Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
File:                     C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json)
Hash identifier:          ypxsDcsZ9ExkHN3SBdiUnCunTMwKaX4E0ZrMjuYoh68=
Subject key identifier:   BC:F2:58:36:0F:C4:72:3B:7E:15:E9:36:EF:B1:3A:B2:6C:97:1E:12
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Certificate issuer:       /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial:       737ACA81DC60A01EBCF8E23BDE12944B05B50870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
Manifest number:          0336
Signing time:             Sat 13 Jun 2026 00:47:44 +0000
Manifest this update:     Sat 13 Jun 2026 00:42:44 +0000
Manifest next update:     Sun 14 Jun 2026 02:04:44 +0000
Files and hashes:         1: 33312e32322e3130352e302f32342d3234203d3e20323030383539.roa (hash: nw9YLvM7zXyP2kzR5sTyAuZwaZ0QV0qAmB4zg2Dg+gg=)
                          2: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: +T38VP/yg/XuSchE46Of1F9o298xd/XmIgmgo7ov7uE=)
                          3: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: e3yeUvIbF4YF0fCErBT4H99U9jC9XkRZUBr3LRE9AVI=)
                          4: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak=)
                          5: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=)
                          6: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY=)
                          7: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=)
                          8: 3130332e34392e3133302e302f32342d3234203d3e20383334.roa (hash: CtfZNk2OmNMTOjyPsIN0I2X6FYZK/4s1k/jK21vwNP4=)
                          9: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=)
                          10: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA=)
                          11: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=)
                          12: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=)
                          13: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=)
                          14: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: uRUTbbdZ8AYVGvK3CKTe3KYxaaV1m1bGyvfgh/rstUI=)
                          15: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=)
                          16: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: 7bNrxcvUZ17BVt7tVCbbxISD5HLTvxOeQrmUPkwlG/E=)
                          17: 34332e3233302e38342e302f32342d3234203d3e20383334.roa (hash: OQONGY7ev9MHL6KcmLNI4VRbuiwt+0FWiBeBJLdgRto=)
                          18: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=)
                          19: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7a:ca:81:dc:60:a0:1e:bc:f8:e2:3b:de:12:94:4b:05:b5:08:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
        Validity
            Not Before: Jun 13 00:42:44 2026 GMT
            Not After : Jun 14 02:04:44 2026 GMT
        Subject: CN=BCF258360FC4723B7E15E936EFB13AB26C971E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:57:b7:ab:db:97:4e:d6:af:a4:54:0b:ec:
                    52:0f:ef:78:24:e4:62:54:5b:d8:85:b1:c6:59:48:
                    98:36:31:b3:be:bc:a8:e7:6c:53:e7:ae:c8:67:59:
                    8b:a3:73:8d:ea:d3:71:d8:02:23:10:76:6f:d5:51:
                    a8:e8:f4:83:dd:d2:a9:3e:c3:2d:66:79:fa:86:2c:
                    7f:a7:5a:2c:15:f1:96:3d:cd:c9:8f:7e:df:5c:d5:
                    4a:19:38:b9:4c:4f:d7:09:f4:37:a3:89:54:b5:b7:
                    9a:41:d9:47:3a:81:76:c6:f1:c7:bb:22:14:6b:bc:
                    bd:f9:f8:fa:86:44:4a:f1:17:e6:ef:76:5b:ad:92:
                    e2:51:41:1c:5a:c5:d1:9d:cf:53:ed:09:21:c9:03:
                    eb:05:4d:cc:0a:02:15:58:54:dd:21:42:f9:38:9a:
                    6b:43:29:91:11:b4:b1:03:a1:d5:bd:89:34:7e:3a:
                    52:66:57:48:77:9f:e1:3d:13:06:bc:75:14:a0:b7:
                    8b:56:7d:82:6c:cd:19:7b:b9:b7:48:7d:7e:5c:98:
                    1a:96:dd:c6:81:95:9d:d4:fd:1b:42:dc:16:f0:4d:
                    88:0e:01:a9:12:a2:d3:06:36:8f:55:2c:ba:86:0c:
                    05:58:0a:dc:c7:b8:13:d2:61:00:53:25:a6:bb:93:
                    8e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F2:58:36:0F:C4:72:3B:7E:15:E9:36:EF:B1:3A:B2:6C:97:1E:12
            X509v3 Authority Key Identifier:
                keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d0:31:cb:1a:0d:62:df:ae:b7:5a:40:20:53:41:ce:38:e2:
         ad:44:dd:ba:4c:a3:be:26:2e:22:c6:19:a0:6b:e6:b9:b6:9e:
         30:90:ef:b8:f5:c5:e9:de:cf:e0:5a:13:da:56:f5:62:a4:ad:
         bd:47:a1:4e:0a:ab:59:d2:30:93:12:90:12:97:58:34:d5:d6:
         a8:cd:bf:62:44:92:8c:44:75:d9:60:ce:f6:d2:b0:b7:44:fa:
         67:d4:59:4e:c3:c5:96:9b:a9:3c:82:c4:34:a3:e5:d7:c0:3c:
         71:73:5f:dc:97:66:c0:e4:81:7a:49:fe:fe:2e:3a:35:2a:08:
         93:e2:36:94:b3:8f:de:87:56:82:db:4a:a5:db:3b:02:ce:ac:
         44:44:d5:31:38:6c:79:c8:00:ec:ae:c2:02:8a:52:fb:25:df:
         7e:85:a6:49:47:d0:12:4e:6c:24:15:25:95:1c:6f:c2:ab:b8:
         b5:fd:d9:2e:f0:2b:e6:bb:5a:4b:c8:12:bd:a9:37:77:a6:98:
         4b:9f:14:62:d8:a1:2e:7c:97:06:df:8a:8d:8a:4e:e5:6f:99:
         2f:89:9f:db:9e:ae:61:56:0c:0e:85:1a:db:5d:30:c9:91:96:
         5c:7b:2d:e4:fc:16:66:48:6a:4b:4e:66:2f:f4:8e:e7:5a:5c:
         d3:ef:23:fb
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUc3rKgdxgoB68+OI73hKUSwW1CHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNjA2MTMwMDQyNDRaFw0yNjA2MTQwMjA0NDRaMDMxMTAvBgNV
BAMTKEJDRjI1ODM2MEZDNDcyM0I3RTE1RTkzNkVGQjEzQUIyNkM5NzFFMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC481e3q9uXTtavpFQL7FIP73gk
5GJUW9iFscZZSJg2MbO+vKjnbFPnrshnWYujc43q03HYAiMQdm/VUajo9IPd0qk+
wy1mefqGLH+nWiwV8ZY9zcmPft9c1UoZOLlMT9cJ9DejiVS1t5pB2Uc6gXbG8ce7
IhRrvL35+PqGRErxF+bvdlutkuJRQRxaxdGdz1PtCSHJA+sFTcwKAhVYVN0hQvk4
mmtDKZERtLEDodW9iTR+OlJmV0h3n+E9Ewa8dRSgt4tWfYJszRl7ubdIfX5cmBqW
3caBlZ3U/RtC3BbwTYgOAakSotMGNo9VLLqGDAVYCtzHuBPSYQBTJaa7k47BAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUvPJYNg/Ecjt+Fek277E6smyXHhIwHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02
ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5
QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtAxyxoNYt+ut1pAIFNB
zjjirUTdukyjviYuIsYZoGvmubaeMJDvuPXF6d7P4FoT2lb1YqStvUehTgqrWdIw
kxKQEpdYNNXWqM2/YkSSjER12WDO9tKwt0T6Z9RZTsPFlpupPILENKPl18A8cXNf
3JdmwOSBekn+/i46NSoIk+I2lLOP3odWgttKpds7As6sRETVMThsecgA7K7CAopS
+yXffoWmSUfQEk5sJBUllRxvwqu4tf3ZLvAr5rtaS8gSvak3d6aYS58UYtihLnyX
Bt+KjYpO5W+ZL4mf256uYVYMDoUa210wyZGWXHst5PwWZkhqS05mL/SO51pc0+8j
+w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:21 2026 by rpki-client