Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft
File:                     FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft (raw, json)
Hash identifier:          TNcw6m7pTEjvl2ug53OFDW827HixFcE8X58qmqspva0=
Subject key identifier:   D4:4A:16:BE:A8:13:C7:4C:E6:88:A4:06:23:0B:70:BD:89:81:58:EA
Authority key identifier: FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54
Certificate issuer:       /CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54
Certificate serial:       73495D037B3E7F58595CA8BA764635BED0221790
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft
Manifest number:          58
Signing time:             Thu 26 Mar 2026 04:52:12 +0000
Manifest this update:     Thu 26 Mar 2026 04:47:12 +0000
Manifest next update:     Fri 27 Mar 2026 05:18:12 +0000
Files and hashes:         1: 326131343a373538303a666134303a3a2f34342d3438203d3e20323134333434.roa (hash: D26rbX3psrVmaD+T/bDXuaJV8uOWmhZNX1TYvDQmeqo=)
                          2: FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl (hash: 94znfi+5LfUh82CxXjaJ2JRJfA/zKm5B+qtww9vTAk4=)
                          3: 326131343a373538303a666133303a3a2f34342d3438203d3e20323134333434.roa (hash: lZi2rz69yJ2BC+doYbaqrHrJGm4sWCLa8BxeQ92G0Hs=)
                          4: 326131343a373538303a666131303a3a2f34342d3438203d3e20323134333434.roa (hash: t0fyMS70w2sKbXm+rw7xWIunJVCWcYTOkdarqGuSj1I=)
                          5: 326131343a373538303a666132303a3a2f34342d3438203d3e20323134333434.roa (hash: q8V2y9WUGOeaflB9on/TGNr/ZKQwKQK7OMK/V1fxCUE=)
                          6: 326131343a373538303a666130303a3a2f34342d3438203d3e20323134333434.roa (hash: UqCNzDGtU5aD3Sfhq0hDlqQDB4EqJwXqpH7M/ZgJ89U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:49:5d:03:7b:3e:7f:58:59:5c:a8:ba:76:46:35:be:d0:22:17:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54
        Validity
            Not Before: Mar 26 04:47:12 2026 GMT
            Not After : Mar 27 05:18:12 2026 GMT
        Subject: CN=D44A16BEA813C74CE688A406230B70BD898158EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:8e:6e:07:cb:cb:58:24:4e:5d:fd:42:f8:
                    d4:fc:e4:8b:fc:b5:c0:f2:da:7c:77:e9:15:b1:7a:
                    05:d5:d9:a4:06:e5:cd:4a:2e:f3:ff:6f:a4:52:26:
                    aa:ce:ef:37:d6:58:45:26:31:d9:c9:11:89:f6:e9:
                    dd:b1:ff:c9:d5:e1:f9:b9:74:d0:67:e6:28:e8:c7:
                    63:77:93:b6:bc:fd:d0:33:b5:fe:af:00:4f:37:6c:
                    ec:23:08:3f:02:f8:5b:bb:94:35:0e:11:b5:1f:92:
                    9d:3b:7f:59:6a:c1:d9:79:8b:10:0d:5a:e8:57:03:
                    d0:0f:2c:42:bb:52:7c:c4:68:70:ff:93:47:db:4c:
                    5b:d5:6b:2f:c3:1b:4d:10:ff:ed:2a:f6:89:60:d6:
                    12:b1:6b:69:15:4a:0e:34:b8:3e:9c:13:ee:5e:3a:
                    7b:d0:b7:5e:6a:86:d1:7f:ad:dc:4f:fb:e8:bc:c8:
                    95:35:0e:8b:54:b8:d4:6d:cf:29:a9:7e:11:13:ab:
                    8c:15:6c:d3:7f:b4:f3:1a:74:91:a3:68:9f:9d:c4:
                    52:c1:24:a4:3b:f6:a9:81:6b:19:40:e5:25:f1:f8:
                    07:11:f0:a5:dd:7b:62:01:91:1a:90:0d:cf:ad:5d:
                    e1:98:f1:fe:0c:48:ad:3a:18:20:10:4d:cf:a0:da:
                    8c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4A:16:BE:A8:13:C7:4C:E6:88:A4:06:23:0B:70:BD:89:81:58:EA
            X509v3 Authority Key Identifier:
                keyid:FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:36:66:00:20:e9:03:25:64:89:eb:29:f3:2d:ce:6a:0b:
         a8:06:d5:90:19:91:b5:70:30:1c:1a:9d:c9:36:33:8c:df:40:
         5a:d8:f5:41:bb:63:0a:17:03:38:41:85:00:9a:a5:15:eb:27:
         9d:fd:1c:16:ee:47:bd:01:13:9b:f8:d5:60:cc:11:24:a7:fe:
         6f:54:88:80:ae:5f:5a:5c:3a:f9:c5:38:39:00:bb:c0:39:80:
         0c:6d:02:be:4f:b8:e3:a8:76:90:fb:74:14:46:99:3b:2e:f4:
         92:97:08:1d:9c:52:86:85:c6:e6:dd:58:65:55:e6:6e:52:8e:
         b3:5c:dc:04:4d:e9:c9:59:4b:85:c6:ea:53:c4:b4:f1:01:b7:
         e0:16:05:78:e1:ad:d8:44:93:cb:c7:5e:ab:a6:48:04:e8:cb:
         21:14:f6:41:bc:d3:4c:b5:b8:5c:e1:60:a3:2b:47:97:44:12:
         81:e4:b8:01:f9:c7:f3:50:c9:e0:2b:af:7b:fe:85:5a:0f:b1:
         3b:1b:5e:27:d9:0a:97:47:ac:31:37:1a:7b:10:5d:8b:81:9b:
         65:03:4e:43:47:24:1d:37:a1:17:cc:8a:95:93:56:4d:d4:76:
         89:55:2e:80:eb:6b:8c:33:2a:8e:3c:0a:05:e9:bc:8d:59:37:
         1c:f8:e8:03
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUc0ldA3s+f1hZXKi6dkY1vtAiF5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVF
QzFFQ0U1NDAeFw0yNjAzMjYwNDQ3MTJaFw0yNjAzMjcwNTE4MTJaMDMxMTAvBgNV
BAMTKEQ0NEExNkJFQTgxM0M3NENFNjg4QTQwNjIzMEI3MEJEODk4MTU4RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSuI5uB8vLWCROXf1C+NT85Iv8
tcDy2nx36RWxegXV2aQG5c1KLvP/b6RSJqrO7zfWWEUmMdnJEYn26d2x/8nV4fm5
dNBn5ijox2N3k7a8/dAztf6vAE83bOwjCD8C+Fu7lDUOEbUfkp07f1lqwdl5ixAN
WuhXA9APLEK7UnzEaHD/k0fbTFvVay/DG00Q/+0q9olg1hKxa2kVSg40uD6cE+5e
OnvQt15qhtF/rdxP++i8yJU1DotUuNRtzympfhETq4wVbNN/tPMadJGjaJ+dxFLB
JKQ79qmBaxlA5SXx+AcR8KXde2IBkRqQDc+tXeGY8f4MSK06GCAQTc+g2ozNAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU1EoWvqgTx0zmiKQGIwtwvYmBWOowHwYDVR0j
BBgwFoAU/vNPsBh1CV7aVuFVR0bSpewezlQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2
ZDE1LzQvRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVFQzFFQ0U1NC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRUYzNEZCMDE4NzUwOTVFREE1NkUxNTU0
NzQ2RDJBNUVDMUVDRTU0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS80L0ZFRjM0RkIw
MTg3NTA5NUVEQTU2RTE1NTQ3NDZEMkE1RUMxRUNFNTQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKRzZm
ACDpAyVkiesp8y3OaguoBtWQGZG1cDAcGp3JNjOM30Ba2PVBu2MKFwM4QYUAmqUV
6yed/RwW7ke9AROb+NVgzBEkp/5vVIiArl9aXDr5xTg5ALvAOYAMbQK+T7jjqHaQ
+3QURpk7LvSSlwgdnFKGhcbm3VhlVeZuUo6zXNwETenJWUuFxupTxLTxAbfgFgV4
4a3YRJPLx16rpkgE6MshFPZBvNNMtbhc4WCjK0eXRBKB5LgB+cfzUMngK697/oVa
D7E7G14n2QqXR6wxNxp7EF2LgZtlA05DRyQdN6EXzIqVk1ZN1HaJVS6A62uMMyqO
PAoF6byNWTcc+OgD
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:39:42 2026 by rpki-client