Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
File:                     22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json)
Hash identifier:          Iv1sMZC3C5YCUnAy6rxKrlAB7rwCaq2W1+9ttpez4FM=
Subject key identifier:   3A:7C:9E:FB:EC:5B:A5:1A:66:9A:1F:BB:04:24:D5:63:96:6A:25:3C
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Certificate issuer:       /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial:       3DDA95B2B82D7380F19B2A4359AB7EE1F8ED1B41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
Manifest number:          01F2
Signing time:             Wed 28 Oct 2026 08:02:36 +0000
Manifest this update:     Wed 28 Oct 2026 07:57:36 +0000
Manifest next update:     Thu 29 Oct 2026 11:52:36 +0000
Files and hashes:         1: 3231372e32352e31302e302f32342d3234203d3e20383334.roa (hash: hfJ4SibvFwDIroIB4sGwG6yD3Breq9HTjicnMOM55ww=)
                          2: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=)
                          3: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=)
                          4: 38372e3235342e31342e302f32342d3234203d3e20323138383632.roa (hash: F1OX6LNWl+YwC+chgvQSQD6NIxsSYKS/34Wqd3CKlgY=)
                          5: 3231372e32352e332e302f32342d3234203d3e203230343733.roa (hash: Gtvwy4O2g92Wl34q1NG2a1KSHDIDcCrqvni9SpsOlEs=)
                          6: 38372e3235342e33312e302f32342d3234203d3e20323030303137.roa (hash: lbbXKkkoJ4X5dFgdoGsgrLdnfR7I5el1vS65pf+Zkis=)
                          7: 38372e3235342e352e302f32342d3234203d3e20323036303932.roa (hash: 5AbdKFmtNdu0I9ZynCaAwms1EqYUPiTBICwx1LtjAT4=)
                          8: 38372e3235342e32312e302f32342d3234203d3e20323138393131.roa (hash: 7tSYuQ71mqHiPabmM7s3mhhfcknamp56jVy7dHHL490=)
                          9: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=)
                          10: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=)
                          11: 38372e3235342e32362e302f32342d3234203d3e20323138383239.roa (hash: E6a3DUIrDtWaQWEAr7GxRUGI6lo4FcU/j93xxkkfpm8=)
                          12: 38372e3235342e362e302f32332d3234203d3e20383334.roa (hash: tfVvEhgafJFq3DRHglA/EFHAHlZh/KyEJcqOLgxf+hg=)
                          13: 3231372e32352e31352e302f32342d3234203d3e20323139303735.roa (hash: +dDC3qno9/dDOGrdBbQoDaYYLPHMualjwXdtFrHcKEc=)
                          14: 3231372e32352e31352e302f32342d3234203d3e20323138393131.roa (hash: wfvFmo8lCxQv3pQXDUXC+GbDCaW6aNhuY3C5NbrP9WA=)
                          15: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=)
                          16: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=)
                          17: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=)
                          18: 38372e3235342e31312e302f32342d3234203d3e20313437323831.roa (hash: BqBZ+dpze/TrhUpjUL7GvfXJG8nlPAhZLSWDSQtwsrI=)
                          19: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: OUXJIN5IdrYJD7M9fQb6ri5Wozr8Jiuz28aJGOJfzUw=)
                          20: 38372e3235342e32382e302f32342d3234203d3e203438303131.roa (hash: 8oJZ/FjkgQU0NuXFdCxfdmf+Mh8lECUVr3u2Hj4Jb0s=)
                          21: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=)
                          22: 3231372e32352e362e302f32332d3234203d3e20383334.roa (hash: kuLwFCmf8Whna0mXwpfLAstA+xJncXgqXwYveSIDWeI=)
                          23: 38372e3235342e32352e302f32342d3234203d3e20383334.roa (hash: TGOtG3amXx0E1MjepLoFOD14iGF8L8gwbtptYoy5hLo=)
                          24: 38372e3235342e392e302f32342d3234203d3e203136323736.roa (hash: tdPEjgEB+QuDu3RAdSXHnz830+oRP3X+yknhpXKYbX0=)
                          25: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=)
                          26: 38372e3235342e32302e302f32342d3234203d3e20323138383837.roa (hash: ZhpNPPOoxuBKWgyygAwSStAMQzGmmwb/Gzjd7NA4m2g=)
                          27: 3231372e32352e31312e302f32342d3234203d3e203432383331.roa (hash: LBGC7WX7bJkBy0/v1ZbPU/RfYLNVgPcvPJyw+DpE2j8=)
                          28: 3231372e32352e31342e302f32342d3234203d3e20323139303735.roa (hash: PRHelZeaYB0AdVnwbP3lCCm6w0hExVgIIITX5Ej+gHM=)
                          29: 3138352e3231302e3136382e302f32342d3234203d3e20383334.roa (hash: 8juIV0dftfDc+Y71BykCuPcZOZufatRRCpbHWIi1myo=)
                          30: 38372e3235342e342e302f32342d3234203d3e20313532313739.roa (hash: Y+fm5Z1hQ5CX1kAf8N1IWb6MLSFELQii0Oe4LqXPgVI=)
                          31: 38372e3235342e31352e302f32342d3234203d3e20313532373236.roa (hash: GSSgH83pI/WSimA4p0HnpB9Vc7IOSSfTc+beOvXRhGU=)
                          32: 38372e3235342e31322e302f32342d3234203d3e20383334.roa (hash: Csmnwo2TPrFnpdtdygd8M5axyO7EMgidxtaGyRO6HZ8=)
                          33: 3231372e32352e31342e302f32342d3234203d3e20323138393131.roa (hash: 6zBnZAV6U4SxORPivplOWbpDZeUBoKVCeSnCOrEOuro=)
                          34: 3231372e32352e31342e302f32342d3234203d3e20313938343735.roa (hash: 4/AGSq6kBSxukgG2E7JQaHX1UFWVm9CjEqmLxqxX2LM=)
                          35: 38372e3235342e31302e302f32342d3234203d3e20383334.roa (hash: oPVr5yXuRhi0bVIVBieieuruFxHEVdzdC7XAeTMZEM8=)
                          36: 38372e3235342e32322e302f32332d3234203d3e20323735373134.roa (hash: Q017uW83uFb8COwcV2Dq8d6iP2iHdliF99e4gCzHkCU=)
                          37: 38372e3235342e31332e302f32342d3234203d3e20323036303932.roa (hash: oUikqYBVi4RcjOhDQmNNaH8TAOGVNq7wtpKIRIIaXQc=)
                          38: 38372e3235342e32342e302f32342d3234203d3e20323138363235.roa (hash: sTTe5OsbHCgQiAmQMPOzIV1LQbXo98I0ZmLtX2GsdFs=)
                          39: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=)
                          40: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=)
                          41: 3138352e3231302e3136392e302f32342d3234203d3e203537303433.roa (hash: 7z9K9FbgeMuXCaln/1hsSe4DLUK7TEmfgfG1Y1Dfr7g=)
                          42: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=)
                          43: 3231372e32352e31332e302f32342d3234203d3e203133333335.roa (hash: io4UFoc1YGnqjZfuSBnWpQH/OPOtN9A1OFdVrMznZWc=)
                          44: 38372e3235342e32372e302f32342d3234203d3e20323036303932.roa (hash: Xuw3TAANRJRfZ6808E5bRrhDo88u4xKeZ2EmRQyfhRE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:da:95:b2:b8:2d:73:80:f1:9b:2a:43:59:ab:7e:e1:f8:ed:1b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
        Validity
            Not Before: Oct 28 07:57:36 2026 GMT
            Not After : Oct 29 11:52:36 2026 GMT
        Subject: CN=3A7C9EFBEC5BA51A669A1FBB0424D563966A253C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:0f:67:86:ce:d6:7d:f8:c7:62:8c:37:3c:
                    b8:62:91:8f:1d:7d:76:8c:27:7b:31:bd:3e:65:16:
                    5a:4f:5a:6b:3c:3f:30:d7:00:74:b3:3d:d4:34:38:
                    8e:e7:a8:cd:d5:33:dc:14:45:9a:b7:11:9f:5b:3f:
                    d9:21:66:97:4d:b0:96:a7:2b:c7:38:38:9c:c0:f9:
                    f1:81:ea:df:85:ab:17:a4:27:8c:41:bf:48:6a:7f:
                    8c:07:85:e5:15:4b:c2:87:8f:29:49:64:db:bb:a2:
                    b3:7a:77:ad:61:27:78:b2:c5:67:71:32:0c:b6:f0:
                    70:1d:f0:11:4e:c0:7a:11:84:ae:b8:74:07:5e:e7:
                    bb:75:73:bd:e6:b3:34:fd:6d:aa:ab:8c:11:a9:33:
                    06:d8:4d:f8:c2:e4:6d:1b:c7:e0:be:92:dc:e7:43:
                    ec:ce:79:70:2b:b9:ce:5b:fd:61:01:81:f8:be:e9:
                    f8:85:88:7b:f9:ec:e8:fc:7e:aa:eb:6a:e9:6b:a1:
                    68:c2:61:54:ab:74:cf:2c:c4:f5:87:1a:26:84:fd:
                    4a:43:26:9b:77:7b:2e:dc:b8:98:01:c8:3b:87:25:
                    db:07:c3:19:4f:c1:ad:d6:82:8a:3a:57:42:57:d8:
                    94:d4:7d:2d:47:08:fe:4b:de:10:b4:8c:47:a8:f3:
                    b1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7C:9E:FB:EC:5B:A5:1A:66:9A:1F:BB:04:24:D5:63:96:6A:25:3C
            X509v3 Authority Key Identifier:
                keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f1:a0:f6:90:e7:2f:29:cd:45:2d:93:11:22:5c:aa:fb:c1:
         ef:91:bf:d1:24:ed:1b:6c:75:63:e5:58:72:7c:15:31:45:45:
         20:4e:b8:0d:6a:93:94:64:1a:5f:39:70:57:ec:a9:00:c1:09:
         63:01:16:c3:f5:d8:f0:7d:9e:64:08:c6:df:df:a9:31:6d:1f:
         3d:a0:8d:78:85:be:ee:4e:fa:9e:d1:4f:13:e4:34:e5:5b:3a:
         90:a1:ee:71:b5:4e:c3:50:1d:18:a8:f4:bf:4b:3e:3f:a6:5c:
         58:2a:49:1c:04:60:dd:cb:e7:e6:4f:f3:03:52:82:7a:c9:d7:
         63:2c:5f:cf:8b:60:05:02:2d:21:f5:63:89:55:d7:0c:9b:64:
         44:f7:b3:40:be:0e:56:67:f7:ab:d3:0f:20:69:24:be:9a:b4:
         32:d9:0c:2c:a5:25:e0:80:aa:c3:8f:2c:25:50:9d:ac:5b:e4:
         b5:30:aa:ad:8b:1b:e6:47:2b:6f:18:91:5a:96:fe:93:94:8a:
         2a:f2:bc:1b:c0:95:04:37:ca:f7:17:af:54:21:18:8c:3f:fe:
         c6:0d:f9:ff:9f:c6:9a:8e:57:6c:f5:c0:67:6a:ac:84:a4:44:
         9f:c8:d5:26:09:28:4c:15:a4:6e:3e:1c:c9:35:15:22:b2:24:
         a8:0c:f0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:19:30 2026 by rpki-client