Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
File:                     0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json)
Hash identifier:          Yu2aq5S2qCYGXjVa4SuHyX/eSXSTnG5+V4tQ+yuruUM=
Subject key identifier:   76:F8:D6:EB:AC:7D:BB:AF:4C:A6:8B:B6:6D:26:00:32:68:99:98:DF
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Certificate issuer:       /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial:       6F9DF29466140D84992D93F3A48DF469F5F5A342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
Manifest number:          04AD
Signing time:             Sun 15 Nov 2026 11:21:10 +0000
Manifest this update:     Sun 15 Nov 2026 11:16:10 +0000
Manifest next update:     Mon 16 Nov 2026 14:55:10 +0000
Files and hashes:         1: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: Tmyqetc8hJs1Vd242KgvXpbQdkyss/DSP05pc1pJn6Y=)
                          2: 3138352e3231332e3234382e302f32342d3234203d3e203231383539.roa (hash: l5LzFYeAYRpBxI6rZTLSPCbjfPY+STOvzGpAtsNNCfk=)
                          3: 3135302e3235312e3232382e302f32342d3234203d3e20343031373736.roa (hash: 95ojaphVsAcyVAron4SIlOJi9uTr/G3KFY7/itOpPJ4=)
                          4: 3135302e3235312e3232352e302f32342d3234203d3e20323132323338.roa (hash: 5++guIPzefH5qk3d1r10m+wo361JOjbMdqdsBD/FSXg=)
                          5: 33312e39392e3230372e302f32342d3234203d3e20323136313338.roa (hash: KEwn+7zILM5/r3LpTKFJRe00Rd6OV3jrUelJoTJ/baQ=)
                          6: 3139352e35382e3135312e302f32342d3234203d3e20323032343538.roa (hash: S52wGd4ZwVigg1qwK1PLqhCMszEkIbLvDfCCJBJzY5Y=)
                          7: 3139352e35382e3134382e302f32342d3234203d3e20323035383430.roa (hash: bS8dEKLnVg1evj22nEukOvMTvt+VCr+NcaSKjW+/ZkU=)
                          8: 3139352e35382e3134342e302f32342d3234203d3e20313937313936.roa (hash: rqqV5dAyZMltGaI1IrPEkmhvL8lAkaDtIMwPt73lL/E=)
                          9: 3139352e35382e3133332e302f32342d3234203d3e20323134303833.roa (hash: nqclwP/GocppbLWyUcK+vNP09UGhIbB3v7ZBYl0q7zE=)
                          10: 3135302e3235312e3232372e302f32342d3234203d3e20323130383039.roa (hash: eyLd11fakGFFDhUP1FOBvFuoLUKafobuh0+Bmto2/p8=)
                          11: 33312e39392e3230342e302f32342d3234203d3e20323035343839.roa (hash: AzNhEiF6HU0Fd7Ru00zdzYNa6Mfs63acJt04Z5KPHvI=)
                          12: 33312e39392e3230302e302f32342d3234203d3e20323035343839.roa (hash: lBBCwO7XUDoyn6SkbZJB5sZjToDOr4qrveV62aISLZQ=)
                          13: 3135302e3235312e3232342e302f32342d3234203d3e20323134343332.roa (hash: haWca6+aqQDXSnTE28SZx8fHsKAOLip+iOuBZOi5vh8=)
                          14: 33312e39392e3230332e302f32342d3234203d3e2039303039.roa (hash: ukWKTFNy0nhBe+FLsHfZ/BgA8cd8+jxoh9zUxPcORkk=)
                          15: 3139352e35382e3134392e302f32342d3234203d3e20313532393138.roa (hash: F4x17WHxb4ro/wneVippyu62eL11jNQqJB7dHIHa9ko=)
                          16: 3139352e35382e3133302e302f32342d3234203d3e203231383539.roa (hash: k591NQN+aq5GOAJctvYRnaCZlXbb2X79lNSZeNRbDbY=)
                          17: 3139342e33342e3235322e302f32342d3234203d3e20313336383039.roa (hash: XHWQTvXywb/B3yODnHeVZnFxpLfRipQMZQAmXJSkaRU=)
                          18: 3139352e35382e3133322e302f32342d3234203d3e203136323736.roa (hash: ufoHnbsbXy/HqZaOKnmNJljqZWF5psRDYjckzPYP+dI=)
                          19: 33312e39392e3230322e302f32342d3234203d3e203231383539.roa (hash: PivFy+em9dzGbPGu8x4FOFsif2QpZ9yZJ/cvuxfHAnM=)
                          20: 33312e39392e3230372e302f32342d3234203d3e2039333034.roa (hash: RG694VF+Ywi1+rDjW0DImFmJfL21VRcESGSJ9oUeN2M=)
                          21: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: PbuFJWIaFPfS/fUezjEhjeDUJ1OpDE0MDCs7HAI2pDY=)
                          22: 3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa (hash: UaW07UBNrgMmd4woNB5LOC9gCF0XD9b1GvhPJvMkF/k=)
                          23: 3135302e3235312e3232392e302f32342d3234203d3e2039303039.roa (hash: JJTteUvrmiPY+U+momyu9uK2wrpU9K7XzaRj5OzwPkc=)
                          24: 3135302e3235312e3233312e302f32342d3234203d3e20323138383739.roa (hash: J97dFvNJgBkmxjFu9FS858RLe2AIF0jinSN6Y/O+Fss=)
                          25: 33312e39392e3230312e302f32342d3234203d3e20323133363530.roa (hash: LZe/oPKdzHBDXdq7jgdrUvSsiw189QvXVXiPjXqJiLQ=)
                          26: 3139352e35382e3133332e302f32342d3234203d3e203136323736.roa (hash: DUjgthcap1GVlP79plrhYt+nHGYAj9uAgrKFSid9CBQ=)
                          27: 33312e39392e3230362e302f32342d3234203d3e20323130343935.roa (hash: OC80Hx5Gq1jN6Ym5UmCqnC8fGlp8VQazYJOfXpnB8WU=)
                          28: 3138352e3231332e3234382e302f32342d3234203d3e2037353336.roa (hash: 3Ow4dhqcQd/FeupsTtXE+3P69G/MvUe02J04AXHX428=)
                          29: 38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa (hash: Mdj3IIZJ097ibJGhSOfHP4GOBLdG4jAp1zNpVSxesFg=)
                          30: 3139352e35382e3134352e302f32342d3234203d3e20323034393134.roa (hash: IwoP9ouIn2o/JOZwqVHn5/N4dA78+n9fQqCafGrX2ag=)
                          31: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: WxHcRq5WCH3YmKS5+Il6T1ro4Oc3AucTAyVboxN6cYg=)
                          32: 3139352e35382e3133352e302f32342d3234203d3e20313334393236.roa (hash: QpMWGK6S5I3qQ+qu8dr+zlt0sser18tOcrfaVpAuVw0=)
                          33: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: GEbFfS+LLMgocx0zl/qOrB6oO+BgTD8IsbF49GAbNus=)
                          34: 33312e39392e3230352e302f32342d3234203d3e203136323736.roa (hash: iY6Z6WsOmh7cm9RSrsKpdBWAVKfI3GwyklAdOa/akGA=)
                          35: 3135302e3235312e3232362e302f32342d3234203d3e203238353835.roa (hash: g+Q01iXq5jz18bgN5O1lwM0dVePZyOYe11QnSHrU7cI=)
                          36: 3139352e35382e3134362e302f32342d3234203d3e2039303039.roa (hash: ll1+DsZYPuV5DuCTUxj9BRS7ybU8F+wDFqJlEZ+e8bA=)
                          37: 3138352e3231332e3234382e302f32342d3234203d3e203133333335.roa (hash: yizEIX9Y5xQaoQUp8bijJythO8ySXs2RkWEBvAhplzs=)
                          38: 3139342e33342e3235342e302f32342d3234203d3e203531383532.roa (hash: za0HM3w55tiDFbhPrhUh3FtVd5oKhUm8JuFZ8lH0DiA=)
                          39: 3139352e35382e3135302e302f32342d3234203d3e20313938343230.roa (hash: Yb8ZggmQm15ny9FM1xtYILR46C/kYmvLDoVrroOiEjA=)
                          40: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: FGC3U8MCAGUVSALFgzhtyJUeZqfy8bg54XiX52tmMmo=)
                          41: 3139352e35382e3133312e302f32342d3234203d3e20313334393236.roa (hash: TBibRVHIspDhHx46wJweEVCgQCX2xw2nC7yCjnBb2Xc=)
                          42: 3139342e33342e3235322e302f32342d3234203d3e20323134393632.roa (hash: 742oYr2+RZl90781Z0cTGjkMyFHnDaoRWdOFGfMcPFI=)
                          43: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: KTVPVjJUeOuLavU6Oa4i7/jMWolwdDs6JMPn908p4QE=)
                          44: 3139352e35382e3132382e302f32342d3234203d3e20313938353636.roa (hash: p5TwbqVvtx7bcugfEqi9yXckarK7U3e6W3yyzLtcxaU=)
                          45: 3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa (hash: cvWbud/Q3B4zVr3PrPYyxiTjcQyvCffxgDgg+5VMZYE=)
                          46: 3135302e3235312e3233302e302f32342d3234203d3e20343031353630.roa (hash: vgOMULtwy2sSL0bFusZFv+6TOV6Hiad99WUcLDvm7w4=)
                          47: 33312e39392e3230372e302f32342d3234203d3e203535323031.roa (hash: LWKdaHsgGPyn+M9xKVi0OmJ5F3Y2EclXH2IefhHFlAI=)
                          48: 3139352e35382e3133342e302f32342d3234203d3e20323033373538.roa (hash: cF8g+YnTuUZTSmpqY8eYqJJ8ewBqfSd6TlufY6uCyow=)
                          49: 3135302e3235312e3232342e302f32342d3234203d3e2032393134.roa (hash: 8h7BiQfzgNpE25h/of4TTuYFelKAwrKy2p7mueJsU0E=)
                          50: 3139352e35382e3132392e302f32342d3234203d3e203331373135.roa (hash: adjU13kTFE5YfpiiCMUzR3Vm2CJdDUybBKcXAGiPlWc=)
                          51: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: wzm7liWKnOarnFPjXDLPc8Lt7waL3BRAPmIB5MlPCA8=)
                          52: 39312e3231302e34332e302f32342d3234203d3e203633303939.roa (hash: oAwjVGPwU25ceOih3rJWmllATU7l2YARbFutZVfy2iM=)
                          53: 33312e39392e3230372e302f32342d3234203d3e203233353332.roa (hash: YMiDlEuFwiUmBJ750UnQ/2kXWbSgbu6U7u+ywjD409w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9d:f2:94:66:14:0d:84:99:2d:93:f3:a4:8d:f4:69:f5:f5:a3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
        Validity
            Not Before: Nov 15 11:16:10 2026 GMT
            Not After : Nov 16 14:55:10 2026 GMT
        Subject: CN=76F8D6EBAC7DBBAF4CA68BB66D260032689998DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:98:02:2a:c6:79:ec:66:69:c4:11:60:76:
                    11:7c:f6:94:4e:9f:ac:57:de:ae:77:fb:8d:37:79:
                    ba:ef:0d:70:48:84:fd:6e:a3:8c:87:61:4a:4e:2d:
                    2f:37:ea:91:e6:3d:23:fe:29:02:c0:56:f3:cc:85:
                    cc:d7:0b:99:c0:2e:20:96:58:4c:36:2c:2f:32:dd:
                    7e:56:3e:a5:d4:07:0c:f1:e7:33:6b:58:03:d0:36:
                    68:17:71:52:83:e7:10:6f:ca:fc:74:7c:ac:86:d1:
                    24:0b:0d:cd:e2:95:db:9f:52:4e:61:c0:6b:ad:00:
                    9d:59:b7:f7:ff:e1:8f:fe:51:dd:31:f3:03:61:e4:
                    84:ca:c7:61:49:14:3b:7f:f9:8e:f9:f3:25:6e:ce:
                    f1:ad:90:16:02:ab:c8:93:10:7e:ed:f8:dd:f5:13:
                    a2:0b:42:5a:09:58:80:2f:3b:ca:ee:c2:cf:2e:f4:
                    9c:ea:ba:e4:43:b6:98:2d:36:5c:f9:31:0b:aa:05:
                    7b:3f:c0:6c:da:35:19:57:1a:90:27:b5:0a:78:95:
                    7a:14:0c:aa:74:95:58:d8:07:52:a0:3e:e1:8a:ee:
                    48:cc:81:94:ff:65:ff:02:d3:df:c6:30:4a:1d:0d:
                    b8:24:3f:4b:64:74:df:62:e2:a8:79:a7:88:b1:fe:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F8:D6:EB:AC:7D:BB:AF:4C:A6:8B:B6:6D:26:00:32:68:99:98:DF
            X509v3 Authority Key Identifier:
                keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:02:f8:11:ff:97:6d:43:32:b1:5f:39:be:73:a0:15:2b:54:
         26:da:85:27:48:73:af:b5:5e:d7:d9:07:4c:36:7a:01:e8:71:
         33:d2:0c:48:75:50:38:16:08:62:4a:ab:ce:d8:7b:8b:03:0f:
         56:9f:f9:c6:ce:fc:ef:0c:00:7a:a9:21:86:34:72:e1:b0:87:
         d5:9e:36:8e:c0:d0:8e:b4:f9:19:08:80:95:e7:22:64:7b:d9:
         d1:dd:b2:3c:45:50:c7:ba:70:4f:1e:aa:79:c3:0e:31:0d:01:
         10:1a:c7:f6:5c:8b:d1:f1:da:b8:20:c1:38:c2:0f:ca:c6:f4:
         a4:aa:11:04:57:b6:67:9d:fc:29:b3:f5:2d:ed:1b:57:16:2e:
         08:87:0f:3e:a7:e6:a7:82:33:f8:19:0f:3c:25:9c:c8:32:b4:
         e6:02:5d:7f:0c:78:96:5e:69:d0:9c:c1:e3:70:e0:34:1c:e1:
         1f:7b:ed:85:4b:21:e5:06:5e:8a:0c:af:ce:da:a3:7f:77:04:
         0d:b4:68:20:f0:bb:2c:b7:e4:e9:1b:61:4f:7b:99:6c:79:e6:
         43:0e:b0:59:da:5c:2c:07:00:1f:0c:27:b9:c7:8f:24:b7:ba:
         42:6a:3b:6f:45:b2:dc:d0:24:f4:4f:71:60:70:c9:e8:d6:cb:
         cb:46:1a:51
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUb53ylGYUDYSZLZPzpI30afX1o0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjExMTUxMTE2MTBaFw0yNjExMTYxNDU1MTBaMDMxMTAvBgNV
BAMTKDc2RjhENkVCQUM3REJCQUY0Q0E2OEJCNjZEMjYwMDMyNjg5OTk4REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IZgCKsZ57GZpxBFgdhF89pRO
n6xX3q53+403ebrvDXBIhP1uo4yHYUpOLS836pHmPSP+KQLAVvPMhczXC5nALiCW
WEw2LC8y3X5WPqXUBwzx5zNrWAPQNmgXcVKD5xBvyvx0fKyG0SQLDc3ildufUk5h
wGutAJ1Zt/f/4Y/+Ud0x8wNh5ITKx2FJFDt/+Y758yVuzvGtkBYCq8iTEH7t+N31
E6ILQloJWIAvO8ruws8u9JzquuRDtpgtNlz5MQuqBXs/wGzaNRlXGpAntQp4lXoU
DKp0lVjYB1KgPuGK7kjMgZT/Zf8C09/GMEodDbgkP0tkdN9i4qh5p4ix/qO1AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUdvjW66x9u69Mpou2bSYAMmiZmN8wHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03
YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG
ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgL4Ef+XbUMysV85vnOg
FStUJtqFJ0hzr7Ve19kHTDZ6AehxM9IMSHVQOBYIYkqrzth7iwMPVp/5xs787wwA
eqkhhjRy4bCH1Z42jsDQjrT5GQiAleciZHvZ0d2yPEVQx7pwTx6qecMOMQ0BEBrH
9lyL0fHauCDBOMIPysb0pKoRBFe2Z538KbP1Le0bVxYuCIcPPqfmp4Iz+BkPPCWc
yDK05gJdfwx4ll5p0JzB43DgNBzhH3vthUsh5QZeigyvztqjf3cEDbRoIPC7LLfk
6RthT3uZbHnmQw6wWdpcLAcAHwwnucePJLe6Qmo7b0Wy3NAk9E9xYHDJ6NbLy0Ya
UQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:10:27 2026 by rpki-client