Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
File:                     0D059F10D18D00052C808EB8069F90D47E30564A.mft (raw, json)
Hash identifier:          W/GsKyDWmyWmcKKPlabxSRryTnUU1kJ0mgCIX+FQOBc=
Subject key identifier:   7E:2A:A6:CE:37:17:EE:7C:D4:89:36:78:C5:AF:AA:C2:39:6C:86:AA
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Certificate issuer:       /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial:       57E31BB7093C3A33B8B51AC01E62C90CADA3817C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
Manifest number:          0633
Signing time:             Thu 16 Apr 2026 10:34:42 +0000
Manifest this update:     Thu 16 Apr 2026 10:29:42 +0000
Manifest next update:     Fri 17 Apr 2026 13:31:42 +0000
Files and hashes:         1: 3134312e39382e37322e302f32342d3234203d3e20333935333734.roa (hash: u1fQ+rVhDflp4Ai9Ov6sYLAl6cAPMrlPrKX3yjIts6M=)
                          2: 3231332e3232352e3233372e302f32342d3234203d3e203538303631.roa (hash: 8UBcrBGIxZo60irVr28Bi5OYSE5ftJ/XRCDxxwd9m54=)
                          3: 3231332e3232352e3233392e302f32342d3234203d3e20323030343335.roa (hash: O7QMeYzn5CU54U41dRj25GyQDZmXVewrr09DSGAvfjQ=)
                          4: 38322e3131382e33312e302f32342d3234203d3e20313431313538.roa (hash: OTAxxu80qZiAdbkhEohivnmoAej12d8cy3FA1djbGTU=)
                          5: 38322e3131382e33302e302f32342d3234203d3e20323036303932.roa (hash: wL/aEFW/10+Xf1wWCXVTzJ5EPb98oEAIceQ47oaOw4Q=)
                          6: 3134312e39382e37352e302f32342d3234203d3e203531383437.roa (hash: mmqCGRZJYHvpVg45WvFtGLJd+4UTpkk7nfaHn0CIReI=)
                          7: 3231322e322e3233392e302f32342d3234203d3e203631333137.roa (hash: 88ZqPS4KLL3VUrzEGEoOTIi444han9774YJzqSj1Xig=)
                          8: 38322e3131382e32392e302f32342d3234203d3e20323036313530.roa (hash: g5RZ2zBNk+trtkyb9Rf7BXLU9n0Q1hk7LEirQx9bPLk=)
                          9: 38322e3131382e33302e302f32342d3234203d3e20323036313530.roa (hash: kMPtJcjG9tfatTfMeU7MeMrJk9DMb6WVWPy6p9Bto5Q=)
                          10: 3134312e39382e37352e302f32342d3234203d3e20313437323933.roa (hash: o5LuDMZypsd22aAoxdJpiH2NjLEUg+uICc0EHPajqH4=)
                          11: 34352e3134362e3130362e302f32342d3234203d3e203535323031.roa (hash: uQC20MmSjy1Cc5RYjKHMaAo4fj5NpzuBkQBiuImfQRw=)
                          12: 3231322e322e3233362e302f32342d3234203d3e203632313634.roa (hash: hYVDhA7clFCFhyHx8qb8eGJJtW1LMi+8HW6eGQBn2Ks=)
                          13: 38322e3131382e33312e302f32342d3234203d3e203136353039.roa (hash: VEoo3CL9NzqZNAIdwihXM68+oDB2NsRHzlmj9zV4IGI=)
                          14: 34352e3133322e39392e302f32342d3234203d3e20323030303137.roa (hash: 1e6KGKJ5HwO24hcbCuLCEbl9bSZRGHbgSZb9IcX6KlU=)
                          15: 38322e3131382e32392e302f32342d3234203d3e20323036303932.roa (hash: wVyOrO0P1oozn0Q2ajYhvKJnhXudTg7Oa3BgjMasSeY=)
                          16: 0D059F10D18D00052C808EB8069F90D47E30564A.crl (hash: +ihmgDXHMWos+kMZ90FXRMopO5/SR5TciobIbA9I9UA=)
                          17: 34352e3134362e3130362e302f32342d3234203d3e20323136313338.roa (hash: 01Vb2KSNzkh/GGzFrCIjs5tLsppA7mVVMUUDmrHzNok=)
                          18: 3231332e3232352e3233382e302f32342d3234203d3e20323732363932.roa (hash: /lE504/n5MHV61y4OXy6umkppSIjj02+bYfLKI4SboQ=)
                          19: 34352e3134362e3130342e302f32342d3234203d3e20323039303433.roa (hash: tzVyCbi/1s2sAONAoNlHgjzWVTtlSGS7jXqFeBq7bKc=)
                          20: 3134312e39382e37342e302f32342d3234203d3e20343030383130.roa (hash: fwz/d7S5BIVi9KVNnGw2k82c/snsFesvd7vNCeAko8c=)
                          21: 39322e3131342e352e302f32342d3234203d3e203239383032.roa (hash: rd0Okun09SrmxDlwt39WDyG8IjHWTRiQb15ihRsza7c=)
                          22: 39322e3131342e342e302f32342d3234203d3e20323136313832.roa (hash: iZcvzrTApwMe/mgD5dwZ8ER2vxVuWX1nP07r98rondE=)
                          23: 38322e3131382e32342e302f32342d3234203d3e203537323338.roa (hash: bmsf/k40eGdN++deEP9l4aJt3nVGJ9evXaZOAbsRiUU=)
                          24: 38322e3131382e32352e302f32342d3234203d3e20323030303137.roa (hash: sViFIZ6OozSjA5pHbhyv+L6dE4R+g28oMJzVvvg6Z8A=)
                          25: 34352e38302e362e302f32342d3234203d3e20313337343039.roa (hash: mQ6YzssFE/nFARpdXzey7q80X9EpUm3gxUnbZxsMHUo=)
                          26: 38322e3131382e33312e302f32342d3234203d3e203134363138.roa (hash: M8A4pv7Ga3lILjGKJMYzZ7C0KqHQjVqHGnt7ZKgmIHQ=)
                          27: 34352e3134362e3130372e302f32342d3234203d3e20323134303235.roa (hash: PQKqpCThen/jOxauldwF3BkKUpUg+d450E1F3CjP1CM=)
                          28: 34352e38302e352e302f32342d3234203d3e20323039303433.roa (hash: xEbHzWDrK9qb49s7Sh7bzbMji3lX1NO1D6/xKNr3tPo=)
                          29: 34352e3133322e39362e302f32342d3234203d3e20323037393932.roa (hash: zTkx6ethJk5GNvgY58qt1j+71GYO+nVWeXjRY2w4pio=)
                          30: 34352e3134362e3130352e302f32342d3234203d3e20323132323338.roa (hash: V9x7UhaM0q29T8H8XPtdaeU7ryeW8HoO7AB5EWt3qxM=)
                          31: 38322e3131382e32372e302f32342d3234203d3e20383334.roa (hash: FHARgMVSXXMShwXyaNVOhOAkH4d3l2a7vcFZrXGmL6Y=)
                          32: 3231332e3232352e3233362e302f32342d3234203d3e20333239303937.roa (hash: V4nWrAqYogYLhOaQiLzsxwLWwHJQjIGX7Xia4HxPj88=)
                          33: 38322e3131382e32362e302f32342d3234203d3e20323132343737.roa (hash: M3/fBiajTDnmjbsUTFc/VWwOxC3a0iuPTsEteuhOl7k=)
                          34: 34352e38302e372e302f32342d3234203d3e203239383032.roa (hash: uf7MkTsmUmcfwWZlwmONFUR+MG54zC454PvItoE4C3I=)
                          35: 34352e3134362e3130362e302f32342d3234203d3e20323032373336.roa (hash: MMdb5hdxzSDftqblycIDCKP70I+p+jFdwcOY1SSaT3g=)
                          36: 38322e3131382e32382e302f32342d3234203d3e203633343733.roa (hash: /7GMMsUMyFrJrnMnDEzfi+lqT3G8DknrixPBv42IHZk=)
                          37: 3134312e39382e37352e302f32342d3234203d3e20313439353032.roa (hash: lbd7+tkFet96dqBbAJbAIS+ZvcIfxp2hUTAspPLz4uc=)
                          38: 34352e38302e372e302f32342d3234203d3e203631333137.roa (hash: BWTAt9eN5lq1XIWTYmYop12am0B+QaBbtHGUC//h6CQ=)
                          39: 34352e38302e342e302f32342d3234203d3e20323132323338.roa (hash: npswCjhZwGUKkzdggvkjMlGfXXw2LDR0r8SW9RnhBIc=)
                          40: 3231322e322e3233382e302f32342d3234203d3e203432383331.roa (hash: tf49q1rk4Zhil8rfNPBeN/HXxcZJ+bN4j9DGsJwb1yg=)
                          41: 34352e3133322e39382e302f32342d3234203d3e203137343937.roa (hash: IUP3XlWIZyG1H0S4Enjx7/28GyminuOHnPP/iqw0LYA=)
                          42: 34352e3133322e39372e302f32342d3234203d3e203434383033.roa (hash: R5UKbrult62Xuj1AnmXZm1Tgj84EbOaPR6wItJF1C0E=)
                          43: 3134312e39382e37332e302f32342d3234203d3e203239383032.roa (hash: gwnYrQgA15W8GFygLMrf5+rqfQdFrOY9bW2on2hjPo0=)
                          44: 326130333a323738303a3a2f33322d3332203d3e203537323338.roa (hash: Z/f6e8Rau3EGgtTxd7qltXWmXln+q6Zo5F9lst2q60c=)
                          45: 3231322e322e3233372e302f32342d3234203d3e20313938323530.roa (hash: wZbQGuHgemFbv8qslIMNxpIPEuf0rY3Q5ZNk522f33Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 13:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e3:1b:b7:09:3c:3a:33:b8:b5:1a:c0:1e:62:c9:0c:ad:a3:81:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
        Validity
            Not Before: Apr 16 10:29:42 2026 GMT
            Not After : Apr 17 13:31:42 2026 GMT
        Subject: CN=7E2AA6CE3717EE7CD4893678C5AFAAC2396C86AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:88:d6:99:27:79:e9:72:da:cb:d0:36:7c:76:
                    13:1c:c0:34:58:81:58:b0:a7:24:5d:66:88:04:79:
                    65:8e:bb:51:38:4b:34:81:6c:88:26:d5:48:4d:5a:
                    f7:de:d1:d9:af:6d:7f:e8:c7:5c:94:18:1f:77:ae:
                    44:ca:97:00:dc:50:98:0a:07:a8:1a:94:41:25:04:
                    ad:78:af:48:99:54:8c:18:ff:2d:68:46:e1:ab:0e:
                    03:c2:f2:04:c5:a4:3c:d1:cd:6a:7a:63:9d:a8:f3:
                    a3:8f:84:79:74:f1:56:b8:5c:0b:88:96:23:49:73:
                    ec:38:da:ec:c9:26:8b:6d:87:be:bd:db:fe:11:06:
                    e5:56:35:06:6b:3c:e3:78:25:88:78:06:34:6d:c6:
                    48:5c:3b:cd:a3:d0:52:ef:05:61:55:bf:bf:a1:d9:
                    d6:04:cd:b1:e3:02:f6:62:1a:a4:d4:cc:b7:2c:1d:
                    14:38:73:0f:bd:19:46:0a:74:7f:7a:d2:c4:9b:da:
                    7e:3f:54:30:a6:26:23:94:18:e5:e7:d7:61:3a:5d:
                    cc:4a:1e:cd:af:c2:06:f2:7d:06:26:f4:1b:18:8c:
                    e2:75:c1:27:50:41:35:55:3a:27:cd:1c:05:0b:f6:
                    44:00:9a:3d:c1:3a:81:2f:1f:8a:5c:5d:c5:3d:bb:
                    28:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2A:A6:CE:37:17:EE:7C:D4:89:36:78:C5:AF:AA:C2:39:6C:86:AA
            X509v3 Authority Key Identifier:
                keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f6:b4:59:ca:e5:80:af:c3:2e:1d:53:6f:89:e1:0c:3f:fa:
         10:29:a7:f2:2c:dc:6e:63:59:5c:b4:bb:96:d4:d2:45:8a:33:
         46:39:5a:a4:ac:d4:1f:0c:bf:bb:e2:38:a6:c7:57:40:6e:41:
         63:11:08:c2:42:a4:16:ce:1d:6c:88:28:85:cc:44:33:97:f3:
         0c:d2:11:77:f2:f3:f9:ff:88:57:e1:23:62:93:41:e1:ff:e6:
         69:ad:ce:5d:31:1d:9f:a6:e0:56:94:e9:9a:93:4f:e5:51:51:
         ab:e7:7a:07:4d:dd:62:85:6f:68:8f:0f:b9:92:03:4d:96:0e:
         0b:53:b2:42:74:20:aa:cc:68:55:44:a2:4d:73:78:39:f0:63:
         0a:d2:c2:95:28:45:8b:89:b5:29:0a:d0:06:05:52:de:f1:21:
         da:11:ac:00:69:c3:08:57:6e:c2:8b:7f:a8:4a:cb:28:bf:9c:
         32:5b:35:3d:ef:fe:94:e8:8b:fd:ad:99:b0:3f:f2:be:c0:65:
         f3:fe:2b:8f:a1:c9:0f:cb:e8:43:5d:ed:fc:d2:37:c5:e3:ad:
         90:84:4c:84:73:93:0c:55:79:ec:23:08:10:72:29:45:79:f8:
         71:68:ad:ec:10:da:82:15:83:77:25:04:4f:79:d6:3e:4c:41:
         0b:2d:95:fa
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUV+Mbtwk8OjO4tRrAHmLJDK2jgXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNjA0MTYxMDI5NDJaFw0yNjA0MTcxMzMxNDJaMDMxMTAvBgNV
BAMTKDdFMkFBNkNFMzcxN0VFN0NENDg5MzY3OEM1QUZBQUMyMzk2Qzg2QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoiNaZJ3npctrL0DZ8dhMcwDRY
gViwpyRdZogEeWWOu1E4SzSBbIgm1UhNWvfe0dmvbX/ox1yUGB93rkTKlwDcUJgK
B6galEElBK14r0iZVIwY/y1oRuGrDgPC8gTFpDzRzWp6Y52o86OPhHl08Va4XAuI
liNJc+w42uzJJotth7692/4RBuVWNQZrPON4JYh4BjRtxkhcO82j0FLvBWFVv7+h
2dYEzbHjAvZiGqTUzLcsHRQ4cw+9GUYKdH960sSb2n4/VDCmJiOUGOXn12E6XcxK
Hs2vwgbyfQYm9BsYjOJ1wSdQQTVVOifNHAUL9kQAmj3BOoEvH4pcXcU9uygRAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUfiqmzjcX7nzUiTZ4xa+qwjlshqowHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYWYxNjcwNC0y
ODU0LTQwODAtOWEwOS03MjYyMzI2YzllMjIvMS8wRDA1OUYxMEQxOEQwMDA1MkM4
MDhFQjgwNjlGOTBENDdFMzA1NjRBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPa0WcrlgK/DLh1Tb4nh
DD/6ECmn8izcbmNZXLS7ltTSRYozRjlapKzUHwy/u+I4psdXQG5BYxEIwkKkFs4d
bIgohcxEM5fzDNIRd/Lz+f+IV+EjYpNB4f/maa3OXTEdn6bgVpTpmpNP5VFRq+d6
B03dYoVvaI8PuZIDTZYOC1OyQnQgqsxoVUSiTXN4OfBjCtLClShFi4m1KQrQBgVS
3vEh2hGsAGnDCFduwot/qErLKL+cMls1Pe/+lOiL/a2ZsD/yvsBl8/4rj6HJD8vo
Q13t/NI3xeOtkIRMhHOTDFV57CMIEHIpRXn4cWit7BDaghWDdyUET3nWPkxBCy2V
+g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:03:18 2026 by rpki-client