Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
File:                     9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft (raw, json)
Hash identifier:          NpOvaYbQq0yrzMaE1HyaLje8c3h2OybGkp8sWylCuug=
Subject key identifier:   75:9F:D1:BC:C6:BB:68:B9:E6:83:E4:1E:93:38:31:E3:A2:60:6D:2A
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Certificate issuer:       /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial:       3537F3493DA2CB121B77367BDE0694D46B4471E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
Manifest number:          03E1
Signing time:             Thu 26 Mar 2026 00:32:18 +0000
Manifest this update:     Thu 26 Mar 2026 00:27:18 +0000
Manifest next update:     Fri 27 Mar 2026 01:09:18 +0000
Files and hashes:         1: 38342e31392e3136302e302f31392d3234203d3e203331313033.roa (hash: mmfL5qVgg4KaXtsVE7F7YcQcdDAu4pHAKwG2SsIvh8s=)
                          2: 39352e3136392e3136312e302f32342d3234203d3e203331313033.roa (hash: rRQabZUtw+9d+Hzia7uZvMYxU4nKdcUZLHQ401GlyDU=)
                          3: 39352e3136392e3136372e302f32342d3234203d3e203631333137.roa (hash: o1Z1gv8qcijmlxmof6KbMPtO3/EITyA/CsYVvnx8Ko0=)
                          4: 39352e3136392e3139302e302f32332d3233203d3e203331313033.roa (hash: 2jXLpNlhiNv8gkIUwXJmLyEMC56nKRQgI4gcz2G4bN0=)
                          5: 39352e3136392e3136302e302f32342d3234203d3e203331313033.roa (hash: 8vr1ZciHAkne0/U9xo8m/EZoMXPqvddsbCNMYo8K6Lc=)
                          6: 39352e3136392e3136362e302f32342d3234203d3e203633313530.roa (hash: zeOelHfLdZjMH3OkxCEQZ20Nkae1JE0nc2s+xWdEEEQ=)
                          7: 39352e3136392e3137362e302f32342d3234203d3e20323033363336.roa (hash: 4wNm7SdKeRKEaBBBn2yhRi29IL7nM82igAE5n//XKpE=)
                          8: 39352e3136392e3136382e302f32342d3234203d3e20313432313436.roa (hash: /RLbW4auKS2K3rv8HhDP+gP154Hco62R6zxtZ7i34qM=)
                          9: 39352e3136392e3138392e302f32342d3234203d3e203331313033.roa (hash: GOon70I5uhhs/nnQp16QL9ir1jKCr0nAP5fOjpanC0o=)
                          10: 323030313a316236303a3a2f32392d3239203d3e203331313033.roa (hash: 43AsOxL4a9I10GSthDJXGbWZWADf4GGnRt4Iz5iDl5w=)
                          11: 39352e3136392e3138362e302f32342d3234203d3e203331313033.roa (hash: az9XmcJkBqWPeM9SkwIUOpvQgtsOMzMmDzHJH6fuDM0=)
                          12: 36322e3134312e36322e302f32342d3234203d3e203136323736.roa (hash: kK0Kj3RrwBfjRddxRkWNqDl+BI/cVmP9VgkySujZ2ic=)
                          13: 39352e3136392e3137302e302f32342d3234203d3e203239303134.roa (hash: i2xhkApVfgj04fX+hojCpQK4wvNEUE95SvVCLWaHLBA=)
                          14: 36322e3134312e35362e302f32322d3234203d3e203331313033.roa (hash: f2uzGttju8CJhu3pIUGxsulMOt6+VibQadUSWlj55ZA=)
                          15: 39352e3136392e3138382e302f32342d3234203d3e203331313033.roa (hash: 226MZdY+a2f6nMwQHLZZRp09daRbMnARjilQ0DMiCn8=)
                          16: 39352e3136392e3136392e302f32342d3234203d3e203331313033.roa (hash: I82uo/QE6Wy3PHz0iuior83bbmdz5PrUnUTfAbS8VFk=)
                          17: 3231372e3131342e3230382e302f32302d3234203d3e203331313033.roa (hash: gr03GWP2J+mWH8BIdz3eIQefsBxaCm+3XV9JFI2iBPA=)
                          18: 39352e3136392e3138372e302f32342d3234203d3e203331313033.roa (hash: dHsnX5zrNfbVbo8Cz+W65wQOwbUxto43yjszc9VCH0Y=)
                          19: 39352e3136392e3137312e302f32342d3234203d3e203239303636.roa (hash: 21lAGTMtlp02tGYNtgPFkN8EZsIZjuO0nYo5r8q+krI=)
                          20: 36322e3134312e34382e302f32312d3234203d3e203331313033.roa (hash: Eoqc9k3Yv1UQaUFZuo0jARSDnM1xTkUtiaDPuATQups=)
                          21: 39352e3136392e3137382e302f32342d3234203d3e203239383032.roa (hash: M1zdBr3dkuSPfBlr5N8fCga3HKwLGAVwQfjNqW+G7yU=)
                          22: 39352e3136392e3137332e302f32342d3234203d3e20343030383130.roa (hash: BsfJttihkJapWw7WQdwqY/fpKPjdSgxYv5Wpl/HNe4Q=)
                          23: 9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl (hash: UgSuGocnWItdx7XHVD+Qbmi1vOM+s12WC3ZX3yiuOQY=)
                          24: 38372e3131382e36342e302f31382d3234203d3e203331313033.roa (hash: 5FgGKvGyM0+sTnRzeGibD3YbS14Xm/BeG3m9Kf1UjW8=)
                          25: 39352e3136392e3137392e302f32342d3234203d3e203239303636.roa (hash: yywcvcHzn7dSwO3+wHqBp+CW/a8ZhBlrFbEf1UnM8Hk=)
                          26: 39352e3136392e3136322e302f32342d3234203d3e20343030383130.roa (hash: twnUw+h+nvEkUvESIwakkxSwyObti4EeGwb282j/Hy8=)
                          27: 39352e3136392e3138342e302f32322d3232203d3e203331313033.roa (hash: 2fESKlF0+csH+bkbWbTv3oOmUla4DBnBrtpXwsB8xtg=)
                          28: 39352e3136392e3138322e302f32342d3234203d3e203331313033.roa (hash: MIFV8cJ9qNpMecIFeReLvKdqknaaeAVxdEuriaz+uNo=)
                          29: 36322e3134312e36302e302f32332d3234203d3e203331313033.roa (hash: 7hC/7buJ7T5t4OgZLWTNq+9WScksNQKydBgZ1vBlVgM=)
                          30: 36322e3134312e36332e302f32342d3234203d3e20323039353033.roa (hash: 5iMkqdKaodGZceg7xcTo90AjAcnin/rj9yW7y461+ew=)
                          31: 39352e3136392e3137372e302f32342d3234203d3e20323133323530.roa (hash: M5z9Sux3PcsEPFPTOYmSmjuZyXZMxe8g6i7N2xLS1OI=)
                          32: 39352e3136392e3136342e302f32342d3234203d3e203136313235.roa (hash: aj4OUZvoJq+U0AKwuK7Sp8plgctJ6Yuvqf3ESjh7Rqw=)
                          33: 39352e3136392e3137352e302f32342d3234203d3e20323133333139.roa (hash: dS2LuRYQAUbAW6hHMhpL306RVrDayVVIz//Vlq4u7k8=)
                          34: 39352e3136392e3137342e302f32342d3234203d3e203233383635.roa (hash: 2vGx/b+IMIujTVU8vkd3QqlGb4NKBcI4SPBsQqJxXFU=)
                          35: 39352e3136392e3138302e302f32342d3234203d3e20323632323837.roa (hash: 6UGT1aTRnL4zp/KvN9izOc/fv/mHQQmccA1UDKjH29E=)
                          36: 39352e3136392e3138332e302f32342d3234203d3e203331313033.roa (hash: 14BjJABvK45hEO1MTADvUJ8/9d09FCU82zdQ6aYQXvA=)
                          37: 39352e3136392e3138312e302f32342d3234203d3e203331313033.roa (hash: vHIdBAX8vax4LMkHyZBnhxzL225O0XLYlxEPXB9FDh8=)
                          38: 39352e3136392e3137302e302f32342d3234203d3e203436353539.roa (hash: bwt+okxHQpNxVqhYmN6qMDI16vhwwT0tSw8hD5zYGFI=)
                          39: 39352e3136392e3136332e302f32342d3234203d3e2035303635.roa (hash: JpuEF0ephfoLAmDX8MxjtzasgCsiSynxwG0xVvE05ak=)
                          40: 39352e3136392e3137322e302f32342d3234203d3e203436353539.roa (hash: JM9dpKIanlubgpq4VNE8vCqNAhvHx6W/LlVZssjkYGI=)
                          41: 39352e3136392e3136372e302f32342d3234203d3e203239383032.roa (hash: StWFAV1ktsHSXaR84IkdQxGhH1pdr8IbInj7fnowEwI=)
                          42: 39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa (hash: Y3yWrlCcBduEqP+x2uVjELBYkUL1NaUhLPealMI045M=)
                          43: 39352e3136392e3137322e302f32342d3234203d3e203239303134.roa (hash: vOQ2CJDOAV09jGCVDUsBwTiMAv1pXrciagC9EaYFihM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:37:f3:49:3d:a2:cb:12:1b:77:36:7b:de:06:94:d4:6b:44:71:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
        Validity
            Not Before: Mar 26 00:27:18 2026 GMT
            Not After : Mar 27 01:09:18 2026 GMT
        Subject: CN=759FD1BCC6BB68B9E683E41E933831E3A2606D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:88:23:57:b1:e6:1f:5b:a0:28:41:59:16:fa:
                    1e:6a:26:39:bd:50:2e:65:96:89:51:aa:b6:94:a2:
                    36:bc:4f:ae:66:4c:cf:fe:98:c9:15:51:9d:bc:12:
                    4c:3b:46:d4:d8:12:12:f1:5e:f6:f7:c8:1f:00:ea:
                    b8:82:6b:50:9e:72:67:14:92:d1:49:f2:3c:af:8e:
                    7c:22:4a:c3:bc:70:31:e4:48:4c:68:dc:08:cd:80:
                    2d:2a:d0:9d:5e:ca:f7:80:d7:47:7e:ec:cd:49:58:
                    5d:2d:c7:44:3e:5b:eb:ef:ac:ff:6b:82:96:08:83:
                    f3:c6:80:07:f4:1c:67:f1:d5:2c:45:d6:a6:3a:9c:
                    d0:87:a0:dd:07:b8:7d:c9:c1:f7:d5:e5:bf:a9:f5:
                    f8:8a:4d:09:f4:19:bd:26:66:86:da:28:f4:42:80:
                    86:35:c7:bb:ce:d6:7a:05:bf:40:0c:2a:74:f6:b2:
                    a7:8e:5b:3e:cf:b2:e1:e9:5d:ca:0c:93:03:f9:48:
                    5c:a0:b3:d6:e9:46:f4:61:eb:19:bc:9f:92:82:d7:
                    7d:80:c1:fc:7f:9f:cb:aa:6e:1a:12:0a:94:f4:d0:
                    49:c7:3c:f3:18:38:8b:63:be:a4:87:65:66:d4:d2:
                    5a:10:eb:a2:c3:c7:24:18:29:4d:db:7f:7b:f2:35:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9F:D1:BC:C6:BB:68:B9:E6:83:E4:1E:93:38:31:E3:A2:60:6D:2A
            X509v3 Authority Key Identifier:
                keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a9:c0:66:16:4b:8c:65:d7:b3:f7:a1:22:06:de:62:b2:a4:
         1a:f4:f8:99:95:39:89:df:e3:a7:ca:75:81:80:48:da:f8:af:
         a9:60:a0:72:95:a4:74:af:ee:5c:a8:bf:f1:b9:52:d9:b1:2c:
         79:5d:4f:e0:86:f5:60:d2:55:4f:44:f0:57:39:7d:7d:d3:8d:
         07:14:f8:c0:f5:b8:9a:99:4e:06:d0:b8:fc:9a:15:39:4a:92:
         24:76:d9:bf:da:8a:a2:46:79:87:99:ca:ca:74:0e:d2:22:bf:
         bd:16:b8:52:17:0e:27:6f:36:6f:93:13:c6:6f:8f:8a:99:29:
         5b:1c:e2:81:6b:47:44:1a:ef:1f:97:bf:0f:02:5f:63:bd:bc:
         3b:ad:9b:56:c3:b5:0e:3f:7a:96:91:8c:37:46:85:7c:1d:a1:
         63:64:cc:48:2f:bd:2d:60:26:e0:d6:58:a0:87:a5:59:4a:bb:
         dd:f4:24:43:b5:f8:7b:f5:8a:4b:90:02:4f:86:a1:5b:d1:4b:
         32:8d:cf:2e:f5:37:f9:ab:e7:70:6e:f8:c3:1e:6f:fe:4f:3e:
         6f:30:54:0b:3b:7a:77:93:e7:3b:4a:4b:8d:f4:dd:71:ac:c8:
         c0:73:e8:49:5c:6b:6b:5c:12:ae:5d:14:45:61:c1:47:c8:12:
         a5:33:55:5b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUNTfzST2iyxIbdzZ73gaU1GtEceUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNjAzMjYwMDI3MThaFw0yNjAzMjcwMTA5MThaMDMxMTAvBgNV
BAMTKDc1OUZEMUJDQzZCQjY4QjlFNjgzRTQxRTkzMzgzMUUzQTI2MDZEMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7iCNXseYfW6AoQVkW+h5qJjm9
UC5llolRqraUoja8T65mTM/+mMkVUZ28Ekw7RtTYEhLxXvb3yB8A6riCa1CecmcU
ktFJ8jyvjnwiSsO8cDHkSExo3AjNgC0q0J1eyveA10d+7M1JWF0tx0Q+W+vvrP9r
gpYIg/PGgAf0HGfx1SxF1qY6nNCHoN0HuH3JwffV5b+p9fiKTQn0Gb0mZobaKPRC
gIY1x7vO1noFv0AMKnT2sqeOWz7PsuHpXcoMkwP5SFygs9bpRvRh6xm8n5KC132A
wfx/n8uqbhoSCpT00EnHPPMYOItjvqSHZWbU0loQ66LDxyQYKU3bf3vyNfDhAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUdZ/RvMa7aLnmg+Qekzgx46JgbSowHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNWU2NDAzMC0y
ZjI4LTQyYzktYjAwNC0zNTRiYjI4ZjYxMjMvMC85RTU3Njk5NjM4OEU5NEI4QzdB
QjIwRUZGQjIzQkQxMUJFQ0I0MTA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6nAZhZLjGXXs/ehIgbe
YrKkGvT4mZU5id/jp8p1gYBI2vivqWCgcpWkdK/uXKi/8blS2bEseV1P4Ib1YNJV
T0TwVzl9fdONBxT4wPW4mplOBtC4/JoVOUqSJHbZv9qKokZ5h5nKynQO0iK/vRa4
UhcOJ282b5MTxm+PipkpWxzigWtHRBrvH5e/DwJfY728O62bVsO1Dj96lpGMN0aF
fB2hY2TMSC+9LWAm4NZYoIelWUq73fQkQ7X4e/WKS5ACT4ahW9FLMo3PLvU3+avn
cG74wx5v/k8+bzBUCzt6d5PnO0pLjfTdcazIwHPoSVxra1wSrl0URWHBR8gSpTNV
Ww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:32 2026 by rpki-client