Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
File:                     0839A93DAB544C296FFA143456844A8B2818B1D0.mft (raw, json)
Hash identifier:          1h/aSsa5slE42Xq3iVZuUeAL/EufpGjW/P/kXcTFKR4=
Subject key identifier:   91:BA:47:C5:BE:C6:B0:E3:5F:65:6A:09:7A:0F:05:77:71:85:E4:3A
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       380444E753ED091FE873F5D4928A16D2852791F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
Manifest number:          0401
Signing time:             Fri 13 Mar 2026 09:29:44 +0000
Manifest this update:     Fri 13 Mar 2026 09:24:42 +0000
Manifest next update:     Sat 14 Mar 2026 12:25:42 +0000
Files and hashes:         1: 326131313a663263303a343a3a2f34382d3438203d3e20323032333539.roa (hash: B4MACJgrYv8gOFyM+OgYWOFeMkOQBLykzkdPSnyxEgo=)
                          2: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer (hash: CEGJbTLl4BFPIQu0BkXUdZ1K35M3vSyHeqh8rVvhUfc=)
                          3: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer (hash: 1nhiF+DUP666qHgL0W5CdOzUBH6sH332zL1MCTVIgUk=)
                          4: AS207960.asa (hash: dkR0kCK9ItfbDdB+lcz8NXX/OgW2AxH6xzmW14rh/hI=)
                          5: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer (hash: Fga1avETSQAOmN53EHnB7AxOugiIYodhbdg5Ia7vsU4=)
                          6: 31586760843F668A816117EA02F6F30FE8F9C359.cer (hash: sdjQP12grMA84wrOD8soDanrM9KsCHOhQQgZ6YwFl/w=)
                          7: 326131313a663263303a323a3a2f34382d3438203d3e20323032333539.roa (hash: SlyimbxFLoCHsFWWpUZjHgmLHKv7rmMtitzOtZT7wdo=)
                          8: 326131313a663263303a3a2f34382d3438203d3e20323037393630.roa (hash: 3TxnMdPT5hHYItzRe6t9ErU/wv40unaDW97hsOh3H4M=)
                          9: BBED14E9793905EC1EA5CE10AA03C497D737B115.cer (hash: m+ztv5UmtHgdFMzFwqLzYGsJqAw/AeqFEUgffywu2Zc=)
                          10: B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer (hash: 8IYDJ2eIDos7JCscqio8m4CtvsMZIm87tSAcUKKXKKg=)
                          11: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer (hash: fNICkLgDOQLQyXcYC+Mx7zWPSiGBhLSE5Btg3FNYCrk=)
                          12: C2724A29EF989A4340933B8130B402DD4627A501.cer (hash: 984ckCJkp1VtRhMMUPKyUG2Uubk2ftZ4dLd3NzPeeY0=)
                          13: B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer (hash: zKaN08cZjSwmv4VxKubYdVn/CoX70Fn+0x6DYvBEbBM=)
                          14: 326131313a663263303a666635303a3a2f34382d3438203d3e20323032333539.roa (hash: CM6b3ajOHdrrPWpgfsa1azZ55Rw1zWzyWazoJb293Z8=)
                          15: 326131313a663263303a313a3a2f34382d3438203d3e20323032333539.roa (hash: ZivrOJ7iiOCUg/HqF4j2xuXr75dIBf1hdqQTAxY+xwU=)
                          16: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer (hash: EluTWf0GQ95lG3mbjIrTeS+cckdmvkzXIoud3lIjd+s=)
                          17: 4742E76772F118A935D69FD40F69858085C80999.cer (hash: PXNlleSIOJFtms7j+EwWK+dQ4coJG0uvhI3LcgkFsFw=)
                          18: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer (hash: Zmzv7fBFqGLxjYc480gPrSI5W4OUPciQIi5quu5IaLg=)
                          19: 6482EA67DB858D1440DD67B955223E4341BA4E97.cer (hash: lKlfGm9oX8e/vMr1ifVDL2vFahUuPFOtcD1F8uJvy/E=)
                          20: 0839A93DAB544C296FFA143456844A8B2818B1D0.crl (hash: m9YzPC0lkb/z0bdPg5kMHKfiyGxV/rNoMAvhR537R38=)
                          21: 3139332e332e3136352e302f32342d3234203d3e203434333535.roa (hash: 8+PpyJbtCrTrR5hMXklV6jn0Gbpl8JRn1mZ/sbUihXw=)
                          22: 09F041F60B21B649820D0FEE0D7654D63DDD080D.cer (hash: nksn8GN/gs6wYWUz4hrLmciR4CnwYb4uhUJ8A3FiMng=)
                          23: 44C4C913D58F5EF847996241E969B60A1E3F1389.cer (hash: E3ak7egeb7oLQq4pNOV672llzd9VjZ7X1tZw4IAYLms=)
                          24: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer (hash: NscCIMsZ2yU9wFViqqUFMP9l2GG+IJImIYDZVt1y4cg=)
                          25: AS202359.asa (hash: 6VIFnTZlZo7nQ/fI9Z3+DaeUn3Y1Zv+vHdQ94mzfXkg=)
                          26: 970AD94C83244100A97F9186D53DADAB07995EE9.cer (hash: RWBnNEK86OTd+EsaiL4tRRo/ytLMfihyN/KLzSQWa5Y=)
                          27: 6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer (hash: 6I8CkH37Y+2qxrW8WAlVcQiiukOkkakJShyNFWsBV3k=)
                          28: F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer (hash: +U9s3nk3zcGTMVxdfeeaoEIEhjnpyi2zUiI59YfVir8=)
                          29: E02C2B37910DB974089166C0D244DE386B5762C2.cer (hash: NQL7Q+vPifLFy80HHQ35NSOJH0JVOxv33NgrFx9SMgU=)
                          30: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer (hash: fBqC9ryjQi6+GMXhqT8gchFPNagFwAwTKLhvHv66WwQ=)
                          31: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer (hash: 791NSk9caMoRNL05DnPXj80jVjLpl5OvuMZi4eGgmg4=)
                          32: 326131313a663263303a333a3a2f34382d3438203d3e20323032333539.roa (hash: XIj+fw+vRgYTpRxwvO3XvTkfLsFczQo4AujMyz3iud4=)
                          33: 1A889E0950A8B6489E67E7C7189539FB887EAD71.cer (hash: QvMFt41RXdcJq7gp5tnRNXaXgfSmaaXZCupMATLSYFk=)
                          34: B50D92304CA867525C648A07380EA065FD352DEC.cer (hash: jeLezi/e/tiKuflcEffKB+Cet8nw848xqf2VW1otgMA=)
                          35: 326131313a663263303a666630303a3a2f34382d3438203d3e20323037393630.roa (hash: vlZXQVsccvhX9Xp7n97oPTi1sU/brtJRb0zaewhmEQ4=)
                          36: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer (hash: 80uS10wtR2qonck5t9LSmDnU2kzBdTa5/Re8RhpYsb8=)
                          37: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer (hash: Z+xIm/9vNqFKmLWBcsaGK8BJ1alQ9TOcEU4cwskAlyE=)
                          38: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer (hash: gW5/r+rTqmiwY5x1Qtx3z5ezWcBU9AkoYGR7QTJTGt8=)
                          39: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer (hash: e/9HYgp/mohWVL/xi7PmXFlHj2B3IcMqES1nyxAUKjo=)
                          40: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer (hash: xWjJR6Nxgh4wTbQyfSpM8roZ9e57XZ5G/Wz+HfAB8Qw=)
                          41: 62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer (hash: gvnFCUbdYroNDorseBYYitaCENDofN90Hv5Rynh5CGg=)
                          42: 323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa (hash: UNIFWQcfDb9TIYM9mTcmUs06i4tbcfV6n3m2ESGFPVM=)
                          43: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer (hash: jH9R6EtyMHUcM8XcpEu+SmgJb0fp9TQ+h2bdy0JKm8s=)
                          44: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer (hash: pxz0LR+iQ3l1lE7tkI4TpOm1EbpH5/e/dD9vYzgfMps=)
                          45: 3139332e332e3136352e302f32342d3234203d3e20323032333539.roa (hash: PN7OPw6x8T4uLhMmLkm8sVVlgwZlpPub1GieXN4o6dQ=)
                          46: 1D570B984E9C5E382B0A879AA21F6518621F059F.cer (hash: w4LlrRiZpjCqpbWEegKCJHPhvyvwSjODOuNEEV+R23o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 12:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:04:44:e7:53:ed:09:1f:e8:73:f5:d4:92:8a:16:d2:85:27:91:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Mar 13 09:24:42 2026 GMT
            Not After : Mar 14 12:25:42 2026 GMT
        Subject: CN=91BA47C5BEC6B0E35F656A097A0F05777185E43A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5f:bd:0b:b9:2e:e3:d3:2c:ea:ae:1a:8f:0d:
                    72:e7:c0:3c:74:79:fd:65:9c:8a:cb:a0:c2:ef:27:
                    13:ba:7f:45:2e:28:81:99:ab:80:33:98:eb:42:22:
                    17:84:06:9d:b5:83:67:06:eb:dc:e5:e7:54:fb:db:
                    65:1e:56:6a:01:09:de:cb:b4:3a:5a:e5:e2:70:74:
                    e9:9a:f8:85:97:87:7c:12:bf:1b:99:ef:76:93:0a:
                    a7:3b:1f:e1:41:c1:3e:7e:79:fb:a5:50:b0:c8:2c:
                    a7:63:2b:4b:62:a9:ee:66:61:b4:8e:b2:09:f6:c1:
                    96:f5:c8:63:54:81:0b:0d:3a:85:85:0a:43:41:bb:
                    a6:92:b0:1e:1e:e0:dc:9c:65:03:c0:7b:ec:eb:00:
                    a0:da:4d:a1:b8:be:dd:e7:0b:83:76:97:0e:3c:27:
                    5e:fd:34:7b:fe:92:7f:fb:c4:01:3e:68:5e:4d:81:
                    b5:14:90:7b:ef:d3:ec:11:ec:8d:a5:b7:b5:d6:e4:
                    87:d0:6c:c7:a9:0c:f7:e5:71:b1:ad:89:7b:29:68:
                    d0:37:f7:8b:0f:b1:25:15:da:02:95:72:22:29:89:
                    84:89:8e:ab:03:81:da:c8:10:2d:91:df:5e:3b:7f:
                    df:8a:c2:6d:f2:69:2a:09:b5:95:ef:98:52:61:34:
                    5a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BA:47:C5:BE:C6:B0:E3:5F:65:6A:09:7A:0F:05:77:71:85:E4:3A
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6e:85:42:b6:4f:b1:58:b1:46:da:7b:b3:fa:f9:c6:5b:6c:
         da:c2:57:0e:d2:3a:75:af:93:b1:aa:5e:8c:cd:e9:58:50:ec:
         86:e8:59:2c:3d:48:1e:5f:8d:19:59:63:ed:79:51:4f:40:b0:
         28:f5:dc:85:b5:10:e6:e3:53:01:b2:69:84:81:41:f8:43:87:
         e3:b1:ab:ff:ee:c1:f8:c1:90:6a:07:9c:4d:d9:ba:7a:1f:0a:
         d4:e0:ce:a8:48:f2:e1:f6:54:d5:da:b9:be:80:85:d6:c7:eb:
         aa:cb:d7:61:de:24:99:14:6e:5b:84:fd:fe:a7:42:0e:07:b5:
         ac:54:c8:8e:11:6b:fb:99:bd:07:3d:49:6f:0e:f6:2d:92:86:
         ad:09:e4:0f:ca:8d:f5:25:b3:c7:f2:97:6f:f1:ce:9f:7a:33:
         37:eb:9f:a4:8e:11:8f:11:8b:91:75:f2:bc:3b:78:83:9d:1e:
         32:35:6d:17:73:19:3a:5e:ca:c0:40:ca:da:f8:74:7b:05:e5:
         2c:17:dd:1a:4a:cd:9a:71:be:2f:f8:b5:7b:f0:8d:31:b8:86:
         b9:a8:05:7c:62:81:62:8e:9f:89:2e:9a:c5:b8:ac:86:fb:2a:
         96:8f:18:49:f8:99:a0:f5:8d:ac:d0:05:d9:39:09:70:bb:17:
         f0:52:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----