Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
File:                     9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft (raw, json)
Hash identifier:          OO2V1xt1cZKLY8wuZOJ6v6o0FZ8Y/mll1AnjDyUjoFw=
Subject key identifier:   55:40:13:98:73:9E:2F:6B:63:9D:03:94:1E:10:E5:D7:E1:6C:0D:C9
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Certificate issuer:       /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial:       5E657FA58AF759D80CF0B94F9521FF2141313B11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
Manifest number:          03C0
Signing time:             Sun 01 Mar 2026 13:51:51 +0000
Manifest this update:     Sun 01 Mar 2026 13:46:51 +0000
Manifest next update:     Mon 02 Mar 2026 17:35:51 +0000
Files and hashes:         1: 39352e3136392e3136372e302f32342d3234203d3e203631333137.roa (hash: o1Z1gv8qcijmlxmof6KbMPtO3/EITyA/CsYVvnx8Ko0=)
                          2: 39352e3136392e3137362e302f32342d3234203d3e20323033363336.roa (hash: 4wNm7SdKeRKEaBBBn2yhRi29IL7nM82igAE5n//XKpE=)
                          3: 36322e3134312e35362e302f32322d3234203d3e203331313033.roa (hash: f2uzGttju8CJhu3pIUGxsulMOt6+VibQadUSWlj55ZA=)
                          4: 39352e3136392e3138312e302f32342d3234203d3e203331313033.roa (hash: vHIdBAX8vax4LMkHyZBnhxzL225O0XLYlxEPXB9FDh8=)
                          5: 39352e3136392e3136382e302f32342d3234203d3e20313432313436.roa (hash: /RLbW4auKS2K3rv8HhDP+gP154Hco62R6zxtZ7i34qM=)
                          6: 39352e3136392e3137382e302f32342d3234203d3e203239383032.roa (hash: M1zdBr3dkuSPfBlr5N8fCga3HKwLGAVwQfjNqW+G7yU=)
                          7: 39352e3136392e3137312e302f32342d3234203d3e203239303636.roa (hash: 21lAGTMtlp02tGYNtgPFkN8EZsIZjuO0nYo5r8q+krI=)
                          8: 38372e3131382e36342e302f31382d3234203d3e203331313033.roa (hash: 5FgGKvGyM0+sTnRzeGibD3YbS14Xm/BeG3m9Kf1UjW8=)
                          9: 39352e3136392e3136302e302f32342d3234203d3e203331313033.roa (hash: 8vr1ZciHAkne0/U9xo8m/EZoMXPqvddsbCNMYo8K6Lc=)
                          10: 36322e3134312e36332e302f32342d3234203d3e20323039353033.roa (hash: 5iMkqdKaodGZceg7xcTo90AjAcnin/rj9yW7y461+ew=)
                          11: 39352e3136392e3136372e302f32342d3234203d3e203239383032.roa (hash: StWFAV1ktsHSXaR84IkdQxGhH1pdr8IbInj7fnowEwI=)
                          12: 39352e3136392e3136362e302f32342d3234203d3e203633313530.roa (hash: zeOelHfLdZjMH3OkxCEQZ20Nkae1JE0nc2s+xWdEEEQ=)
                          13: 39352e3136392e3137352e302f32342d3234203d3e20323133333139.roa (hash: 0RBZ/mU01xCDKSKWtmVbzc8O8NAjvYbVNwan87PBgvk=)
                          14: 323030313a316236303a3a2f32392d3239203d3e203331313033.roa (hash: 43AsOxL4a9I10GSthDJXGbWZWADf4GGnRt4Iz5iDl5w=)
                          15: 39352e3136392e3137342e302f32342d3234203d3e203233383635.roa (hash: 2vGx/b+IMIujTVU8vkd3QqlGb4NKBcI4SPBsQqJxXFU=)
                          16: 39352e3136392e3137302e302f32342d3234203d3e203239303134.roa (hash: i2xhkApVfgj04fX+hojCpQK4wvNEUE95SvVCLWaHLBA=)
                          17: 39352e3136392e3138382e302f32342d3234203d3e203331313033.roa (hash: 226MZdY+a2f6nMwQHLZZRp09daRbMnARjilQ0DMiCn8=)
                          18: 39352e3136392e3137322e302f32342d3234203d3e203239303134.roa (hash: vOQ2CJDOAV09jGCVDUsBwTiMAv1pXrciagC9EaYFihM=)
                          19: 36322e3134312e36322e302f32342d3234203d3e203136323736.roa (hash: kK0Kj3RrwBfjRddxRkWNqDl+BI/cVmP9VgkySujZ2ic=)
                          20: 9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl (hash: XWK55kZXV8sAU5MjC0LT9T+ppgFOcKb/u9Cz4OBPzeU=)
                          21: 36322e3134312e34382e302f32312d3234203d3e203331313033.roa (hash: Eoqc9k3Yv1UQaUFZuo0jARSDnM1xTkUtiaDPuATQups=)
                          22: 3231372e3131342e3230382e302f32302d3234203d3e203331313033.roa (hash: gr03GWP2J+mWH8BIdz3eIQefsBxaCm+3XV9JFI2iBPA=)
                          23: 39352e3136392e3137322e302f32342d3234203d3e203436353539.roa (hash: JM9dpKIanlubgpq4VNE8vCqNAhvHx6W/LlVZssjkYGI=)
                          24: 39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa (hash: Y3yWrlCcBduEqP+x2uVjELBYkUL1NaUhLPealMI045M=)
                          25: 39352e3136392e3136332e302f32342d3234203d3e2035303635.roa (hash: JpuEF0ephfoLAmDX8MxjtzasgCsiSynxwG0xVvE05ak=)
                          26: 39352e3136392e3136322e302f32342d3234203d3e20343030383130.roa (hash: twnUw+h+nvEkUvESIwakkxSwyObti4EeGwb282j/Hy8=)
                          27: 39352e3136392e3138372e302f32342d3234203d3e203331313033.roa (hash: dHsnX5zrNfbVbo8Cz+W65wQOwbUxto43yjszc9VCH0Y=)
                          28: 39352e3136392e3137372e302f32342d3234203d3e20323133323530.roa (hash: M5z9Sux3PcsEPFPTOYmSmjuZyXZMxe8g6i7N2xLS1OI=)
                          29: 38342e31392e3136302e302f31392d3234203d3e203331313033.roa (hash: mmfL5qVgg4KaXtsVE7F7YcQcdDAu4pHAKwG2SsIvh8s=)
                          30: 39352e3136392e3138302e302f32342d3234203d3e20323632323837.roa (hash: 6UGT1aTRnL4zp/KvN9izOc/fv/mHQQmccA1UDKjH29E=)
                          31: 39352e3136392e3137392e302f32342d3234203d3e203239303636.roa (hash: yywcvcHzn7dSwO3+wHqBp+CW/a8ZhBlrFbEf1UnM8Hk=)
                          32: 39352e3136392e3138342e302f32322d3232203d3e203331313033.roa (hash: 2fESKlF0+csH+bkbWbTv3oOmUla4DBnBrtpXwsB8xtg=)
                          33: 36322e3134312e36302e302f32332d3234203d3e203331313033.roa (hash: 7hC/7buJ7T5t4OgZLWTNq+9WScksNQKydBgZ1vBlVgM=)
                          34: 39352e3136392e3138332e302f32342d3234203d3e203331313033.roa (hash: 14BjJABvK45hEO1MTADvUJ8/9d09FCU82zdQ6aYQXvA=)
                          35: 39352e3136392e3138362e302f32342d3234203d3e203331313033.roa (hash: az9XmcJkBqWPeM9SkwIUOpvQgtsOMzMmDzHJH6fuDM0=)
                          36: 39352e3136392e3139302e302f32332d3233203d3e203331313033.roa (hash: 2jXLpNlhiNv8gkIUwXJmLyEMC56nKRQgI4gcz2G4bN0=)
                          37: 39352e3136392e3136392e302f32342d3234203d3e203331313033.roa (hash: I82uo/QE6Wy3PHz0iuior83bbmdz5PrUnUTfAbS8VFk=)
                          38: 39352e3136392e3138392e302f32342d3234203d3e203331313033.roa (hash: GOon70I5uhhs/nnQp16QL9ir1jKCr0nAP5fOjpanC0o=)
                          39: 39352e3136392e3137302e302f32342d3234203d3e203436353539.roa (hash: bwt+okxHQpNxVqhYmN6qMDI16vhwwT0tSw8hD5zYGFI=)
                          40: 39352e3136392e3136342e302f32342d3234203d3e203136313235.roa (hash: aj4OUZvoJq+U0AKwuK7Sp8plgctJ6Yuvqf3ESjh7Rqw=)
                          41: 39352e3136392e3136312e302f32342d3234203d3e203331313033.roa (hash: rRQabZUtw+9d+Hzia7uZvMYxU4nKdcUZLHQ401GlyDU=)
                          42: 39352e3136392e3138322e302f32342d3234203d3e203331313033.roa (hash: MIFV8cJ9qNpMecIFeReLvKdqknaaeAVxdEuriaz+uNo=)
                          43: 39352e3136392e3137332e302f32342d3234203d3e20343030383130.roa (hash: BsfJttihkJapWw7WQdwqY/fpKPjdSgxYv5Wpl/HNe4Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:65:7f:a5:8a:f7:59:d8:0c:f0:b9:4f:95:21:ff:21:41:31:3b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
        Validity
            Not Before: Mar  1 13:46:51 2026 GMT
            Not After : Mar  2 17:35:51 2026 GMT
        Subject: CN=55401398739E2F6B639D03941E10E5D7E16C0DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b6:a2:bc:63:ef:17:e2:b9:f9:1f:85:1a:63:
                    b5:1e:59:2b:73:1e:84:1b:6a:37:33:f5:03:00:d5:
                    9e:72:74:14:c7:5b:19:cd:56:63:c0:79:67:03:64:
                    41:b5:09:79:60:c3:b5:ea:6f:46:c1:bc:4e:9a:87:
                    96:84:4d:a2:a1:7f:30:6e:eb:91:76:69:65:34:65:
                    1e:c4:d0:5e:04:9b:79:8b:f1:77:f7:1d:15:85:a8:
                    82:88:68:de:7b:74:c1:34:f8:2d:52:96:ec:27:57:
                    1d:82:f6:59:9e:a0:00:47:f6:92:70:c5:de:20:dc:
                    5e:83:01:e5:5a:1e:50:67:1e:7f:e0:e5:5d:1d:21:
                    43:65:e1:86:20:db:c9:20:b4:d9:c6:c8:30:83:2f:
                    a8:c5:bf:2d:66:d5:4d:06:b2:7c:0b:ef:16:d7:ed:
                    ed:10:e6:e9:ed:ce:46:a1:c2:cf:f3:33:c5:87:a1:
                    fa:14:4b:56:2c:59:37:d0:fb:33:43:6f:ab:8f:94:
                    e0:40:ed:2e:fb:c5:02:ae:25:1b:62:7c:ae:30:7c:
                    8b:79:2f:34:e9:00:b7:0f:6a:ce:cf:53:fa:1a:fb:
                    3d:e8:48:0b:43:56:ee:99:49:92:0d:20:19:41:d7:
                    82:c6:82:fe:d1:a4:87:df:9c:6d:d5:ab:aa:15:c2:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:40:13:98:73:9E:2F:6B:63:9D:03:94:1E:10:E5:D7:E1:6C:0D:C9
            X509v3 Authority Key Identifier:
                keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:93:eb:d9:6d:11:ef:44:e3:b8:88:8e:09:74:fe:65:f4:c0:
         45:bd:2c:ef:7b:e2:d3:9e:98:44:85:84:0d:9c:97:92:7c:d2:
         f9:b2:7a:ff:62:fb:59:97:e2:25:19:66:e6:20:41:3d:88:ec:
         91:fb:1f:92:9d:ac:cf:82:f7:dd:e4:cf:86:31:5d:30:74:da:
         e7:d5:1c:60:52:9e:83:21:c5:76:60:93:6b:7a:05:47:cb:fe:
         a2:45:44:4f:d2:67:ba:c3:3a:45:58:5c:85:8e:ac:f9:31:16:
         9d:0b:f2:15:28:fb:19:e3:5e:f1:6e:4a:cb:e3:7f:91:60:94:
         62:c6:23:ea:ff:67:c2:ad:2c:28:5b:a9:da:da:89:ea:4b:8b:
         93:c8:d7:6a:84:5d:74:49:a4:9e:c4:60:ac:fe:d6:c5:6c:9c:
         83:fc:14:ac:1e:5b:9c:0b:18:93:c1:d0:5b:54:89:c5:b1:17:
         09:01:5f:5e:cc:e6:ea:a7:3c:f6:74:ba:10:37:a4:e0:06:42:
         c2:7f:e5:e5:83:6a:59:24:a1:98:d7:b6:c3:63:7d:f9:bc:2c:
         9f:bc:86:f4:ba:f4:fb:03:83:73:46:2d:b9:9c:b1:61:ea:07:
         8c:e9:fc:b1:bf:4b:e5:4f:83:63:62:1f:68:ac:6f:77:fc:fb:
         a1:b4:82:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:57 2026 by rpki-client