Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
File:                     8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json)
Hash identifier:          jC67m9xpwe87OwSNcil40bc9J5dF14f5njo+nF7sfBQ=
Subject key identifier:   29:54:0F:F8:91:10:4B:2C:40:38:FD:78:71:8D:6E:E0:5C:AD:12:FC
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       5387C8A06F66A621F28B5F0AB292503456ED7674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
Manifest number:          0737
Signing time:             Mon 21 Sep 2026 10:40:46 +0000
Manifest this update:     Mon 21 Sep 2026 10:35:46 +0000
Manifest next update:     Tue 22 Sep 2026 10:47:46 +0000
Files and hashes:         1: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: SlO9GlcvT7Yo+eC6PysK9Rigqz2h2W2yGk/p5q0Rstw=)
                          2: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: 6Z6Ph/roRYuzMMRuzGZukJIwWIRgkOhrL9SH/Jb7P70=)
                          3: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: AcCeRuWXsZAydYYXd9AyWbET07pTASLPo8gST4E0/Ik=)
                          4: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: XgDvqjA1DUwIeQGus4KqsR+dQUTBQ2aN4efEM7LhMpY=)
                          5: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: VegTYwpyqBI8NVsfiZGa7nbuIizSi0tQDSuMW1lp9V8=)
                          6: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: k9/Ch376K2xC47DoFkOrbQT45cHpJzonkazNFrVSeRg=)
                          7: 36322e3139322e3137352e302f32342d3234203d3e2039303039.roa (hash: tnNyChr4oxUcnojqJuMajG3DuagFZQP9gO2VaWpCSS0=)
                          8: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: CE9hWXGWiDqK5X5bUXx/dqTabhUB/7ogzo6chIHvh68=)
                          9: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: 5YJLPDaGqAiDF0G+tUXhPNg3tA1r1b/VO1ZV0rM38dQ=)
                          10: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: +/mIlEx3xxWoZl+krpHUaeIjRRfIayd7cektA0/iFpI=)
                          11: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: WTJQYj4kO8Tl738Oa1dFz0b2fCNqs4KUQg06eTa2Ut4=)
                          12: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: KdtoWFKZmupxeYv8ZtH2UnlJsLJFh2Np3sbeCuilvNs=)
                          13: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: JpeDtHMcVyRt7wSevEegZIXGiDHI/xp5ouHedcx7mT4=)
                          14: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: yLC1oKoMdjJrSS42z4vH04rNWh8jStXc4dl58WWWeFU=)
                          15: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: MXRlv5xAo/BF9Pc+8yjAPEOfs4iVkOfxpIdVxrgD3OQ=)
                          16: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: FvvfrZU7Zk5wRW7V0nJVCDjddc7RhJHDxzG+f+tC0NU=)
                          17: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: P57/fYjckH7KO6Bmf2RAAe9o4ZEd5zcCF66fMAqMs84=)
                          18: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=)
                          19: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: /DmT9jDgPBJnORjXPqoO2OikZb1TZUdRaJAnGGErjQc=)
                          20: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: l2moL/0n3AUQ5cZa8s9n/aY4gBFkHmTPj+K3TgDTaaI=)
                          21: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: kL/USbewZ5F9rgl6OrE+AodqJSBjzH+0rgbH/DsidT0=)
                          22: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: q68rGtvPxTIjEDPvv2TVoJliNz54C+gDFrWRdJOsUl4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:87:c8:a0:6f:66:a6:21:f2:8b:5f:0a:b2:92:50:34:56:ed:76:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Sep 21 10:35:46 2026 GMT
            Not After : Sep 22 10:47:46 2026 GMT
        Subject: CN=29540FF891104B2C4038FD78718D6EE05CAD12FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:6a:d4:d1:85:6f:77:c1:6f:74:3b:f5:91:
                    b1:fd:eb:e7:a4:e9:f7:d8:05:fb:e4:1b:21:30:8c:
                    fd:5d:50:f4:e5:be:5e:18:f0:23:20:77:bc:97:90:
                    59:68:68:96:f3:85:db:7c:53:ec:b6:ea:55:67:4d:
                    6c:ba:37:39:bd:77:b1:3a:26:56:95:32:13:37:30:
                    f4:3a:45:d5:7c:43:1a:0c:cd:ff:8f:f6:74:ac:b3:
                    9e:8f:2f:a4:3d:75:8c:96:46:cd:bd:0e:99:c0:6b:
                    7c:bf:ce:7b:ae:74:73:f7:32:b4:68:17:17:1c:78:
                    db:7d:1f:15:6c:1a:e9:08:94:31:ea:96:b6:c5:74:
                    a5:16:86:18:a5:b7:38:da:44:66:88:9c:a1:7d:ca:
                    99:fa:72:fb:a3:45:2b:63:ce:f6:0c:c0:30:86:38:
                    ac:d8:9f:45:b3:d3:ab:c4:99:92:39:28:02:b2:02:
                    60:8a:23:06:a2:eb:c0:16:af:46:ff:fc:a3:a8:d8:
                    42:de:03:26:12:52:17:a5:52:fd:5b:e6:17:3b:18:
                    ec:2b:a2:e5:6d:c8:71:a7:31:b4:32:71:c6:01:5e:
                    27:9e:4f:64:aa:cf:92:0a:2c:88:72:5e:bd:5f:e9:
                    d6:8f:b6:be:50:f6:58:64:2f:a4:51:c0:46:10:2e:
                    51:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:54:0F:F8:91:10:4B:2C:40:38:FD:78:71:8D:6E:E0:5C:AD:12:FC
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9b:55:dc:ce:3c:87:f3:4f:54:50:b9:7a:a4:4c:ac:80:a0:
         04:da:80:2a:a1:f1:65:81:5d:27:45:df:33:8b:6e:84:05:3d:
         d4:dc:dd:7d:e1:fd:79:b6:75:b4:04:12:bd:aa:df:46:4c:76:
         2b:a2:bd:f3:e9:00:0d:d8:b2:81:a0:56:99:2f:26:62:f2:88:
         fd:6d:eb:87:49:f9:86:cd:fb:88:16:40:ca:39:aa:6b:52:1e:
         a1:ae:d8:24:4b:99:c9:d5:5f:36:09:78:93:75:10:ea:1f:de:
         19:8e:8a:ce:5a:49:54:b9:e8:16:56:58:a0:e8:fc:ba:89:32:
         36:fd:f2:b7:48:1e:2c:2a:9c:cf:aa:b0:66:3f:2e:70:e6:27:
         e2:50:8a:cb:2f:24:b5:04:c7:3d:2f:9a:76:58:c3:b5:c0:20:
         d3:57:d1:a2:b1:b5:47:f7:45:ab:87:91:a5:74:da:d5:e8:d6:
         84:23:7b:42:ce:7b:ee:ae:7c:98:27:9c:45:ec:0f:45:e8:6c:
         c4:8f:0a:4d:7d:71:c6:db:eb:44:c8:52:f4:dc:31:33:ca:60:
         75:0f:05:c0:40:54:5d:93:e6:df:99:83:4a:d7:8e:a0:9b:89:
         1a:15:e4:64:68:9a:5b:ce:46:6b:7f:d9:30:53:9d:fa:0c:02:
         1d:63:82:55
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUU4fIoG9mpiHyi18KspJQNFbtdnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy
NjllYjNkNjAeFw0yNjA5MjExMDM1NDZaFw0yNjA5MjIxMDQ3NDZaMDMxMTAvBgNV
BAMTKDI5NTQwRkY4OTExMDRCMkM0MDM4RkQ3ODcxOEQ2RUUwNUNBRDEyRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxz2rU0YVvd8FvdDv1kbH96+ek
6ffYBfvkGyEwjP1dUPTlvl4Y8CMgd7yXkFloaJbzhdt8U+y26lVnTWy6Nzm9d7E6
JlaVMhM3MPQ6RdV8QxoMzf+P9nSss56PL6Q9dYyWRs29DpnAa3y/znuudHP3MrRo
FxcceNt9HxVsGukIlDHqlrbFdKUWhhiltzjaRGaInKF9ypn6cvujRStjzvYMwDCG
OKzYn0Wz06vEmZI5KAKyAmCKIwai68AWr0b//KOo2ELeAyYSUhelUv1b5hc7GOwr
ouVtyHGnMbQyccYBXieeT2Sqz5IKLIhyXr1f6daPtr5Q9lhkL6RRwEYQLlE9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUKVQP+JEQSyxAOP14cY1u4FytEvwwHwYDVR0j
BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0
MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh
ZXM5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTk3NzExNS01
MTEwLTQyNTctOTRlZi00ZDJiNDM4ODQwNDAvMC84RjRDRTc3MjJGOTkwNzVEOTQ3
MzhCN0U2MTA3MDQwMTI2OUVCM0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJtV3M48h/NPVFC5eqRM
rICgBNqAKqHxZYFdJ0XfM4tuhAU91NzdfeH9ebZ1tAQSvarfRkx2K6K98+kADdiy
gaBWmS8mYvKI/W3rh0n5hs37iBZAyjmqa1Ieoa7YJEuZydVfNgl4k3UQ6h/eGY6K
zlpJVLnoFlZYoOj8uokyNv3yt0geLCqcz6qwZj8ucOYn4lCKyy8ktQTHPS+adljD
tcAg01fRorG1R/dFq4eRpXTa1ejWhCN7Qs577q58mCecRewPRehsxI8KTX1xxtvr
RMhS9NwxM8pgdQ8FwEBUXZPm35mDSteOoJuJGhXkZGiaW85Ga3/ZMFOd+gwCHWOC
VQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:20:52 2026 by rpki-client