Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft
File:                     F78178425D897035E1D77343191BF013B39B03A5.mft (raw, json)
Hash identifier:          X7TQSHj0v3eaPVmyn1L94wKTKu3RfezioTyl/p5wqiQ=
Subject key identifier:   45:A5:86:85:7F:BC:1E:B3:90:DD:E1:29:BB:2B:E7:D1:E1:CF:44:CF
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       5321719ADD75894BF862A508A1597C8CAF28670A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft
Manifest number:          59
Signing time:             Fri 23 Oct 2026 18:21:58 +0000
Manifest this update:     Fri 23 Oct 2026 18:16:58 +0000
Manifest next update:     Sat 24 Oct 2026 20:02:58 +0000
Files and hashes:         1: 326131343a373538313a373330323a3a2f34382d3438203d3e20323030373439.roa (hash: RR8x6qycCyiSckXHB+Mo5731S/bbTpfOIUfxF+H8syQ=)
                          2: 326131343a373538313a376530303a3a2f34382d3438203d3e20323030373439.roa (hash: 6EwMhIyQK3KFnaHPRYaZ82KCks0ecSz4mUHDl2oLbi0=)
                          3: 326131343a373538313a373330313a3a2f34382d3438203d3e20323030373439.roa (hash: RvY1degQ3vfe7/ScnHCRQ+lBLMGEdwJ+Z4uoUoa9zug=)
                          4: 326131343a373538313a373330333a3a2f34382d3438203d3e20323030373439.roa (hash: 8uic/JhWIiv7BECFEF+MJjKOIhXHAhE5PsfFZ366Lsc=)
                          5: 326131343a373538313a373131303a3a2f34382d3438203d3e20323030373439.roa (hash: c+4T7+4/6EYuwr0w078C7HkblI/Iv3X62IXJuhWidCM=)
                          6: 326131343a373538313a373030303a3a2f33382d3338203d3e20323030373439.roa (hash: 6lMiktwmxTK6mKtvQFbyWiIpcSwrK0A55BvsAc8sJZM=)
                          7: 326131343a373538313a373030333a3a2f34382d3438203d3e20323030373439.roa (hash: 753yNKMAX48JvSyO+nDvKj7t93w8JddMdt+0PtPQcZU=)
                          8: 326131343a373538313a373030323a3a2f34382d3438203d3e20323030373439.roa (hash: Vww2ePCXBNszODW1LtqZ4w8DJbUUkS9myuG/8FAaZxA=)
                          9: 326131343a373538313a376330303a3a2f34382d3438203d3e20323030373439.roa (hash: J52AJW9hhkIqKt6YvN5vm5OESuYkQSrpVCGrH3b94xk=)
                          10: 326131343a373538313a373230303a3a2f34302d3430203d3e20323030373439.roa (hash: bAsmzUKlVrECBOq/scwySImzwh1jn4XSccPluS8WUZ4=)
                          11: 326131343a373538313a373130313a3a2f34382d3438203d3e20323030373439.roa (hash: hS2yXOtmwxT3SSNC18L4sJTachuvWaO3YUwne2qrU60=)
                          12: 326131343a373538313a373230313a3a2f34382d3438203d3e20323030373439.roa (hash: AxwANv+fk7JHopF7DmE20WYSOw0thGygo04GEPmOLiY=)
                          13: 326131343a373538313a373430303a3a2f33382d3338203d3e20323030373439.roa (hash: OMpwoiZDo4Xu4S6vVqfbHGFiWwjtq9omMiWHj2S6fPg=)
                          14: 326131343a373538313a373230333a3a2f34382d3438203d3e20323030373439.roa (hash: 3Y3KLL47TqTZrVS2wv2BfxjSZMRsw5A4tCV4hmpw7MU=)
                          15: 326131343a373538313a373330303a3a2f34302d3430203d3e20323030373439.roa (hash: Ww3Y2aP/Zzw0ny0EFF2WBBwzeX1O0FyI1SUz9FnpIdA=)
                          16: 326131343a373538313a373030343a3a2f34382d3438203d3e20323030373439.roa (hash: LZqL2yvFUvjEiOAVWlVIe9oWxiaPWpLPFP/zOavwzB4=)
                          17: 326131343a373538313a373830303a3a2f33372d3337203d3e20323030373439.roa (hash: QqyTEcq6eNh4ysUpM1giF7wfmMoOSPTbfdDUXbg5y7U=)
                          18: F78178425D897035E1D77343191BF013B39B03A5.crl (hash: g3UXf6VnSCzAwlSWqSUWZQfksWhQdsWCnIHrvpcYoUo=)
                          19: 326131343a373538313a373330343a3a2f34382d3438203d3e20323030373439.roa (hash: g1mLR4KswhKYtG7ADE70XNin7fsPyKHK/GbLSsiBL3w=)
                          20: 326131343a373538313a373130323a3a2f34382d3438203d3e20323030373439.roa (hash: C4fhxNeGDM+HeLH3b41FkuWlbnGFd2RgSDINRRzz0xg=)
                          21: 326131343a373538313a373130303a3a2f34382d3438203d3e20323030373439.roa (hash: xm8xduYEVKDzza4Kc4ZJ4XFKu8CBAqH+hGoLpXBm1RI=)
                          22: 326131343a373538313a373230303a3a2f34382d3438203d3e20323030373439.roa (hash: GCNVRy0TkOAIfbsSYcfMSI/pHV6QTJRFFxvErVfcyE4=)
                          23: 326131343a373538313a373030313a3a2f34382d3438203d3e20323030373439.roa (hash: SUR3c/gwnDnnRnb+xY4lK7aaOY/G5sF4MaITx3Nzr30=)
                          24: 326131343a373538313a373330303a3a2f34382d3438203d3e20323030373439.roa (hash: 0LC71eiOhawrUW+WUAiqqDV3gt2pi2T/PVZDHI9+su0=)
                          25: 326131343a373538313a373030303a3a2f34302d3430203d3e20323030373439.roa (hash: fjS3GEDbsmjjC7fSV83oZzaoHPEfPGKsbEUKgul+XsM=)
                          26: 326131343a373538313a373030303a3a2f34382d3438203d3e20323030373439.roa (hash: b0a+CB+mtMNhqTbLlhjXmr9psL4tY+eYhgH2YP16dMw=)
                          27: 326131343a373538313a373230343a3a2f34382d3438203d3e20323030373439.roa (hash: XMze1BFtJGed9oC5ngReUq5x9Svto5NS2DmjXLdRxw0=)
                          28: 326131343a373538313a373130343a3a2f34382d3438203d3e20323030373439.roa (hash: XLUrF/U9huUasZnrWNuuirmfEvZXF4PEWFQ9CQIHzI0=)
                          29: 326131343a373538313a373030303a3a2f33372d3337203d3e20323030373439.roa (hash: OdQQpQLspZ8Dem9TDyp8fVPanstBa06y4PHBD35Eaz8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 20:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:21:71:9a:dd:75:89:4b:f8:62:a5:08:a1:59:7c:8c:af:28:67:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Oct 23 18:16:58 2026 GMT
            Not After : Oct 24 20:02:58 2026 GMT
        Subject: CN=45A586857FBC1EB390DDE129BB2BE7D1E1CF44CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:89:7b:b5:a3:dc:b8:86:23:04:d1:13:3f:54:
                    53:6d:dc:d6:93:77:6f:32:a3:6c:00:48:f9:9b:07:
                    52:6a:49:9f:89:42:6f:70:3d:af:ca:bc:44:61:76:
                    cf:35:b5:f9:71:91:76:6b:01:0b:e5:e3:68:99:6c:
                    f6:89:09:16:b5:ef:54:14:93:be:60:13:a3:f2:95:
                    cd:b7:4e:64:0a:c7:ed:54:09:04:20:81:d1:bf:19:
                    4b:ca:40:65:ae:f8:2a:98:a3:f7:97:37:65:3f:2e:
                    6d:4e:c9:e1:d5:f9:81:4d:b2:da:8a:3c:e1:ac:14:
                    06:d4:29:9f:12:2f:1a:f6:b0:14:d7:02:37:d2:fd:
                    9e:32:84:4f:45:ae:1b:ab:0c:48:c4:71:18:33:02:
                    b9:57:04:76:a8:e0:9a:57:2f:4b:81:cd:62:fe:d0:
                    5b:30:88:99:c8:65:6e:27:b8:a2:15:7d:8d:6c:68:
                    12:ef:fb:3b:17:b3:0c:2c:77:09:96:50:65:da:e5:
                    12:51:50:87:c7:9f:d7:6c:ae:a8:23:0f:2a:1a:f8:
                    12:64:12:61:18:1e:55:89:4f:f1:16:4c:96:c0:7f:
                    51:0f:b9:e3:7a:e3:e1:e7:0a:43:e0:1a:03:18:b1:
                    07:88:bc:3c:fd:92:09:7a:12:ea:7a:ed:0b:04:1e:
                    31:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A5:86:85:7F:BC:1E:B3:90:DD:E1:29:BB:2B:E7:D1:E1:CF:44:CF
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6b:63:34:41:4d:d1:68:7b:bd:c7:c4:99:1f:7c:5c:91:02:
         8b:ca:aa:b4:95:25:f5:27:29:c6:08:c4:ef:ea:5c:dd:02:9c:
         da:ac:f7:cb:67:63:e0:ac:70:dd:79:a8:7a:8c:5f:06:e4:00:
         91:b8:ca:b7:34:45:b5:05:72:03:65:64:d6:ae:b6:7d:0a:49:
         47:28:77:fa:55:03:c1:1d:62:e5:22:01:b3:c1:3e:11:c5:6d:
         8b:12:75:cc:c0:f6:58:db:81:44:33:7f:0a:4e:36:94:90:c4:
         87:c1:74:8d:be:0a:3f:52:37:ab:19:04:87:2c:c4:28:36:07:
         f0:be:a8:63:09:df:8e:8f:64:b3:a9:59:be:5f:5a:a6:8d:4e:
         dc:d2:5c:e3:3e:2b:2b:b3:1e:df:73:be:88:82:2f:ad:c1:3a:
         f3:9b:2f:e7:92:75:1c:32:17:3d:54:8c:c0:73:e4:5b:f8:e4:
         da:ba:6c:f2:72:03:a7:86:d7:0d:91:ee:8f:14:88:6f:22:68:
         0f:e5:6a:af:3c:51:f4:c5:73:88:cb:b7:9c:21:55:14:50:cd:
         30:fd:0f:54:3f:4e:7a:8c:c2:ba:50:73:89:d9:ac:00:55:56:
         12:dc:14:7b:da:c2:c9:a2:ba:0d:ee:99:5d:ba:1e:27:24:ce:
         53:9d:03:02
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUUyFxmt11iUv4YqUIoVl8jK8oZwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC
MzlCMDNBNTAeFw0yNjEwMjMxODE2NThaFw0yNjEwMjQyMDAyNThaMDMxMTAvBgNV
BAMTKDQ1QTU4Njg1N0ZCQzFFQjM5MERERTEyOUJCMkJFN0QxRTFDRjQ0Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3iXu1o9y4hiME0RM/VFNt3NaT
d28yo2wASPmbB1JqSZ+JQm9wPa/KvERhds81tflxkXZrAQvl42iZbPaJCRa171QU
k75gE6Pylc23TmQKx+1UCQQggdG/GUvKQGWu+CqYo/eXN2U/Lm1OyeHV+YFNstqK
POGsFAbUKZ8SLxr2sBTXAjfS/Z4yhE9FrhurDEjEcRgzArlXBHao4JpXL0uBzWL+
0FswiJnIZW4nuKIVfY1saBLv+zsXswwsdwmWUGXa5RJRUIfHn9dsrqgjDyoa+BJk
EmEYHlWJT/EWTJbAf1EPueN64+HnCkPgGgMYsQeIvDz9kgl6Eup67QsEHjH1AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQURaWGhX+8HrOQ3eEpuyvn0eHPRM8wHwYDVR0j
BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw
ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx
OTFCRjAxM0IzOUIwM0E1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzBlMWNiMDIzLTkwMDItNGU5NS1iZDU3LTVmYjg1ZWZhMGU5Ny8wL0Y3ODE3ODQy
NUQ4OTcwMzVFMUQ3NzM0MzE5MUJGMDEzQjM5QjAzQTUubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAja2M0
QU3RaHu9x8SZH3xckQKLyqq0lSX1JynGCMTv6lzdApzarPfLZ2PgrHDdeah6jF8G
5ACRuMq3NEW1BXIDZWTWrrZ9CklHKHf6VQPBHWLlIgGzwT4RxW2LEnXMwPZY24FE
M38KTjaUkMSHwXSNvgo/UjerGQSHLMQoNgfwvqhjCd+Oj2SzqVm+X1qmjU7c0lzj
Pisrsx7fc76Igi+twTrzmy/nknUcMhc9VIzAc+Rb+OTaumzycgOnhtcNke6PFIhv
ImgP5WqvPFH0xXOIy7ecIVUUUM0w/Q9UP056jMK6UHOJ2awAVVYS3BR72sLJoroN
7plduh4nJM5TnQMC
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:11:54 2026 by rpki-client