Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
File:                     9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json)
Hash identifier:          oW0s87wTYZeUdGbsHeyDpZyn1d8cvbZ3zbV3HPFHNB0=
Subject key identifier:   95:98:55:8C:10:6F:A7:98:21:B2:3F:B8:26:37:13:91:25:C4:44:D1
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Certificate issuer:       /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial:       0E4A38947CACB9D1EC51D9D98EF4DC38CBACB7B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
Manifest number:          05DF
Signing time:             Fri 12 Jun 2026 14:30:42 +0000
Manifest this update:     Fri 12 Jun 2026 14:25:42 +0000
Manifest next update:     Sat 13 Jun 2026 17:28:42 +0000
Files and hashes:         1: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=)
                          2: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=)
                          3: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=)
                          4: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=)
                          5: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: xxRinmOCEf3OS9kqYRIEWMmKy3cZ2f88d3NUZmC+CRE=)
                          6: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=)
                          7: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: Ogsf1pHLwh4alNxLGrqeI3xW1gva7biy757AFxsWwLA=)
                          8: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=)
                          9: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=)
                          10: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: gn1EWILIjnPdb4uUP1SS51GqSoj+0YHU+Ji1cERwHek=)
                          11: 3138352e322e3136302e302f32332d3234203d3e203430363736.roa (hash: O3J2SAXtmg62ikqS6buGe0VGwNezma9salxJz05yb48=)
                          12: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=)
                          13: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: liefg3Y9zeeu/3eknFvPsQP8Q7/RU3yzzbVSJuhzj6Y=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4a:38:94:7c:ac:b9:d1:ec:51:d9:d9:8e:f4:dc:38:cb:ac:b7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
        Validity
            Not Before: Jun 12 14:25:42 2026 GMT
            Not After : Jun 13 17:28:42 2026 GMT
        Subject: CN=9598558C106FA79821B23FB82637139125C444D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:e0:cc:0f:4b:9a:0b:f9:43:4a:a9:e6:28:
                    38:71:37:4f:b0:af:24:ba:ae:ee:48:e1:7e:d7:33:
                    e2:61:d9:59:69:49:11:77:ef:54:41:b0:92:09:07:
                    a8:a8:a7:5c:b7:fb:86:c8:75:58:26:83:6a:f6:8d:
                    03:74:fa:aa:c3:64:da:cd:07:f3:b2:77:b5:7a:3c:
                    c2:01:7d:f2:a2:72:c1:02:1d:fe:9e:28:7e:7e:d3:
                    b9:33:8e:eb:c8:dd:86:ba:e0:26:03:f8:cb:b1:ee:
                    1a:88:98:ad:90:8a:c1:0f:7f:45:42:17:74:a0:38:
                    72:8e:6b:14:04:52:3d:4a:33:03:b8:cd:68:63:2a:
                    f0:8d:d4:28:0a:51:75:bd:05:4d:f5:40:83:6e:f2:
                    00:86:d2:6a:b9:51:94:a2:c6:e1:00:9c:84:01:00:
                    13:96:05:6d:8a:e6:0b:94:80:32:bc:5f:70:ad:11:
                    9c:1d:00:65:e3:4d:b5:9d:00:18:3f:d0:62:62:bf:
                    ba:44:2f:c2:3a:a2:dc:6a:60:2f:6c:c7:1d:e7:79:
                    c7:22:7b:2b:36:86:cb:1d:f5:9d:f4:11:5d:01:6a:
                    19:1f:5d:68:cd:a6:3d:b5:67:d8:2b:3c:eb:5b:b3:
                    7a:f8:7e:f5:a2:40:c6:c0:bc:46:19:88:88:04:bf:
                    f2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:98:55:8C:10:6F:A7:98:21:B2:3F:B8:26:37:13:91:25:C4:44:D1
            X509v3 Authority Key Identifier:
                keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:10:87:6b:81:90:42:bd:0f:31:b6:42:67:f6:6f:ab:83:f2:
         91:df:b0:42:69:97:03:24:08:e0:2f:14:3d:85:d9:03:a3:83:
         81:6c:89:33:75:22:52:f5:85:17:62:58:12:25:15:46:4a:d5:
         ac:83:ce:f6:3e:65:9d:85:8d:da:3c:63:12:9c:ee:8e:e0:62:
         9c:b2:88:39:1e:31:ea:46:a6:b8:a8:68:01:3a:e8:06:cb:db:
         7a:73:74:db:43:db:c3:ef:98:fb:c6:ca:ce:5c:a4:ee:1e:2f:
         8f:b9:45:79:5d:6b:2a:a5:d3:23:cd:d9:c1:97:fc:53:e5:5d:
         d1:ca:4d:57:7e:2c:e3:87:fc:02:fb:a4:00:4f:44:fa:4b:64:
         b2:54:bf:77:82:9a:f1:59:0e:be:a6:7a:e7:29:c6:34:76:65:
         a7:cb:c7:a3:76:e5:ae:bd:92:93:e3:ce:87:79:18:87:cf:7b:
         88:80:7d:c2:c9:e1:f1:95:aa:8b:9c:2c:89:2d:9c:d5:bf:52:
         2f:1f:9b:43:fe:9f:d4:0b:be:db:3b:46:9e:fd:31:2e:80:f6:
         65:0a:c6:f1:e0:81:04:5f:ab:19:9f:dc:68:70:d6:7f:76:1c:
         2c:00:46:a9:cf:10:3a:f7:41:c6:98:b8:1e:d2:dd:25:b6:8b:
         2b:c2:df:93
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUDko4lHysudHsUdnZjvTcOMust7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3
MDgzZWQ0ZDAeFw0yNjA2MTIxNDI1NDJaFw0yNjA2MTMxNzI4NDJaMDMxMTAvBgNV
BAMTKDk1OTg1NThDMTA2RkE3OTgyMUIyM0ZCODI2MzcxMzkxMjVDNDQ0RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxuDMD0uaC/lDSqnmKDhxN0+w
ryS6ru5I4X7XM+Jh2VlpSRF371RBsJIJB6iop1y3+4bIdVgmg2r2jQN0+qrDZNrN
B/Oyd7V6PMIBffKicsECHf6eKH5+07kzjuvI3Ya64CYD+Mux7hqImK2QisEPf0VC
F3SgOHKOaxQEUj1KMwO4zWhjKvCN1CgKUXW9BU31QINu8gCG0mq5UZSixuEAnIQB
ABOWBW2K5guUgDK8X3CtEZwdAGXjTbWdABg/0GJiv7pEL8I6otxqYC9sxx3necci
eys2hssd9Z30EV0BahkfXWjNpj21Z9grPOtbs3r4fvWiQMbAvEYZiIgEv/JdAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUlZhVjBBvp5ghsj+4JjcTkSXERNEwHwYDVR0j
BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3
ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD
RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00
MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB
QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRCHa4GQQr0PMbZCZ/Zv
q4Pykd+wQmmXAyQI4C8UPYXZA6ODgWyJM3UiUvWFF2JYEiUVRkrVrIPO9j5lnYWN
2jxjEpzujuBinLKIOR4x6kamuKhoATroBsvbenN020Pbw++Y+8bKzlyk7h4vj7lF
eV1rKqXTI83ZwZf8U+Vd0cpNV34s44f8AvukAE9E+ktkslS/d4Ka8VkOvqZ65ynG
NHZlp8vHo3blrr2Sk+POh3kYh897iIB9wsnh8ZWqi5wsiS2c1b9SLx+bQ/6f1Au+
2ztGnv0xLoD2ZQrG8eCBBF+rGZ/caHDWf3YcLABGqc8QOvdBxpi4HtLdJbaLK8Lf
kw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:28:32 2026 by rpki-client