Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File:                     38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier:          qEu8oVwYfV1DzJs5fc+a3PJQPDSprQ2su3aWYqZTqVc=
Subject key identifier:   79:0E:D3:87:AF:2C:5F:81:11:9E:6B:C2:1E:66:F7:2E:A5:91:3F:F3
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer:       /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial:       01DE9B5736630AFC1606AA622D0093EECB102657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number:          026E
Signing time:             Sun 01 Mar 2026 22:47:27 +0000
Manifest this update:     Sun 01 Mar 2026 22:42:27 +0000
Manifest next update:     Tue 03 Mar 2026 00:51:27 +0000
Files and hashes:         1: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=)
                          2: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=)
                          3: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=)
                          4: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=)
                          5: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=)
                          6: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=)
                          7: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=)
                          8: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: sbhRTNeDu/zDLYvsVpgCV93MQeD3A34HVZfE5Nsw494=)
                          9: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=)
                          10: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=)
                          11: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=)
                          12: 3138352e35382e3135372e302f32342d3234203d3e20383333.roa (hash: tzOQO8vLFzcY60oR2+1zeQgoBpJx0WPId4HsH1i4ZPg=)
                          13: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=)
                          14: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=)
                          15: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=)
                          16: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=)
                          17: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=)
                          18: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=)
                          19: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:de:9b:57:36:63:0a:fc:16:06:aa:62:2d:00:93:ee:cb:10:26:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
        Validity
            Not Before: Mar  1 22:42:27 2026 GMT
            Not After : Mar  3 00:51:27 2026 GMT
        Subject: CN=790ED387AF2C5F81119E6BC21E66F72EA5913FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:e9:4f:84:1a:74:98:68:c9:15:dc:b5:12:
                    fc:27:50:d7:22:f4:8c:d2:82:25:44:1c:b1:53:b1:
                    e5:3e:81:8c:09:f0:d2:53:ad:d0:b5:64:d8:54:5f:
                    62:91:eb:ae:51:78:1e:d6:b4:bb:b6:46:e1:c1:3f:
                    93:89:8a:82:0b:13:91:4e:85:09:2a:21:7b:49:b0:
                    84:9d:55:a7:2d:7c:ff:ba:31:d9:15:59:7c:6a:a0:
                    91:2a:23:9f:42:ca:58:eb:d2:fd:76:c6:f3:20:54:
                    b5:19:b8:11:89:16:20:54:29:f0:57:cc:82:65:33:
                    42:d0:b0:a8:3a:2e:06:e9:ca:b4:db:31:ac:2e:91:
                    fb:ac:d4:9f:b1:3b:7a:0d:ee:3a:26:e5:9c:dc:e5:
                    35:e5:89:01:7e:7f:26:dc:93:2f:5a:1e:ca:4d:50:
                    63:88:93:46:89:a3:63:b0:40:f7:33:6f:78:3e:94:
                    ab:d5:e1:c9:1c:1b:cd:ed:61:00:e2:81:9f:53:f9:
                    4e:db:da:40:33:64:64:72:5f:48:db:f0:28:6b:96:
                    bd:5d:11:fc:6f:52:90:a2:c8:c1:8c:2a:0d:72:b0:
                    3e:13:09:e9:cf:f9:8d:38:8c:15:66:40:21:45:90:
                    30:f0:e4:f0:0d:89:76:f6:d9:63:24:4f:52:58:83:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0E:D3:87:AF:2C:5F:81:11:9E:6B:C2:1E:66:F7:2E:A5:91:3F:F3
            X509v3 Authority Key Identifier:
                keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:65:b7:67:f3:f9:64:34:2e:05:65:cd:7e:8a:05:a1:60:fd:
         88:a8:82:cf:41:fa:ca:c2:80:84:3c:d4:f7:38:a7:d8:85:db:
         e0:a6:0a:bc:66:75:b0:96:ba:2b:5c:02:b5:de:4d:61:0e:f2:
         11:97:47:ae:63:8f:97:e4:b0:06:f3:56:96:21:54:95:9d:55:
         33:6f:a1:cb:78:ac:9f:5e:80:5d:86:b7:e8:ae:b3:bd:84:dc:
         45:0e:28:46:76:95:52:67:2a:9b:21:4e:36:ed:cb:07:0a:36:
         75:fc:cc:21:97:bd:d8:24:63:9b:e5:5b:db:21:35:d7:7c:9d:
         51:ba:ca:a5:22:f4:74:23:57:05:07:af:55:23:52:67:79:9c:
         2f:e4:79:27:f3:a2:be:1a:e1:28:c9:2e:6d:bd:1b:87:88:ec:
         13:c9:9d:81:80:57:01:22:2d:d8:c6:84:af:24:8d:11:ba:21:
         78:f6:71:b8:f8:9f:04:f7:77:65:09:8b:e0:9c:79:dd:f6:1b:
         b4:4a:b3:f4:76:5b:2e:37:e8:06:ed:be:ac:48:be:79:8b:18:
         a1:28:a6:a3:f9:29:6e:7a:6d:4f:6b:05:00:80:98:0a:f1:c7:
         6c:8e:95:65:02:48:c6:ba:7d:a7:f3:20:c0:e6:9d:b1:83:5b:
         8b:f5:49:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:15 2026 by rpki-client