Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
File:                     35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json)
Hash identifier:          dpP7bItOT+oqdIBWmvFDZWH9z2xogMQshRlwr9Bzd50=
Subject key identifier:   C3:36:EF:55:84:B6:AE:1D:8B:B4:63:61:2C:34:8C:1A:44:72:68:2D
Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
Certificate issuer:       /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Certificate serial:       65500CC6052E78FE4274461509C57AB9C9F8C065
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
Manifest number:          0318
Signing time:             Mon 05 Oct 2026 20:01:20 +0000
Manifest this update:     Mon 05 Oct 2026 19:56:20 +0000
Manifest next update:     Tue 06 Oct 2026 21:11:20 +0000
Files and hashes:         1: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: RGywHnxAYLuO6cDdu+OqsmlkwS7ZjWl9Xx30KtT8IYc=)
                          2: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: Du6XWNQBhIQA4uOaxd1Haw76QgSiS+4apGjB7w99jkw=)
                          3: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: qMwS539lNZFoubA7sJWCkka1wt0G8zXYNPGQsBc3Exo=)
                          4: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: UDRqDR0JMowXqg92cpDjRfR7VLQyzzQdpbzczBoUKPE=)
                          5: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: DLjQUjmP+DsaW9+BMh56ieI2Ec94mZJVyHTBFU7NtcI=)
                          6: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: fNdgpZfzM+lTdkTHtAnx5kJSH3iOKuMJEshssLvwnVk=)
                          7: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: WHkf4m6DzfoyrufCoOAxeFwtqFzFGCors6ZbsGaGLa8=)
                          8: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: tf4CnuzuqcNJkCPREEFPykMzx34y8Ud9hQ2hyeqIDkc=)
                          9: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: GU9+rKAYRqNo9YIwP+TkUZlOwC3QOJ/ceUAdYXuG73A=)
                          10: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: vUmqEtEfYQI1zWEs+VA6phQsPoAXeEbQEq0Kg2kwRRk=)
                          11: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: sHH5EXfl8KcOz9d8oEb74NyMVuJWDbdSziQULSKFDd4=)
                          12: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: BgI8MCbrdQrLXGBmcxKTWUA61uXQRIT/7G+jUcNg+Cg=)
                          13: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: r2FAoLHwIu8mKalLeNKMfevbe6TYD4tj8Lmhtg3K0Jc=)
                          14: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: hhnXez1MtyG/OWqeDWj8Yk7vwpb6xK8SsXbhq+WvHw8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 20:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:50:0c:c6:05:2e:78:fe:42:74:46:15:09:c5:7a:b9:c9:f8:c0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
        Validity
            Not Before: Oct  5 19:56:20 2026 GMT
            Not After : Oct  6 21:11:20 2026 GMT
        Subject: CN=C336EF5584B6AE1D8BB463612C348C1A4472682D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:7b:9c:f9:4d:a6:68:34:0a:a3:95:02:a1:
                    74:01:0f:18:f7:24:57:5d:b8:97:ff:c3:05:c2:a0:
                    ab:ac:1e:3b:c2:ff:b1:cc:1a:67:79:5a:68:a5:c9:
                    58:69:71:dd:ac:45:65:8c:0b:2d:76:11:5d:da:d3:
                    10:9b:7f:70:c9:52:ac:ae:34:4d:55:96:1d:82:ce:
                    f3:a3:0b:55:2b:36:88:26:9d:5f:28:c4:39:14:4f:
                    b5:f9:8f:0f:37:5f:33:be:6e:55:21:be:a0:6a:57:
                    51:c2:6a:26:cf:57:7a:5b:3c:62:af:27:51:63:68:
                    3e:17:6f:6a:56:03:19:ab:ca:ef:f9:f5:30:e2:1a:
                    f0:30:56:e5:5b:60:0b:f4:78:3b:af:73:03:0e:1d:
                    2d:ce:b0:f6:a5:50:5c:f5:60:0e:20:36:8a:41:99:
                    07:6e:6c:e6:c5:ab:ae:b4:7e:81:56:3a:7d:f2:f8:
                    60:fd:c0:ea:37:bf:10:c5:25:d0:af:c9:31:0d:40:
                    f8:fc:82:fe:21:0d:61:f4:00:e7:8f:14:7b:33:04:
                    53:0c:3d:6a:3d:67:55:7b:c1:15:e1:33:7e:8a:ae:
                    8a:e2:50:75:a0:43:bb:64:3a:f3:14:1b:72:4e:ee:
                    bd:7e:64:95:b8:94:49:e7:38:5e:3d:95:4b:43:82:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:36:EF:55:84:B6:AE:1D:8B:B4:63:61:2C:34:8C:1A:44:72:68:2D
            X509v3 Authority Key Identifier:
                keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:40:f7:dd:ed:59:b7:a5:cb:e8:a2:be:34:b3:94:01:9b:d4:
         7e:5d:08:1b:5c:fd:8e:75:c9:05:f2:e1:e9:70:4a:34:f5:15:
         c3:d5:85:98:d3:18:b5:17:de:49:42:41:98:eb:d5:ba:34:f9:
         fe:68:06:cd:a6:96:05:23:f0:e8:1c:cd:c6:1e:5d:e9:84:b5:
         3a:16:6c:30:28:15:ca:4f:e9:60:c4:7a:bf:12:46:56:3a:24:
         ae:86:8d:71:d4:03:be:df:c6:7b:97:dd:a1:5c:fb:55:3f:a9:
         92:88:af:07:80:bb:d4:dd:06:c5:98:53:b9:8c:54:17:18:c0:
         75:2c:ff:4e:8e:1c:79:51:bc:98:7f:39:95:99:69:dc:a6:44:
         ae:43:4b:17:b8:46:dd:c1:9a:e7:91:6d:28:03:93:e4:76:4a:
         c7:e3:e4:4c:08:78:da:be:ea:28:56:90:28:3d:15:3d:0b:eb:
         b5:9b:13:78:a8:c3:e6:9e:c9:94:e3:37:ef:3b:43:4c:66:9e:
         e0:f9:d2:37:7a:00:01:c6:b9:df:b8:aa:b1:9e:b9:22:7a:a0:
         83:4b:4a:fe:4f:3c:fc:e9:96:00:be:f4:d1:06:b7:67:e6:75:
         3a:42:3b:76:f3:46:9e:e2:99:14:9d:50:6c:1c:f5:a8:e4:94:
         d6:e2:63:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:02:52 2026 by rpki-client