Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File:                     38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier:          Cjhw2gcfyyRibywgeMaAVcS81axqxjefiJv9ntLeGX8=
Subject key identifier:   6C:5C:83:5B:D2:F9:C0:AE:26:C2:55:41:8F:BD:69:80:8B:7F:87:EC
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer:       /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial:       50BF9291FFC5ADB62CC027CB04B87543EE5C9962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number:          0385
Signing time:             Wed 23 Sep 2026 18:00:53 +0000
Manifest this update:     Wed 23 Sep 2026 17:55:53 +0000
Manifest next update:     Thu 24 Sep 2026 18:39:53 +0000
Files and hashes:         1: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: 8fHWRHCVBN3ZxoELGEiUX2uucky87/OuM6uDPtuM3kI=)
                          2: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=)
                          3: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: RRKi1JjdgrwKCFAb2NwHADxT8i70yn0i5n0X0HMmC+E=)
                          4: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=)
                          5: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=)
                          6: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=)
                          7: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: CvE/2nozaB8au2uvpxJMY+EdD8m6tEw4CMkYGuLnkDo=)
                          8: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: bVWg5FT0q2sCo7QMK6bLu4l3oPAGVseUqslWoQKo1ZE=)
                          9: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=)
                          10: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: Z+WIv07j1sBVImJqjc9zRKxTh7Kgz0Src+x8TbAlpmA=)
                          11: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: So8W/XE2Jre7qXuonKanSlSCJWGgZ07ENIxnLkm8ktU=)
                          12: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=)
                          13: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: QJBMGqM6yaqk5niJkAuqPHI8VvVSx/j3kqEzba0aJEs=)
                          14: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: AQQ26lv3mFMwuJYalDQOTND7aBaRxrpCSBYyfjNgtdc=)
                          15: 33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa (hash: 5S0IvbVNk6KE/CUqhOCj7rmzwdduYx2Ci6hKBhe3Hsg=)
                          16: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=)
                          17: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: cRqYQiRVVInanzag9EpWaHhBmtu84FJoIPt+81tU2Nw=)
                          18: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=)
                          19: 3138352e35382e3135372e302f32342d3234203d3e20323038303633.roa (hash: U8pAF8O/Eli71dyqa/IEGmD/EnmCJf29XWZJsJoO2Kw=)
                          20: 3138352e35382e3135362e302f32342d3234203d3e203633303939.roa (hash: DC0uMXuyrSg4UTnt8X12aE89X4eMjCQrPVHEP/8iDw8=)
                          21: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bf:92:91:ff:c5:ad:b6:2c:c0:27:cb:04:b8:75:43:ee:5c:99:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
        Validity
            Not Before: Sep 23 17:55:53 2026 GMT
            Not After : Sep 24 18:39:53 2026 GMT
        Subject: CN=6C5C835BD2F9C0AE26C255418FBD69808B7F87EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:66:1f:60:c0:a5:06:68:bc:c2:78:e9:63:38:
                    a2:d9:cf:63:e9:6b:1b:16:0d:46:39:12:e2:2a:4a:
                    46:06:5e:91:36:84:93:5e:aa:00:e2:a1:2b:99:b7:
                    b2:24:36:02:3c:f2:47:93:9e:e1:a4:49:b4:7d:c2:
                    59:2f:bd:11:f3:71:fe:95:33:0e:22:9d:1b:f9:51:
                    7b:c1:87:7b:05:8e:31:72:4f:84:d7:33:59:c4:b1:
                    c7:ce:f4:4e:07:93:e5:c7:f5:c2:dd:4c:bf:b3:1a:
                    cf:17:8e:15:f2:a0:bb:a4:6d:88:f4:61:cc:53:ea:
                    0b:e6:f5:1f:76:97:b0:16:69:d4:66:3e:bf:f3:86:
                    72:22:a6:69:a0:99:12:39:40:46:8d:b3:6d:f5:72:
                    b6:33:24:76:05:71:34:e2:5b:a7:21:64:5b:80:2f:
                    73:44:3c:c4:62:d0:28:e5:c4:0c:74:01:12:29:e6:
                    cb:a4:9b:85:5b:86:65:c1:f1:e7:b6:e1:92:f9:96:
                    cd:d9:0b:64:b7:ba:17:fd:1d:07:4f:a6:5c:5c:a8:
                    bd:45:a4:3d:69:5a:72:c1:87:c6:07:73:59:2d:4f:
                    37:0c:71:98:20:28:29:9e:0d:a8:bd:ff:aa:da:e7:
                    c8:3e:ad:b2:97:00:67:4f:c2:2d:68:87:71:10:3d:
                    ea:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5C:83:5B:D2:F9:C0:AE:26:C2:55:41:8F:BD:69:80:8B:7F:87:EC
            X509v3 Authority Key Identifier:
                keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b7:ea:b2:66:40:7a:fc:ff:ab:f2:75:ce:e3:7c:1f:4b:1e:
         e8:36:91:5a:84:13:d5:fc:e3:45:d9:1f:d6:b3:39:47:35:8d:
         db:61:2f:b2:a3:5c:9a:52:95:12:c5:c6:9d:88:8a:5a:92:13:
         74:dc:11:f4:35:75:11:c1:0a:3a:3c:9d:67:bb:ab:1b:bf:ce:
         b7:87:9a:61:7e:44:0d:2b:eb:b0:38:50:64:70:9e:c1:0e:8a:
         bf:e3:83:cd:1f:a3:61:db:ac:de:21:e9:8b:7c:a0:7d:4d:24:
         d9:f8:36:41:2a:48:d9:cc:65:1e:a5:15:a7:68:ac:de:c1:b4:
         72:02:c0:e6:81:a8:ff:6e:41:0e:70:d1:17:62:dc:87:6a:87:
         e1:ed:0f:67:f6:3e:ba:2e:ea:d0:cb:2c:ae:2c:14:b5:4f:47:
         d0:ca:8f:02:41:b8:de:9e:e9:4c:0b:01:b2:2e:88:93:bc:52:
         22:de:01:97:38:1e:e5:15:1b:d8:ec:d8:77:00:7a:35:31:f2:
         c3:d5:63:7b:55:7d:f7:c2:0a:84:dc:f1:76:7d:36:51:08:32:
         ca:a9:9c:4d:bb:42:f6:b3:32:b6:c3:18:a4:b5:b6:a1:b0:5a:
         8b:0c:6e:7e:06:48:de:96:5f:cf:57:6c:39:6f:2b:61:7e:2c:
         49:da:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:28:01 2026 by rpki-client