Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File:                     F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier:          PBUx44Qof1pKm1/XN2freA7NlpqcNqYU8+FztuA+6Yg=
Subject key identifier:   78:3C:10:87:58:E9:68:50:24:1A:81:55:CA:C8:7A:1C:79:6A:91:30
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer:       /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial:       20C54E0FAA337918C7EBE00D8795DBD31B1A23D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number:          0255
Signing time:             Sun 01 Mar 2026 20:57:20 +0000
Manifest this update:     Sun 01 Mar 2026 20:52:20 +0000
Manifest next update:     Tue 03 Mar 2026 00:21:20 +0000
Files and hashes:         1: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: g0HR3CrBWD7c96+vrs4TgM7+nplGfauLE7gBOh8WqYo=)
                          2: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=)
                          3: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: EDWUUKhrOtu3UMAllaeIt1ZR8GH4cYzCKJWn6QZal8k=)
                          4: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=)
                          5: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: BSTbx9NRftehGX7dsv5BX6onmmpsKJtVOHvBBhUYkJA=)
                          6: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: xfnBgMCFpR8WsSmanu6oXx69cY6n9Ufmkf4lgYTGZHc=)
                          7: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=)
                          8: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: uJEDxZm1l0+YcyFuGRmcGjOe89y2pFVQh//OE0DuSL8=)
                          9: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=)
                          10: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=)
                          11: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y=)
                          12: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=)
                          13: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=)
                          14: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI=)
                          15: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=)
                          16: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA=)
                          17: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: LPWlwnMMkuh7UFwpzuk/g4mAKsCnUHyKP/G42nHNDUM=)
                          18: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: 3WrBrAOV7SjPMl8BInuI3B0KtzI0JvDAuGMIMq+S9D8=)
                          19: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y=)
                          20: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=)
                          21: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=)
                          22: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=)
                          23: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: foBoaKUPeMOXyMdgjQODzIp3g1QrOeZIcU4rmaW6W0Y=)
                          24: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=)
                          25: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w=)
                          26: 3137382e3133322e3139362e302f32342d3234203d3e20333933393432.roa (hash: D28ld5kVJceea0qzm5GNZqptmPyuFgFAFujny6boKiE=)
                          27: 3130392e3233342e3230392e302f32342d3234203d3e20323134313433.roa (hash: kfImODVrJ9DJfBDHIqmGZX0zk9Yq1KND0WLu9uNQXdY=)
                          28: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: zF5vtY5ZU3KHcRy+FQX7xaMDnJJVjBqba81pLZ1Y9sw=)
                          29: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c5:4e:0f:aa:33:79:18:c7:eb:e0:0d:87:95:db:d3:1b:1a:23:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
        Validity
            Not Before: Mar  1 20:52:20 2026 GMT
            Not After : Mar  3 00:21:20 2026 GMT
        Subject: CN=783C108758E96850241A8155CAC87A1C796A9130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:77:3e:d7:a1:84:4c:ec:5e:dd:9b:81:8f:
                    a7:81:0e:da:6b:69:a5:b7:6c:bb:44:17:d9:90:ec:
                    4d:12:52:70:c0:12:c4:8d:e7:96:1b:75:fb:c4:ed:
                    d6:50:fb:64:13:5e:68:d5:31:c4:2c:ff:9b:36:b1:
                    fe:c9:a2:90:c6:2f:ea:a8:3a:3e:37:f2:46:df:43:
                    2f:a6:c1:29:d2:c1:98:e2:5e:19:90:e6:da:0f:6b:
                    f5:25:72:01:04:18:ef:53:09:e3:d2:ee:06:f0:c8:
                    a8:c6:a8:8e:7f:f0:37:ed:ce:f4:aa:a7:c3:81:16:
                    bd:5a:82:1d:49:6b:89:d5:c3:37:04:ad:ac:e1:e7:
                    fa:e1:16:de:2b:57:0c:a4:28:91:49:4b:f2:ad:86:
                    39:fc:ea:de:3e:05:f4:4e:80:f6:f6:92:85:8f:a0:
                    35:8b:72:15:ad:8b:7d:61:1e:25:26:79:6f:90:28:
                    b8:c0:38:81:fe:a5:2a:45:77:90:3d:6c:da:fe:57:
                    92:74:21:4a:5c:4d:68:ba:90:c4:51:66:28:18:df:
                    db:51:83:cb:cb:11:15:7a:a4:e1:dc:72:72:c6:1f:
                    56:87:f8:2d:48:de:ba:50:55:1b:32:34:ef:2d:99:
                    54:fd:53:50:12:45:41:bf:1f:c0:b2:62:8c:b1:aa:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3C:10:87:58:E9:68:50:24:1A:81:55:CA:C8:7A:1C:79:6A:91:30
            X509v3 Authority Key Identifier:
                keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e5:48:37:69:a5:49:aa:7a:7b:69:95:29:92:bf:2c:c7:1c:
         f5:a9:fd:9e:cd:09:50:73:d2:7d:07:ce:3e:86:87:c1:0a:ae:
         3f:77:01:10:50:b7:81:a6:9c:a1:c8:43:1d:89:20:27:7f:32:
         7d:2b:13:8b:42:a6:96:8e:26:ac:4c:aa:25:18:1a:39:61:a6:
         43:5a:1e:de:a5:d5:7c:3a:64:22:76:8e:d5:5a:2f:25:a1:18:
         77:fc:ae:cc:44:dc:ce:7b:d9:0a:4f:bb:84:35:89:36:b6:27:
         de:f7:28:64:78:cb:fb:b2:7b:7b:b4:f3:40:f6:4a:1d:5a:67:
         f9:eb:b0:4a:e1:d9:19:2e:26:dd:20:6a:eb:54:69:56:33:ba:
         70:31:17:26:58:16:4b:5f:32:df:94:88:3e:25:03:60:c9:67:
         9b:17:de:9b:4e:19:7e:46:63:5f:23:01:30:9f:02:9f:7b:10:
         01:6a:61:32:a1:3f:1a:63:e6:ee:23:b0:4b:5c:7b:db:f7:87:
         f3:fd:e5:94:69:37:93:bf:85:0b:23:ca:0c:b0:66:29:bd:f9:
         47:78:b1:17:23:b3:e0:20:8a:5c:fa:dc:81:41:f9:a6:cd:dd:
         35:71:b5:e8:4f:25:e4:cb:e6:e7:54:aa:a1:8a:e9:ae:f9:72:
         bf:c7:97:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:56 2026 by rpki-client