Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
File:                     0839A93DAB544C296FFA143456844A8B2818B1D0.mft (raw, json)
Hash identifier:          qaJgdIBk42upFSXF9JX4mt2Hbjp5cikp+saAXj1EiKI=
Subject key identifier:   5D:24:02:09:08:7C:D2:CA:A2:A5:BF:F2:EC:5B:75:88:F7:26:52:18
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       3B63D016F69D1528B0C5E067EF13372664F501A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
Manifest number:          02FA
Signing time:             Tue 04 Nov 2025 10:24:30 +0000
Manifest this update:     Tue 04 Nov 2025 10:19:30 +0000
Manifest next update:     Wed 05 Nov 2025 10:51:30 +0000
Files and hashes:         1: AS202359.asa (hash: 6VIFnTZlZo7nQ/fI9Z3+DaeUn3Y1Zv+vHdQ94mzfXkg=)
                          2: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer (hash: fBqC9ryjQi6+GMXhqT8gchFPNagFwAwTKLhvHv66WwQ=)
                          3: C2724A29EF989A4340933B8130B402DD4627A501.cer (hash: 984ckCJkp1VtRhMMUPKyUG2Uubk2ftZ4dLd3NzPeeY0=)
                          4: 323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa (hash: UNIFWQcfDb9TIYM9mTcmUs06i4tbcfV6n3m2ESGFPVM=)
                          5: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer (hash: yTl2Qe0zE7utVIXFFzinc49BbSbwlbqpMj5PC0Y9RLc=)
                          6: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer (hash: fNICkLgDOQLQyXcYC+Mx7zWPSiGBhLSE5Btg3FNYCrk=)
                          7: 0839A93DAB544C296FFA143456844A8B2818B1D0.crl (hash: Jj3Ar7nQcscWl8DcWb9vYjf4WNN8ZZH0SbNI5T6MyAQ=)
                          8: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer (hash: 3vaivSKVhBLosaem2QlCMLHyP8nE7HqRRCEcYWTaKv0=)
                          9: 6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer (hash: 6I8CkH37Y+2qxrW8WAlVcQiiukOkkakJShyNFWsBV3k=)
                          10: 4742E76772F118A935D69FD40F69858085C80999.cer (hash: PXNlleSIOJFtms7j+EwWK+dQ4coJG0uvhI3LcgkFsFw=)
                          11: B50D92304CA867525C648A07380EA065FD352DEC.cer (hash: jeLezi/e/tiKuflcEffKB+Cet8nw848xqf2VW1otgMA=)
                          12: 31586760843F668A816117EA02F6F30FE8F9C359.cer (hash: sdjQP12grMA84wrOD8soDanrM9KsCHOhQQgZ6YwFl/w=)
                          13: B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer (hash: 8IYDJ2eIDos7JCscqio8m4CtvsMZIm87tSAcUKKXKKg=)
                          14: 326131313a663263303a313a3a2f34382d3438203d3e20323032333539.roa (hash: ZivrOJ7iiOCUg/HqF4j2xuXr75dIBf1hdqQTAxY+xwU=)
                          15: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer (hash: e/9HYgp/mohWVL/xi7PmXFlHj2B3IcMqES1nyxAUKjo=)
                          16: F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer (hash: +U9s3nk3zcGTMVxdfeeaoEIEhjnpyi2zUiI59YfVir8=)
                          17: 326131313a663263303a666630303a3a2f34382d3438203d3e20323037393630.roa (hash: 6+o/SVChTjHbiYUJ03zyc6Ju+ZkXcW4hDy3lbeRRz+k=)
                          18: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer (hash: Z+xIm/9vNqFKmLWBcsaGK8BJ1alQ9TOcEU4cwskAlyE=)
                          19: 3139332e332e3136352e302f32342d3234203d3e203434333535.roa (hash: 8+PpyJbtCrTrR5hMXklV6jn0Gbpl8JRn1mZ/sbUihXw=)
                          20: AS207960.asa (hash: RBx5PyqAoDrY5adMVJOexhNWG9/6VgBD3egnyXHlPHY=)
                          21: 09F041F60B21B649820D0FEE0D7654D63DDD080D.cer (hash: YD4L9bqvaUV95bBh8Ju1YuFHRvMJfo/DkcF98/HxW9I=)
                          22: B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer (hash: zKaN08cZjSwmv4VxKubYdVn/CoX70Fn+0x6DYvBEbBM=)
                          23: 44C4C913D58F5EF847996241E969B60A1E3F1389.cer (hash: E3ak7egeb7oLQq4pNOV672llzd9VjZ7X1tZw4IAYLms=)
                          24: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer (hash: Zmzv7fBFqGLxjYc480gPrSI5W4OUPciQIi5quu5IaLg=)
                          25: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer (hash: EluTWf0GQ95lG3mbjIrTeS+cckdmvkzXIoud3lIjd+s=)
                          26: E02C2B37910DB974089166C0D244DE386B5762C2.cer (hash: NQL7Q+vPifLFy80HHQ35NSOJH0JVOxv33NgrFx9SMgU=)
                          27: 326131313a663263303a333a3a2f34382d3438203d3e20323032333539.roa (hash: XIj+fw+vRgYTpRxwvO3XvTkfLsFczQo4AujMyz3iud4=)
                          28: 970AD94C83244100A97F9186D53DADAB07995EE9.cer (hash: RWBnNEK86OTd+EsaiL4tRRo/ytLMfihyN/KLzSQWa5Y=)
                          29: 326131313a663263303a343a3a2f34382d3438203d3e20323032333539.roa (hash: B4MACJgrYv8gOFyM+OgYWOFeMkOQBLykzkdPSnyxEgo=)
                          30: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer (hash: 1nhiF+DUP666qHgL0W5CdOzUBH6sH332zL1MCTVIgUk=)
                          31: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer (hash: gW5/r+rTqmiwY5x1Qtx3z5ezWcBU9AkoYGR7QTJTGt8=)
                          32: 326131313a663263303a323a3a2f34382d3438203d3e20323032333539.roa (hash: SlyimbxFLoCHsFWWpUZjHgmLHKv7rmMtitzOtZT7wdo=)
                          33: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer (hash: xWjJR6Nxgh4wTbQyfSpM8roZ9e57XZ5G/Wz+HfAB8Qw=)
                          34: BBED14E9793905EC1EA5CE10AA03C497D737B115.cer (hash: m+ztv5UmtHgdFMzFwqLzYGsJqAw/AeqFEUgffywu2Zc=)
                          35: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer (hash: NscCIMsZ2yU9wFViqqUFMP9l2GG+IJImIYDZVt1y4cg=)
                          36: 1D570B984E9C5E382B0A879AA21F6518621F059F.cer (hash: w4LlrRiZpjCqpbWEegKCJHPhvyvwSjODOuNEEV+R23o=)
                          37: 326131313a663263303a666635303a3a2f34382d3438203d3e20323032333539.roa (hash: RTtc7kvQY4mgVpXb0OGaj3d8CGbqE+rrAFaJtMYV3Gw=)
                          38: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer (hash: jH9R6EtyMHUcM8XcpEu+SmgJb0fp9TQ+h2bdy0JKm8s=)
                          39: 326131313a663263303a3a2f34382d3438203d3e20323037393630.roa (hash: 3TxnMdPT5hHYItzRe6t9ErU/wv40unaDW97hsOh3H4M=)
                          40: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer (hash: CEGJbTLl4BFPIQu0BkXUdZ1K35M3vSyHeqh8rVvhUfc=)
                          41: 62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer (hash: L9VSFOsG4sCFFaXWcNTMiKK4PkL1oeVJZtfXUCMq90Y=)
                          42: 326131313a663263303a3a2f32392d3239203d3e2030.roa (hash: SFi79UqiX3kS2cuHdwRtphv59FDPSt5CMOnrnul0UdU=)
                          43: 1A889E0950A8B6489E67E7C7189539FB887EAD71.cer (hash: QvMFt41RXdcJq7gp5tnRNXaXgfSmaaXZCupMATLSYFk=)
                          44: 6482EA67DB858D1440DD67B955223E4341BA4E97.cer (hash: lKlfGm9oX8e/vMr1ifVDL2vFahUuPFOtcD1F8uJvy/E=)
                          45: 3139332e332e3136352e302f32342d3234203d3e20323032333539.roa (hash: PN7OPw6x8T4uLhMmLkm8sVVlgwZlpPub1GieXN4o6dQ=)
                          46: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer (hash: xVngRZoqmU3ug9ZE0lvPtcRq8CjSyQiMIGiV8ww3DYk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 10:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:63:d0:16:f6:9d:15:28:b0:c5:e0:67:ef:13:37:26:64:f5:01:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Nov  4 10:19:30 2025 GMT
            Not After : Nov  5 10:51:30 2025 GMT
        Subject: CN=5D240209087CD2CAA2A5BFF2EC5B7588F7265218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:a9:b2:07:91:46:01:69:8d:75:e7:94:55:
                    85:bc:9c:29:67:6b:7c:93:78:9e:46:21:ff:37:e7:
                    44:c4:b4:e6:d2:a0:e7:ac:25:e2:d6:a1:a9:08:c4:
                    cc:d2:f3:30:f0:03:7b:5d:6e:ac:92:7f:60:eb:06:
                    63:84:13:1f:ff:cb:3a:97:5b:98:5a:33:77:ef:56:
                    5c:c1:9f:64:44:f8:a3:a6:56:0d:bc:3f:b4:ee:6c:
                    9c:f6:fa:17:a4:67:ce:e6:be:47:68:52:a6:d1:38:
                    aa:c5:1d:af:aa:8e:29:8d:c2:8b:e0:f2:c8:20:20:
                    97:9b:49:98:64:70:cd:01:ae:8a:ad:52:5f:54:cd:
                    5b:cf:21:72:c9:29:cf:dd:60:e6:53:e1:76:82:a1:
                    dd:e0:76:a7:f1:be:e6:c6:27:7f:71:d4:92:67:d2:
                    28:30:1b:13:f0:49:4e:5c:e8:45:b2:eb:a0:e7:eb:
                    df:7c:4a:63:69:6a:77:94:b4:5e:3f:5b:17:9b:69:
                    ba:3d:15:08:b9:0f:ae:cb:0e:67:4b:16:b6:0f:75:
                    09:9e:11:88:47:d3:c1:18:8e:75:f8:7b:06:e0:61:
                    d4:1a:a0:22:d6:ac:04:f3:81:0d:ba:93:06:6c:ad:
                    f8:b2:9b:06:ab:8c:61:34:97:c7:62:1f:fe:da:1a:
                    9b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:24:02:09:08:7C:D2:CA:A2:A5:BF:F2:EC:5B:75:88:F7:26:52:18
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:36:10:41:78:b7:2e:af:5d:8d:d4:4b:67:ca:50:00:99:e0:
         62:62:b3:38:10:b1:ad:b1:db:c3:b1:2a:c4:1f:d4:a4:9b:aa:
         b4:c4:d9:cd:61:d3:ee:43:c9:6d:a7:f6:01:52:a7:7f:e6:ab:
         f9:c3:cd:f8:ca:97:74:d0:74:50:d0:17:51:51:5c:06:85:1c:
         27:a2:aa:52:7e:f2:c0:ef:3a:44:2f:7f:11:8f:d1:8e:ed:7b:
         88:aa:80:5d:65:49:d6:25:08:9b:5a:75:2d:8c:d5:a0:06:a3:
         67:c6:1f:16:d9:26:85:95:c1:6a:ae:dc:18:32:d7:fa:64:02:
         d0:01:7d:a9:38:ca:e6:e5:04:68:3e:7e:d6:82:05:ff:84:f0:
         7b:02:f4:35:12:0c:b2:09:00:8d:60:81:1b:92:14:6d:14:30:
         76:b9:d7:21:56:97:00:b4:1b:dd:8c:2a:44:be:41:9b:20:f3:
         fb:10:e4:78:9b:ed:58:c7:ba:a1:4e:d4:33:c3:36:1a:6b:8a:
         e4:26:cc:81:d1:16:5c:3d:9b:c7:7c:41:69:45:cf:3b:71:ac:
         e1:e2:f2:90:fc:c6:4d:bf:d7:f2:ac:04:bf:73:5a:2f:d0:83:
         47:14:ac:57:e7:5c:45:03:6a:14:4f:44:14:b8:7a:4a:2b:d0:
         c5:f6:e7:62
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUO2PQFvadFSiwxeBn7xM3JmT1AagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNTExMDQxMDE5MzBaFw0yNTExMDUxMDUxMzBaMDMxMTAvBgNV
BAMTKDVEMjQwMjA5MDg3Q0QyQ0FBMkE1QkZGMkVDNUI3NTg4RjcyNjUyMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsOKmyB5FGAWmNdeeUVYW8nCln
a3yTeJ5GIf8350TEtObSoOesJeLWoakIxMzS8zDwA3tdbqySf2DrBmOEEx//yzqX
W5haM3fvVlzBn2RE+KOmVg28P7TubJz2+hekZ87mvkdoUqbROKrFHa+qjimNwovg
8sggIJebSZhkcM0BroqtUl9UzVvPIXLJKc/dYOZT4XaCod3gdqfxvubGJ39x1JJn
0igwGxPwSU5c6EWy66Dn6998SmNpaneUtF4/Wxebabo9FQi5D67LDmdLFrYPdQme
EYhH08EYjnX4ewbgYdQaoCLWrATzgQ26kwZsrfiymwarjGE0l8diH/7aGptxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUXSQCCQh80sqipb/y7Ft1iPcmUhgwHwYDVR0j
BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh
MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln
WXNkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02
MzkwLTQxYjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZG
QTE0MzQ1Njg0NEE4QjI4MThCMUQwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDYQQXi3Lq9djdRLZ8pQ
AJngYmKzOBCxrbHbw7EqxB/UpJuqtMTZzWHT7kPJbaf2AVKnf+ar+cPN+MqXdNB0
UNAXUVFcBoUcJ6KqUn7ywO86RC9/EY/Rju17iKqAXWVJ1iUIm1p1LYzVoAajZ8Yf
FtkmhZXBaq7cGDLX+mQC0AF9qTjK5uUEaD5+1oIF/4TwewL0NRIMsgkAjWCBG5IU
bRQwdrnXIVaXALQb3YwqRL5BmyDz+xDkeJvtWMe6oU7UM8M2GmuK5CbMgdEWXD2b
x3xBaUXPO3Gs4eLykPzGTb/X8qwEv3NaL9CDRxSsV+dcRQNqFE9EFLh6SivQxfbn
Yg==
-----END CERTIFICATE-----