Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
File:                     9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft (raw, json)
Hash identifier:          ndtRytK4oxSsIYant/dFcMPICQ+J0tKwg2IE3T4fz68=
Subject key identifier:   71:EF:9F:F5:5F:4B:1B:02:16:90:8C:F2:8B:94:F8:DF:63:92:09:38
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Certificate issuer:       /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial:       0D7400254C45DF0C444CB5D23E8E7BC68BB74A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
Manifest number:          040A
Signing time:             Tue 21 Apr 2026 07:14:56 +0000
Manifest this update:     Tue 21 Apr 2026 07:09:56 +0000
Manifest next update:     Wed 22 Apr 2026 10:08:56 +0000
Files and hashes:         1: 39352e3136392e3137382e302f32342d3234203d3e203239383032.roa (hash: MC/iiuyAyWXJj834l+h/W2YmmeXSjAAVu9l7ZI6EqPY=)
                          2: 39352e3136392e3136392e302f32342d3234203d3e203331313033.roa (hash: 5TIxoP3zH/3tpzz15Z7N/c7GBu1V/m8JlGxxjOVBrRs=)
                          3: 39352e3136392e3138362e302f32342d3234203d3e203331313033.roa (hash: 8daVoJE88pbacwjpEBJsidwrwg2219SsmQVK6HKFYj4=)
                          4: 39352e3136392e3137322e302f32342d3234203d3e203436353539.roa (hash: Qy+V2X7+PzxINhPpdbn4kw5/0pnZp1UdY6DkxxIc9fc=)
                          5: 39352e3136392e3138382e302f32342d3234203d3e203331313033.roa (hash: rndZnup1kWPGfWxOG3Zr2kX43Hisn62xWe/m5w9mu2c=)
                          6: 39352e3136392e3136382e302f32342d3234203d3e20313432313436.roa (hash: /RLbW4auKS2K3rv8HhDP+gP154Hco62R6zxtZ7i34qM=)
                          7: 39352e3136392e3137302e302f32342d3234203d3e203436353539.roa (hash: oNzKGS7xOvu8k7L/ZwEBNmnCfzRs9OdLbUqXNjP8RfQ=)
                          8: 39352e3136392e3137392e302f32342d3234203d3e203239303636.roa (hash: yywcvcHzn7dSwO3+wHqBp+CW/a8ZhBlrFbEf1UnM8Hk=)
                          9: 39352e3136392e3137332e302f32342d3234203d3e20343030383130.roa (hash: BsfJttihkJapWw7WQdwqY/fpKPjdSgxYv5Wpl/HNe4Q=)
                          10: 39352e3136392e3136372e302f32342d3234203d3e203239383032.roa (hash: StWFAV1ktsHSXaR84IkdQxGhH1pdr8IbInj7fnowEwI=)
                          11: 36322e3134312e35362e302f32322d3234203d3e203331313033.roa (hash: faaVf6mVk2um8LN+9bbDcQgIJQoBSE4EijIF5Fv0rVk=)
                          12: 36322e3134312e36322e302f32342d3234203d3e203136323736.roa (hash: kK0Kj3RrwBfjRddxRkWNqDl+BI/cVmP9VgkySujZ2ic=)
                          13: 38342e31392e3136302e302f31392d3234203d3e203331313033.roa (hash: +X1ouAarKQjwPMpyBACj9pvqNJte1aijswwlHZfjKyE=)
                          14: 39352e3136392e3136372e302f32342d3234203d3e203631333137.roa (hash: o1Z1gv8qcijmlxmof6KbMPtO3/EITyA/CsYVvnx8Ko0=)
                          15: 39352e3136392e3136322e302f32342d3234203d3e20313335343032.roa (hash: IRPp/o6WjLbM7I6TAmvy1XPWpYZxFEVo5v8a4h0dyCE=)
                          16: 39352e3136392e3136342e302f32342d3234203d3e203136313235.roa (hash: aj4OUZvoJq+U0AKwuK7Sp8plgctJ6Yuvqf3ESjh7Rqw=)
                          17: 39352e3136392e3138372e302f32342d3234203d3e203331313033.roa (hash: pySxHVQtYN782X6XDfBZ9zkxvLdpxdQLnlGZe0ySJ+8=)
                          18: 39352e3136392e3137342e302f32342d3234203d3e203233383635.roa (hash: 2vGx/b+IMIujTVU8vkd3QqlGb4NKBcI4SPBsQqJxXFU=)
                          19: 39352e3136392e3138302e302f32342d3234203d3e20323632323837.roa (hash: 6UGT1aTRnL4zp/KvN9izOc/fv/mHQQmccA1UDKjH29E=)
                          20: 39352e3136392e3136332e302f32342d3234203d3e2035303635.roa (hash: JpuEF0ephfoLAmDX8MxjtzasgCsiSynxwG0xVvE05ak=)
                          21: 39352e3136392e3138332e302f32342d3234203d3e203331313033.roa (hash: 7MwjcLUeB23qBJgTnOZa08dWcA8yZ//9mzCspNxJbuc=)
                          22: 3231372e3131342e3230382e302f32302d3234203d3e203331313033.roa (hash: fB+lTapaDCd316Pm1QSRTZR22RzB9G7gqgM7bMcaZtU=)
                          23: 36322e3134312e34382e302f32312d3234203d3e203331313033.roa (hash: 3eKrjjTPZefl3jMtCh5HnGRmkRLUJPEcepHMf5aNFJI=)
                          24: 39352e3136392e3139302e302f32332d3233203d3e203331313033.roa (hash: m/tDzlsxBTeJ28XnXygy13CpdnuuR64r/As8GHZMQw4=)
                          25: 39352e3136392e3137352e302f32342d3234203d3e20323133333139.roa (hash: dS2LuRYQAUbAW6hHMhpL306RVrDayVVIz//Vlq4u7k8=)
                          26: 39352e3136392e3138392e302f32342d3234203d3e203331313033.roa (hash: ut975HWxrJJVprUw24NLhBr8BngBepJ1hQwkfejhcnw=)
                          27: 39352e3136392e3136362e302f32342d3234203d3e203633313530.roa (hash: zeOelHfLdZjMH3OkxCEQZ20Nkae1JE0nc2s+xWdEEEQ=)
                          28: 39352e3136392e3138322e302f32342d3234203d3e203331313033.roa (hash: 1iZhFHzkXrCKshGAqDd/oV19ZvihCn0A9jAJQSQLf7E=)
                          29: 39352e3136392e3137312e302f32342d3234203d3e203239303636.roa (hash: 21lAGTMtlp02tGYNtgPFkN8EZsIZjuO0nYo5r8q+krI=)
                          30: 38372e3131382e36342e302f31382d3234203d3e203331313033.roa (hash: BB9/kn0yHeOM1iTUmLBw5wkK/7+EX8B19ZEvpKOrAi0=)
                          31: 39352e3136392e3136302e302f32342d3234203d3e203331313033.roa (hash: k+Z//rmLk6h7NuifvvAZE61QoFNP3aQgEtJmbZYj3E0=)
                          32: 39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa (hash: Y3yWrlCcBduEqP+x2uVjELBYkUL1NaUhLPealMI045M=)
                          33: 39352e3136392e3138312e302f32342d3234203d3e203331313033.roa (hash: 8J61SmXxhRHMHfUJnlu6B4NGLsTA9tkOu7nJte9l2p4=)
                          34: 39352e3136392e3137372e302f32342d3234203d3e20323133323530.roa (hash: M5z9Sux3PcsEPFPTOYmSmjuZyXZMxe8g6i7N2xLS1OI=)
                          35: 323030313a316236303a3a2f32392d3239203d3e203331313033.roa (hash: IDJpBTlbA0zB9ZyBzvTPpf9quJ1M7hPWCUkYBwYIZlE=)
                          36: 39352e3136392e3138342e302f32322d3232203d3e203331313033.roa (hash: AiGSiDOUoe6ad9r1CFRgSRyrPJp1yOIDif/gu6E2Rmk=)
                          37: 39352e3136392e3136312e302f32342d3234203d3e203331313033.roa (hash: m4Um1BmjOTUf/Kb4LjS3+PSv1Axx5p/vP5z6FzbFZqQ=)
                          38: 36322e3134312e36332e302f32342d3234203d3e20323039353033.roa (hash: 5iMkqdKaodGZceg7xcTo90AjAcnin/rj9yW7y461+ew=)
                          39: 9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl (hash: PpC+Q+7RPzFmE5tWA+VRPrOY5w131d5szjhV8b8lLFU=)
                          40: 36322e3134312e36302e302f32332d3234203d3e203331313033.roa (hash: QrnvXx6i7km/KphPP37k4Bmi0GJV/aRgTI7F8KHu09g=)
                          41: 39352e3136392e3137362e302f32342d3234203d3e20323033363336.roa (hash: 4wNm7SdKeRKEaBBBn2yhRi29IL7nM82igAE5n//XKpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 10:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:74:00:25:4c:45:df:0c:44:4c:b5:d2:3e:8e:7b:c6:8b:b7:4a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
        Validity
            Not Before: Apr 21 07:09:56 2026 GMT
            Not After : Apr 22 10:08:56 2026 GMT
        Subject: CN=71EF9FF55F4B1B0216908CF28B94F8DF63920938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d9:da:93:8f:80:37:80:6e:b0:9c:25:3e:c8:
                    c0:82:d6:5a:71:5b:73:35:79:40:3d:3e:27:1b:e6:
                    8d:c0:f1:fa:a8:20:36:8d:f2:28:d2:44:9f:36:8b:
                    42:cb:90:14:a3:04:9f:8a:57:d8:68:a3:66:8b:29:
                    d4:14:6d:f3:16:57:30:19:42:b7:34:3f:b2:09:7e:
                    cd:31:ca:80:eb:f5:7c:96:ba:cc:e1:61:ff:25:36:
                    f1:97:0e:a8:b8:ec:8c:bc:da:f1:ff:9a:be:59:c7:
                    e3:6a:3c:1c:66:9e:4e:27:4f:c7:06:50:1a:58:79:
                    5d:4a:67:33:08:c4:4e:8e:65:f2:b1:b4:90:35:8e:
                    5d:40:b9:b8:99:57:fa:33:a9:38:84:f5:ce:30:99:
                    fd:b0:6d:bc:48:75:e6:fa:0a:3f:1c:60:2f:07:30:
                    dd:aa:93:52:77:b6:f9:13:64:a3:f2:59:b4:63:db:
                    ae:44:28:c1:17:af:29:9f:82:46:2e:ab:da:de:d8:
                    b0:4c:47:fc:2e:d8:8b:ea:0e:27:a6:d5:67:f7:0b:
                    cc:14:69:06:27:04:8a:ca:b0:7e:42:0c:8e:ad:2d:
                    1b:6f:40:ca:e6:47:09:13:e8:aa:ab:d7:1f:ba:c7:
                    e2:da:70:ef:69:80:3e:aa:d0:85:5d:35:3c:0b:4b:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EF:9F:F5:5F:4B:1B:02:16:90:8C:F2:8B:94:F8:DF:63:92:09:38
            X509v3 Authority Key Identifier:
                keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:fb:fb:68:36:0e:1d:5b:d4:e0:fb:5d:53:f4:e9:c9:c5:68:
         0b:44:92:09:8c:60:88:b6:40:6f:28:c5:fc:43:90:e5:02:75:
         e8:54:31:e4:5c:06:94:b1:ec:3f:82:0d:d9:24:cf:6f:f0:0a:
         7a:ef:b7:5e:62:69:1d:4c:c5:d6:4e:77:f7:31:7d:67:41:6f:
         c6:a2:9e:dd:91:f0:fc:0b:39:a4:2c:a4:05:17:8a:c8:4b:76:
         f7:0b:0c:a0:cc:9b:e8:80:30:2d:f0:e2:43:db:96:02:e9:3a:
         7d:34:70:c2:80:d4:c8:34:ce:9a:3f:97:32:f6:cd:88:46:36:
         3b:aa:28:fc:8b:49:2a:41:a9:32:6d:6b:71:bf:05:90:b5:c0:
         16:1f:49:c0:da:92:69:b9:89:34:c9:c1:61:45:5d:ff:a1:9c:
         f9:98:07:7d:98:94:83:26:b3:bd:87:50:7d:21:93:37:cb:ac:
         34:98:61:36:c7:dc:ea:d1:d6:a4:7d:7b:d6:c3:11:b7:41:88:
         ed:35:10:eb:66:6d:47:57:ed:f3:5e:d5:17:5a:a5:3d:eb:3d:
         8f:46:44:76:b7:c3:88:ac:bd:75:0b:24:38:8a:99:32:6a:27:
         d4:6e:cd:54:ba:5f:bd:0e:04:8a:48:59:43:d1:b1:cf:d4:13:
         00:24:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:38:40 2026 by rpki-client