Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
File:                     0D059F10D18D00052C808EB8069F90D47E30564A.mft (raw, json)
Hash identifier:          ayT9BMKMTTtjqOArDu7S19DZMYfwJpWrMAqy13JIQFM=
Subject key identifier:   BD:C8:75:FC:FC:A2:92:17:62:03:3E:F5:99:24:14:90:3D:78:3A:35
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Certificate issuer:       /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial:       6A6E3C6F8E5F8E130E856BAC3DFE19AFF4885C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
Manifest number:          0612
Signing time:             Wed 25 Mar 2026 10:20:23 +0000
Manifest this update:     Wed 25 Mar 2026 10:15:23 +0000
Manifest next update:     Thu 26 Mar 2026 12:28:23 +0000
Files and hashes:         1: 34352e3134362e3130362e302f32342d3234203d3e20323032373336.roa (hash: MMdb5hdxzSDftqblycIDCKP70I+p+jFdwcOY1SSaT3g=)
                          2: 34352e38302e352e302f32342d3234203d3e20323039303433.roa (hash: xEbHzWDrK9qb49s7Sh7bzbMji3lX1NO1D6/xKNr3tPo=)
                          3: 38322e3131382e32392e302f32342d3234203d3e20323036303932.roa (hash: wVyOrO0P1oozn0Q2ajYhvKJnhXudTg7Oa3BgjMasSeY=)
                          4: 38322e3131382e32392e302f32342d3234203d3e20323036313530.roa (hash: g5RZ2zBNk+trtkyb9Rf7BXLU9n0Q1hk7LEirQx9bPLk=)
                          5: 3134312e39382e37342e302f32342d3234203d3e20343030383130.roa (hash: fwz/d7S5BIVi9KVNnGw2k82c/snsFesvd7vNCeAko8c=)
                          6: 38322e3131382e33302e302f32342d3234203d3e20323036303932.roa (hash: wL/aEFW/10+Xf1wWCXVTzJ5EPb98oEAIceQ47oaOw4Q=)
                          7: 38322e3131382e33312e302f32342d3234203d3e203136353039.roa (hash: VEoo3CL9NzqZNAIdwihXM68+oDB2NsRHzlmj9zV4IGI=)
                          8: 3231332e3232352e3233362e302f32342d3234203d3e20333239303937.roa (hash: V4nWrAqYogYLhOaQiLzsxwLWwHJQjIGX7Xia4HxPj88=)
                          9: 39322e3131342e352e302f32342d3234203d3e203239383032.roa (hash: rd0Okun09SrmxDlwt39WDyG8IjHWTRiQb15ihRsza7c=)
                          10: 34352e3133322e39382e302f32342d3234203d3e203137343937.roa (hash: IUP3XlWIZyG1H0S4Enjx7/28GyminuOHnPP/iqw0LYA=)
                          11: 34352e3133322e39392e302f32342d3234203d3e20323030303137.roa (hash: 1e6KGKJ5HwO24hcbCuLCEbl9bSZRGHbgSZb9IcX6KlU=)
                          12: 38322e3131382e32372e302f32342d3234203d3e203633313939.roa (hash: V+jeVcogjVd1VC8CUmfpfLrIfXxrhrosPsDTqxOFxGU=)
                          13: 3134312e39382e37352e302f32342d3234203d3e203531383437.roa (hash: mmqCGRZJYHvpVg45WvFtGLJd+4UTpkk7nfaHn0CIReI=)
                          14: 3134312e39382e37322e302f32342d3234203d3e20333935333734.roa (hash: u1fQ+rVhDflp4Ai9Ov6sYLAl6cAPMrlPrKX3yjIts6M=)
                          15: 34352e3134362e3130352e302f32342d3234203d3e20323132323338.roa (hash: V9x7UhaM0q29T8H8XPtdaeU7ryeW8HoO7AB5EWt3qxM=)
                          16: 38322e3131382e32382e302f32342d3234203d3e203633343733.roa (hash: /7GMMsUMyFrJrnMnDEzfi+lqT3G8DknrixPBv42IHZk=)
                          17: 3231322e322e3233362e302f32342d3234203d3e203632313634.roa (hash: hYVDhA7clFCFhyHx8qb8eGJJtW1LMi+8HW6eGQBn2Ks=)
                          18: 34352e38302e372e302f32342d3234203d3e203631333137.roa (hash: BWTAt9eN5lq1XIWTYmYop12am0B+QaBbtHGUC//h6CQ=)
                          19: 38322e3131382e32352e302f32342d3234203d3e20323030303137.roa (hash: sViFIZ6OozSjA5pHbhyv+L6dE4R+g28oMJzVvvg6Z8A=)
                          20: 34352e3134362e3130362e302f32342d3234203d3e203535323031.roa (hash: uQC20MmSjy1Cc5RYjKHMaAo4fj5NpzuBkQBiuImfQRw=)
                          21: 34352e3134362e3130362e302f32342d3234203d3e20323136313338.roa (hash: 01Vb2KSNzkh/GGzFrCIjs5tLsppA7mVVMUUDmrHzNok=)
                          22: 34352e3133322e39372e302f32342d3234203d3e203434383033.roa (hash: R5UKbrult62Xuj1AnmXZm1Tgj84EbOaPR6wItJF1C0E=)
                          23: 3134312e39382e37352e302f32342d3234203d3e20313437323933.roa (hash: o5LuDMZypsd22aAoxdJpiH2NjLEUg+uICc0EHPajqH4=)
                          24: 3134312e39382e37352e302f32342d3234203d3e20313439353032.roa (hash: lbd7+tkFet96dqBbAJbAIS+ZvcIfxp2hUTAspPLz4uc=)
                          25: 34352e38302e362e302f32342d3234203d3e20313337343039.roa (hash: mQ6YzssFE/nFARpdXzey7q80X9EpUm3gxUnbZxsMHUo=)
                          26: 3231332e3232352e3233392e302f32342d3234203d3e20323030343335.roa (hash: O7QMeYzn5CU54U41dRj25GyQDZmXVewrr09DSGAvfjQ=)
                          27: 34352e3134362e3130372e302f32342d3234203d3e20383334.roa (hash: LDmyleCyxnH/eZIamhqz2TqIjAFvnBVzunzHiGQHRm8=)
                          28: 38322e3131382e32342e302f32342d3234203d3e203537323338.roa (hash: bmsf/k40eGdN++deEP9l4aJt3nVGJ9evXaZOAbsRiUU=)
                          29: 34352e3133322e39362e302f32342d3234203d3e20323037393932.roa (hash: zTkx6ethJk5GNvgY58qt1j+71GYO+nVWeXjRY2w4pio=)
                          30: 3231322e322e3233392e302f32342d3234203d3e203631333137.roa (hash: 88ZqPS4KLL3VUrzEGEoOTIi444han9774YJzqSj1Xig=)
                          31: 38322e3131382e32362e302f32342d3234203d3e20323132343737.roa (hash: M3/fBiajTDnmjbsUTFc/VWwOxC3a0iuPTsEteuhOl7k=)
                          32: 38322e3131382e33312e302f32342d3234203d3e20313431313538.roa (hash: OTAxxu80qZiAdbkhEohivnmoAej12d8cy3FA1djbGTU=)
                          33: 3231332e3232352e3233382e302f32342d3234203d3e20323732363932.roa (hash: /lE504/n5MHV61y4OXy6umkppSIjj02+bYfLKI4SboQ=)
                          34: 38322e3131382e33302e302f32342d3234203d3e20323036313530.roa (hash: kMPtJcjG9tfatTfMeU7MeMrJk9DMb6WVWPy6p9Bto5Q=)
                          35: 3134312e39382e37332e302f32342d3234203d3e203239383032.roa (hash: gwnYrQgA15W8GFygLMrf5+rqfQdFrOY9bW2on2hjPo0=)
                          36: 34352e3134362e3130342e302f32342d3234203d3e20323039303433.roa (hash: tzVyCbi/1s2sAONAoNlHgjzWVTtlSGS7jXqFeBq7bKc=)
                          37: 3231322e322e3233372e302f32342d3234203d3e203231383430.roa (hash: L3ESl8pbUNlgeTu9V2jD2ZSXQbLunRFyb09yQ4PEhVI=)
                          38: 3231332e3232352e3233372e302f32342d3234203d3e203538303631.roa (hash: 8UBcrBGIxZo60irVr28Bi5OYSE5ftJ/XRCDxxwd9m54=)
                          39: 0D059F10D18D00052C808EB8069F90D47E30564A.crl (hash: LZ93H34GrIyY4swQSjesj4+Hfm/WwqoBd1Iv+IWuM1Y=)
                          40: 39322e3131342e342e302f32342d3234203d3e20323136313832.roa (hash: iZcvzrTApwMe/mgD5dwZ8ER2vxVuWX1nP07r98rondE=)
                          41: 326130333a323738303a3a2f33322d3332203d3e203537323338.roa (hash: Z/f6e8Rau3EGgtTxd7qltXWmXln+q6Zo5F9lst2q60c=)
                          42: 38322e3131382e33312e302f32342d3234203d3e203134363138.roa (hash: M8A4pv7Ga3lILjGKJMYzZ7C0KqHQjVqHGnt7ZKgmIHQ=)
                          43: 34352e38302e342e302f32342d3234203d3e20323132323338.roa (hash: npswCjhZwGUKkzdggvkjMlGfXXw2LDR0r8SW9RnhBIc=)
                          44: 34352e38302e372e302f32342d3234203d3e203239383032.roa (hash: uf7MkTsmUmcfwWZlwmONFUR+MG54zC454PvItoE4C3I=)
                          45: 3231322e322e3233382e302f32342d3234203d3e203432383331.roa (hash: tf49q1rk4Zhil8rfNPBeN/HXxcZJ+bN4j9DGsJwb1yg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6e:3c:6f:8e:5f:8e:13:0e:85:6b:ac:3d:fe:19:af:f4:88:5c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
        Validity
            Not Before: Mar 25 10:15:23 2026 GMT
            Not After : Mar 26 12:28:23 2026 GMT
        Subject: CN=BDC875FCFCA2921762033EF5992414903D783A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1b:5e:43:58:7a:c7:fd:e1:95:d1:e7:eb:6a:
                    ad:f7:32:a6:ac:4b:d5:72:06:1a:69:24:7b:0f:5b:
                    8a:49:5a:92:f2:4a:f6:27:5d:a7:a9:c8:3a:4c:5e:
                    03:04:72:b3:4f:c7:2a:5e:46:fa:20:cc:8f:c4:b7:
                    08:58:78:60:f7:57:17:b4:ed:b6:da:b8:96:e5:a8:
                    7e:0b:e9:6b:04:e6:10:4d:41:62:f7:cb:64:cd:20:
                    ff:2d:0d:e2:d8:7b:2e:ca:0c:c7:94:ed:cf:41:aa:
                    cf:2b:6f:3d:36:73:f3:b5:1d:4d:7a:5e:6b:cb:66:
                    ee:5d:34:e6:36:1f:9f:a3:45:05:c9:fd:44:b9:b3:
                    97:32:0b:9b:49:de:79:c6:4a:f0:5e:be:5c:38:73:
                    9a:e3:2c:42:b8:31:ab:71:78:58:e3:54:3d:55:9d:
                    a4:56:46:54:d4:8a:82:5d:9d:a8:90:47:23:0f:a5:
                    8c:ce:0c:b3:02:fc:a5:81:85:2d:81:6b:7f:7d:0b:
                    33:84:1f:09:27:18:f7:c3:0f:5a:bc:d9:8f:0d:56:
                    6f:28:a0:fc:01:dd:c1:f4:ee:8e:69:87:d6:74:e0:
                    78:2b:d0:88:98:86:cb:85:f0:99:b9:a3:69:9e:2b:
                    ba:f4:8d:7c:c7:c2:7c:14:19:f3:1d:cf:f4:d2:51:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C8:75:FC:FC:A2:92:17:62:03:3E:F5:99:24:14:90:3D:78:3A:35
            X509v3 Authority Key Identifier:
                keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1d:eb:04:9b:71:4e:ce:12:97:23:b0:0c:4c:cd:3c:0c:4f:
         56:55:41:58:f9:e9:4d:92:fb:ad:d6:a7:12:02:b5:72:58:ab:
         89:bf:69:90:94:fd:78:15:e1:35:4f:b2:cb:5d:3f:05:76:1e:
         d6:16:db:19:e3:a3:d9:4f:0b:be:52:8e:ee:81:00:ab:b9:81:
         db:8a:42:18:e4:28:17:ed:9e:ff:3d:37:69:26:cb:49:33:88:
         93:4b:b3:6f:37:c3:fa:00:f8:71:d1:48:80:bd:ea:ed:93:25:
         ee:c6:91:e8:59:29:c4:68:32:c1:a7:4a:39:a2:f1:8f:5d:b8:
         43:46:3f:9a:b1:c9:59:7c:f7:90:3c:c6:e2:e7:ea:ae:85:11:
         10:3b:b9:88:d9:71:fe:1f:f1:af:03:9f:84:7f:16:65:16:67:
         9d:6c:e2:10:38:dc:5f:ae:78:4e:ff:bd:6d:29:09:d9:a2:86:
         77:df:e7:7f:13:02:78:77:71:2e:cb:7c:89:14:9b:7f:ef:f5:
         fe:24:6f:98:08:01:1c:a9:4f:52:ce:6a:99:e0:8e:ca:d9:dc:
         86:31:75:89:0c:9d:93:f9:53:04:ee:b9:b1:12:00:33:60:73:
         94:ee:37:f4:71:10:ed:11:e4:c9:7a:09:6b:78:eb:11:5c:5e:
         bf:07:32:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:56 2026 by rpki-client