Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File:                     8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier:          MOMo7MKODlA4UXJSt0qPOZQ06aukxwtCs/L8a+d5gm8=
Subject key identifier:   49:5E:1D:8E:49:25:D8:75:72:39:FA:A3:8A:59:72:D4:DB:E5:AF:9D
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       070F746DEE1162E68CFD04ECAFA95546E0719747
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number:          0354
Signing time:             Wed 25 Mar 2026 18:45:07 +0000
Manifest this update:     Wed 25 Mar 2026 18:40:07 +0000
Manifest next update:     Thu 26 Mar 2026 19:34:07 +0000
Files and hashes:         1: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: iVSqmJC3EENf/XVlR6YpWn7MgLMOJzCIs/ETJKcPCZ0=)
                          2: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: TeM7Pek2amM1UgjzSeE/qaGScbmirVVYpr/gbbLkRM4=)
                          3: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs=)
                          4: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: MBbahVlOUY0BFTONMtnmzy3HTHvtjPISBdqoM0Cyb4U=)
                          5: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: 8xEoc2WbgF3aR/A4BmGA/5swJlN4eULU8RI9MBQf5A8=)
                          6: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=)
                          7: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=)
                          8: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=)
                          9: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: GiP4GD8ggd65aZhgm+mIHhBgcxctP4oM9yKA+INTEK4=)
                          10: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: Yud6VyEfzu6bUn3ZGGTJfpmlFiOU2yKLbFt5IH7TKH4=)
                          11: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 2UDjxG4RlvjPmviPQqGqAVVrCPWdscmfmRM0j7DODko=)
                          12: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=)
                          13: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=)
                          14: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=)
                          15: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=)
                          16: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 6pSA0kSz3996g9/BXeNESbR6lV0s0HcQ+D2Slss3z5w=)
                          17: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=)
                          18: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=)
                          19: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: a74YsL1qU7MZs6Id2KBnat9Mk42FfInZrWbOj9uOpkE=)
                          20: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: MTFWGoIiiByo/hIxGmD29Tdnz//Oiwt7TZbmOqFYGH0=)
                          21: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0f:74:6d:ee:11:62:e6:8c:fd:04:ec:af:a9:55:46:e0:71:97:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Mar 25 18:40:07 2026 GMT
            Not After : Mar 26 19:34:07 2026 GMT
        Subject: CN=495E1D8E4925D8757239FAA38A5972D4DBE5AF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:14:ea:bd:ac:88:dd:bb:46:1f:ac:4e:7f:73:
                    7a:ba:16:04:bf:a5:84:1d:c5:8d:f8:91:83:7e:3a:
                    89:2c:0d:e5:05:c4:4f:6f:21:7b:39:9e:06:fa:01:
                    73:06:02:39:94:2d:18:06:17:bc:be:5f:04:5c:bd:
                    6a:8b:3e:d3:5b:2f:ba:98:2c:6e:28:4d:ec:97:b9:
                    8a:02:58:2e:54:ca:7c:98:1f:2c:63:2a:6a:58:42:
                    85:ab:91:f5:f6:ff:47:bb:d4:2f:7f:88:98:d4:1b:
                    d2:ce:c7:e3:00:42:dd:32:2f:94:72:15:d2:02:26:
                    f6:6f:65:7c:65:10:a6:a2:a4:d8:f6:30:3d:29:2e:
                    1e:ed:17:05:11:1a:28:e0:c5:ed:b8:87:e5:5c:8c:
                    f3:27:18:3f:17:7c:33:f3:e5:ae:1a:28:69:72:30:
                    8c:b1:fc:b7:7b:ca:cd:25:fc:3c:1b:78:43:27:07:
                    53:91:8d:d3:20:cb:01:af:cf:4f:94:66:18:91:86:
                    62:79:01:d3:29:ab:4c:e2:5c:d3:59:10:4c:02:41:
                    90:cd:c0:1d:f4:76:72:56:53:0d:3c:da:08:34:b1:
                    f7:1b:37:aa:0b:c0:ea:3c:84:3a:60:f4:02:b0:91:
                    61:be:9c:0c:c5:6f:66:0b:37:e0:1c:5b:19:e6:a0:
                    99:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5E:1D:8E:49:25:D8:75:72:39:FA:A3:8A:59:72:D4:DB:E5:AF:9D
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a7:2f:85:af:c8:21:06:c6:cd:13:15:a0:1d:dc:9d:21:e8:
         d7:2b:a0:c1:d9:57:01:7d:20:c7:22:be:8b:47:d5:29:50:f6:
         3e:cc:66:e0:d0:f6:f0:39:ec:53:79:b1:f5:04:60:f0:0b:41:
         5f:bd:10:19:fe:f9:65:bc:f9:7f:98:3b:ff:5f:b6:f7:ff:75:
         55:e0:fd:31:0e:54:16:97:15:da:2e:8a:a6:88:44:0e:58:dd:
         19:7d:c6:0d:a2:be:50:3c:9d:7e:23:4b:40:d1:83:1b:38:70:
         20:96:75:68:2b:41:12:d2:70:8a:48:30:1b:65:82:d4:3c:a1:
         5b:7e:2d:53:4d:50:e9:61:a9:aa:4f:1d:43:0d:27:78:12:ef:
         d2:f1:45:d6:1f:f3:25:2d:84:fb:1b:bc:31:7f:0c:7e:dd:cb:
         9f:ec:5d:e1:09:f2:94:1b:20:1d:f9:69:4e:5f:55:70:ce:2a:
         74:e0:a5:bd:86:cc:3e:39:9a:b5:de:41:28:c9:e1:a4:64:3f:
         a6:1e:c3:08:e4:80:62:a0:43:b9:24:f1:9e:0e:65:75:c4:43:
         65:87:e5:e5:24:d7:00:08:61:bc:5e:22:eb:4d:87:35:92:25:
         cf:78:08:99:6e:81:3a:90:ae:bc:1c:ed:bd:01:53:bc:c7:16:
         5b:3a:79:60
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUBw90be4RYuaM/QTsr6lVRuBxl0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF
MEFGQjM4QzAeFw0yNjAzMjUxODQwMDdaFw0yNjAzMjYxOTM0MDdaMDMxMTAvBgNV
BAMTKDQ5NUUxRDhFNDkyNUQ4NzU3MjM5RkFBMzhBNTk3MkQ0REJFNUFGOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvFOq9rIjdu0YfrE5/c3q6FgS/
pYQdxY34kYN+OoksDeUFxE9vIXs5ngb6AXMGAjmULRgGF7y+XwRcvWqLPtNbL7qY
LG4oTeyXuYoCWC5UynyYHyxjKmpYQoWrkfX2/0e71C9/iJjUG9LOx+MAQt0yL5Ry
FdICJvZvZXxlEKaipNj2MD0pLh7tFwURGijgxe24h+VcjPMnGD8XfDPz5a4aKGly
MIyx/Ld7ys0l/DwbeEMnB1ORjdMgywGvz0+UZhiRhmJ5AdMpq0ziXNNZEEwCQZDN
wB30dnJWUw082gg0sfcbN6oLwOo8hDpg9AKwkWG+nAzFb2YLN+AcWxnmoJmLAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUSV4djkkl2HVyOfqjilly1Nvlr50wHwYDVR0j
BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4
NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE
QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD
NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnpy+F
r8ghBsbNExWgHdydIejXK6DB2VcBfSDHIr6LR9UpUPY+zGbg0PbwOexTebH1BGDw
C0FfvRAZ/vllvPl/mDv/X7b3/3VV4P0xDlQWlxXaLoqmiEQOWN0ZfcYNor5QPJ1+
I0tA0YMbOHAglnVoK0ES0nCKSDAbZYLUPKFbfi1TTVDpYamqTx1DDSd4Eu/S8UXW
H/MlLYT7G7wxfwx+3cuf7F3hCfKUGyAd+WlOX1Vwzip04KW9hsw+OZq13kEoyeGk
ZD+mHsMI5IBioEO5JPGeDmV1xENlh+XlJNcACGG8XiLrTYc1kiXPeAiZboE6kK68
HO29AVO8xxZbOnlg
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:08:59 2026 by rpki-client