe:a8:a6:ce:18:b0:9b:67:c6:
                    73:49:51:4f:77:3c:9e:63:8b:99:43:9d:65:db:e7:
                    9a:5e:23:5e:3c:d9:48:db:0d:c7:9b:eb:23:73:b5:
                    4e:bd:e9:05:81:59:1f:57:b1:1e:c9:91:b8:2a:7c:
                    6d:6c:82:46:20:b8:48:d7:62:c9:5e:9e:e1:23:e5:
                    51:17:39:3a:69:0f:f2:b6:f1:70:ba:ff:c9:68:56:
                    bf:3b:f4:48:cd:83:68:e8:f4:fc:7c:bd:dc:30:ac:
                    e8:6e:89:f7:55:8a:a7:68:d9:de:15:e7:05:4f:42:
                    f4:8e:99:51:d9:8d:61:52:78:10:6d:5e:ce:00:d0:
                    22:9a:5f:be:c9:af:12:f9:2c:11:96:d6:17:24:83:
                    0a:5e:65:cb:32:ac:b2:dc:a3:d4:b6:04:7c:b1:90:
                    f7:50:ee:88:24:3e:88:7a:f2:35:cf:7b:b5:b5:7f:
                    f6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2F:61:7A:E4:FB:7E:30:B1:B6:CC:A6:3B:B1:13:33:AB:FA:90:DD
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b5:82:91:42:cb:4e:88:b2:2d:36:3b:6c:fa:04:a0:d1:9d:
         75:3e:df:6e:ee:05:ba:ee:b1:bc:de:d1:ec:17:9e:4a:ff:9b:
         1f:6f:71:c6:1e:56:ff:d9:e0:9d:9f:ca:35:c2:28:83:20:81:
         82:53:66:dd:3e:34:5c:42:31:d1:0a:b0:1a:82:36:c7:8a:c8:
         61:51:7d:74:b2:24:8e:51:2f:e5:ee:67:c0:6f:a0:e5:5e:06:
         16:5e:d8:cf:7b:af:30:86:be:d6:d9:72:34:a4:f7:1b:15:64:
         ce:db:9c:f2:50:52:7c:1e:66:77:9a:e3:24:c0:67:b9:29:63:
         f9:51:92:ad:6c:15:35:e6:06:89:95:af:33:16:dc:49:fc:f0:
         64:ee:d5:1f:d1:29:71:da:e8:5b:59:93:9b:ce:4a:49:7a:be:
         df:b0:d3:7a:4f:28:c4:99:8b:d9:34:dc:ff:26:64:0c:2a:9a:
         15:ee:2f:74:6f:3e:e5:d7:04:2f:49:5a:aa:4a:fe:93:99:d0:
         fd:14:9b:19:9a:1e:6f:68:03:1c:00:79:21:35:66:fa:bb:51:
         f1:bb:c7:35:19:da:61:86:53:32:a2:d1:30:4e:63:b7:77:50:
         cc:75:5d:1a:91:ba:0c:f9:1d:62:5e:83:ed:43:8f:9b:cf:4c:
         cf:67:26:02
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUfJtV20otNqWzGQvJnfQPG59/nPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0
OUMxODM3NzAeFw0yNjAzMDYxMjI4NDFaFw0yNjAzMDcxNDU3NDFaMDMxMTAvBgNV
BAMTKDNBMkY2MTdBRTRGQjdFMzBCMUI2Q0NBNjNCQjExMzMzQUJGQTkwREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcflLEXRwywzaXiSWRb02d0QgA
Zzo968RhOFmUdXeQqxZn6gDHzJoIIvdtrxH09cNUqIiM8EgNyAluhzB/+KiiJGMd
ZcisN86L2xuwp/99Tf6ops4YsJtnxnNJUU93PJ5ji5lDnWXb55peI1482UjbDceb
6yNztU696QWBWR9XsR7JkbgqfG1sgkYguEjXYslenuEj5VEXOTppD/K28XC6/8lo
Vr879EjNg2jo9Px8vdwwrOhuifdViqdo2d4V5wVPQvSOmVHZjWFSeBBtXs4A0CKa
X77JrxL5LBGW1hckgwpeZcsyrLLco9S2BHyxkPdQ7ogkPoh68jXPe7W1f/abAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUOi9heuT7fjCxtsymO7ETM6v6kN0wHwYDVR0j
BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF
QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF
MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhtYKR
QstOiLItNjts+gSg0Z11Pt9u7gW67rG83tHsF55K/5sfb3HGHlb/2eCdn8o1wiiD
IIGCU2bdPjRcQjHRCrAagjbHishhUX10siSOUS/l7mfAb6DlXgYWXtjPe68whr7W
2XI0pPcbFWTO25zyUFJ8HmZ3muMkwGe5KWP5UZKtbBU15gaJla8zFtxJ/PBk7tUf
0Slx2uhbWZObzkpJer7fsNN6TyjEmYvZNNz/JmQMKpoV7i90bz7l1wQvSVqqSv6T
mdD9FJsZmh5vaAMcAHkhNWb6u1Hxu8c1GdphhlMyotEwTmO3d1DMdV0akboM+R1i
XoPtQ4+bz0zPZyYC
-----END CERTIFICATE-----
Generated at Sat Mar 7 01:40:30 2026 by rpki-client