Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File:                     FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier:          O6Hj+1PeKvUzjs2s9AJg6UITAjujG1Yl2cH0y7HlUw8=
Subject key identifier:   D0:CA:CB:D1:CD:17:9A:91:67:C5:3D:8E:19:A9:6C:BB:EA:79:1F:43
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       51717AB7E857FB3BD6A45295B2C8A2FD6F26E2FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number:          013C
Signing time:             Wed 08 Oct 2025 14:00:55 +0000
Manifest this update:     Wed 08 Oct 2025 13:55:55 +0000
Manifest next update:     Thu 09 Oct 2025 16:15:55 +0000
Files and hashes:         1: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: 0f4WAabP3xZvH36q2OTX1i3if9moXyHYYV6+CfUNtlk=)
                          2: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: wE97ifCwuCsHZoyv+UtvDLCrOhOpwPEVh3JX3wVqIpE=)
                          3: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: 4kV2/I3YxBchjG3IOXi1hr0lRxiFuT7fxsWyAbTDWfo=)
                          4: 36322e3132322e3138382e302f32342d3234203d3e203133333437.roa (hash: r1huf6kbJmsHFssAQxCRNN3d80N61L6+aVoF7yxiSko=)
                          5: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: fgX7JOs0CLQUJu45+RMzl8sB0KWTVxumN6S/L327z0k=)
                          6: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: gBowB4M9spFJyhtGeGBV6pXmZemrPQZEhgmMEW2ghgQ=)
                          7: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: O/uOtyjfl4MlQDYp72kf544XXXljSkWM6HF13huBkEM=)
                          8: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: NxII85muRlkPy6Ue9rBPty6Qe2NOTHZ5aybygZpMWdo=)
                          9: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: x+RYo6wjWwk6+BVxPpNh5bRjqAt+Gok7rpn9qho5bkg=)
                          10: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: uDISVLlw/nJy4wy96JtWj7K3NXKh8ecGghWlBzzixw0=)
                          11: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: /Kq4VkHWPBjYK33PPSBMXdIWaIDemEZf9s/0PNOi978=)
                          12: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: GKO1xHzUJGinckXhhCthyQ7yu4eOcaWTxHAnYAzelTo=)
                          13: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: OHKDfo5l5/jEy46ijNWjc2QXFRSDD6WocUfsgvZEdnk=)
                          14: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: uyzQxNfCQuPRUilhbFb9igirZqWyG0ghryABccswsyE=)
                          15: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: C4YEp8j4LdYsTYvi6G+irz5U3tTH6rayAYxhSvLGLbo=)
                          16: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: +nnxoDraZp1GnJqnPBkJVf2tvjIfmjIdjzZ1kJJ3DOg=)
                          17: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: rFtvfsVQHKCdQAqKZM/z0xrzFdBj+H8lvhfwWrdW4dw=)
                          18: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: yxk4TFt/ObXReJM9hZWCrSiaxkBBnmZ/PajmEhPrCIU=)
                          19: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: H3nzZLDuD+hMyo0VXetwr0aEFusgjbaL4Ptg0xbrpOA=)
                          20: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: +zJlwocjllLnsQbU3Pz9rSlrsgFZqIsBvJ2vFa1jc64=)
                          21: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: DmLW24LZ1vnZeM7Yk9oInpGtra92p8B8+f/VK3l3ndo=)
                          22: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: yzlstLnidlbzwukvV9D/QvVE7rWc67Q28lja1LYs6xM=)
                          23: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: Jm+ij63Rje5mxyVW+phHc/esHlZfpMCX9xinZKkG84I=)
                          24: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: zj1ARbGG0KKWVGhyBIQnR9Ua0u7oCe2HCtyMecubnF8=)
                          25: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: HZ1FcP6uKIG0ErisyoB210/El4Tl/fdKRO4f//GIOhY=)
                          26: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: /XIIDyQLovgvuWo+FMAvONj9QZYopmDAHKNtoUoPi4w=)
                          27: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: 4U+lv5fdVNtShdj/snUUKz+UGwwRicG7k/GaBlfpAoA=)
                          28: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: GO8jazaT07yHqE0/NadQwAelqQjPVTo+2xINwt+os7M=)
                          29: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: y+MccKPhc/2KhhvHGoqYvoNRkkUTzEwbJt4GOMeUfuU=)
                          30: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: 8dmyIVl1xfWSQlImAzdtHKnEErtwf9VZhG0c0l+lwWM=)
                          31: 36322e3132322e3138382e302f32342d3234203d3e2035363530.roa (hash: 6OwCLICEQXAEg/tDtW6A/oDneiVaxu+1cpVQR9TCH00=)
                          32: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: I6eMklUSFiAulRI2b++yFtpDHfGf+yyRunITvHHP3rY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 16:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:71:7a:b7:e8:57:fb:3b:d6:a4:52:95:b2:c8:a2:fd:6f:26:e2:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Oct  8 13:55:55 2025 GMT
            Not After : Oct  9 16:15:55 2025 GMT
        Subject: CN=D0CACBD1CD179A9167C53D8E19A96CBBEA791F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:24:49:15:2e:00:f3:e6:cc:11:ef:2e:fd:
                    2e:67:a4:35:6c:08:df:c0:31:7d:61:f6:c1:eb:e4:
                    39:b3:02:d6:45:5e:8f:57:12:e0:52:18:ed:7b:e3:
                    7c:9a:0c:f8:81:84:0a:70:27:3e:fc:00:63:2c:5a:
                    2a:ab:8d:c0:9e:64:ec:49:84:c2:b3:1c:0c:de:5f:
                    ad:3f:3b:05:5b:dc:23:7c:00:0f:59:70:8c:3f:82:
                    87:14:15:3d:90:26:70:3b:38:19:07:c8:b7:31:0c:
                    b5:5b:00:dc:93:6e:47:e6:84:c8:01:e2:46:5b:77:
                    47:60:5a:00:60:29:22:28:f2:d7:19:d5:b4:2c:9f:
                    67:d6:ec:12:87:af:f6:70:24:5b:20:c2:73:06:36:
                    ea:35:c6:b1:59:ec:6d:a5:17:d8:ba:7c:b8:90:f3:
                    5a:c6:c8:6d:ef:4e:a7:d2:0a:63:24:b1:fc:92:1c:
                    47:00:3a:a2:ac:c6:09:e6:6d:e4:a5:37:9b:e7:c4:
                    54:e7:39:e0:65:e0:41:df:58:fe:3a:55:5e:50:a6:
                    c7:5b:d1:9e:cc:c3:06:16:7c:91:1c:c2:c0:ef:0d:
                    aa:b9:35:c3:54:e0:4e:65:a8:df:6e:11:40:bf:00:
                    f2:b0:f6:19:e0:b3:d5:cb:6e:9e:6f:38:87:1d:00:
                    83:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CA:CB:D1:CD:17:9A:91:67:C5:3D:8E:19:A9:6C:BB:EA:79:1F:43
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:66:bf:92:9f:72:a1:63:56:ce:d6:4f:8a:45:2e:10:1a:55:
         ca:49:f1:bd:71:4e:e9:c2:32:2c:ca:b5:5f:d3:15:1a:d4:05:
         58:65:d5:16:b4:18:ef:6e:22:b3:f9:4e:5c:da:f7:87:15:2b:
         cd:5c:d6:69:91:6e:91:a7:9f:d1:02:2c:d4:b7:14:34:2d:c3:
         20:3d:a3:4e:c0:7f:c7:96:e9:b8:11:0b:35:c6:79:fe:ff:f2:
         c7:a0:7c:d0:43:1b:80:89:a9:91:87:0d:38:66:66:18:39:b8:
         be:d9:f4:96:97:81:43:1b:f3:e2:e9:3f:49:da:36:04:b8:00:
         74:76:e1:46:45:fc:e3:89:8b:fc:f7:3c:54:bc:cd:f1:9a:eb:
         b9:3f:b9:6c:81:f8:b8:82:8e:35:56:7b:26:a6:72:e9:8e:05:
         af:e7:3d:fb:47:38:99:01:88:88:44:a7:fa:95:d0:55:b7:2f:
         30:92:c1:dd:45:2c:4a:ea:c5:3a:e5:2b:c2:46:c5:8d:1e:7d:
         de:41:f3:13:cd:fb:40:70:38:32:5b:1c:dc:06:55:e5:38:a7:
         43:05:af:64:1a:26:34:c4:f6:94:6b:5c:a5:91:74:d8:d0:3a:
         31:59:ff:36:f6:b0:60:0b:85:99:ec:8a:df:71:ed:3e:b5:d8:
         2f:70:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:13:02 2025 by rpki-client