Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
File:                     9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft (raw, json)
Hash identifier:          KZG/DciY5khZiIsfFDCfi8FpHQi2YS3Do4zv8jsfyYw=
Subject key identifier:   7F:1C:DF:FA:06:90:7A:3C:22:FF:32:5C:93:A8:E6:BE:A5:11:90:51
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Certificate issuer:       /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial:       53CA0521D1A8E8194D5A3974C767AB571377B7B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
Manifest number:          04CD
Signing time:             Fri 04 Sep 2026 05:33:54 +0000
Manifest this update:     Fri 04 Sep 2026 05:28:54 +0000
Manifest next update:     Sat 05 Sep 2026 08:50:54 +0000
Files and hashes:         1: 39352e3136392e3137382e302f32342d3234203d3e203239383032.roa (hash: MC/iiuyAyWXJj834l+h/W2YmmeXSjAAVu9l7ZI6EqPY=)
                          2: 39352e3136392e3137352e302f32342d3234203d3e20323133333139.roa (hash: dS2LuRYQAUbAW6hHMhpL306RVrDayVVIz//Vlq4u7k8=)
                          3: 39352e3136392e3138372e302f32342d3234203d3e203331313033.roa (hash: pySxHVQtYN782X6XDfBZ9zkxvLdpxdQLnlGZe0ySJ+8=)
                          4: 39352e3136392e3137392e302f32342d3234203d3e203239303636.roa (hash: EwQ2q4jws1e2fBMe+G+PV6nbLaNlQ+wz4AYZdQFN/xg=)
                          5: 39352e3136392e3137302e302f32342d3234203d3e203436353539.roa (hash: oNzKGS7xOvu8k7L/ZwEBNmnCfzRs9OdLbUqXNjP8RfQ=)
                          6: 323030313a316236303a3a2f32392d3239203d3e203331313033.roa (hash: IDJpBTlbA0zB9ZyBzvTPpf9quJ1M7hPWCUkYBwYIZlE=)
                          7: 39352e3136392e3137312e302f32342d3234203d3e203239303636.roa (hash: MJctjavTHFbRl9lwNbqRfTkffSb/ZJBw+Y2qFJ3S3a4=)
                          8: 39352e3136392e3136362e302f32342d3234203d3e203633313530.roa (hash: zeOelHfLdZjMH3OkxCEQZ20Nkae1JE0nc2s+xWdEEEQ=)
                          9: 39352e3136392e3137372e302f32342d3234203d3e20323133323530.roa (hash: KhIgyDQBUI0rDOYr6KFK3W5xahsrdfLlExr/x8BC9vA=)
                          10: 39352e3136392e3136302e302f32342d3234203d3e203331313033.roa (hash: k+Z//rmLk6h7NuifvvAZE61QoFNP3aQgEtJmbZYj3E0=)
                          11: 39352e3136392e3136392e302f32342d3234203d3e203331313033.roa (hash: 5TIxoP3zH/3tpzz15Z7N/c7GBu1V/m8JlGxxjOVBrRs=)
                          12: 36322e3134312e36322e302f32342d3234203d3e20323033373538.roa (hash: BDaAnSyPRKdKpq+KzSHaBOVytnqZq5Z4N/IJ01gcIyU=)
                          13: 39352e3136392e3138382e302f32342d3234203d3e203331313033.roa (hash: rndZnup1kWPGfWxOG3Zr2kX43Hisn62xWe/m5w9mu2c=)
                          14: 9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl (hash: vVVkYvesX6x6OBNZXfP4A1eCFcWZF1mYrSHdA5IeZMU=)
                          15: 38342e31392e3136302e302f31392d3234203d3e203331313033.roa (hash: +X1ouAarKQjwPMpyBACj9pvqNJte1aijswwlHZfjKyE=)
                          16: 39352e3136392e3138322e302f32342d3234203d3e203331313033.roa (hash: 1iZhFHzkXrCKshGAqDd/oV19ZvihCn0A9jAJQSQLf7E=)
                          17: 36322e3134312e34382e302f32312d3234203d3e203331313033.roa (hash: 3eKrjjTPZefl3jMtCh5HnGRmkRLUJPEcepHMf5aNFJI=)
                          18: 39352e3136392e3138342e302f32322d3232203d3e203331313033.roa (hash: AiGSiDOUoe6ad9r1CFRgSRyrPJp1yOIDif/gu6E2Rmk=)
                          19: 39352e3136392e3138392e302f32342d3234203d3e203331313033.roa (hash: ut975HWxrJJVprUw24NLhBr8BngBepJ1hQwkfejhcnw=)
                          20: 39352e3136392e3136332e302f32342d3234203d3e2035303635.roa (hash: JpuEF0ephfoLAmDX8MxjtzasgCsiSynxwG0xVvE05ak=)
                          21: 39352e3136392e3136372e302f32342d3234203d3e203239383032.roa (hash: 1ZcgAZkIDxVdXepiZbyDXvpiLogALm2uYRnEme9mnUg=)
                          22: 39352e3136392e3138362e302f32342d3234203d3e203331313033.roa (hash: 8daVoJE88pbacwjpEBJsidwrwg2219SsmQVK6HKFYj4=)
                          23: 39352e3136392e3136382e302f32342d3234203d3e20313432313436.roa (hash: X8gBNG0CANPabuUX1SAhdfr40eAzyS9DOY/a1K3Vj0A=)
                          24: 39352e3136392e3137322e302f32342d3234203d3e203436353539.roa (hash: Qy+V2X7+PzxINhPpdbn4kw5/0pnZp1UdY6DkxxIc9fc=)
                          25: 39352e3136392e3136312e302f32342d3234203d3e203331313033.roa (hash: m4Um1BmjOTUf/Kb4LjS3+PSv1Axx5p/vP5z6FzbFZqQ=)
                          26: 39352e3136392e3139302e302f32332d3233203d3e203331313033.roa (hash: m/tDzlsxBTeJ28XnXygy13CpdnuuR64r/As8GHZMQw4=)
                          27: 36322e3134312e36332e302f32342d3234203d3e20323039353033.roa (hash: 5iMkqdKaodGZceg7xcTo90AjAcnin/rj9yW7y461+ew=)
                          28: 39352e3136392e3137332e302f32342d3234203d3e20343030383130.roa (hash: Y0vOirnEju94tIkNX/GWYNnqnXhBfYRftoO3oMQSY5I=)
                          29: 38372e3131382e36342e302f31382d3234203d3e203331313033.roa (hash: BB9/kn0yHeOM1iTUmLBw5wkK/7+EX8B19ZEvpKOrAi0=)
                          30: 36322e3134312e36322e302f32342d3234203d3e203136323736.roa (hash: hef41ibvNW4BE26qfHxR+MUJjwTK06LT9IH+4XsepD8=)
                          31: 39352e3136392e3136342e302f32342d3234203d3e203231383539.roa (hash: IWCP1vYEgIpNYJ/1SLKjGGplezz5LIOVyQhQ3NDvzHI=)
                          32: 39352e3136392e3137362e302f32342d3234203d3e20323033363336.roa (hash: 4wNm7SdKeRKEaBBBn2yhRi29IL7nM82igAE5n//XKpE=)
                          33: 39352e3136392e3137342e302f32342d3234203d3e203233383635.roa (hash: 2vGx/b+IMIujTVU8vkd3QqlGb4NKBcI4SPBsQqJxXFU=)
                          34: 39352e3136392e3138332e302f32342d3234203d3e203331313033.roa (hash: 7MwjcLUeB23qBJgTnOZa08dWcA8yZ//9mzCspNxJbuc=)
                          35: 3231372e3131342e3230382e302f32302d3234203d3e203331313033.roa (hash: fB+lTapaDCd316Pm1QSRTZR22RzB9G7gqgM7bMcaZtU=)
                          36: 39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa (hash: Y3yWrlCcBduEqP+x2uVjELBYkUL1NaUhLPealMI045M=)
                          37: 39352e3136392e3138312e302f32342d3234203d3e203331313033.roa (hash: 8J61SmXxhRHMHfUJnlu6B4NGLsTA9tkOu7nJte9l2p4=)
                          38: 36322e3134312e35362e302f32322d3234203d3e203331313033.roa (hash: faaVf6mVk2um8LN+9bbDcQgIJQoBSE4EijIF5Fv0rVk=)
                          39: 39352e3136392e3138302e302f32342d3234203d3e20323632323837.roa (hash: BeHYmLAcwPzUb541czFha5MdBLASqOU+LSKZWT1BsqI=)
                          40: 39352e3136392e3136322e302f32342d3234203d3e203136353039.roa (hash: dJM5t5nPX1W05O3LoaV7bcaZ2+r3vYhN4a7Q5isWNzo=)
                          41: 36322e3134312e36302e302f32332d3234203d3e203331313033.roa (hash: QrnvXx6i7km/KphPP37k4Bmi0GJV/aRgTI7F8KHu09g=)
                          42: 39352e3136392e3136372e302f32342d3234203d3e203631333137.roa (hash: 8fDs55QSGeJaoFELZQTBEvuZ3rSvV82sv/l57gaFbH0=)
                          43: 39352e3136392e3136322e302f32342d3234203d3e203134363138.roa (hash: yqbaz/x5dOfuDMe5vO3Mzh1fgze7QD9EPpVisoUi+Mc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 08:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ca:05:21:d1:a8:e8:19:4d:5a:39:74:c7:67:ab:57:13:77:b7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
        Validity
            Not Before: Sep  4 05:28:54 2026 GMT
            Not After : Sep  5 08:50:54 2026 GMT
        Subject: CN=7F1CDFFA06907A3C22FF325C93A8E6BEA5119051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:cc:fb:a1:3b:f5:d4:4c:95:41:b8:7f:1b:
                    4b:b3:58:8d:cd:34:6f:88:00:72:d1:da:ec:56:68:
                    41:43:f1:93:b6:13:da:30:86:04:51:0e:74:0c:5f:
                    4b:85:30:64:4f:07:d1:f7:1f:02:77:6c:39:e0:f8:
                    3b:aa:b2:53:97:a7:4d:43:ae:26:66:99:90:a3:f5:
                    8b:17:47:06:0b:85:20:58:d1:35:39:b0:65:63:b7:
                    d9:d6:8c:62:b0:32:da:a8:ba:3f:15:14:75:a1:68:
                    ca:89:e2:d6:c2:17:ad:9b:a1:5c:76:1e:b7:68:2b:
                    55:17:2d:dd:3f:3d:fe:73:d0:10:9e:9b:5d:18:47:
                    81:bb:03:e8:a7:a2:99:46:d0:69:cd:e2:a1:be:c4:
                    e0:11:83:4f:41:4a:e7:bb:32:85:e0:4a:b9:de:c9:
                    7b:25:60:c1:d9:22:e5:5e:08:a2:b0:db:cc:5c:e7:
                    6f:ab:40:a6:8e:f6:6f:79:98:de:c1:a3:5a:fe:54:
                    9d:1d:9c:c3:04:c6:6d:e1:f2:58:cd:bb:73:d5:04:
                    5f:c9:e9:87:73:f2:26:9f:48:f3:c6:02:ea:9f:42:
                    6d:61:3f:0b:fd:31:4b:13:06:ea:ce:39:ae:6b:87:
                    42:dd:1a:b0:22:e1:a5:17:81:a5:64:e6:79:30:bb:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1C:DF:FA:06:90:7A:3C:22:FF:32:5C:93:A8:E6:BE:A5:11:90:51
            X509v3 Authority Key Identifier:
                keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6b:9c:87:16:2c:d2:1e:ac:cb:3c:23:64:8d:81:14:47:7a:
         05:64:12:3a:01:6c:ef:b9:c8:59:de:a8:9e:e7:dc:77:5f:6e:
         81:42:3b:62:7e:c3:b8:05:ff:e2:fb:d1:90:6c:30:7c:7e:08:
         72:a0:80:3f:e6:83:bf:88:43:04:8a:2e:e7:fc:e9:fd:61:78:
         f5:62:33:bd:23:59:c2:d2:f7:09:20:02:56:f2:12:0f:dd:3b:
         3f:73:0e:aa:e7:57:0d:de:8a:c6:83:79:ee:43:3a:82:76:e0:
         27:42:73:3e:3a:25:ea:32:ac:c1:29:2c:34:a7:40:78:53:0b:
         79:5f:b3:38:56:90:4d:92:1d:d5:ab:51:7d:d7:56:aa:1f:be:
         ea:1d:d3:6b:ec:96:d7:39:bc:00:8f:fb:3b:4c:e2:7c:93:0e:
         7b:e7:46:c0:3c:57:14:67:cd:6f:52:46:f8:3f:72:6d:4a:a9:
         0e:1b:64:08:fd:c9:58:1f:86:fa:7b:1f:5a:2b:fa:d5:6d:08:
         aa:11:17:fd:b5:90:39:49:e0:98:71:26:0d:83:8a:c0:9b:45:
         ac:3f:40:fc:7a:c3:86:ee:da:14:99:44:66:f4:d3:94:d1:13:
         82:d2:23:ec:71:21:fb:37:99:dd:8a:99:3f:df:76:dc:fd:ae:
         7c:8a:1c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:04:24 2026 by rpki-client