Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
File:                     35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json)
Hash identifier:          RBMfBGBsDVbpShbbtDdZuI8VK5bPSj+mNAl0d897hNg=
Subject key identifier:   82:9C:51:97:30:BD:2D:F1:BD:FA:E6:E2:30:AC:06:DE:65:54:3F:46
Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
Certificate issuer:       /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Certificate serial:       639F74DF53A8F722676BB5994944DA1051B42393
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
Manifest number:          02F6
Signing time:             Thu 10 Sep 2026 02:08:57 +0000
Manifest this update:     Thu 10 Sep 2026 02:03:57 +0000
Manifest next update:     Fri 11 Sep 2026 05:45:57 +0000
Files and hashes:         1: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: r2FAoLHwIu8mKalLeNKMfevbe6TYD4tj8Lmhtg3K0Jc=)
                          2: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: hhnXez1MtyG/OWqeDWj8Yk7vwpb6xK8SsXbhq+WvHw8=)
                          3: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: WHkf4m6DzfoyrufCoOAxeFwtqFzFGCors6ZbsGaGLa8=)
                          4: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: sHH5EXfl8KcOz9d8oEb74NyMVuJWDbdSziQULSKFDd4=)
                          5: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: qMwS539lNZFoubA7sJWCkka1wt0G8zXYNPGQsBc3Exo=)
                          6: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: tf4CnuzuqcNJkCPREEFPykMzx34y8Ud9hQ2hyeqIDkc=)
                          7: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: UDRqDR0JMowXqg92cpDjRfR7VLQyzzQdpbzczBoUKPE=)
                          8: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: hxtz8ASXD8PG97FYl6iOT5I44qYXtzoqN/FTB4hvRbw=)
                          9: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: fNdgpZfzM+lTdkTHtAnx5kJSH3iOKuMJEshssLvwnVk=)
                          10: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: GU9+rKAYRqNo9YIwP+TkUZlOwC3QOJ/ceUAdYXuG73A=)
                          11: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: RGywHnxAYLuO6cDdu+OqsmlkwS7ZjWl9Xx30KtT8IYc=)
                          12: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: BgI8MCbrdQrLXGBmcxKTWUA61uXQRIT/7G+jUcNg+Cg=)
                          13: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: DLjQUjmP+DsaW9+BMh56ieI2Ec94mZJVyHTBFU7NtcI=)
                          14: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: vUmqEtEfYQI1zWEs+VA6phQsPoAXeEbQEq0Kg2kwRRk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9f:74:df:53:a8:f7:22:67:6b:b5:99:49:44:da:10:51:b4:23:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
        Validity
            Not Before: Sep 10 02:03:57 2026 GMT
            Not After : Sep 11 05:45:57 2026 GMT
        Subject: CN=829C519730BD2DF1BDFAE6E230AC06DE65543F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:66:f8:a8:78:ed:3c:4d:4c:aa:13:89:26:
                    66:f1:9f:be:47:a5:fa:25:f1:a6:aa:a3:37:66:ad:
                    d0:2d:7f:71:35:7d:d8:a0:0d:a2:19:97:a9:b6:dd:
                    35:71:ba:7e:b7:ef:f8:ca:1d:9c:d5:5b:1f:b5:d9:
                    7f:66:be:4d:91:64:ac:64:f4:2e:b1:4a:eb:a3:4b:
                    71:31:68:80:83:32:a5:c3:e8:39:04:3c:20:11:1e:
                    b3:a8:1c:54:65:3c:91:fa:95:4a:e2:43:a1:ed:29:
                    35:48:5d:fa:47:8a:1b:7a:ea:4c:be:02:d6:6a:42:
                    9a:aa:8d:94:2b:f1:cf:06:ac:f2:3b:8a:b8:9a:aa:
                    30:7b:8c:53:1e:24:00:47:e6:bc:3d:fb:e6:46:2c:
                    ea:0e:4e:94:0d:56:92:1d:b5:fe:ce:ce:84:1b:8c:
                    55:4e:83:79:65:37:09:73:9e:91:89:a4:26:58:2f:
                    70:e2:58:ff:09:f3:1d:95:6f:29:14:99:af:91:71:
                    d7:9a:63:bc:72:1d:ea:11:79:ce:5c:8d:15:a8:0c:
                    18:b1:1c:3c:c4:9c:87:9c:f0:5d:1a:84:2a:1c:16:
                    52:fe:ed:b6:0d:f8:24:59:a0:bd:1f:e2:60:13:61:
                    28:78:c0:b1:5b:43:98:f5:4c:ef:c3:ff:cc:9a:a6:
                    6e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9C:51:97:30:BD:2D:F1:BD:FA:E6:E2:30:AC:06:DE:65:54:3F:46
            X509v3 Authority Key Identifier:
                keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:be:4c:a2:cd:b2:b4:e1:2b:b7:d3:31:c8:e1:f9:c9:d4:
         9c:73:37:24:4d:b4:d3:7b:4d:63:34:db:70:84:f2:65:a5:01:
         7f:46:7a:8d:22:df:26:1c:61:af:dd:99:6d:8e:f7:4b:e1:32:
         d7:21:ab:94:06:81:6b:f1:40:98:5a:12:21:6b:62:69:f9:f7:
         73:06:45:d1:c2:b3:22:d9:34:38:1e:8f:18:78:a4:23:6a:55:
         0f:98:fc:20:5b:d8:d4:55:74:c5:a0:d0:72:e9:bd:0f:f3:69:
         08:b5:94:bc:23:e2:e1:a3:89:b2:ac:40:8b:6c:5f:9d:92:04:
         f9:37:cf:f8:35:83:08:5c:65:9f:90:b9:61:70:8b:5e:eb:6e:
         2e:76:dc:8d:cd:d8:7a:bb:d7:3c:bc:98:a0:b7:b5:16:10:f4:
         04:e0:1e:00:02:ca:dd:21:24:10:80:d7:9e:dc:91:f9:29:36:
         03:0e:14:96:dd:a8:d7:05:45:45:20:80:20:0e:e6:6a:0d:76:
         a2:23:20:26:6f:6c:20:ec:bf:85:b8:2d:1f:1b:66:b0:52:4c:
         ca:aa:88:b1:20:06:76:8d:d9:03:2d:55:93:a3:e0:14:f3:60:
         45:08:af:1b:fb:4b:4f:4d:1b:71:20:3a:ad:ba:06:cb:96:b4:
         f6:5c:f5:62
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUY59031Oo9yJna7WZSUTaEFG0I5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG
RjNDMjg1MjAeFw0yNjA5MTAwMjAzNTdaFw0yNjA5MTEwNTQ1NTdaMDMxMTAvBgNV
BAMTKDgyOUM1MTk3MzBCRDJERjFCREZBRTZFMjMwQUMwNkRFNjU1NDNGNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0E2b4qHjtPE1MqhOJJmbxn75H
pfol8aaqozdmrdAtf3E1fdigDaIZl6m23TVxun637/jKHZzVWx+12X9mvk2RZKxk
9C6xSuujS3ExaICDMqXD6DkEPCARHrOoHFRlPJH6lUriQ6HtKTVIXfpHiht66ky+
AtZqQpqqjZQr8c8GrPI7iriaqjB7jFMeJABH5rw9++ZGLOoOTpQNVpIdtf7OzoQb
jFVOg3llNwlznpGJpCZYL3DiWP8J8x2VbykUma+RcdeaY7xyHeoRec5cjRWoDBix
HDzEnIec8F0ahCocFlL+7bYN+CRZoL0f4mATYSh4wLFbQ5j1TO/D/8yapm45AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUgpxRlzC9LfG9+ubiMKwG3mVUP0YwHwYDVR0j
BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx
ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx
NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy
MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANKb5M
os2ytOErt9MxyOH5ydScczckTbTTe01jNNtwhPJlpQF/RnqNIt8mHGGv3ZltjvdL
4TLXIauUBoFr8UCYWhIha2Jp+fdzBkXRwrMi2TQ4Ho8YeKQjalUPmPwgW9jUVXTF
oNBy6b0P82kItZS8I+Lho4myrECLbF+dkgT5N8/4NYMIXGWfkLlhcIte624udtyN
zdh6u9c8vJigt7UWEPQE4B4AAsrdISQQgNee3JH5KTYDDhSW3ajXBUVFIIAgDuZq
DXaiIyAmb2wg7L+FuC0fG2awUkzKqoixIAZ2jdkDLVWTo+AU82BFCK8b+0tPTRtx
IDqtugbLlrT2XPVi
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:27:31 2026 by rpki-client