Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File:                     B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier:          ihAHecvJiHo3SNO/mVdzHVTTj9FN+fFHfSRlW/sVGEg=
Subject key identifier:   B2:78:F2:D2:71:B8:A4:F2:1C:42:B6:3C:28:A5:A1:E5:F7:D4:72:6E
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       3B5932B33756EE370FA8BACFF3EF950AC4F8076F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number:          06DD
Signing time:             Sun 01 Mar 2026 17:32:12 +0000
Manifest this update:     Sun 01 Mar 2026 17:27:12 +0000
Manifest next update:     Mon 02 Mar 2026 19:40:12 +0000
Files and hashes:         1: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: r1pjD687zCx4FmCuXlGB5h73ScKoFYopGKhXlE6KUfY=)
                          2: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: FBtJ+MNYwdWO4In9hmlePFb198UWpspP65HhFA9Ht28=)
                          3: 3231332e3133392e39322e302f32342d3234203d3e203231383430.roa (hash: sqhbyT+UoS/rAzKFNkGazDeXTVoOM4SKBvQPudGRR/c=)
                          4: 3231332e3133392e37392e302f32342d3234203d3e2033333230.roa (hash: f7C4581jJeKKnyLKipb2ZqdzpdWZFHeKPCD6CEFc/5E=)
                          5: 3231332e3133392e38302e302f32342d3234203d3e203232343237.roa (hash: g2v8voZzjWLOYqIOoWNtEKKH0iUdXIeZf8etwqeRplw=)
                          6: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (hash: fJsom9F0kK13YCja85kMhtBJkHN5sEU0G4E2NSYs0/M=)
                          7: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: m9VEyjC6AstkEvUHZu0nndWjDPejGmt2Un1d+bIvwNg=)
                          8: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: CLzyfVEPAwKX3mhx3cFkDV2A+7c3eW1iEPnVFN3/un0=)
                          9: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: iHrVGYqO0jEnmhXvt0u+E3Fi7EyKrYFB7bEQzlX2suw=)
                          10: 3231332e3133392e37352e302f32342d3234203d3e203231383430.roa (hash: v250iXtra+Z/KKJJC+rUD3hpGZMyGlwjTm5LLjqKRQ4=)
                          11: 3231332e3133392e38312e302f32342d3234203d3e203232343237.roa (hash: 5OXqLHfaMz4oBWakF90MFYsUXM1IOnkArdNd9qqILtU=)
                          12: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 9cktvEdh4jpik+wY0YHKxFgG9OCHki2tIjn/mKo9IKg=)
                          13: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (hash: HOJUjQHw3n3vLOp4ELlcKmpXxBRTpyVDdnuOO/DKcpY=)
                          14: 3231332e3133392e36372e302f32342d3234203d3e203231383430.roa (hash: pFdE5gy29hjYZhB9VvrsN9wvvGJKHZXcNTzoJSuW9uE=)
                          15: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: FfLZiCS8Nd3284OE5qfthGu+7ch+27qC/k5QS2NyeLA=)
                          16: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: Dtv0Rk3S6CYGgeyc9Utp8OCStFSnf/fyoGbb6uGogTI=)
                          17: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: euqkb79t1OVkqJLV4h0sY2Fb9LyHpO6FssRdPdeta2o=)
                          18: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: 21caAEREu0GNniHWI0d+kiWYDdQ20OxXpFsqx4LIfk0=)
                          19: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: IdSy9DI41okmJzC8kiYhvPIkxbhT29hGtDcstol94Gs=)
                          20: 3231332e3133392e36362e302f32342d3234203d3e203136353039.roa (hash: FY200EeTGQqoD9S8sjuLjCwpFp/7NCHvuVTZp+n3GiM=)
                          21: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (hash: D6sys78d1VHUPnQGvPOUfa9pG9olePRUcwiyJ1CBP8Y=)
                          22: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: BWn7Fyc71HS3Qx09imcUTYAlGWvzW8ei/YZ4vwsjDbQ=)
                          23: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: imvON1NIsf5RjQ1xycG0mxKjYBudQ7J1/WlKrbcZWA4=)
                          24: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: e2HbFyb9jJVCReOUGrS06701Hln0j7R9pUtzgWwuBh4=)
                          25: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: pjnqIb4dxS7ohemcNICs3/5MSebDeHfZm+o3ScY7Wbs=)
                          26: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (hash: 4avklCjVMylCEeeI60KDAm2gKF0wrDefWHJR4YHtwEk=)
                          27: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: 4HobDf2IR5LvPu11gvXGRRjA/4KYDCBMeX1L5falDQI=)
                          28: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: recgwGLHRmHMtvRRJVUhe6BWHyw6Djaciag4FXuYftw=)
                          29: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: CZYh6lYb4N4Hi46B2oVp46GIE/gWlkXTwUlUU+TKpIw=)
                          30: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: zOTGboIZBsrY2C4wOPiGbp4YdGPWL/CIf9OR+DPh8lw=)
                          31: 3231332e3133392e36352e302f32342d3234203d3e203331373135.roa (hash: DLaV1sFNoIrmOFdG/w3fReS7aY1M4x1P7DARyXDc6LA=)
                          32: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: CxXf2MZIKaUycFVCcvqJ0pu6d/h/wQOBy3gRZyXomCo=)
                          33: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: AAU8mMA/8qMP5OVFvU4ND40XGDRIHcFw5zTvG37HSds=)
                          34: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: DZpFNtIJlcLHmoaMDeodOmCa2IVlyKcWWOjWi093JRY=)
                          35: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: ZNpXP0V7X1SLVOWk1qf9gaielEOXyCXpXadwIPelQAs=)
                          36: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: LCM/dunTFfsiENo1u3oy0PNFVtxRWwm9bEHFaBempdc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:59:32:b3:37:56:ee:37:0f:a8:ba:cf:f3:ef:95:0a:c4:f8:07:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Mar  1 17:27:12 2026 GMT
            Not After : Mar  2 19:40:12 2026 GMT
        Subject: CN=B278F2D271B8A4F21C42B63C28A5A1E5F7D4726E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:db:ee:01:d6:64:bf:45:09:cf:34:8b:b1:
                    6d:3d:a5:af:c8:99:38:5b:02:f6:3f:fd:9a:0e:de:
                    9e:e9:16:5a:1a:d3:af:f4:95:a7:52:93:2e:88:4f:
                    ae:a4:eb:4f:e8:5f:81:6f:dd:2d:90:17:cb:a2:0f:
                    25:48:df:43:84:ac:84:ea:18:bc:6d:6a:75:4a:f8:
                    30:bd:df:19:db:8b:da:e0:8e:93:14:f8:95:61:1e:
                    90:87:8c:4d:5b:0b:09:fb:c1:17:53:66:91:32:f3:
                    c4:0d:d4:63:bb:e3:91:8e:cd:7f:bd:b1:16:06:56:
                    62:1c:5d:b2:6e:8f:ac:6d:b6:de:4b:7b:ea:01:ac:
                    ee:8e:0b:20:6b:0a:e1:8c:55:54:53:c4:61:fa:6b:
                    d5:6d:fe:1a:01:d6:ec:cf:48:2f:fa:8b:1a:81:86:
                    d8:0b:90:61:a5:7d:5d:40:26:cc:61:5e:3c:72:2c:
                    2a:0a:b5:98:71:c3:f7:63:77:75:ca:d8:04:4d:e1:
                    c4:c9:f3:5b:3e:db:c2:4e:8a:9c:8e:58:20:9c:8d:
                    7f:54:b2:70:bf:ca:09:b3:e6:21:07:ab:04:e0:f2:
                    7a:cc:c4:6c:d4:cc:23:37:4a:85:f9:ef:8c:07:1f:
                    7d:2c:51:af:9c:89:53:6a:56:06:c8:77:ef:3d:a9:
                    08:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:78:F2:D2:71:B8:A4:F2:1C:42:B6:3C:28:A5:A1:E5:F7:D4:72:6E
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3a:c4:63:54:9e:31:5f:aa:73:41:34:d5:ce:c3:16:31:f5:
         b0:b9:d2:81:36:f7:cc:89:87:43:a4:a1:c0:a0:b7:20:55:d7:
         5c:a5:d0:5a:9b:a6:ad:ab:5f:46:dd:9e:1f:d5:2f:72:96:8c:
         19:71:70:2f:b6:8e:20:45:a7:e4:b8:a1:6b:ce:7f:9e:c4:3f:
         70:68:c9:5f:cc:b5:9c:44:af:7d:93:3d:bf:58:a7:32:99:22:
         40:fa:43:16:73:04:f0:93:ef:c5:bf:93:f3:ad:b9:ba:da:7e:
         fd:b8:08:ea:f2:0b:d2:e6:3e:69:c2:2a:1d:54:11:21:a1:99:
         92:00:fd:04:4c:b5:60:68:d2:fe:52:33:ce:87:d6:4f:d3:ed:
         d0:48:86:a7:c2:6b:93:0f:43:0a:63:73:85:3c:2f:1e:d1:5e:
         e1:6d:fb:37:e0:52:e3:f4:bf:d2:b6:43:ac:0a:41:03:17:19:
         1f:c9:bb:ea:86:0f:66:40:b5:ce:28:95:bf:50:01:35:16:4e:
         95:a0:69:c4:f6:1f:b4:5c:a1:92:58:0e:76:7c:3d:bf:ef:eb:
         06:be:f3:84:c2:a7:64:70:73:0a:32:9f:15:11:23:05:43:28:
         68:b2:bb:25:6b:64:7e:56:aa:88:25:16:c4:44:36:e6:60:c3:
         df:6b:1b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:43 2026 by rpki-client