Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
File:                     C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json)
Hash identifier:          VYpFm4wOF+xoY37Qk9YoQqYGYW/e1oeyemmxjo4eMc8=
Subject key identifier:   D5:D0:3F:F3:07:84:06:CB:10:59:1A:60:67:E6:69:E2:76:42:A1:AA
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Certificate issuer:       /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial:       3E6598AAC20394EA953CF7E40D0B35FB49ACE43D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
Manifest number:          0370
Signing time:             Thu 23 Jul 2026 17:04:05 +0000
Manifest this update:     Thu 23 Jul 2026 16:59:05 +0000
Manifest next update:     Fri 24 Jul 2026 19:44:05 +0000
Files and hashes:         1: 3130332e34392e3132382e302f32342d3234203d3e203231383539.roa (hash: Gks1amT+rPKiG3Iiuhmb/CKRKvNQxK+jCx7Bb8Ah+xI=)
                          2: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=)
                          3: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=)
                          4: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: 7bNrxcvUZ17BVt7tVCbbxISD5HLTvxOeQrmUPkwlG/E=)
                          5: 33312e32322e3130372e302f32342d3234203d3e203231383539.roa (hash: H9RX18ry704+3Lwdrl6eHWWzt2tUSs0nSGFnEmOomuw=)
                          6: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: uRUTbbdZ8AYVGvK3CKTe3KYxaaV1m1bGyvfgh/rstUI=)
                          7: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=)
                          8: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: e3yeUvIbF4YF0fCErBT4H99U9jC9XkRZUBr3LRE9AVI=)
                          9: 3130332e34392e3133302e302f32342d3234203d3e20313939363935.roa (hash: RDauoDGr+i1zVcuayu/4HbEUes85SAVA7OzOaH8ZkX8=)
                          10: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=)
                          11: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: mrhcfWgRRbYM5U4SMSfm8Wa4Mybtv5w2xzIHwVbG41I=)
                          12: 33312e32322e3130352e302f32342d3234203d3e20323030383539.roa (hash: nw9YLvM7zXyP2kzR5sTyAuZwaZ0QV0qAmB4zg2Dg+gg=)
                          13: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY=)
                          14: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=)
                          15: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=)
                          16: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=)
                          17: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA=)
                          18: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=)
                          19: 34332e3233302e38342e302f32342d3234203d3e20383334.roa (hash: OQONGY7ev9MHL6KcmLNI4VRbuiwt+0FWiBeBJLdgRto=)
                          20: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:65:98:aa:c2:03:94:ea:95:3c:f7:e4:0d:0b:35:fb:49:ac:e4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
        Validity
            Not Before: Jul 23 16:59:05 2026 GMT
            Not After : Jul 24 19:44:05 2026 GMT
        Subject: CN=D5D03FF3078406CB10591A6067E669E27642A1AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:2c:47:28:2e:95:5c:16:03:f6:f9:7a:cf:
                    c8:44:37:0f:a9:3a:36:8e:af:23:a0:5e:cb:3a:83:
                    ef:fc:73:a3:24:93:3b:36:0e:46:07:19:e5:31:40:
                    7c:21:00:8b:51:ec:43:e8:4e:c3:38:2d:c4:f7:10:
                    85:61:36:f1:6e:13:e2:77:83:61:9d:f7:d6:60:79:
                    a9:ee:cf:74:89:13:5c:7a:81:78:6a:c7:17:d2:14:
                    be:9b:ab:fc:fa:a8:bc:ba:cb:68:47:5b:1b:6b:8b:
                    a8:65:cd:b4:1f:6c:94:f4:25:a9:55:6e:61:49:1b:
                    55:d8:34:ab:7b:18:34:85:d9:46:33:17:76:09:f1:
                    95:66:2e:ee:6c:8a:2b:1c:13:c2:59:90:9a:bc:72:
                    3f:bc:40:08:4c:c5:fc:96:a8:85:86:65:e7:bc:42:
                    a4:ec:d6:93:1e:28:a9:d3:33:14:b8:64:be:89:32:
                    41:53:7c:e5:0c:5f:82:6d:29:15:51:05:ce:65:6c:
                    b4:13:16:a5:39:68:72:72:7e:58:18:4b:7e:75:7f:
                    b9:91:99:f7:e1:b9:e3:be:43:0b:e0:be:53:4c:76:
                    ba:f2:2b:26:5b:b7:65:34:be:9e:6c:69:6f:8a:e2:
                    80:ba:4f:46:96:12:97:7e:c2:e9:6a:5e:db:95:ff:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D0:3F:F3:07:84:06:CB:10:59:1A:60:67:E6:69:E2:76:42:A1:AA
            X509v3 Authority Key Identifier:
                keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:20:23:53:38:35:21:c7:27:97:22:5e:fa:8f:44:69:3b:4b:
         80:af:6f:0a:ac:eb:0e:9a:58:22:7d:4b:0f:7d:b5:c5:ee:38:
         93:77:16:4e:99:23:a2:b8:a9:b0:eb:de:f0:69:7b:56:84:e3:
         2f:ab:63:0c:88:c0:da:46:8a:c0:1e:91:2e:a8:2c:ca:b2:c7:
         c0:48:1c:64:09:2b:f7:34:19:65:69:f3:2f:48:9f:a0:0b:77:
         8c:bd:1a:f3:c7:78:50:51:e0:d4:a2:92:84:d4:5a:e4:be:9c:
         25:f3:71:71:2b:a2:ea:aa:7b:2c:00:b2:ab:7c:98:35:2c:b0:
         53:6e:bb:8a:cc:97:71:88:12:3b:31:52:7c:0f:22:ca:cd:92:
         84:a3:95:39:f2:69:7d:66:90:68:9c:02:30:c8:ee:ef:53:6a:
         b3:47:ad:8c:99:95:7d:14:d8:0a:36:76:de:9a:8e:a5:89:31:
         c9:84:2e:6b:7c:48:7c:bc:2e:68:aa:ab:35:d3:5d:0a:64:8c:
         f6:30:34:e3:3e:14:71:44:00:76:8f:2c:4c:cd:cc:cb:63:99:
         57:d7:1a:a9:f5:05:6c:d8:19:b0:b5:fe:cc:67:b8:e2:b3:97:
         6a:ef:1a:88:94:0c:ea:09:9f:62:af:ab:6e:92:87:ff:19:16:
         24:5e:70:01
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUPmWYqsIDlOqVPPfkDQs1+0ms5D0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNjA3MjMxNjU5MDVaFw0yNjA3MjQxOTQ0MDVaMDMxMTAvBgNV
BAMTKEQ1RDAzRkYzMDc4NDA2Q0IxMDU5MUE2MDY3RTY2OUUyNzY0MkExQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pSxHKC6VXBYD9vl6z8hENw+p
OjaOryOgXss6g+/8c6Mkkzs2DkYHGeUxQHwhAItR7EPoTsM4LcT3EIVhNvFuE+J3
g2Gd99Zgeanuz3SJE1x6gXhqxxfSFL6bq/z6qLy6y2hHWxtri6hlzbQfbJT0JalV
bmFJG1XYNKt7GDSF2UYzF3YJ8ZVmLu5siiscE8JZkJq8cj+8QAhMxfyWqIWGZee8
QqTs1pMeKKnTMxS4ZL6JMkFTfOUMX4JtKRVRBc5lbLQTFqU5aHJyflgYS351f7mR
mffhueO+QwvgvlNMdrryKyZbt2U0vp5saW+K4oC6T0aWEpd+wulqXtuV/0Z5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU1dA/8weEBssQWRpgZ+Zp4nZCoaowHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02
ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5
QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyAjUzg1IccnlyJe+o9E
aTtLgK9vCqzrDppYIn1LD321xe44k3cWTpkjoripsOve8Gl7VoTjL6tjDIjA2kaK
wB6RLqgsyrLHwEgcZAkr9zQZZWnzL0ifoAt3jL0a88d4UFHg1KKShNRa5L6cJfNx
cSui6qp7LACyq3yYNSywU267isyXcYgSOzFSfA8iys2ShKOVOfJpfWaQaJwCMMju
71Nqs0etjJmVfRTYCjZ23pqOpYkxyYQua3xIfLwuaKqrNdNdCmSM9jA04z4UcUQA
do8sTM3My2OZV9caqfUFbNgZsLX+zGe44rOXau8aiJQM6gmfYq+rbpKH/xkWJF5w
AQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:10:55 2026 by rpki-client