Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File:                     0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier:          uxdfpAXPONcI3ekHCe2Pw44myPYFvBk8jg1/dScHySY=
Subject key identifier:   E3:58:08:44:B6:CE:B1:10:9D:4D:C3:8A:19:0E:60:B6:36:C2:F6:FA
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer:       /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial:       635666299773CA0B1998C108384CD7C63DE47003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number:          038F
Signing time:             Thu 26 Mar 2026 02:32:38 +0000
Manifest this update:     Thu 26 Mar 2026 02:27:38 +0000
Manifest next update:     Fri 27 Mar 2026 05:54:38 +0000
Files and hashes:         1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: iQJdFNvmnBylFBuJvd/qYphqabolM70y1ni+4ztYBPs=)
                          2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:56:66:29:97:73:ca:0b:19:98:c1:08:38:4c:d7:c6:3d:e4:70:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
        Validity
            Not Before: Mar 26 02:27:38 2026 GMT
            Not After : Mar 27 05:54:38 2026 GMT
        Subject: CN=E3580844B6CEB1109D4DC38A190E60B636C2F6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c5:ed:cc:18:77:ff:62:af:75:39:ee:39:d8:
                    67:12:ab:79:ee:9b:35:7e:a3:1a:8e:6d:d1:a3:a7:
                    36:6a:fa:d5:f9:90:f3:47:6f:72:a6:41:41:b8:36:
                    6a:58:b9:59:4a:0e:b1:ee:2f:cc:6e:1d:1f:92:df:
                    34:41:f5:d4:ca:9b:69:cc:d8:db:9f:12:2f:8d:f3:
                    bd:bc:32:1a:14:7e:f0:10:61:3e:14:ee:d3:54:43:
                    f4:0a:61:07:93:85:47:51:20:5a:70:d3:a1:fc:4a:
                    a4:14:c8:76:13:95:e9:4c:42:3b:df:09:d5:e4:e9:
                    f3:20:0f:22:37:80:93:cb:f8:4a:99:09:dd:13:5f:
                    2f:7d:2c:23:c1:e2:0d:3f:1b:7d:f5:fa:ac:20:c9:
                    97:78:19:5f:42:83:df:3a:80:62:f8:af:aa:cd:63:
                    d3:76:4a:e5:e1:e7:6e:46:86:f0:b2:f5:92:84:5b:
                    27:bd:37:4f:de:1b:c5:4d:de:58:18:94:0c:b8:b3:
                    d6:f3:fb:fe:06:8a:99:d2:cc:ca:8e:1f:4d:f9:0a:
                    47:ad:c5:c1:5b:c2:79:f7:f7:b7:47:5d:7b:f2:9f:
                    7f:c8:33:2b:16:93:ee:e7:21:ed:86:0a:7f:92:ac:
                    93:d7:ed:6d:3d:75:ca:1b:3e:a1:43:f6:61:d3:9e:
                    ee:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:58:08:44:B6:CE:B1:10:9D:4D:C3:8A:19:0E:60:B6:36:C2:F6:FA
            X509v3 Authority Key Identifier:
                keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:4a:15:1a:89:c3:0c:72:49:11:6a:a3:3e:37:cc:8a:c6:e6:
         58:13:3f:e8:69:81:a5:a2:ab:d2:b1:c1:95:74:7b:16:94:50:
         67:bd:8e:7d:65:b4:77:99:51:e1:6d:0c:ed:78:f3:53:6b:3c:
         c2:a8:76:99:ca:81:4f:9f:af:9e:10:20:ba:36:74:12:64:c6:
         57:34:dd:6a:25:31:b4:e3:82:f4:fc:08:07:31:c0:2d:18:4c:
         19:6c:a9:a6:6f:51:b1:78:1b:9e:78:07:63:31:2c:0d:1a:87:
         38:11:22:04:16:e0:46:a6:0d:25:46:25:6a:40:c1:83:1d:1c:
         88:c1:28:c8:bb:b5:d9:49:ba:7c:0a:be:41:87:4b:56:24:ab:
         cb:7b:f9:a7:f4:8c:00:9a:51:0f:4a:fc:d8:06:76:37:f1:60:
         db:5a:c6:15:1d:95:41:a4:36:55:5c:08:e4:81:0c:8c:24:13:
         b6:e9:45:60:84:ab:bb:b6:f7:5a:25:df:19:66:f6:d2:29:99:
         67:45:a3:76:0c:f8:20:2e:1d:d3:0e:83:b8:5c:2d:67:23:31:
         20:23:e3:3c:19:8f:e7:d0:15:d2:61:c5:cf:98:f6:b8:b7:5d:
         51:07:91:68:24:31:9d:d7:a9:45:00:89:a5:d6:fa:b6:d2:55:
         ec:cf:89:2a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUY1ZmKZdzygsZmMEIOEzXxj3kcAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk5MzI4OWIxNjhhMzdkNDQ5YmMwZDQ0YjFhZDM1ZTUz
MjAyNWNmMTAeFw0yNjAzMjYwMjI3MzhaFw0yNjAzMjcwNTU0MzhaMDMxMTAvBgNV
BAMTKEUzNTgwODQ0QjZDRUIxMTA5RDREQzM4QTE5MEU2MEI2MzZDMkY2RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlxe3MGHf/Yq91Oe452GcSq3nu
mzV+oxqObdGjpzZq+tX5kPNHb3KmQUG4NmpYuVlKDrHuL8xuHR+S3zRB9dTKm2nM
2NufEi+N8728MhoUfvAQYT4U7tNUQ/QKYQeThUdRIFpw06H8SqQUyHYTlelMQjvf
CdXk6fMgDyI3gJPL+EqZCd0TXy99LCPB4g0/G331+qwgyZd4GV9Cg986gGL4r6rN
Y9N2SuXh525GhvCy9ZKEWye9N0/eG8VN3lgYlAy4s9bz+/4GipnSzMqOH035Cket
xcFbwnn397dHXXvyn3/IMysWk+7nIe2GCn+SrJPX7W09dcobPqFD9mHTnu4bAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU41gIRLbOsRCdTcOKGQ5gtjbC9vowHwYDVR0j
BBgwFoAUCZMomxaKN9RJvA1Esa015TICXPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTNiZDJkMmUtZjQwZS00NzJlLTlmOGYtODk4NGZlYWFh
NWM3LzAvMDk5MzI4OUIxNjhBMzdENDQ5QkMwRDQ0QjFBRDM1RTUzMjAyNUNGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NaTW9teGFLTjlSSnZBMUVzYTAxNVRJ
Q1hQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lM2JkMmQyZS1m
NDBlLTQ3MmUtOWY4Zi04OTg0ZmVhYWE1YzcvMC8wOTkzMjg5QjE2OEEzN0Q0NDlC
QzBENDRCMUFEMzVFNTMyMDI1Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzEoVGonDDHJJEWqjPjfM
isbmWBM/6GmBpaKr0rHBlXR7FpRQZ72OfWW0d5lR4W0M7XjzU2s8wqh2mcqBT5+v
nhAgujZ0EmTGVzTdaiUxtOOC9PwIBzHALRhMGWyppm9RsXgbnngHYzEsDRqHOBEi
BBbgRqYNJUYlakDBgx0ciMEoyLu12Um6fAq+QYdLViSry3v5p/SMAJpRD0r82AZ2
N/Fg21rGFR2VQaQ2VVwI5IEMjCQTtulFYISru7b3WiXfGWb20imZZ0Wjdgz4IC4d
0w6DuFwtZyMxICPjPBmP59AV0mHFz5j2uLddUQeRaCQxndepRQCJpdb6ttJV7M+J
Kg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:05 2026 by rpki-client