Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File:                     5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier:          YUzva6CkANjUx5AKGU8HGKDsvFDu4uKQjOOraUeEGgg=
Subject key identifier:   1D:E1:13:E4:64:7B:00:A9:86:3C:9A:D8:59:4B:C3:A4:B0:69:97:2B
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer:       /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial:       171CF3A28CFC7D4D3C089F09A4274CED30B6319E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number:          023C
Signing time:             Sun 01 Mar 2026 02:55:33 +0000
Manifest this update:     Sun 01 Mar 2026 02:50:33 +0000
Manifest next update:     Mon 02 Mar 2026 06:06:33 +0000
Files and hashes:         1: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=)
                          2: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=)
                          3: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=)
                          4: 3139342e3131372e36392e302f32342d3234203d3e20333936303634.roa (hash: uPzNQdfiTlC1R9B5J33ZDfQAHE+DMHweR/VNt7ogg2k=)
                          5: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: rULE6QZycQdbSLSggEMqpQB2sZXpuQs3EumawNKxNPc=)
                          6: AS215248.asa (hash: +7bZg/L1iv45A8Lv9ZnYzCCmE84OHieAnUYCYHDgEBc=)
                          7: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=)
                          8: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=)
                          9: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=)
                          10: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=)
                          11: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=)
                          12: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=)
                          13: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=)
                          14: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=)
                          15: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=)
                          16: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=)
                          17: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=)
                          18: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=)
                          19: 3139342e3131372e36392e302f32342d3234203d3e20323135323438.roa (hash: EqbKHazBpNo/bx4pclFyuqidomfYzdI+MjCRoDSagrM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1c:f3:a2:8c:fc:7d:4d:3c:08:9f:09:a4:27:4c:ed:30:b6:31:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
        Validity
            Not Before: Mar  1 02:50:33 2026 GMT
            Not After : Mar  2 06:06:33 2026 GMT
        Subject: CN=1DE113E4647B00A9863C9AD8594BC3A4B069972B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:da:27:ee:27:e0:13:69:e8:66:d4:7d:ad:
                    a9:88:b4:58:f1:ff:e1:e1:46:61:c9:41:6d:36:cb:
                    0e:06:23:11:9c:ad:b8:8d:13:8a:3e:17:57:74:15:
                    b5:9e:bb:98:76:06:16:ee:ff:24:9a:b5:42:f0:48:
                    3a:43:b4:da:52:86:81:a9:55:24:d1:6f:27:97:b0:
                    1c:e9:72:bf:87:3b:3f:80:72:1e:63:2c:a9:63:fa:
                    fb:73:3b:4e:15:3d:69:46:9c:0f:89:33:89:7c:a2:
                    8b:9c:90:0a:88:8f:1a:66:5d:ce:80:8a:71:a5:9e:
                    c3:a7:ef:ba:c9:0c:1e:62:ed:b7:62:be:8d:f3:06:
                    3c:08:1c:9a:92:81:31:c0:fc:e9:c7:b4:58:18:b4:
                    bd:a4:7f:24:50:23:96:58:cf:8d:17:76:dd:63:99:
                    49:fc:d3:ca:fa:02:6a:94:75:c5:83:f8:5b:cf:49:
                    2c:44:e9:4e:09:09:03:0e:15:c5:03:23:bb:84:16:
                    15:d9:56:99:1e:82:8b:04:04:68:28:f7:ab:fe:71:
                    80:02:cb:47:69:2a:fd:95:77:0f:99:aa:c7:2e:d5:
                    d9:cf:ec:7f:25:e1:98:a2:e5:63:9a:7d:ce:fc:b5:
                    2f:63:ee:79:76:b4:54:c3:9a:56:46:72:46:9b:c2:
                    4e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E1:13:E4:64:7B:00:A9:86:3C:9A:D8:59:4B:C3:A4:B0:69:97:2B
            X509v3 Authority Key Identifier:
                keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e2:06:4c:65:e8:a3:b4:92:df:aa:41:f3:07:f1:94:da:78:
         46:d9:51:22:41:a4:12:98:42:26:6b:f6:dc:be:5e:ff:1e:99:
         e2:63:d0:7c:eb:fe:4f:31:1e:46:b3:dd:e8:b6:2a:4b:d9:12:
         a8:9d:ea:79:24:1a:d4:20:f6:86:5e:1f:0d:7a:2a:62:75:89:
         c2:32:8a:92:cd:51:9a:fc:38:c8:92:b8:36:18:bb:4e:81:9b:
         9a:07:3d:1c:56:80:61:b9:cd:70:40:05:85:38:f2:39:21:f4:
         81:5e:08:88:57:f9:84:98:34:aa:02:cb:fa:60:70:55:e1:ff:
         5b:61:fa:98:df:fb:c9:4a:37:f4:16:1a:b3:60:52:d2:f0:e6:
         44:3f:a7:ad:cf:d6:00:2a:e8:10:a0:c1:4e:33:d1:c3:32:f2:
         2f:d3:10:f5:ac:22:fa:e6:20:fa:62:b0:71:a1:98:99:68:5c:
         94:8f:23:c5:75:78:99:1f:72:19:0a:20:5d:24:43:77:f6:a0:
         fe:d8:43:3c:b5:67:45:44:89:29:2c:d9:05:d4:79:51:68:c1:
         49:4b:8d:f5:d4:49:3a:1b:70:94:ef:85:d3:f6:97:7c:95:8b:
         72:0b:dd:a0:c6:68:3e:a6:99:4d:2d:1c:61:d2:db:08:71:64:
         93:69:9f:51
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFxzzooz8fU08CJ8JpCdM7TC2MZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3
ZTc5N2I2ODAeFw0yNjAzMDEwMjUwMzNaFw0yNjAzMDIwNjA2MzNaMDMxMTAvBgNV
BAMTKDFERTExM0U0NjQ3QjAwQTk4NjNDOUFEODU5NEJDM0E0QjA2OTk3MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH2don7ifgE2noZtR9ramItFjx
/+HhRmHJQW02yw4GIxGcrbiNE4o+F1d0FbWeu5h2Bhbu/ySatULwSDpDtNpShoGp
VSTRbyeXsBzpcr+HOz+Ach5jLKlj+vtzO04VPWlGnA+JM4l8oouckAqIjxpmXc6A
inGlnsOn77rJDB5i7bdivo3zBjwIHJqSgTHA/OnHtFgYtL2kfyRQI5ZYz40Xdt1j
mUn808r6AmqUdcWD+FvPSSxE6U4JCQMOFcUDI7uEFhXZVpkegosEBGgo96v+cYAC
y0dpKv2Vdw+Zqscu1dnP7H8l4Zii5WOafc78tS9j7nl2tFTDmlZGckabwk5HAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUHeET5GR7AKmGPJrYWUvDpLBplyswHwYDVR0j
BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli
N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1
NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00
NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3
OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROIGTGXoo7SS36pB8wfx
lNp4RtlRIkGkEphCJmv23L5e/x6Z4mPQfOv+TzEeRrPd6LYqS9kSqJ3qeSQa1CD2
hl4fDXoqYnWJwjKKks1Rmvw4yJK4Nhi7ToGbmgc9HFaAYbnNcEAFhTjyOSH0gV4I
iFf5hJg0qgLL+mBwVeH/W2H6mN/7yUo39BYas2BS0vDmRD+nrc/WACroEKDBTjPR
wzLyL9MQ9awi+uYg+mKwcaGYmWhclI8jxXV4mR9yGQogXSRDd/ag/thDPLVnRUSJ
KSzZBdR5UWjBSUuN9dRJOhtwlO+F0/aXfJWLcgvdoMZoPqaZTS0cYdLbCHFkk2mf
UQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:31:58 2026 by rpki-client