Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
File:                     C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json)
Hash identifier:          StezGXFeG8Ms42dZ/S/snK/D36Yxx6G4IMQgvbBcP/M=
Subject key identifier:   DA:3A:A3:85:D7:4B:A4:50:87:DF:F7:2D:FF:60:ED:BC:91:B8:D5:B7
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Certificate issuer:       /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial:       71704C22E847039BBBB4E5BCDA3D10E3131C4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
Manifest number:          02A8
Signing time:             Thu 05 Mar 2026 19:50:38 +0000
Manifest this update:     Thu 05 Mar 2026 19:45:38 +0000
Manifest next update:     Fri 06 Mar 2026 21:44:38 +0000
Files and hashes:         1: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=)
                          2: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA=)
                          3: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=)
                          4: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=)
                          5: 34332e3233302e38342e302f32342d3234203d3e20383334.roa (hash: N+DNH3cZSUB3/2IAiDvrSRIBUTXQrXsxpW7BekUy55w=)
                          6: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=)
                          7: 33312e32322e3130352e302f32342d3234203d3e20323030383539.roa (hash: nw9YLvM7zXyP2kzR5sTyAuZwaZ0QV0qAmB4zg2Dg+gg=)
                          8: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak=)
                          9: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=)
                          10: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: 7HPO/K4NVwS41k4ilzMIaQrMs0TlZiFGogKGyhsL2IE=)
                          11: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=)
                          12: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=)
                          13: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY=)
                          14: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: e3yeUvIbF4YF0fCErBT4H99U9jC9XkRZUBr3LRE9AVI=)
                          15: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=)
                          16: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=)
                          17: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=)
                          18: 3130332e34392e3133302e302f32342d3234203d3e20383334.roa (hash: CgTEbzNPZ3g7D1H+2mNOUftvPK4zMQIihH/dZj8+iN4=)
                          19: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: 7bNrxcvUZ17BVt7tVCbbxISD5HLTvxOeQrmUPkwlG/E=)
                          20: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: uRUTbbdZ8AYVGvK3CKTe3KYxaaV1m1bGyvfgh/rstUI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 21:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:70:4c:22:e8:47:03:9b:bb:b4:e5:bc:da:3d:10:e3:13:1c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
        Validity
            Not Before: Mar  5 19:45:38 2026 GMT
            Not After : Mar  6 21:44:38 2026 GMT
        Subject: CN=DA3AA385D74BA45087DFF72DFF60EDBC91B8D5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b5:51:21:4e:fe:4f:34:ae:a9:49:08:b9:37:
                    82:c7:fb:19:9c:4e:56:3f:71:23:ef:cd:08:6d:62:
                    85:92:7a:5f:b1:ab:b6:df:71:80:ce:5b:c7:ee:70:
                    ff:7d:ba:a3:44:d0:ef:7d:73:d7:d9:67:3e:d0:44:
                    26:43:30:7e:c8:5d:98:d1:5a:54:36:80:da:76:2a:
                    a7:41:b7:16:cf:ac:9f:f7:5c:44:b7:fe:61:8f:38:
                    cf:5f:da:fb:72:cb:17:c3:c6:9c:21:4c:ed:79:d4:
                    90:78:3b:01:3e:a2:bf:35:c0:93:a1:d7:31:5f:f4:
                    9b:0d:53:6d:a1:1a:5d:18:d3:c8:d4:1b:3f:0d:c8:
                    df:cc:e9:5a:e8:bc:93:3b:db:84:c1:53:05:6c:30:
                    67:6b:ab:30:e5:c7:15:87:ba:27:5a:93:2d:28:46:
                    d6:25:21:02:c5:2b:71:1a:79:7d:e8:93:a3:66:66:
                    76:4a:ab:19:f8:03:9b:f0:2d:3e:a8:1d:4a:20:79:
                    9a:03:29:57:38:d0:69:2d:d9:1c:5e:10:8b:5f:c9:
                    0a:c5:8c:78:78:1e:7b:30:4e:17:e1:67:ed:bc:7d:
                    f3:ae:37:f1:30:f8:d7:76:94:63:70:97:c5:98:50:
                    ab:6c:29:c7:c2:dc:68:2e:ae:8e:f4:b7:ac:31:f8:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3A:A3:85:D7:4B:A4:50:87:DF:F7:2D:FF:60:ED:BC:91:B8:D5:B7
            X509v3 Authority Key Identifier:
                keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:48:be:ed:93:12:14:b2:55:27:76:0c:ff:06:65:cb:c6:51:
         0d:a1:fa:fb:eb:0b:b2:15:c2:11:2c:47:94:c7:e8:0f:4b:50:
         54:3a:f6:a6:a0:69:59:00:11:8f:54:12:34:68:54:db:40:7a:
         65:d6:08:c2:b6:5d:11:3a:6b:6d:00:45:96:4a:4e:27:bf:35:
         da:ee:e2:2f:6d:22:6f:93:df:82:c0:e9:e3:0d:17:d6:86:21:
         03:3f:c9:22:ff:d7:dd:10:53:4c:77:2e:30:99:a6:6f:45:89:
         37:4d:b8:ee:23:b4:9b:1d:70:ec:5d:9b:22:af:b6:88:cb:71:
         1a:41:d7:8c:f3:27:bd:a1:b4:08:8e:4f:64:12:fc:8f:8f:7f:
         91:61:4d:c6:96:aa:42:bd:75:d6:bf:6d:1b:af:68:25:89:d5:
         1f:df:dd:52:cc:79:cc:fd:0c:12:eb:5b:bc:15:8b:fb:0b:93:
         0a:af:25:80:3e:7b:2c:63:75:33:bf:07:62:2c:5c:59:ab:ce:
         4c:33:4a:10:98:df:f2:e9:77:b8:5d:b9:cf:11:b1:fb:b5:83:
         2d:2e:51:33:63:62:bc:5c:51:90:26:72:e6:78:c7:bc:f2:ad:
         9f:a8:37:71:e4:fe:48:90:ed:87:56:95:df:88:99:2f:f1:e6:
         6e:48:13:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:46:09 2026 by rpki-client