Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
File:                     A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json)
Hash identifier:          +Yma8b47mBBHXXEOG/xdQmayXEvWIQTVpChShrtTgJQ=
Subject key identifier:   DB:7B:C5:C0:A7:5B:5C:0F:FC:8E:56:E0:B9:F6:30:0D:28:61:57:5A
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Certificate issuer:       /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial:       6F3EB673882AE471E415ACAA3A7D76815E1D71E1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
Manifest number:          035D
Signing time:             Thu 26 Mar 2026 04:26:28 +0000
Manifest this update:     Thu 26 Mar 2026 04:21:28 +0000
Manifest next update:     Fri 27 Mar 2026 07:27:28 +0000
Files and hashes:         1: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=)
                          2: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=)
                          3: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=)
                          4: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=)
                          5: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=)
                          6: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=)
                          7: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=)
                          8: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=)
                          9: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=)
                          10: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=)
                          11: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=)
                          12: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=)
                          13: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=)
                          14: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=)
                          15: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=)
                          16: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: 1dzxt6VturEKeGs9b2//rx6yLyBuPxT+Q5cCrJV/WxM=)
                          17: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=)
                          18: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=)
                          19: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=)
                          20: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3e:b6:73:88:2a:e4:71:e4:15:ac:aa:3a:7d:76:81:5e:1d:71:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
        Validity
            Not Before: Mar 26 04:21:28 2026 GMT
            Not After : Mar 27 07:27:28 2026 GMT
        Subject: CN=DB7BC5C0A75B5C0FFC8E56E0B9F6300D2861575A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:45:ad:78:89:30:1e:62:03:45:13:52:fb:
                    c6:41:b6:67:2d:c1:87:c7:10:f2:1b:4a:42:0e:fe:
                    23:46:67:53:bb:0c:a1:8e:b5:76:3d:aa:73:98:69:
                    f4:7e:74:6b:c3:82:0c:ad:87:09:8a:1c:a9:6d:de:
                    98:22:67:29:1d:66:2e:68:17:8d:21:1e:d3:8b:3b:
                    31:39:4a:e7:44:07:a9:5b:79:18:71:a5:65:88:aa:
                    ec:51:79:6e:33:79:57:d9:1e:16:0b:da:19:c0:5b:
                    56:53:90:2a:bc:7d:86:79:51:9d:7d:cb:2f:21:06:
                    59:6f:f1:a9:3d:7b:3f:21:bb:e6:34:00:cf:37:b9:
                    2c:75:b3:46:b3:54:d1:97:74:df:d5:56:0f:e8:dd:
                    22:87:03:76:9c:c6:eb:80:00:00:4e:68:e7:9a:ff:
                    2d:a6:60:2f:91:be:8a:fa:0d:be:ae:56:c2:df:eb:
                    eb:55:c7:55:7e:b0:6f:17:50:09:f6:1b:0a:e3:9f:
                    a8:9b:bb:18:9c:c5:c0:71:50:ad:5e:7d:cc:2a:d4:
                    ff:6d:8d:14:e9:b5:5f:7e:58:5c:97:34:d0:9f:28:
                    1d:65:38:59:8b:d4:27:1b:2c:63:c4:c5:5e:85:ec:
                    6c:37:ce:91:3c:d9:bc:d8:42:a8:43:fc:b6:df:10:
                    b7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7B:C5:C0:A7:5B:5C:0F:FC:8E:56:E0:B9:F6:30:0D:28:61:57:5A
            X509v3 Authority Key Identifier:
                keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:2a:cd:57:cf:75:ba:cd:a7:82:c0:14:76:7c:72:fe:d2:34:
         c4:4a:56:bc:02:eb:4e:41:8c:ab:82:19:66:55:86:d5:9a:d1:
         bc:cf:96:47:3c:9e:76:1b:62:0d:89:30:d3:14:9a:f6:19:ad:
         2a:a0:dd:f3:c1:fd:b4:f9:e3:46:7c:54:db:5b:88:6f:55:92:
         c6:b8:7b:ef:1a:10:9d:b5:00:9a:4a:70:f4:29:be:ae:a5:e6:
         b4:2f:6c:93:a1:01:a4:79:a5:28:5b:ab:6c:29:a2:f2:37:6b:
         e3:8e:c6:53:9b:66:f1:b8:fd:40:0f:e8:1d:d8:98:c0:08:8d:
         bc:06:2a:d9:05:02:e8:8c:84:f1:ef:91:86:d9:67:84:ea:06:
         9b:08:fb:f3:5b:ee:56:b3:e8:61:4c:e9:2c:0b:c3:5b:4c:85:
         18:4e:40:e3:d9:5f:91:15:eb:21:24:c6:45:d1:43:87:dd:0d:
         b4:f1:61:c9:7f:29:48:39:c9:b8:a2:d8:bd:55:7a:16:a8:e0:
         d0:33:f3:61:e3:cd:a5:83:ac:ae:d0:5b:55:ed:35:88:60:e4:
         f4:03:bb:83:c7:95:53:8e:1a:eb:3f:e8:e1:77:0f:7d:1d:33:
         95:fe:74:2b:34:11:fb:a4:8d:1b:2b:e8:b8:22:f9:ca:ff:3f:
         61:c2:b0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:58:18 2026 by rpki-client