Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
File:                     0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json)
Hash identifier:          VP530UlXez+GNWadP0qYtjoSuz7syjaq82yYX8pw4eU=
Subject key identifier:   EB:08:10:8F:27:10:84:A7:DC:55:57:0A:89:C7:72:EF:A5:90:2F:31
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Certificate issuer:       /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial:       24364B2C63C9335E254984450739EA9F049B511B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
Manifest number:          02C6
Signing time:             Wed 25 Mar 2026 15:48:24 +0000
Manifest this update:     Wed 25 Mar 2026 15:43:24 +0000
Manifest next update:     Thu 26 Mar 2026 17:02:24 +0000
Files and hashes:         1: 3139342e33342e3235342e302f32342d3234203d3e203531383532.roa (hash: za0HM3w55tiDFbhPrhUh3FtVd5oKhUm8JuFZ8lH0DiA=)
                          2: 33312e39392e3230362e302f32342d3234203d3e20323130343935.roa (hash: OC80Hx5Gq1jN6Ym5UmCqnC8fGlp8VQazYJOfXpnB8WU=)
                          3: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: 8P4uGD+ptL/fQEc8ZoC5YID8OHFdBBDHU22fzQmooXk=)
                          4: 3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa (hash: cvWbud/Q3B4zVr3PrPYyxiTjcQyvCffxgDgg+5VMZYE=)
                          5: 3139342e33342e3235322e302f32342d3234203d3e203439353831.roa (hash: CdOWg7XQ7TdzzLDF2E3vbhyf4TDBRs7VuKir2QIc0i4=)
                          6: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: PbuFJWIaFPfS/fUezjEhjeDUJ1OpDE0MDCs7HAI2pDY=)
                          7: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: WxHcRq5WCH3YmKS5+Il6T1ro4Oc3AucTAyVboxN6cYg=)
                          8: 3135302e3235312e3233302e302f32342d3234203d3e20323134363638.roa (hash: 5oRkZNHY5jOHApMzLJhjusPpBUXkcMRnJe0gClp6VvQ=)
                          9: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: A919/Bekrj6rZbVlRAQ3zY8i9Bm4Qio6XVxQpWLOfQM=)
                          10: 3138352e3231332e3234382e302f32342d3234203d3e203231383539.roa (hash: l5LzFYeAYRpBxI6rZTLSPCbjfPY+STOvzGpAtsNNCfk=)
                          11: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=)
                          12: 33312e39392e3230372e302f32342d3234203d3e20323030393139.roa (hash: Sx4gimOMm/cDt00enlx4Don8b0BAMFnFutmPQSumeeM=)
                          13: 33312e39392e3230322e302f32342d3234203d3e20323133363530.roa (hash: 0Bngyrmrdfz47mx/mnuSCDuWlf2EDWIUujRrINoh4uI=)
                          14: 3139352e35382e3132382e302f32342d3234203d3e20313534343130.roa (hash: RxPbGdVcIdjdwkjs58U3mqMtmyfPB5WvnfJBAZ/JiWM=)
                          15: 3139352e35382e3134352e302f32342d3234203d3e203137343333.roa (hash: eHTOtIuDBTIVqfM4qOnIATmNiGNzwSelAsR/FAYQ0kQ=)
                          16: 3138352e3231332e3234382e302f32342d3234203d3e2037353336.roa (hash: 3Ow4dhqcQd/FeupsTtXE+3P69G/MvUe02J04AXHX428=)
                          17: 38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa (hash: Mdj3IIZJ097ibJGhSOfHP4GOBLdG4jAp1zNpVSxesFg=)
                          18: 33312e39392e3230302e302f32342d3234203d3e20323032303736.roa (hash: 9aCU0WrowHQDEddqo+4gFdH5kjWR15/2+hM8MI1EWF8=)
                          19: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=)
                          20: 3139352e35382e3134342e302f32342d3234203d3e20313938303837.roa (hash: yv5KHuxJ7GUJMda2TuZyOF1TkQigXEfccqGNah7Vf+c=)
                          21: 3139352e35382e3134392e302f32342d3234203d3e203633313939.roa (hash: 9jUqhgLq8QIEEJxJiMALs0wsvhfDs1EJyMuRSJoW+38=)
                          22: 3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa (hash: iQ9RYSqOmsvIqARX4nqI9wEFn//drkKsHCDo7XaSdTU=)
                          23: 3139352e35382e3132392e302f32342d3234203d3e20313534343130.roa (hash: 719pz1J2M9LBzXYfxJZD7IOABsm+fjKN2rYOrlfaeGU=)
                          24: 3139352e35382e3134342e302f32342d3234203d3e203332383738.roa (hash: qHIHvPNlCIdk61FIk0B9gnFq0+9BXxWoP+p4QKGLamE=)
                          25: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: GEbFfS+LLMgocx0zl/qOrB6oO+BgTD8IsbF49GAbNus=)
                          26: 3135302e3235312e3232342e302f32342d3234203d3e20323134303235.roa (hash: XyD5J0WH/sjYz14lGhzyoY5+Ij2l+T4JX6OVkLo4EQo=)
                          27: 3135302e3235312e3232392e302f32342d3234203d3e20323135313532.roa (hash: HUonHMUSHlk9aqJ/sQc6wral71Jta8wOY6iN7ui+u0E=)
                          28: 3139352e35382e3134382e302f32342d3234203d3e203633303233.roa (hash: oBeeeU3GnT2oMITYsHzfevINcnN3rBvPI2W5i1+sVPw=)
                          29: 3135302e3235312e3232362e302f32342d3234203d3e20323135313532.roa (hash: l88xld5hN+Vt1T/nwJ0n59xsdfmhHbKR2AdJBNoWlgw=)
                          30: 3135302e3235312e3232372e302f32342d3234203d3e20323133373334.roa (hash: Fe/5va/u8EIzw3SYKhB486KbEr9PrZMEi8IrwZOE4AM=)
                          31: 3135302e3235312e3232382e302f32342d3234203d3e20383334.roa (hash: Ik4L7tUUvBEdqSjNmCL1Rt9cW5dT8J9xZbjAa25OeXA=)
                          32: 3139352e35382e3135312e302f32342d3234203d3e203633313939.roa (hash: SGjGhzMt3scH9rugBQZ4G2NPX5nHaRwO3AhJMExF7aU=)
                          33: 3139352e35382e3134362e302f32342d3234203d3e20343032313836.roa (hash: ORRSzvs2QEdncOPZuD+oGmv+utaq99nlS9NDrNT0GCE=)
                          34: 3135302e3235312e3233312e302f32342d3234203d3e203633313939.roa (hash: nOdkF2oLzkeUcWgIM8F3FhA8vX9MjMTAnEFAB1UxJHg=)
                          35: 33312e39392e3230312e302f32342d3234203d3e20323133363530.roa (hash: LZe/oPKdzHBDXdq7jgdrUvSsiw189QvXVXiPjXqJiLQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:36:4b:2c:63:c9:33:5e:25:49:84:45:07:39:ea:9f:04:9b:51:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
        Validity
            Not Before: Mar 25 15:43:24 2026 GMT
            Not After : Mar 26 17:02:24 2026 GMT
        Subject: CN=EB08108F271084A7DC55570A89C772EFA5902F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:92:9d:42:27:2a:d6:3f:48:68:97:6e:73:
                    f3:7b:f5:7b:d3:cb:45:ec:66:07:06:26:17:da:4d:
                    af:7c:4a:3b:f2:1f:7a:e4:bb:66:59:32:5e:e9:be:
                    51:d2:44:e0:78:1d:86:97:ac:c3:36:1d:f0:83:14:
                    a7:72:76:27:71:08:bb:e0:63:8e:db:c8:25:39:42:
                    54:b2:a8:e0:c9:4a:db:bd:7a:97:ac:3e:bb:78:e3:
                    3a:86:1a:1a:d1:02:5e:15:b2:c4:18:e4:7f:76:ca:
                    0a:0a:ad:bc:58:96:3a:56:55:e2:59:63:62:71:98:
                    3a:da:a1:e3:ea:48:64:ff:24:f1:fd:27:1d:99:91:
                    ca:d8:26:e3:7b:da:9d:00:bd:ad:a1:2c:8d:47:a3:
                    e9:7b:4f:d9:eb:a6:b4:49:7d:0d:46:7b:86:4a:fe:
                    97:2a:97:25:ec:d9:ef:65:12:29:c2:f8:5b:b6:73:
                    38:a6:58:44:bf:38:0d:15:a1:e7:49:8b:19:7c:79:
                    21:6d:47:df:90:b1:2a:87:69:05:25:02:3c:63:ff:
                    e0:1b:cb:dd:8d:15:b2:92:11:04:63:4e:0d:2e:f4:
                    3a:ad:43:e7:8e:db:63:1e:7a:ec:f1:10:f6:04:95:
                    38:ec:47:7d:6d:fb:39:2b:20:02:a8:64:0c:f3:b3:
                    d0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:08:10:8F:27:10:84:A7:DC:55:57:0A:89:C7:72:EF:A5:90:2F:31
            X509v3 Authority Key Identifier:
                keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:54:fc:d0:b1:95:c0:85:c5:bd:18:d6:c5:50:00:a7:89:09:
         c6:00:83:2e:28:e0:80:95:59:d5:e0:96:f3:e2:77:5b:b9:ca:
         8d:98:aa:3f:f5:a1:ec:34:af:ce:93:ab:3b:a0:ad:0a:1d:fc:
         a0:14:4f:57:16:5c:df:be:4d:85:51:c3:3c:51:7d:98:13:f7:
         c3:5c:f0:d0:2c:2a:71:94:5a:57:66:cc:84:53:ca:8a:4b:3b:
         35:2b:bc:ab:63:29:02:cd:cb:01:7b:86:34:b6:dc:12:1a:cc:
         95:e8:47:23:6e:55:25:7b:53:b3:1c:dd:73:72:51:e7:be:7f:
         a4:ec:f8:af:c8:31:f9:4e:4a:5f:07:6c:9e:63:43:86:e3:09:
         e1:fd:a0:f8:94:13:c5:9d:57:6d:96:cd:d8:f4:6a:44:fa:ad:
         c2:fa:18:58:a3:b0:3f:90:ba:7d:fc:2e:c5:75:69:ad:ba:13:
         52:84:a2:d5:e6:a8:fc:7a:79:00:53:ae:75:27:7d:92:1e:de:
         1e:3b:f5:85:5e:ac:01:64:ce:15:67:69:b3:89:30:d0:d8:38:
         3b:33:98:7f:4c:f2:2e:69:57:1e:43:90:7e:49:74:15:af:7e:
         e3:61:9f:f9:a5:39:62:12:72:a6:fe:7c:b2:16:9d:26:e2:05:
         cf:19:fc:91
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJDZLLGPJM14lSYRFBznqnwSbURswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjAzMjUxNTQzMjRaFw0yNjAzMjYxNzAyMjRaMDMxMTAvBgNV
BAMTKEVCMDgxMDhGMjcxMDg0QTdEQzU1NTcwQTg5Qzc3MkVGQTU5MDJGMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7eZKdQicq1j9IaJduc/N79XvT
y0XsZgcGJhfaTa98SjvyH3rku2ZZMl7pvlHSROB4HYaXrMM2HfCDFKdydidxCLvg
Y47byCU5QlSyqODJStu9epesPrt44zqGGhrRAl4VssQY5H92ygoKrbxYljpWVeJZ
Y2JxmDraoePqSGT/JPH9Jx2ZkcrYJuN72p0Ava2hLI1Ho+l7T9nrprRJfQ1Ge4ZK
/pcqlyXs2e9lEinC+Fu2czimWES/OA0VoedJixl8eSFtR9+QsSqHaQUlAjxj/+Ab
y92NFbKSEQRjTg0u9DqtQ+eO22MeeuzxEPYElTjsR31t+zkrIAKoZAzzs9CzAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU6wgQjycQhKfcVVcKicdy76WQLzEwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03
YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG
ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFT80LGVwIXFvRjWxVAA
p4kJxgCDLijggJVZ1eCW8+J3W7nKjZiqP/Wh7DSvzpOrO6CtCh38oBRPVxZc375N
hVHDPFF9mBP3w1zw0CwqcZRaV2bMhFPKiks7NSu8q2MpAs3LAXuGNLbcEhrMlehH
I25VJXtTsxzdc3JR575/pOz4r8gx+U5KXwdsnmNDhuMJ4f2g+JQTxZ1XbZbN2PRq
RPqtwvoYWKOwP5C6ffwuxXVprboTUoSi1eao/Hp5AFOudSd9kh7eHjv1hV6sAWTO
FWdps4kw0Ng4OzOYf0zyLmlXHkOQfkl0Fa9+42Gf+aU5YhJypv58shadJuIFzxn8
kQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:30 2026 by rpki-client