Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
File:                     9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft (raw, json)
Hash identifier:          9RuqdIKZw5778P71lXWta99VonPi7zFWr2dogQMR2f4=
Subject key identifier:   30:19:AF:D7:46:3A:83:F7:A2:BE:EB:50:A5:B3:5F:F8:B7:3B:B7:EF
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Certificate issuer:       /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial:       621CBA567DD7979B45AA9CFDFAA896125653627F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
Manifest number:          03C8
Signing time:             Sat 07 Mar 2026 06:36:53 +0000
Manifest this update:     Sat 07 Mar 2026 06:31:53 +0000
Manifest next update:     Sun 08 Mar 2026 07:32:53 +0000
Files and hashes:         1: 39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa (hash: Y3yWrlCcBduEqP+x2uVjELBYkUL1NaUhLPealMI045M=)
                          2: 39352e3136392e3136392e302f32342d3234203d3e203331313033.roa (hash: I82uo/QE6Wy3PHz0iuior83bbmdz5PrUnUTfAbS8VFk=)
                          3: 39352e3136392e3138342e302f32322d3232203d3e203331313033.roa (hash: 2fESKlF0+csH+bkbWbTv3oOmUla4DBnBrtpXwsB8xtg=)
                          4: 39352e3136392e3136322e302f32342d3234203d3e20343030383130.roa (hash: twnUw+h+nvEkUvESIwakkxSwyObti4EeGwb282j/Hy8=)
                          5: 39352e3136392e3139302e302f32332d3233203d3e203331313033.roa (hash: 2jXLpNlhiNv8gkIUwXJmLyEMC56nKRQgI4gcz2G4bN0=)
                          6: 39352e3136392e3137332e302f32342d3234203d3e20343030383130.roa (hash: BsfJttihkJapWw7WQdwqY/fpKPjdSgxYv5Wpl/HNe4Q=)
                          7: 323030313a316236303a3a2f32392d3239203d3e203331313033.roa (hash: 43AsOxL4a9I10GSthDJXGbWZWADf4GGnRt4Iz5iDl5w=)
                          8: 39352e3136392e3138362e302f32342d3234203d3e203331313033.roa (hash: az9XmcJkBqWPeM9SkwIUOpvQgtsOMzMmDzHJH6fuDM0=)
                          9: 39352e3136392e3138302e302f32342d3234203d3e20323632323837.roa (hash: 6UGT1aTRnL4zp/KvN9izOc/fv/mHQQmccA1UDKjH29E=)
                          10: 39352e3136392e3136312e302f32342d3234203d3e203331313033.roa (hash: rRQabZUtw+9d+Hzia7uZvMYxU4nKdcUZLHQ401GlyDU=)
                          11: 39352e3136392e3137312e302f32342d3234203d3e203239303636.roa (hash: 21lAGTMtlp02tGYNtgPFkN8EZsIZjuO0nYo5r8q+krI=)
                          12: 39352e3136392e3137302e302f32342d3234203d3e203436353539.roa (hash: bwt+okxHQpNxVqhYmN6qMDI16vhwwT0tSw8hD5zYGFI=)
                          13: 39352e3136392e3137322e302f32342d3234203d3e203436353539.roa (hash: JM9dpKIanlubgpq4VNE8vCqNAhvHx6W/LlVZssjkYGI=)
                          14: 39352e3136392e3138382e302f32342d3234203d3e203331313033.roa (hash: 226MZdY+a2f6nMwQHLZZRp09daRbMnARjilQ0DMiCn8=)
                          15: 39352e3136392e3136332e302f32342d3234203d3e2035303635.roa (hash: JpuEF0ephfoLAmDX8MxjtzasgCsiSynxwG0xVvE05ak=)
                          16: 39352e3136392e3138372e302f32342d3234203d3e203331313033.roa (hash: dHsnX5zrNfbVbo8Cz+W65wQOwbUxto43yjszc9VCH0Y=)
                          17: 39352e3136392e3137352e302f32342d3234203d3e20323133333139.roa (hash: dS2LuRYQAUbAW6hHMhpL306RVrDayVVIz//Vlq4u7k8=)
                          18: 39352e3136392e3136302e302f32342d3234203d3e203331313033.roa (hash: 8vr1ZciHAkne0/U9xo8m/EZoMXPqvddsbCNMYo8K6Lc=)
                          19: 36322e3134312e35362e302f32322d3234203d3e203331313033.roa (hash: f2uzGttju8CJhu3pIUGxsulMOt6+VibQadUSWlj55ZA=)
                          20: 36322e3134312e34382e302f32312d3234203d3e203331313033.roa (hash: Eoqc9k3Yv1UQaUFZuo0jARSDnM1xTkUtiaDPuATQups=)
                          21: 3231372e3131342e3230382e302f32302d3234203d3e203331313033.roa (hash: gr03GWP2J+mWH8BIdz3eIQefsBxaCm+3XV9JFI2iBPA=)
                          22: 36322e3134312e36302e302f32332d3234203d3e203331313033.roa (hash: 7hC/7buJ7T5t4OgZLWTNq+9WScksNQKydBgZ1vBlVgM=)
                          23: 39352e3136392e3136372e302f32342d3234203d3e203239383032.roa (hash: StWFAV1ktsHSXaR84IkdQxGhH1pdr8IbInj7fnowEwI=)
                          24: 38342e31392e3136302e302f31392d3234203d3e203331313033.roa (hash: mmfL5qVgg4KaXtsVE7F7YcQcdDAu4pHAKwG2SsIvh8s=)
                          25: 39352e3136392e3136342e302f32342d3234203d3e203136313235.roa (hash: aj4OUZvoJq+U0AKwuK7Sp8plgctJ6Yuvqf3ESjh7Rqw=)
                          26: 39352e3136392e3137342e302f32342d3234203d3e203233383635.roa (hash: 2vGx/b+IMIujTVU8vkd3QqlGb4NKBcI4SPBsQqJxXFU=)
                          27: 38372e3131382e36342e302f31382d3234203d3e203331313033.roa (hash: 5FgGKvGyM0+sTnRzeGibD3YbS14Xm/BeG3m9Kf1UjW8=)
                          28: 39352e3136392e3137322e302f32342d3234203d3e203239303134.roa (hash: vOQ2CJDOAV09jGCVDUsBwTiMAv1pXrciagC9EaYFihM=)
                          29: 39352e3136392e3137382e302f32342d3234203d3e203239383032.roa (hash: M1zdBr3dkuSPfBlr5N8fCga3HKwLGAVwQfjNqW+G7yU=)
                          30: 39352e3136392e3136372e302f32342d3234203d3e203631333137.roa (hash: o1Z1gv8qcijmlxmof6KbMPtO3/EITyA/CsYVvnx8Ko0=)
                          31: 39352e3136392e3138322e302f32342d3234203d3e203331313033.roa (hash: MIFV8cJ9qNpMecIFeReLvKdqknaaeAVxdEuriaz+uNo=)
                          32: 39352e3136392e3138332e302f32342d3234203d3e203331313033.roa (hash: 14BjJABvK45hEO1MTADvUJ8/9d09FCU82zdQ6aYQXvA=)
                          33: 36322e3134312e36322e302f32342d3234203d3e203136323736.roa (hash: kK0Kj3RrwBfjRddxRkWNqDl+BI/cVmP9VgkySujZ2ic=)
                          34: 39352e3136392e3136382e302f32342d3234203d3e20313432313436.roa (hash: /RLbW4auKS2K3rv8HhDP+gP154Hco62R6zxtZ7i34qM=)
                          35: 36322e3134312e36332e302f32342d3234203d3e20323039353033.roa (hash: 5iMkqdKaodGZceg7xcTo90AjAcnin/rj9yW7y461+ew=)
                          36: 39352e3136392e3138392e302f32342d3234203d3e203331313033.roa (hash: GOon70I5uhhs/nnQp16QL9ir1jKCr0nAP5fOjpanC0o=)
                          37: 9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl (hash: MUL1sgBZwnBBGeq+O+250F7CCKkiH3yzjeSudrPlwkI=)
                          38: 39352e3136392e3137362e302f32342d3234203d3e20323033363336.roa (hash: 4wNm7SdKeRKEaBBBn2yhRi29IL7nM82igAE5n//XKpE=)
                          39: 39352e3136392e3136362e302f32342d3234203d3e203633313530.roa (hash: zeOelHfLdZjMH3OkxCEQZ20Nkae1JE0nc2s+xWdEEEQ=)
                          40: 39352e3136392e3138312e302f32342d3234203d3e203331313033.roa (hash: vHIdBAX8vax4LMkHyZBnhxzL225O0XLYlxEPXB9FDh8=)
                          41: 39352e3136392e3137372e302f32342d3234203d3e20323133323530.roa (hash: M5z9Sux3PcsEPFPTOYmSmjuZyXZMxe8g6i7N2xLS1OI=)
                          42: 39352e3136392e3137302e302f32342d3234203d3e203239303134.roa (hash: i2xhkApVfgj04fX+hojCpQK4wvNEUE95SvVCLWaHLBA=)
                          43: 39352e3136392e3137392e302f32342d3234203d3e203239303636.roa (hash: yywcvcHzn7dSwO3+wHqBp+CW/a8ZhBlrFbEf1UnM8Hk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1c:ba:56:7d:d7:97:9b:45:aa:9c:fd:fa:a8:96:12:56:53:62:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
        Validity
            Not Before: Mar  7 06:31:53 2026 GMT
            Not After : Mar  8 07:32:53 2026 GMT
        Subject: CN=3019AFD7463A83F7A2BEEB50A5B35FF8B73BB7EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:89:5b:d3:c5:74:e2:1d:c4:95:67:46:d1:
                    ee:29:56:b3:18:8c:d1:41:24:54:b4:d7:bf:d6:7d:
                    67:dc:88:eb:0d:26:37:6e:03:a9:5d:06:60:d0:ea:
                    a4:29:c6:33:60:91:2c:7f:ab:50:6a:56:19:3d:00:
                    32:42:d8:97:39:44:28:7a:c0:4e:4c:f7:b2:85:5b:
                    1d:c0:c8:f9:dc:86:27:31:2c:ee:a2:9f:d8:22:4f:
                    cc:ed:a5:ee:df:d7:83:c8:57:a8:70:5e:91:88:99:
                    23:c2:06:7d:71:6c:47:06:8a:8d:be:79:34:1d:48:
                    d8:ab:cc:72:73:2a:94:62:01:d7:d0:94:ec:00:e4:
                    d3:68:45:5a:00:93:7b:ca:15:51:3e:c8:21:d1:4c:
                    9a:44:e5:1a:55:ef:f1:c2:b5:f2:80:72:5a:4d:45:
                    22:dd:b9:26:14:79:cb:93:69:f8:b5:91:fd:e0:68:
                    51:ea:52:84:13:cc:fb:c1:40:c2:97:f2:72:65:69:
                    d8:07:a6:ea:24:3c:54:02:9a:c9:7c:d2:2e:c8:be:
                    09:2b:34:1e:b5:d1:10:c3:83:07:e7:ed:8b:6a:62:
                    35:45:a9:40:52:d2:d9:6c:54:8e:a3:4e:e8:c5:84:
                    76:6e:14:f0:16:5e:c4:73:08:e8:cb:7b:61:c8:0b:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:19:AF:D7:46:3A:83:F7:A2:BE:EB:50:A5:B3:5F:F8:B7:3B:B7:EF
            X509v3 Authority Key Identifier:
                keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e8:d1:c5:57:2f:74:61:0f:98:9a:aa:a5:81:a8:26:f1:8a:
         a0:94:b0:1f:f7:e2:7e:be:07:d5:83:cb:45:6f:12:c4:f6:79:
         1a:e6:e3:8f:0c:a5:10:f1:d1:79:26:c4:38:f3:17:65:b8:aa:
         86:b9:9c:0f:68:2a:a0:a4:e7:10:9e:f4:ec:4a:b3:0a:41:c8:
         47:88:9a:fc:91:e6:bb:48:25:e0:d6:05:6b:2b:c8:6c:63:f3:
         29:f8:bc:b1:11:7d:ba:f6:57:de:1e:f7:fe:fb:36:53:3c:13:
         5d:d3:4e:23:13:a8:a7:36:53:d5:49:52:c7:0b:76:09:b7:70:
         e5:28:83:fe:d1:76:1b:05:c3:82:62:85:3c:61:9d:b3:04:39:
         0d:f4:6d:74:29:33:15:bb:c4:e6:3e:81:7e:c2:d9:12:aa:ac:
         6d:07:71:fa:29:fe:53:7e:87:0f:ee:72:f7:36:17:9b:9d:0e:
         b1:d0:22:ac:26:92:06:b6:24:f2:d6:03:fe:eb:fa:e4:40:27:
         07:74:2c:fe:6c:a3:e3:4a:c0:8f:e0:c1:df:31:e9:5f:65:f8:
         a3:8e:99:d8:f7:c7:2e:45:7d:00:1c:f0:5e:f6:bf:96:b9:8d:
         f8:bf:ee:c1:06:74:2a:b1:a2:bf:b5:43:64:92:3f:de:33:20:
         64:3f:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:17:39 2026 by rpki-client