Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          NQGikaXQur6awqmxUmosTVoAWniRLxu8j4mklTeE1t0=
Subject key identifier:   BC:E8:DB:42:04:65:D4:22:04:81:A3:E1:B3:2D:D6:AC:68:FF:9F:F6
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       1CAC7B370FD5AAAF890A4478429DED674C81E3A1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          0392
Signing time:             Sat 07 Mar 2026 06:58:41 +0000
Manifest this update:     Sat 07 Mar 2026 06:53:41 +0000
Manifest next update:     Sun 08 Mar 2026 10:23:41 +0000
Files and hashes:         1: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          2: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
                          3: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=)
                          4: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
                          5: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          6: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
                          7: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
                          8: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          9: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          10: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=)
                          11: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          12: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: tmzCILGQ4+mtvXoiieqOwtFgMk/V4VxGtBwWDlm/BIA=)
                          13: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=)
                          14: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
                          15: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
                          16: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
                          17: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ac:7b:37:0f:d5:aa:af:89:0a:44:78:42:9d:ed:67:4c:81:e3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Mar  7 06:53:41 2026 GMT
            Not After : Mar  8 10:23:41 2026 GMT
        Subject: CN=BCE8DB420465D4220481A3E1B32DD6AC68FF9FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f4:91:a3:5d:dc:32:b1:38:b8:c6:1e:79:e9:
                    43:6c:31:42:75:61:6c:69:57:ea:99:52:fb:60:b9:
                    89:a5:52:f2:e3:c7:46:75:12:1f:a0:7d:4c:bd:2d:
                    a8:24:25:0d:43:80:22:8f:a7:6f:da:04:c5:8d:66:
                    00:75:79:01:de:1e:1b:92:45:90:43:e6:1f:e6:64:
                    78:be:2a:33:66:9d:74:95:de:e4:a8:ed:39:8d:c8:
                    bf:da:7f:7c:08:4e:68:d8:86:cf:8d:32:32:dc:a5:
                    7d:3d:5d:5a:a6:ff:9b:0c:8f:2d:30:eb:ac:8e:67:
                    68:0d:38:fe:66:df:0d:73:05:bb:07:ba:82:05:c7:
                    4d:83:6e:26:a8:76:3e:d4:0e:83:33:c5:5d:de:b6:
                    1f:4d:26:5a:df:88:b9:cf:56:03:fa:de:6f:b5:2a:
                    2c:f0:60:6d:a5:ba:a7:d7:cf:a3:a4:b7:aa:9d:14:
                    4f:0e:c5:ab:99:f9:ff:0e:67:bd:4e:59:a3:e0:9d:
                    dc:22:7d:b0:43:8a:65:a6:a4:95:e0:fe:c1:25:db:
                    6d:fb:f1:ae:a9:35:5a:fa:7c:89:c2:80:8c:92:37:
                    b2:49:fc:58:19:cb:f1:96:8f:22:9b:fd:0d:23:e5:
                    eb:56:cc:58:d3:54:78:1d:22:b7:20:ee:4c:1c:68:
                    a4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E8:DB:42:04:65:D4:22:04:81:A3:E1:B3:2D:D6:AC:68:FF:9F:F6
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:dd:d0:6f:27:ae:3e:42:90:1b:fd:bd:a2:35:1f:cb:57:68:
         1f:1e:1e:cd:82:ec:d4:d7:75:6f:ab:4e:0d:1e:61:13:36:6b:
         8e:b7:01:ae:cc:f5:f1:1c:b6:ad:47:e1:f9:d4:21:25:ef:c0:
         ae:0e:c1:a2:64:4d:67:a8:ed:d8:d3:15:77:06:6e:ef:f7:e0:
         72:43:b6:83:8b:74:a8:96:68:d0:27:b0:75:54:08:87:d8:25:
         d1:93:f4:9e:8f:47:a7:2d:ac:5f:f0:a3:0a:a2:43:29:d9:c5:
         4c:06:27:cc:1b:8a:f1:0d:a5:8f:59:5c:a6:50:10:75:f1:dc:
         29:ca:1f:26:11:51:22:d1:84:31:2a:81:2d:10:14:0c:88:61:
         19:e2:42:1d:38:95:57:8e:fe:2e:f6:c9:05:88:e3:78:88:a2:
         40:5f:d0:53:e8:f8:cc:91:99:f0:b4:3e:80:60:28:92:c4:54:
         6a:62:dd:01:39:85:d7:1a:5f:6a:14:e4:ca:aa:d7:35:b5:af:
         7a:69:01:45:14:2a:1a:71:10:34:bf:a8:9b:83:26:1a:28:d2:
         40:31:46:dc:53:a9:b6:33:66:62:e5:bd:10:f6:b0:37:f4:11:
         d1:14:b5:a9:46:e9:67:71:2d:c8:52:f0:87:51:67:8f:15:88:
         5b:6c:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 09:42:03 2026 by rpki-client