Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
File:                     0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json)
Hash identifier:          ET15/JypuzZp4opnc7U3lkqVf55mXFyM/PJyDhJZ9Sg=
Subject key identifier:   91:F4:81:59:35:7E:BF:A8:03:FF:97:C8:0A:07:27:69:B7:39:63:D3
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Certificate issuer:       /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial:       3DEBDF094C1D29B52CF572E840FBA6DAB2A9EDE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
Manifest number:          0290
Signing time:             Mon 02 Mar 2026 03:32:16 +0000
Manifest this update:     Mon 02 Mar 2026 03:27:16 +0000
Manifest next update:     Tue 03 Mar 2026 06:09:16 +0000
Files and hashes:         1: 3138352e3231332e3235312e302f32342d3234203d3e20323032373336.roa (hash: k9NutrpE73eF9M1MGDaqB2MjGcD60li8mT4JnvFIELA=)
                          2: 33312e39392e3230332e302f32342d3234203d3e20383334.roa (hash: AkENFigRyAUb+VRKLIg05eNR2DATlVcoQ6cEURE1+Kc=)
                          3: 3139352e35382e3134362e302f32342d3234203d3e20343032313836.roa (hash: ORRSzvs2QEdncOPZuD+oGmv+utaq99nlS9NDrNT0GCE=)
                          4: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: 8SewALzMAh1xRhS5MArA5TIFkEJDD+Z4dsG2ya7itDA=)
                          5: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=)
                          6: 33312e39392e3230362e302f32342d3234203d3e20323130343935.roa (hash: OC80Hx5Gq1jN6Ym5UmCqnC8fGlp8VQazYJOfXpnB8WU=)
                          7: 3139352e35382e3134372e302f32342d3234203d3e20383334.roa (hash: JWGPv7PU6obBxeHVeHi6tuMRYdpVhg5tTNxKivLFrAg=)
                          8: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=)
                          9: 3139342e33342e3235342e302f32342d3234203d3e203531383532.roa (hash: za0HM3w55tiDFbhPrhUh3FtVd5oKhUm8JuFZ8lH0DiA=)
                          10: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: WxHcRq5WCH3YmKS5+Il6T1ro4Oc3AucTAyVboxN6cYg=)
                          11: 3139352e35382e3134382e302f32342d3234203d3e20323035383430.roa (hash: btToNdo4McV+mxna60YYwQUoRVqTrFqeFHcrOLZhmu4=)
                          12: 3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa (hash: iQ9RYSqOmsvIqARX4nqI9wEFn//drkKsHCDo7XaSdTU=)
                          13: 33312e39392e3230322e302f32342d3234203d3e20323133363530.roa (hash: 0Bngyrmrdfz47mx/mnuSCDuWlf2EDWIUujRrINoh4uI=)
                          14: 38352e3131372e3232392e302f32342d3234203d3e203138353236.roa (hash: VL0qbnMthkW/z4M9i7RCycr128NaCWPDKcNp8MPhOx8=)
                          15: 33312e39392e3230372e302f32342d3234203d3e20323030393139.roa (hash: Sx4gimOMm/cDt00enlx4Don8b0BAMFnFutmPQSumeeM=)
                          16: 3138352e3231332e3234382e302f32342d3234203d3e20383334.roa (hash: mR/wWew3FjmrV6LotuwwCDAlPdUAkYACjCVanGsnnOg=)
                          17: 33312e39392e3230302e302f32342d3234203d3e20323032303736.roa (hash: 9aCU0WrowHQDEddqo+4gFdH5kjWR15/2+hM8MI1EWF8=)
                          18: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: GEbFfS+LLMgocx0zl/qOrB6oO+BgTD8IsbF49GAbNus=)
                          19: 3139342e33342e3235322e302f32342d3234203d3e203439353831.roa (hash: CdOWg7XQ7TdzzLDF2E3vbhyf4TDBRs7VuKir2QIc0i4=)
                          20: 38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa (hash: Mdj3IIZJ097ibJGhSOfHP4GOBLdG4jAp1zNpVSxesFg=)
                          21: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: PbuFJWIaFPfS/fUezjEhjeDUJ1OpDE0MDCs7HAI2pDY=)
                          22: 3139352e35382e3134392e302f32342d3234203d3e203633313939.roa (hash: 9jUqhgLq8QIEEJxJiMALs0wsvhfDs1EJyMuRSJoW+38=)
                          23: 3139352e35382e3134382e302f32342d3234203d3e203633303233.roa (hash: oBeeeU3GnT2oMITYsHzfevINcnN3rBvPI2W5i1+sVPw=)
                          24: 33312e39392e3230312e302f32342d3234203d3e20323133363530.roa (hash: LZe/oPKdzHBDXdq7jgdrUvSsiw189QvXVXiPjXqJiLQ=)
                          25: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: A919/Bekrj6rZbVlRAQ3zY8i9Bm4Qio6XVxQpWLOfQM=)
                          26: 3139352e35382e3135302e302f32342d3234203d3e20323135333533.roa (hash: 26P6qmF1qO5EzcVJRtFpyvK2Pg0XJgNsh+hTSCj6XOs=)
                          27: 3139352e35382e3135312e302f32342d3234203d3e20383334.roa (hash: 51JyyvFmYKIMCwLTiDhhEK+MsZYYANLTwN4CVdAzFk8=)
                          28: 3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa (hash: cvWbud/Q3B4zVr3PrPYyxiTjcQyvCffxgDgg+5VMZYE=)
                          29: 3138352e3231332e3234392e302f32342d3234203d3e203235313938.roa (hash: RAmqdtOqt2GXnv4T7A8gAKdg4H2+TG5CqjE3/MvQxnU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:eb:df:09:4c:1d:29:b5:2c:f5:72:e8:40:fb:a6:da:b2:a9:ed:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
        Validity
            Not Before: Mar  2 03:27:16 2026 GMT
            Not After : Mar  3 06:09:16 2026 GMT
        Subject: CN=91F48159357EBFA803FF97C80A072769B73963D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:66:31:31:77:22:0f:e5:3e:1c:3c:45:51:fc:
                    28:3c:54:82:95:e9:ab:18:90:54:70:52:dc:5e:e8:
                    b7:21:7d:ed:ca:46:2e:47:67:98:9d:0f:cc:bc:ca:
                    6b:95:82:36:f1:a4:26:e6:d4:07:6b:45:85:0e:bc:
                    7c:25:95:5c:82:ff:32:a6:87:2e:46:82:2f:f4:6e:
                    d3:62:b1:7e:b6:ce:89:da:e9:65:0e:26:fd:b7:d5:
                    36:ed:83:8f:69:23:f4:6b:f1:4b:89:e2:25:42:3d:
                    a4:50:f9:2c:9b:fd:9d:36:5b:4b:b0:89:76:b5:b5:
                    d4:4b:0b:3b:2a:90:16:92:ef:da:b1:a3:a7:a4:4d:
                    c4:ca:b6:76:77:9f:96:9b:3f:74:db:4a:89:66:ab:
                    e9:33:a3:80:a2:09:06:34:d2:5d:e0:79:ad:56:3a:
                    13:43:4e:e9:69:da:cb:04:e6:25:f9:14:7c:30:10:
                    04:87:b7:0f:3e:b1:4c:74:84:d6:b0:39:75:30:c7:
                    42:b3:a8:a8:c3:53:eb:02:bf:2c:14:17:8c:3e:12:
                    a6:e2:61:1c:47:d6:61:f2:b7:28:ef:78:14:fc:01:
                    76:af:a5:ee:9d:bd:84:8d:4f:d8:80:55:f4:85:60:
                    fb:dc:e7:70:55:b3:e1:73:19:f6:09:82:4f:03:bf:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F4:81:59:35:7E:BF:A8:03:FF:97:C8:0A:07:27:69:B7:39:63:D3
            X509v3 Authority Key Identifier:
                keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:cc:de:7a:c0:04:7d:6b:f1:7b:fb:44:88:ea:9f:fd:c1:b5:
         b4:91:54:ba:49:ee:7c:18:c3:01:2a:83:3c:ed:05:82:5a:46:
         a8:53:69:fa:8f:eb:a2:39:2b:86:0f:4b:b1:1a:3a:93:9c:3c:
         72:cb:c3:92:cb:33:43:ad:8f:92:f5:11:fe:1d:db:fd:ee:09:
         3e:51:73:a9:06:2d:cd:79:38:e9:2d:8c:40:df:b2:09:6a:f9:
         55:03:7b:86:a9:8e:25:ec:3b:00:2a:82:58:9e:e5:18:3d:02:
         bf:03:4f:26:a3:bd:5b:d1:e0:e9:53:d7:7e:93:86:3e:45:ea:
         25:08:c9:12:b4:73:d2:06:f3:83:1a:a3:30:4f:a2:f3:4e:f8:
         77:0a:91:14:90:f3:65:c3:3a:c5:6f:7f:ee:79:32:aa:2f:0a:
         58:cf:d0:19:76:d7:28:4a:d9:bb:95:02:a4:ab:be:71:81:c1:
         92:db:7b:0e:13:fb:c2:fc:ca:3b:18:89:04:6d:90:50:e4:8b:
         9c:9e:dd:3f:53:ba:49:84:32:1a:da:97:7f:34:92:40:ac:1b:
         0b:85:22:87:9c:53:dd:26:b1:17:0a:17:39:a3:6c:0b:eb:63:
         7f:f8:89:ec:97:88:b6:83:0d:e9:df:5b:7c:01:fd:99:4f:22:
         72:aa:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:22 2026 by rpki-client