Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
File:                     9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json)
Hash identifier:          qObKGUzw8AUsB5EvEmBWgYzrgQ1EygpC15dIz7tykVs=
Subject key identifier:   C1:A0:01:C8:41:36:42:B7:BF:B7:FB:1C:45:5E:FE:91:AC:B6:ED:DB
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Certificate issuer:       /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial:       55A8746BDCA833648B432E9A928BC065D9185D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
Manifest number:          0598
Signing time:             Fri 12 Jun 2026 14:10:44 +0000
Manifest this update:     Fri 12 Jun 2026 14:05:44 +0000
Manifest next update:     Sat 13 Jun 2026 15:56:44 +0000
Files and hashes:         1: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: tf013dx+p23kvdhs/rrgl7jF0HCw4nuCcwBzDL5I7qE=)
                          2: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: kGai0vt9wA/86vZjdukxOGnISfChmqA46SxZbgRXmkY=)
                          3: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: T273PKOaqPzw+ef1HYHPIsAsFc8LZnkPiPIyWBRhHPE=)
                          4: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: BfjOFS0GoZTfjo/xHJvef2THjZzuBY75ujhpTamWG84=)
                          5: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 57eeXg7j+oXHRFh1XtK1fw7OXcY8daCIezixmAfkJcw=)
                          6: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: UzAk6y5i6qWN9IVFlhmoZTRjcqrtlajGQzrPjOGpriU=)
                          7: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: EJG2SDzWzIGWns6pT4kVSDqRPMJTJNXkz97kFGgjHCI=)
                          8: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: 6vwMaK76XK6X/pz6kTht3dh5BVylEQSRFW6TtRdFjeM=)
                          9: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: m3qyMw/oJQApcKE+tTHmQHJByXjG/Fh99MnZmfiTNq8=)
                          10: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W19aTL73kDmq4VpxFcM/5jWE3HfVKXSDK7YuTWHNOTU=)
                          11: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: zH/62I+GFjmbLT58TFoHTt4seVQwFkHzMOITLzNLWwM=)
                          12: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: y6p5UjBQPUduUonTPaO5F0JtSCE/pxPOj2iYT5kNMsc=)
                          13: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=)
                          14: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: kfugqwL5a8rKpk8fwdFIn7pS0iv55PmKrmdtLvO9AmM=)
                          15: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: aSFnF5KE0HZKqtoTzaJ7DbcDwDtYbFqkJ83NVi96KOw=)
                          16: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: euJ5l1svQV4yeF07rYfON9i9pW05MgdKcVAsQcZCZgs=)
                          17: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 8yuN3MCh3uYcW+DbtvxPqGplTmthXGYCL3Ax7r80myw=)
                          18: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: IYPeBc0njFQqxrAGs2OJRowmjEd1rlfv9Au+QQE5POo=)
                          19: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: rx28ukAYIi7QdbkrNWf+57kJyDhNeE212LGEgmkq0Dk=)
                          20: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: DU5pynjNIEEP2cTa3qAwphhWauxpRZzQL0RoFoNuEKY=)
                          21: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: QbwoBEnpKwFJwsOgE5BSkaanZZexGA6c5rVJbKDREKo=)
                          22: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: 9ZXjSWAp+j58GwfDtQ/mqL8ScvPvc/83HCdFvbTQt+M=)
                          23: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: vuC6A6enLxPTXBOwLw9tBCemQGy3gdCRudl05Im1bw0=)
                          24: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 0ETOHqFxfMol2LhEQMME+DAkxTkGy4ojRF4+9fieTEQ=)
                          25: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mgaSFuH9dwlQC9LQOF1dVYEFek9VIOTVBqz/2FqpDg4=)
                          26: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: jli84J8TPjOOdHhktkVlx+DNU1JzPO7pUh03TSavr40=)
                          27: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: ujtPAooskxRFdplFAxUvlWSnHibW1Dtu51AflDsmLEs=)
                          28: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: RBjXMLj20ozhJFLy1WSIfc7wq7Cyuu+KQRQSUNSEpNg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 15:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a8:74:6b:dc:a8:33:64:8b:43:2e:9a:92:8b:c0:65:d9:18:5d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
        Validity
            Not Before: Jun 12 14:05:44 2026 GMT
            Not After : Jun 13 15:56:44 2026 GMT
        Subject: CN=C1A001C8413642B7BFB7FB1C455EFE91ACB6EDDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:94:b3:b6:3c:ec:27:b4:ad:92:69:26:0f:67:
                    9c:7a:e5:11:ee:e4:d1:46:34:02:33:68:30:5e:25:
                    d2:c1:06:af:ec:72:51:3a:19:bd:e1:14:13:b2:53:
                    30:19:62:12:6d:21:73:91:04:02:b5:d5:e5:6f:3d:
                    ca:6d:ae:49:63:e8:d2:f9:05:44:e5:a6:ad:2f:33:
                    d0:e7:72:d3:af:07:87:03:22:6f:91:0a:48:5a:aa:
                    4d:07:12:49:f5:ec:07:43:ba:4a:36:9d:e5:a6:43:
                    e6:6e:92:91:ee:11:c1:e4:ff:9e:80:75:36:03:ce:
                    0e:f1:c8:a4:cb:88:7e:dd:6c:78:13:18:89:58:8f:
                    e8:81:4b:0e:a2:1a:e1:67:a6:00:13:e7:3a:71:6f:
                    f7:a4:4f:4a:f6:9e:71:0f:c4:91:a0:4e:75:15:af:
                    4a:95:05:59:db:22:75:88:e8:9b:58:7f:57:4a:ed:
                    40:33:a5:33:b3:84:89:fe:43:36:e8:6e:68:50:c5:
                    92:b9:79:64:27:20:73:28:50:8d:41:ee:7b:74:a1:
                    f8:66:8d:60:05:7c:e8:a0:bc:ed:87:01:82:a4:b9:
                    37:83:8f:38:1f:d7:d5:77:c9:ca:cd:73:1d:99:f5:
                    73:d8:5d:29:a2:13:24:a0:42:04:16:ff:5d:e3:a8:
                    20:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A0:01:C8:41:36:42:B7:BF:B7:FB:1C:45:5E:FE:91:AC:B6:ED:DB
            X509v3 Authority Key Identifier:
                keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:06:ff:a0:ec:cb:49:1d:fc:3b:13:80:34:85:1f:c6:ec:93:
         70:b9:a0:7d:94:dc:99:a9:0d:13:a6:9f:0a:30:8f:f6:35:ca:
         7b:c7:11:dc:7c:3b:a1:cb:4e:e3:2a:97:e6:d9:3d:25:0c:9b:
         8c:e4:0a:44:8a:08:5c:b8:12:f9:44:6b:35:3a:3c:59:7c:68:
         83:96:87:43:10:43:ee:49:7e:38:68:6c:80:a2:60:5a:da:76:
         1a:62:6e:09:29:62:b2:25:28:93:87:99:ee:10:6e:54:29:eb:
         86:0d:4f:b4:cb:45:6d:be:7f:8a:ab:5e:15:f4:7a:83:48:5d:
         29:97:0b:85:45:72:da:72:7f:bb:fa:c6:d9:03:d7:5a:bc:06:
         e8:33:e0:4b:9d:4e:2a:4b:ea:3b:82:36:0c:23:1a:68:1c:f5:
         4c:3c:39:40:de:51:fa:13:8d:24:3f:ee:15:40:d7:5c:6f:f1:
         04:54:64:8e:d5:1d:93:50:30:30:81:cf:30:14:25:b5:03:ce:
         85:60:d6:8f:73:39:01:c6:53:8b:65:8a:c3:ac:65:57:23:86:
         0d:07:ae:21:aa:ba:0c:56:e3:d1:b0:7c:21:b4:61:47:c1:48:
         e1:ce:ca:25:da:6e:6b:13:19:38:40:ac:95:e6:af:16:06:19:
         b6:0f:e9:23
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUVah0a9yoM2SLQy6akovAZdkYXSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh
MDIxNDRhZTAeFw0yNjA2MTIxNDA1NDRaFw0yNjA2MTMxNTU2NDRaMDMxMTAvBgNV
BAMTKEMxQTAwMUM4NDEzNjQyQjdCRkI3RkIxQzQ1NUVGRTkxQUNCNkVEREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDslLO2POwntK2SaSYPZ5x65RHu
5NFGNAIzaDBeJdLBBq/sclE6Gb3hFBOyUzAZYhJtIXORBAK11eVvPcptrklj6NL5
BUTlpq0vM9DnctOvB4cDIm+RCkhaqk0HEkn17AdDuko2neWmQ+ZukpHuEcHk/56A
dTYDzg7xyKTLiH7dbHgTGIlYj+iBSw6iGuFnpgAT5zpxb/ekT0r2nnEPxJGgTnUV
r0qVBVnbInWI6JtYf1dK7UAzpTOzhIn+QzbobmhQxZK5eWQnIHMoUI1B7nt0ofhm
jWAFfOigvO2HAYKkuTeDjzgf19V3ycrNcx2Z9XPYXSmiEySgQgQW/13jqCDHAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUwaAByEE2Qre/t/scRV7+kay27dswHwYDVR0j
BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0
M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB
aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m
ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD
NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQb/oOzLSR38OxOANIUf
xuyTcLmgfZTcmakNE6afCjCP9jXKe8cR3Hw7octO4yqX5tk9JQybjOQKRIoIXLgS
+URrNTo8WXxog5aHQxBD7kl+OGhsgKJgWtp2GmJuCSlisiUok4eZ7hBuVCnrhg1P
tMtFbb5/iqteFfR6g0hdKZcLhUVy2nJ/u/rG2QPXWrwG6DPgS51OKkvqO4I2DCMa
aBz1TDw5QN5R+hONJD/uFUDXXG/xBFRkjtUdk1AwMIHPMBQltQPOhWDWj3M5AcZT
i2WKw6xlVyOGDQeuIaq6DFbj0bB8IbRhR8FI4c7KJdpuaxMZOECsleavFgYZtg/p
Iw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:52 2026 by rpki-client