Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File:                     F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier:          +8/h/cpdoggESlT/KhO29yDWhNxhnP+7VHW9438LVF0=
Subject key identifier:   41:2A:04:68:83:AF:FF:23:BB:E1:B3:D8:1F:15:F4:EA:7A:9B:85:75
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer:       /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial:       06C53E33AF6142DD17AF5E1443DA973284BF7150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number:          0294
Signing time:             Thu 16 Apr 2026 14:49:42 +0000
Manifest this update:     Thu 16 Apr 2026 14:44:42 +0000
Manifest next update:     Fri 17 Apr 2026 17:11:42 +0000
Files and hashes:         1: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: V7It1R194wG2fKfWWlVdnzwed7rR2mdr0bGRnI9AxV4=)
                          2: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=)
                          3: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w=)
                          4: 3130392e3233342e3230392e302f32342d3234203d3e20323134313433.roa (hash: kfImODVrJ9DJfBDHIqmGZX0zk9Yq1KND0WLu9uNQXdY=)
                          5: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI=)
                          6: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: 3WrBrAOV7SjPMl8BInuI3B0KtzI0JvDAuGMIMq+S9D8=)
                          7: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: BSTbx9NRftehGX7dsv5BX6onmmpsKJtVOHvBBhUYkJA=)
                          8: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=)
                          9: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=)
                          10: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: JpGLComndw26SOL3sJbPNJ7i8ZI6iCFmvappx1PnQqM=)
                          11: 3137382e3133322e3139352e302f32342d3234203d3e203232343237.roa (hash: QgvmMFuUdAiqbiI7YJRIvnHFDWl3E8S1w1OF0shY8uU=)
                          12: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=)
                          13: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=)
                          14: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: uJEDxZm1l0+YcyFuGRmcGjOe89y2pFVQh//OE0DuSL8=)
                          15: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=)
                          16: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: xfnBgMCFpR8WsSmanu6oXx69cY6n9Ufmkf4lgYTGZHc=)
                          17: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y=)
                          18: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: foBoaKUPeMOXyMdgjQODzIp3g1QrOeZIcU4rmaW6W0Y=)
                          19: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: g0HR3CrBWD7c96+vrs4TgM7+nplGfauLE7gBOh8WqYo=)
                          20: 3137382e3133322e3139362e302f32342d3234203d3e20333933393432.roa (hash: D28ld5kVJceea0qzm5GNZqptmPyuFgFAFujny6boKiE=)
                          21: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=)
                          22: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=)
                          23: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y=)
                          24: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=)
                          25: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=)
                          26: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: EDWUUKhrOtu3UMAllaeIt1ZR8GH4cYzCKJWn6QZal8k=)
                          27: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA=)
                          28: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=)
                          29: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: qmiO3qd9B9vYXlTuDEHBtGzeEynBhsoduBXSCsZyW2c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 17:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c5:3e:33:af:61:42:dd:17:af:5e:14:43:da:97:32:84:bf:71:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
        Validity
            Not Before: Apr 16 14:44:42 2026 GMT
            Not After : Apr 17 17:11:42 2026 GMT
        Subject: CN=412A046883AFFF23BBE1B3D81F15F4EA7A9B8575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:85:5c:6e:21:0e:49:e0:8e:7b:b4:72:cd:
                    18:a9:51:4c:08:86:81:8d:82:d7:6e:2e:3d:83:b5:
                    10:98:cf:b2:65:bd:d4:37:fa:bc:36:ea:23:98:c5:
                    82:4d:33:46:7b:1e:28:84:32:2a:ce:c2:77:9a:ca:
                    86:09:91:de:f2:ea:94:ff:9f:8c:8d:c1:3d:72:5d:
                    a2:a4:fd:58:e7:44:ce:18:dc:2a:85:85:77:d7:44:
                    e7:cf:20:1c:ea:64:a4:64:41:95:06:f3:2f:9f:6b:
                    8c:23:eb:c9:06:23:9d:01:ec:6a:77:fc:75:86:10:
                    bf:9b:03:18:61:61:5f:7e:9d:ab:ec:e6:66:08:03:
                    72:79:1b:1f:9d:e8:81:3a:7f:f5:32:71:b6:48:83:
                    c3:09:90:f3:05:9c:cb:ff:28:9c:1f:20:6d:69:1f:
                    88:cc:e3:ed:68:d2:58:a5:e1:96:53:2b:be:84:d0:
                    71:3c:c1:e4:69:ae:c5:4e:a5:54:76:62:81:3d:9c:
                    b7:60:0e:d6:35:e5:03:98:71:5f:fb:31:35:39:90:
                    b7:45:70:90:67:78:34:fe:4b:34:7d:e0:d5:6d:6e:
                    10:f1:2e:e0:d6:f9:95:27:45:86:65:9b:9c:6c:15:
                    ae:52:78:92:fc:f4:10:14:6a:ac:6e:75:ad:eb:25:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2A:04:68:83:AF:FF:23:BB:E1:B3:D8:1F:15:F4:EA:7A:9B:85:75
            X509v3 Authority Key Identifier:
                keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:43:a7:30:75:44:6f:89:94:fa:3d:13:d2:ad:9f:5b:2a:32:
         47:e1:8d:c3:1b:51:81:65:36:ca:21:63:ce:49:a2:a5:fe:2d:
         7c:a2:7d:a4:53:6e:d9:29:33:1f:7d:e7:f8:63:dd:d6:27:61:
         71:ef:5f:4a:e2:60:dc:10:4b:40:bd:0f:3c:ac:5c:8b:83:e9:
         ac:5b:3a:80:83:d4:19:b2:60:74:8a:a4:50:4b:38:d6:de:92:
         a0:c6:1c:9f:15:e8:56:c7:df:3f:3a:05:66:46:7c:de:7c:1e:
         53:91:a3:62:66:7f:b1:e1:36:fc:a5:79:2d:d9:04:0a:fd:e1:
         f2:e1:77:1a:da:96:3b:21:8d:71:9d:da:db:f1:54:13:84:7b:
         40:d9:64:df:ec:23:90:c2:d5:41:60:8b:b5:ce:71:94:23:bd:
         d7:9e:59:4d:bb:06:f8:64:0d:c9:3e:6d:39:65:55:f5:8e:69:
         ff:78:7e:5f:23:fb:2e:ac:ef:ce:96:ee:46:b1:0b:3c:b2:fa:
         35:cd:cc:85:65:ee:0d:0d:31:39:95:3f:b0:ad:b8:32:9a:bb:
         3e:47:9f:d4:72:e2:5a:02:c5:33:2c:75:04:46:a4:ac:a0:00:
         54:f4:af:18:18:86:07:1b:3d:ae:4a:0b:34:9d:80:f7:6c:4a:
         56:5d:54:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:54 2026 by rpki-client