Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
File:                     0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft (raw, json)
Hash identifier:          Jy7SeQJdv34xBLjQNSwrJZDFYEHxi/L8l2nM0dEIrkA=
Subject key identifier:   2C:1C:DD:01:E8:F7:9F:E8:80:8A:0B:52:3E:31:D2:AD:54:46:75:5E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       33B34138C8F7A8D7C2695DD120EBA64B15239EDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
Manifest number:          02C2
Signing time:             Tue 12 May 2026 17:37:22 +0000
Manifest this update:     Tue 12 May 2026 17:32:22 +0000
Manifest next update:     Wed 13 May 2026 19:54:22 +0000
Files and hashes:         1: AS9304.roa (hash: 8QFVUW5t+ko5AvAcAgEdMNYhNW6EjntKZa8wmFd8FIE=)
                          2: AS199741.roa (hash: RDCyWb3f428RRLPHrIxlkuFT1P1G9nvH4V0zhBw++oQ=)
                          3: AS834.roa (hash: sLYdn3sXbmKlCRfQDGsnFFYEHPa6eu0PrIAnaBXNs8c=)
                          4: AS214025.roa (hash: izGyAX9SrpYP8l1LF/aXpFD+jrfGA595favEyW04Mho=)
                          5: AS11426.roa (hash: QoJp39oD8IlrC+55sf9pU7tKSUjmscFCpWvJTqGfbAM=)
                          6: AS9009.roa (hash: GKijPytWv2HBCqDm6BiQdpXz6d7LYxX99R3PujTj6Ak=)
                          7: AS40676.roa (hash: 4bb+fNzeowLu4bUXbp3dfGqxnAEiyQ47btgQ/H/x+dw=)
                          8: AS200213.roa (hash: WaFZ1nAciq9IYTdaknzSrBhbXhL5fGT8oauM5EYrMes=)
                          9: AS46011.roa (hash: mifZSh1oanorLVMEPwnIf4aVuhDoo5o85+pV9g1PU/Y=)
                          10: AS48300.roa (hash: zo2yu/UI/7kXKBZeiPaj2YmWoAabRy9SyXC/3Ylg7+g=)
                          11: AS393406.roa (hash: cv/Ua5BZStLnD2pnxjbn2mE9ctcIXnZ2mHIdRsn+gz4=)
                          12: AS212683.roa (hash: N8fBUVoI9iUZWhVYaEx2tC71Sub/hnmJM8/CsYHctQM=)
                          13: AS48266.roa (hash: 96CEpY8duiKmMOFHVWD5vnBdMMTCjpWJvm+PzZbZeP8=)
                          14: 0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl (hash: ImHrLSbVtdrRnr/+8u0SQiruOYpqGEbTSJjNTrriBv4=)
                          15: AS2914.roa (hash: mk7vJ0HCDPJbt8EJsFnQrPc/fyW2JcwZCkhK0Ot6kvc=)
                          16: AS213607.roa (hash: eYxx/jMipA74lbHqOgkTpYNP0dD0a0uLP0MYIxvi9SE=)
                          17: AS209888.roa (hash: 7iFa89wO+mK5W0l+1A1RZYM8vsBQv4CoIFVSzIqyXbw=)
                          18: AS30058.roa (hash: IYOUAsmsI8fn3pBYhHoWuLSQkvhcKlNtWJD+YX69Zoo=)
                          19: AS396356.roa (hash: m81r/37A0/yYFGC9Af9cOxd4yRnGPdnTgjELU5P5Cug=)
                          20: AS215935.roa (hash: J/OeWUFsvxXv8FLznTTFyQA0niwajEGqY9IDDNzOUaQ=)
                          21: AS402276.roa (hash: AW+o1YAnRni915Po+y5x7xWe7e2tFPH76s/6DjsGjfc=)
                          22: AS402298.roa (hash: DMBf+7xQlkdIQQRFuJGNpd9E3PFwrlkwDOA2PTBFlLQ=)
                          23: AS402252.roa (hash: XKn6mbFrRh8R6BItDzlSvUwbG6YLeH7DnHRP/6eKxe0=)
                          24: AS6762.roa (hash: Vu+D6JbdLJtN4Ee+MwonYxkQCs/xr0NFEVCWKd40/a0=)
                          25: AS213784.roa (hash: LTYhKE64q4I6ruQYp1z1EHq4GkPeLqnmBItKUeeQMs4=)
                          26: AS6079.roa (hash: RrJ3vRxY2iRyn1W+Q439fsOHRNZZ04y3NHIBPXK2vds=)
                          27: AS22773.roa (hash: xKAnLfNKj4WvvERZEeSL1oPfLB5T+WeGICCaK3DJS4I=)
                          28: AS203048.roa (hash: pGZEosABaemLvRD3SyG/U0m3BXBhsLjwMFfEl8AfxPM=)
                          29: AS32418.roa (hash: sE8Vi3WQYyaaLCRCy6apnr8R7VJ3AV7GPPzXhybmCl8=)
                          30: AS402233.roa (hash: fnV7xr19ynwBk4fcSjqNr3vHtgen8JVygmzLxB4SHbo=)
                          31: AS142433.roa (hash: WTuRA/BRupAE7BxrhnN9g3LzDCNxY5r80dzBMXGAMsk=)
                          32: AS203054.roa (hash: IdEhg/mG/3+xKZftSmEVjpV/wWRUwdWD896yTaX705c=)
                          33: AS214432.roa (hash: a8USOEkL/FgsEAGxrxS/sFOHAUudZsgHe9EW69Pcv/Y=)
                          34: AS62240.roa (hash: C23ii0/mbbew6lH8fwA4dunQO4El547OfrsdSUP1My8=)
                          35: AS42689.roa (hash: kwlmfcXyVOBI1+ZcCrXoz2SHftfQVRDllPtBRfMglyY=)
                          36: AS2856.roa (hash: bzi4fBIiC8oZyaFV/XK2JSHPRUDV8oR1+3ILhGGgfDA=)
                          37: AS18046.roa (hash: VpmANte7Bi37Q5riEMTy8brveOi7EUtQsEx5DJuASGM=)
                          38: AS9457.roa (hash: 39RqtYuaFUGk87AZ6v6lDdbf7LsQOVsabRUqofNB56k=)
                          39: AS402268.roa (hash: L3WUIATLYDd+nlSK9MI1eOM4Zwy77A8pYo5WDulm6BA=)
                          40: AS20473.roa (hash: ttD9TZnW4Z+eChm2+vyzkYucoQNV1qisBzQO3JDc7Fc=)
                          41: AS200105.roa (hash: /KLJyw+kL9FllUbzmmnJMXeU7euWU417+SW4Wf21e8M=)
                          42: AS50049.roa (hash: b/Ki+/aQUkBc7h1PFUcL8rc704acRQjVU2IPQzk6VVk=)
                          43: AS399955.roa (hash: geGt+g/nO2cMEE22Wj/PgJuQDJXh3Z3iNCSwF185C6g=)
                          44: AS42831.roa (hash: bR79Imkw1KYwjGuO3Y+zk2nieOrymOMk8GJfKl4zxSw=)
                          45: AS25369.roa (hash: jFtVf94P6p6baTV45BS+Zmn4IUL1Eq+d7q4oi75EzCM=)
                          46: AS199707.roa (hash: R3IH+Eff7ZR/fP7RX9XvsXexOhzsrHy6i6AwTM+nc9g=)
                          47: AS5511.roa (hash: syTW8qtBRGDlCMnGNxZxPHkEdTF8uQvivla9OmS7O0o=)
                          48: AS8881.roa (hash: HPSWUYcly9koQ7aezylK6IEGQ3lumWJSmByAjilqIic=)
                          49: AS397373.roa (hash: r+qw0cVYugjHnw1tgvUhWJcPsIoXy8bAD7TEtQYDIsQ=)
                          50: AS49915.roa (hash: yK5D0m48iLlHF/Vy5/0C+NaVrJ0cyWoh0sBxiNOXXuA=)
                          51: AS174.roa (hash: KVj+iXEtrpLJ3jIpRzudbkjoleQwKQXaXA1CljBtD7w=)
                          52: AS5650.roa (hash: bxbjLrBijnytMR4nVGQbScnmEV/ZJIktD51pSUBSvA4=)
                          53: AS152491.roa (hash: QP7vHMUZrvleN6B0Ti+vFA/Fjw61qHpDMcpuVUyMvqo=)
                          54: AS9318.roa (hash: VBnxRSW9TPoTxQFLqv42vgeG6jiN0YfzCZLcJToHzcM=)
                          55: AS215152.roa (hash: LhnahYoJ0kY1PTOCz6GaYvlvlttRWdGlbed3p1uqKBw=)
                          56: AS812.roa (hash: zA57qcCPz1Pt09TdlnMO+GKenNotdwFnSlnVFuU1Vz8=)
                          57: AS205987.roa (hash: CqKpet6bN3naPzvPOSA8PVHbot0AAq4uZdn89+Ygf2w=)
                          58: AS7029.roa (hash: RUKEukNFvSwDSPNmPzzQsOxrppE7VIJptXonesG6JMA=)
                          59: AS215294.roa (hash: 4m+JzBSefNhayf+mgI0YfMbFX6Q0uExYuJCbWVcQEmw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b3:41:38:c8:f7:a8:d7:c2:69:5d:d1:20:eb:a6:4b:15:23:9e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: May 12 17:32:22 2026 GMT
            Not After : May 13 19:54:22 2026 GMT
        Subject: CN=2C1CDD01E8F79FE8808A0B523E31D2AD5446755E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:54:e5:42:f0:99:b8:5f:c7:6a:da:02:13:
                    ae:d0:1e:f8:d5:d7:1d:34:1c:21:ab:07:43:e6:cd:
                    cd:6f:db:00:17:a0:e0:e6:87:ab:97:cf:a2:6d:18:
                    27:d1:40:5f:f3:e3:49:90:78:d7:6b:8c:ee:7b:e0:
                    3a:27:f4:24:ca:0e:0f:77:bf:a8:80:61:e8:9d:3f:
                    58:9e:56:8a:63:f9:4c:08:92:c8:84:7b:97:3f:10:
                    aa:0b:65:f7:f1:36:21:71:28:89:ce:79:94:44:aa:
                    f5:0a:ae:5f:33:82:51:45:60:53:dc:dd:28:fc:4e:
                    19:db:0a:c6:cc:7e:af:fc:84:22:a9:a4:84:0f:2f:
                    33:b1:96:e3:81:26:5b:5d:3e:9f:71:d9:fd:9a:d6:
                    c9:04:7f:bb:4e:bf:8d:6f:60:1f:96:e3:81:86:1c:
                    ed:03:43:c1:26:f4:de:8a:75:a8:fb:36:b7:f0:49:
                    ed:1f:c2:b9:87:06:ae:21:90:88:82:c6:6f:4c:81:
                    4a:28:1c:9e:4f:b8:e1:29:ae:7d:b4:47:26:81:e7:
                    18:c6:94:7a:78:16:b2:d8:e5:a8:26:c4:28:c4:cd:
                    bf:9e:49:f1:49:6f:3a:f1:71:18:74:b2:2e:a0:e8:
                    5c:96:44:fb:ee:61:56:05:80:ed:ac:94:a8:23:38:
                    e0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1C:DD:01:E8:F7:9F:E8:80:8A:0B:52:3E:31:D2:AD:54:46:75:5E
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:63:35:8f:f8:2c:30:de:73:6f:19:df:8a:32:83:7c:02:37:
         ec:13:da:ad:2a:06:c9:5a:2f:49:0a:2d:3a:44:62:62:d5:0f:
         e5:c9:38:7e:14:ac:a2:8e:f5:e5:0c:9b:77:46:d6:13:f3:df:
         52:1b:b0:12:97:f7:2a:5d:01:76:03:b8:ce:2b:56:24:86:7c:
         12:9c:89:ba:70:70:99:6b:b1:7e:71:a7:a0:64:d5:d4:b5:62:
         39:3d:c3:be:f3:ea:c9:c4:1e:03:b2:ce:05:58:08:de:3b:6d:
         65:bc:5e:e9:42:20:09:bf:2b:c6:43:92:30:64:1d:0e:23:d6:
         27:89:0e:c3:75:d5:22:31:86:89:7b:71:c1:17:24:d8:95:e6:
         4e:3f:2b:20:95:4b:bf:44:ed:f1:c1:b3:7e:45:2e:bb:8a:f1:
         68:61:7d:3a:56:2f:ce:b1:7e:8b:8a:53:ea:34:93:30:f1:56:
         bf:4d:10:61:e5:65:51:0a:5a:8f:6e:fa:4f:5b:b6:9f:cb:78:
         47:22:be:96:b7:a6:78:73:fd:be:00:aa:cf:5d:b5:a1:cb:89:
         8f:ac:b5:19:fa:bc:e1:9b:d1:26:14:98:3b:a3:e1:9f:3c:76:
         5d:ac:13:0f:f6:53:38:ff:44:45:ae:29:2b:4e:b5:f1:f8:af:
         f5:83:11:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----