Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
File:                     702B79B445330AC21D237308277A4472598CE771.mft (raw, json)
Hash identifier:          xO53w/K+vXDhMND58r2bQyZI087xDVg3+wvmLazUunI=
Subject key identifier:   39:9F:A3:CB:1E:4E:99:39:EA:C4:AF:7B:04:FA:16:0F:51:A4:65:CA
Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71
Certificate issuer:       /CN=702B79B445330AC21D237308277A4472598CE771
Certificate serial:       37DBA3E3F5020275D506F7F5BA028A79FB4486BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
Manifest number:          0137
Signing time:             Wed 25 Mar 2026 18:29:19 +0000
Manifest this update:     Wed 25 Mar 2026 18:24:19 +0000
Manifest next update:     Thu 26 Mar 2026 19:45:19 +0000
Files and hashes:         1: 326131343a373538333a663730393a3a2f34382d3438203d3e20323134393535.roa (hash: ody+MZu+p9r7722qUv+nib+WdzL08bt7JIhdIl0nBOM=)
                          2: 326131343a373538333a663730633a3a2f34382d3438203d3e20323134393535.roa (hash: MCTGvJAm8U3NtPMr0TfqstCKnf65Svz4B5aqt1Vg4GE=)
                          3: 326131343a373538333a663730363a3a2f34382d3438203d3e20323134393535.roa (hash: HF0IXoiIoV1vsEb3Y7UE6hceXgn4rnvPt86H7Wi7oFU=)
                          4: 326131343a373538333a663734343a3a2f34382d3438203d3e20323134393535.roa (hash: 2S+JbymcjIynwfVZAKfR00rXladCcxDgshwKEZR1YsA=)
                          5: 326131343a373538333a663730333a3a2f34382d3438203d3e20323134393535.roa (hash: 9+boFqIS6keyE5RNh9z/i3/Vy3fO+EE8pDJc8uN4NyQ=)
                          6: 326131343a373538303a666666613a3a2f34382d3438203d3e20323134393535.roa (hash: h/rRMvyqafFU+yTlCYjO1aoLzPvMYTq8Atefyqn1aw8=)
                          7: 326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa (hash: zM36/OphB/KbTgVAZhJZfKncuog5pc9Z90qFovwCspo=)
                          8: 326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa (hash: F//u8b8URxPoSW5tKZ7gI7LWdU+B7yQQrxeBR/nXITQ=)
                          9: 702B79B445330AC21D237308277A4472598CE771.crl (hash: ECALk3ZvSfT0oZrwASnNTRkoEkDazn/OLvqy9ADpB34=)
                          10: 326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa (hash: GR7y7aRgVAUP5lUmI8IZDhrv8mAyuuXgZxhshW1ruYs=)
                          11: 326131343a373538333a663730623a3a2f34382d3438203d3e20323134393535.roa (hash: kLF1pGobCPtSBqVgUGHgu1by1e7kkegKpHMRpd10cN0=)
                          12: 326131343a373538333a663730313a3a2f34382d3438203d3e20323134393535.roa (hash: RzicPZXer6PLdeFy+vOsancgSNcjrm95+RPOXY7LoDc=)
                          13: 326131343a373538333a663730613a3a2f34382d3438203d3e20323134393535.roa (hash: KrncfgwV2JNmUMMX9XTAiUcGcVNG82mQHu5/P0lF/YQ=)
                          14: 326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa (hash: KKLY1zCTXfmGMrjDFuT7b/5dqeecgqHT0wX+vU1j/NU=)
                          15: 326131343a373538333a663730353a3a2f34382d3438203d3e20323134393535.roa (hash: v1ff3/5opCg79B8vnRLLf35N5RlDFleXR6jWqIzcy+A=)
                          16: 326131343a373538333a663730323a3a2f34382d3438203d3e20323134393535.roa (hash: j1h3rUtpYcXTQ9tg2+zKR1MIHOPPCpnwfhKyK3a6mSc=)
                          17: 326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa (hash: s15NOBRzlJhT8Ilr0QxZxBoPvIfuNlcjTL4p1JyK0Rg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:db:a3:e3:f5:02:02:75:d5:06:f7:f5:ba:02:8a:79:fb:44:86:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702B79B445330AC21D237308277A4472598CE771
        Validity
            Not Before: Mar 25 18:24:19 2026 GMT
            Not After : Mar 26 19:45:19 2026 GMT
        Subject: CN=399FA3CB1E4E9939EAC4AF7B04FA160F51A465CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:24:47:e7:f8:0b:df:21:03:30:f4:a8:8c:
                    f8:d8:66:1c:4e:d8:b7:ab:8c:4d:53:59:98:65:3f:
                    a3:30:22:5c:76:3c:44:e6:b8:ba:fd:43:59:29:39:
                    7e:ca:87:fd:c8:7c:5d:fb:d8:49:82:92:a5:83:d1:
                    0e:24:b7:bb:b5:cc:21:d4:a1:0f:2b:43:2f:f1:02:
                    dc:26:55:86:c0:ae:5b:b6:f1:20:4a:f7:5b:5a:e7:
                    4f:02:56:95:88:46:1b:1d:41:a3:29:2e:4b:14:d5:
                    6e:62:01:7f:71:fc:78:bb:66:92:0d:c3:ad:90:e7:
                    c6:2f:15:a8:64:6b:33:1d:e4:3a:14:f7:21:ea:fd:
                    fd:01:64:4e:73:38:6e:be:79:84:26:3d:22:15:e3:
                    e6:4c:1d:38:b4:14:30:be:b3:bf:40:a9:ff:3c:97:
                    7d:14:f5:9b:19:3e:b5:bd:7d:fc:50:d2:1d:ed:de:
                    15:5c:55:35:96:69:49:db:fa:cd:8d:6b:e4:e0:90:
                    2f:3d:c1:16:77:c6:bb:07:dc:b8:92:f6:51:b0:48:
                    2f:70:e5:fc:a8:78:17:99:bd:20:3e:d4:1c:67:58:
                    cd:d9:4f:1d:a0:00:89:54:7d:1b:bc:0b:18:75:8a:
                    56:f0:7d:32:b7:1d:ca:3b:f7:9a:96:c8:4a:94:f1:
                    2a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9F:A3:CB:1E:4E:99:39:EA:C4:AF:7B:04:FA:16:0F:51:A4:65:CA
            X509v3 Authority Key Identifier:
                keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d5:5e:66:de:99:f1:1b:a3:20:2d:d3:45:0c:9b:5e:6c:1e:
         82:a3:d4:6b:87:c0:cd:d5:91:e2:59:a3:42:16:89:5b:c4:47:
         0d:a0:87:3c:e1:ae:31:63:9e:45:4d:53:65:c4:ca:2c:df:23:
         21:48:2e:76:c3:fc:4a:9e:71:fc:7b:67:7b:8c:f5:c6:a9:a2:
         3a:58:f1:46:24:ad:d8:bf:b0:d8:35:ee:77:f5:66:c2:f7:08:
         85:65:5c:c6:52:94:9d:bc:c3:99:82:61:b1:ec:62:fb:97:f1:
         ac:77:c9:27:b7:27:c0:a7:37:88:c5:b1:e2:29:7a:ee:63:0c:
         67:ad:07:74:de:7a:ed:55:17:c3:51:c6:e6:81:a4:ba:00:76:
         1e:d4:77:8e:18:94:20:cc:77:eb:f2:d3:26:7f:04:92:54:3d:
         bd:07:46:88:7b:15:a5:d0:ce:61:bf:c9:00:ee:34:d4:b6:af:
         d2:1b:5a:ff:a1:e9:89:1b:ea:14:f4:a1:f0:12:1c:cb:53:11:
         b4:77:a3:24:97:68:2b:89:f4:61:32:b4:77:2d:59:1a:68:37:
         7e:2b:58:73:73:e2:b4:d6:71:88:94:a3:ab:4a:b4:56:5b:da:
         94:18:c7:10:03:dd:f4:c5:40:ef:35:1a:f8:90:1b:9c:29:0f:
         e5:fb:54:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:20 2026 by rpki-client