Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
File:                     9B848163C7049122702E8D37941241ED5ADD94D9.mft (raw, json)
Hash identifier:          OweMwsYOB0mymNZITWkl0r5h6YfdlMiI6SEf0jjNDeE=
Subject key identifier:   DA:9C:8D:24:3F:CC:84:F5:17:DE:EC:FE:6D:73:86:F9:95:CF:DB:98
Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Certificate issuer:       /CN=9B848163C7049122702E8D37941241ED5ADD94D9
Certificate serial:       30DB6752E4FEAF9F348B1FCE8B7BBC38C2363730
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
Manifest number:          76
Signing time:             Wed 25 Mar 2026 02:34:07 +0000
Manifest this update:     Wed 25 Mar 2026 02:29:07 +0000
Manifest next update:     Thu 26 Mar 2026 04:48:07 +0000
Files and hashes:         1: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (hash: aFhwRSDU+t/TQvGHJmF4CgULB5DA6EuNIybmGsacNPY=)
                          2: 326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa (hash: QxJbzcNlut2XGQpfjiGDY/VAY9MqONp8dnDCfca/jtE=)
                          3: 326131343a373538303a633030303a3a2f34302d3430203d3e20323130343634.roa (hash: BZx4A+1lDPAS1ebt61e3ltRE332soDf255t2tHvVUu8=)
                          4: 326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa (hash: SkZGavhoTJC5ic0mJF3ZGqoq5jWXKF9H+0oYVlFuDaQ=)
                          5: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (hash: 6HRIzRgoHlrwDg0x+dQ+QTPqwbR2buVOX5nau8igN3A=)
                          6: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (hash: u9LwYErQUKmq8o1Cp9FlrT7DQfjHnm37GLoiMAQKUWk=)
                          7: 326131343a373538333a3a2f33392d3438203d3e20323130343634.roa (hash: vW1fGYMrYSYz3dMO9eci0Q6WugN6uOArURnsJ7uQq7I=)
                          8: 326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa (hash: mmfp1swzQs8+dv25AiJSqWincq1kV1e/VcrkZp1tcVY=)
                          9: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (hash: lZqMqZa8igc4AoCDRmP6SzhiPgp0yN3qUzgnbipm9bo=)
                          10: 326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa (hash: 966xfzbp7XI2tIIl6RtKV8fWr+EKvskhBHx3zk5WK2Y=)
                          11: 9B848163C7049122702E8D37941241ED5ADD94D9.crl (hash: EFJAp3ZVUuPizTdmMLn4N+ub2MhkbYUxF8LKhZd+VDE=)
                          12: 326131343a373538303a636630303a3a2f34302d3438203d3e20323130343634.roa (hash: SE8E6a3ZD0LK5ZlZINe9eNIZjVQ9JR0AtsvzDG1ugzg=)
                          13: 326131343a373538333a3230303a3a2f33392d3438203d3e20323130343634.roa (hash: xKU1YO819a7VQTTpF+nB40wFij16/Jgq+O6qShtQ1sQ=)
                          14: 326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa (hash: txMtmYCSrCjAQUsz3jwIOMVv2WDfMNs3rFGjXdQ1uHI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 04:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:db:67:52:e4:fe:af:9f:34:8b:1f:ce:8b:7b:bc:38:c2:36:37:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9
        Validity
            Not Before: Mar 25 02:29:07 2026 GMT
            Not After : Mar 26 04:48:07 2026 GMT
        Subject: CN=DA9C8D243FCC84F517DEECFE6D7386F995CFDB98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:71:50:b1:f6:0e:d7:8f:9f:fb:1e:df:c3:
                    1e:a6:37:df:5d:3f:30:04:6f:ca:1f:bc:ac:ec:2f:
                    e1:ea:bf:37:11:0b:34:ed:23:77:c2:52:03:0f:dd:
                    af:4b:21:56:63:76:e1:c6:b5:cc:61:a3:ff:2c:71:
                    d3:12:c8:34:f8:fa:16:39:e1:f1:93:8e:1a:9d:6d:
                    19:d2:1b:2a:bf:ec:e1:da:b6:a6:ab:67:94:01:6b:
                    55:1b:61:97:8c:91:97:d2:b5:b5:0f:d5:00:94:6a:
                    4b:98:0f:b4:36:de:3e:c0:3a:83:3c:20:2e:32:d0:
                    ee:cf:a1:00:d7:eb:bb:19:1f:ae:f1:14:a1:44:65:
                    6e:f6:54:b8:f1:ee:f1:76:d5:62:c9:1a:08:d5:33:
                    b3:72:09:9f:8d:70:12:d0:c7:aa:06:78:2d:4b:03:
                    ad:e0:a8:e8:52:80:33:1a:4f:65:39:63:30:20:58:
                    23:67:33:eb:e7:ca:12:6b:31:5d:fc:46:ff:24:d5:
                    48:b5:0f:b9:01:15:78:cf:e2:78:f9:f3:41:66:7b:
                    eb:84:9e:c7:93:da:83:7a:d1:f9:15:3d:7f:cc:fa:
                    37:e4:87:47:b8:08:de:57:b3:c0:40:54:b3:bf:6b:
                    32:71:3f:ab:55:e6:f8:86:0f:f5:af:c6:99:6d:db:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9C:8D:24:3F:CC:84:F5:17:DE:EC:FE:6D:73:86:F9:95:CF:DB:98
            X509v3 Authority Key Identifier:
                keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:db:70:d7:cd:11:f9:9e:fa:13:08:48:60:bc:82:76:67:b3:
         9d:5b:f3:ae:10:74:ae:dc:73:12:20:35:8e:10:ef:5e:db:82:
         36:98:ff:fb:71:56:17:2a:85:6d:5f:8d:ae:c6:cc:34:58:16:
         95:e0:84:29:fe:c6:a3:63:e3:5b:1a:98:f9:30:1d:54:7c:41:
         d9:b7:0e:81:b0:3a:95:5a:47:71:66:7f:bc:8d:b6:5b:5b:fa:
         86:3d:8f:a2:73:de:e8:ee:89:63:4a:20:f6:c5:64:e8:ea:dd:
         0e:ce:54:57:d4:55:92:65:0a:4d:f9:ed:4f:8b:56:76:ab:0c:
         9e:2a:aa:c1:49:23:ab:f4:f1:8c:a4:f3:86:59:c2:fe:cb:4b:
         70:4a:28:15:88:15:60:ef:60:01:93:fb:c1:7d:86:28:e7:f0:
         b2:e5:79:30:e1:b0:3b:a4:02:3a:7c:e1:e0:9f:b5:77:bc:bb:
         95:23:36:61:5d:ae:75:65:6b:ba:81:19:4d:bf:c7:4c:72:d3:
         db:93:23:40:47:0c:fc:fc:60:85:6c:0d:6a:a9:51:55:7d:83:
         a4:0d:ea:9f:e3:34:3e:5a:ee:65:15:2b:d7:2a:c5:12:e0:45:
         7c:76:c6:df:d3:91:d0:6b:fd:f6:51:ee:a0:d8:fe:b0:13:59:
         63:25:f4:88
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUMNtnUuT+r580ix/Oi3u8OMI2NzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1
QUREOTREOTAeFw0yNjAzMjUwMjI5MDdaFw0yNjAzMjYwNDQ4MDdaMDMxMTAvBgNV
BAMTKERBOUM4RDI0M0ZDQzg0RjUxN0RFRUNGRTZENzM4NkY5OTVDRkRCOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClcHFQsfYO14+f+x7fwx6mN99d
PzAEb8ofvKzsL+HqvzcRCzTtI3fCUgMP3a9LIVZjduHGtcxho/8scdMSyDT4+hY5
4fGTjhqdbRnSGyq/7OHatqarZ5QBa1UbYZeMkZfStbUP1QCUakuYD7Q23j7AOoM8
IC4y0O7PoQDX67sZH67xFKFEZW72VLjx7vF21WLJGgjVM7NyCZ+NcBLQx6oGeC1L
A63gqOhSgDMaT2U5YzAgWCNnM+vnyhJrMV38Rv8k1Ui1D7kBFXjP4nj580Fme+uE
nseT2oN60fkVPX/M+jfkh0e4CN5Xs8BAVLO/azJxP6tV5viGD/Wvxplt281lAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU2pyNJD/MhPUX3uz+bXOG+ZXP25gwHwYDVR0j
BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi
MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5
NDEyNDFFRDVBREQ5NEQ5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzZjNDNkM2E2LTdkMTMtNDg5NS05NTlkLTQxOWI5YTZlYjM0Yi8zLzlCODQ4MTYz
QzcwNDkxMjI3MDJFOEQzNzk0MTI0MUVENUFERDk0RDkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAl23DX
zRH5nvoTCEhgvIJ2Z7OdW/OuEHSu3HMSIDWOEO9e24I2mP/7cVYXKoVtX42uxsw0
WBaV4IQp/sajY+NbGpj5MB1UfEHZtw6BsDqVWkdxZn+8jbZbW/qGPY+ic97o7olj
SiD2xWTo6t0OzlRX1FWSZQpN+e1Pi1Z2qwyeKqrBSSOr9PGMpPOGWcL+y0twSigV
iBVg72ABk/vBfYYo5/Cy5Xkw4bA7pAI6fOHgn7V3vLuVIzZhXa51ZWu6gRlNv8dM
ctPbkyNARwz8/GCFbA1qqVFVfYOkDeqf4zQ+Wu5lFSvXKsUS4EV8dsbf05HQa/32
Ue6g2P6wE1ljJfSI
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:25:52 2026 by rpki-client