Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
File:                     22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json)
Hash identifier:          J8dSWy/VZpinl4PumLrRBCZigp6DtBgGVRWUzREX57Y=
Subject key identifier:   1B:1D:30:C7:17:71:D6:3A:41:FA:BD:50:25:CF:3C:98:C0:91:AC:E8
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Certificate issuer:       /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial:       63D03DD1D1380C587CFF4660312A6A1802C5FFEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
Manifest number:          0177
Signing time:             Fri 04 Sep 2026 06:52:44 +0000
Manifest this update:     Fri 04 Sep 2026 06:47:44 +0000
Manifest next update:     Sat 05 Sep 2026 06:52:44 +0000
Files and hashes:         1: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=)
                          2: 38372e3235342e392e302f32342d3234203d3e20383334.roa (hash: 9xNWK0CP8AKiSnG1dUeeFmXs6klwdHgCE4UZ1NbhInI=)
                          3: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=)
                          4: 38372e3235342e32392e302f32342d3234203d3e20333939333539.roa (hash: ai/dN9s+EI66RGZOYc3SnH50a9pPhR+Tuj1MQUDS0jQ=)
                          5: 38372e3235342e31302e302f32342d3234203d3e20313432323430.roa (hash: Dxg/qNAtSqewgE0e3s1iQmWDtkg7PNHXMZNxG2+ciJQ=)
                          6: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=)
                          7: 3231372e32352e31342e302f32342d3234203d3e2039333138.roa (hash: g2ofm16r16kl7irVfvgX1+7ziEvLdY7dJdeeSirOg4Y=)
                          8: 38372e3235342e32322e302f32332d3234203d3e20323735373134.roa (hash: Q017uW83uFb8COwcV2Dq8d6iP2iHdliF99e4gCzHkCU=)
                          9: 38372e3235342e372e302f32342d3234203d3e20383334.roa (hash: 29q364QRFm+ZSXs9P4TkUXN3aT2etKQQ0SupwFrpngI=)
                          10: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: dQMXFlCdqK4KfIq0XLMKMZHRBPhhoQ3pOmRr0tZLhX8=)
                          11: 3231372e32352e31352e302f32342d3234203d3e2039333138.roa (hash: R5MZ0SUrJW4CLZizJcr1R/s4uU+VevPvUalEFyfnK94=)
                          12: 3231372e32352e31302e302f32342d3234203d3e20383334.roa (hash: 8dkRhViDL6svksS7wszcUnYLTFZf0MLMOb3PDwzqRgU=)
                          13: 38372e3235342e32342e302f32342d3234203d3e20383334.roa (hash: QqbNiLA4Ey35PuR/YTL6yb8zsH4X0ajw3l/v7xwOynE=)
                          14: 3231372e32352e31332e302f32342d3234203d3e203133333335.roa (hash: io4UFoc1YGnqjZfuSBnWpQH/OPOtN9A1OFdVrMznZWc=)
                          15: 3231372e32352e332e302f32342d3234203d3e203230343733.roa (hash: Gtvwy4O2g92Wl34q1NG2a1KSHDIDcCrqvni9SpsOlEs=)
                          16: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=)
                          17: 38372e3235342e33312e302f32342d3234203d3e20323030303137.roa (hash: lbbXKkkoJ4X5dFgdoGsgrLdnfR7I5el1vS65pf+Zkis=)
                          18: 38372e3235342e342e302f32332d3234203d3e20383334.roa (hash: QDz1OvrGk6oQ6FbKJRTi8srlSc6w9Ov4aUyF0knIyW0=)
                          19: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=)
                          20: 38372e3235342e31312e302f32342d3234203d3e20383334.roa (hash: 6noWrPn224J6X/0Hlx3qwR8ThT55H4jEkZZcpoco7Rw=)
                          21: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=)
                          22: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=)
                          23: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=)
                          24: 38372e3235342e31322e302f32332d3234203d3e20383334.roa (hash: tYrkGJWiQCuECp68SDxP1zan/szsBNIKNYHcWzm+neA=)
                          25: 38372e3235342e32362e302f32332d3234203d3e20383334.roa (hash: S8T+8FpvJmHIToVhl4L8VcWO9VGyY4pgXF/gkt1mFc4=)
                          26: 3231372e32352e312e302f32342d3234203d3e20343032323635.roa (hash: VANfTBfZigI792G4QZ62stYln+FE6haw31ZdE6HIoqY=)
                          27: 38372e3235342e32302e302f32332d3234203d3e20383334.roa (hash: JNmHzwHPRq7qlddj0jcOBGMR8vn3SIVE2cJH7b/pCQQ=)
                          28: 3231372e32352e372e302f32342d3234203d3e20313532363938.roa (hash: /LE1eCYAVcrdhrBn4hmVDb4iIuc5MQAtnvceT3TN1bc=)
                          29: 3231372e32352e31322e302f32342d3234203d3e203533333536.roa (hash: ISZePjQZHgjZYw73RzwsKrdIyiH3v0ys4nWleWv3vxk=)
                          30: 38372e3235342e32352e302f32342d3234203d3e20343032323635.roa (hash: PRZtxjYbgqdYHgrXt1B72AkNdzyck5gWx69C5yMLpR8=)
                          31: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=)
                          32: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=)
                          33: 3231372e32352e362e302f32342d3234203d3e20313937313733.roa (hash: kYFhpIFB7sQ4plsLv55NXEH2ur4uD2Dvnnf/Bn8wlhY=)
                          34: 3138352e3231302e3136392e302f32342d3234203d3e203537303433.roa (hash: 7z9K9FbgeMuXCaln/1hsSe4DLUK7TEmfgfG1Y1Dfr7g=)
                          35: 3138352e3231302e3136382e302f32342d3234203d3e20383334.roa (hash: PO6lININeTzy9+OgxiLUcDdp0+yx5XkE6ZtQ5rmO+Oc=)
                          36: 3231372e32352e31312e302f32342d3234203d3e203432383331.roa (hash: LBGC7WX7bJkBy0/v1ZbPU/RfYLNVgPcvPJyw+DpE2j8=)
                          37: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=)
                          38: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=)
                          39: 38372e3235342e362e302f32342d3234203d3e20343031333632.roa (hash: lNHbvVUsjRQWADwz+5BXy+SD2pwhPF26pAipPx7926o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 06:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d0:3d:d1:d1:38:0c:58:7c:ff:46:60:31:2a:6a:18:02:c5:ff:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
        Validity
            Not Before: Sep  4 06:47:44 2026 GMT
            Not After : Sep  5 06:52:44 2026 GMT
        Subject: CN=1B1D30C71771D63A41FABD5025CF3C98C091ACE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:5a:d4:35:b3:b2:6e:cc:af:82:ce:d3:67:
                    35:b1:2c:ec:ef:99:33:e4:55:c2:4a:d7:49:42:2b:
                    26:c1:db:89:83:de:04:98:0e:93:d3:e1:e1:56:cd:
                    17:4d:40:35:77:ac:6e:df:69:cd:07:97:53:02:da:
                    ee:0b:c7:e3:fc:af:d0:26:48:f6:e2:3d:e7:d5:c3:
                    4e:6c:74:f4:02:f1:d5:73:b7:5b:b2:b3:1a:a6:4d:
                    41:23:05:ed:a7:8b:1b:46:94:9b:13:2a:da:5c:fc:
                    68:e2:f7:7d:6d:ec:a7:17:cc:13:ac:c4:34:3e:46:
                    b3:dd:de:f4:24:71:59:d9:0c:22:5f:7e:48:ea:1f:
                    a3:b3:fb:f9:41:62:eb:15:2d:9f:04:8e:3d:76:48:
                    4d:d8:c2:5c:07:93:77:cd:03:7b:24:26:cd:4d:b0:
                    06:6f:93:97:a2:13:06:66:d0:1c:16:24:a8:c6:2f:
                    71:87:0f:57:a4:1b:ef:62:be:eb:dd:59:c1:91:03:
                    45:eb:26:8a:93:46:ea:5d:25:ec:70:55:72:41:ab:
                    48:a2:46:eb:6a:ba:da:45:44:a4:3d:79:af:02:b0:
                    5e:08:af:a1:87:7a:28:f3:6f:1b:0d:5e:f7:f9:5a:
                    5b:10:1f:65:81:52:92:11:1a:fd:5c:9e:fb:95:6d:
                    fc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1D:30:C7:17:71:D6:3A:41:FA:BD:50:25:CF:3C:98:C0:91:AC:E8
            X509v3 Authority Key Identifier:
                keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:61:7c:11:49:ab:34:b4:c4:88:88:15:b3:ca:6b:f3:6f:e8:
         fd:69:b5:99:0c:15:d5:72:d8:82:a7:7a:61:86:68:e2:c8:0d:
         10:80:31:3a:26:37:59:d1:9f:7e:b4:a1:fa:52:a0:86:ea:f6:
         0d:43:0a:eb:78:3c:db:5f:29:7d:72:8c:5c:48:74:b7:b3:cd:
         bf:c9:9d:ab:5f:f4:a5:d2:58:19:b6:ea:b8:12:6a:90:87:a9:
         41:f2:af:f8:8a:32:e4:5c:5c:23:f3:f0:10:30:c8:d4:a5:b7:
         8c:26:42:6d:c3:c9:c9:e0:97:91:9f:98:c9:55:07:41:73:a6:
         ff:73:c5:6e:d9:07:94:15:ad:99:5a:22:c9:8b:d3:ea:be:df:
         86:73:7d:ac:9d:85:8b:56:41:c6:c7:bd:b1:15:ed:b5:7e:5d:
         30:50:78:2e:fc:f9:07:a8:74:38:d0:26:6b:21:c6:7d:8c:65:
         f0:55:4b:d6:01:99:88:d5:6a:c3:28:9e:37:ae:1d:c8:bc:0b:
         f7:d6:4a:ca:0a:82:cd:96:d1:50:2b:01:78:49:4e:bd:f8:65:
         3f:d3:1a:13:e6:43:f1:14:99:fb:0a:4d:fc:84:4b:0a:89:0d:
         84:da:bb:a3:85:90:c6:0d:8f:44:99:6b:f5:1c:55:40:6e:a3:
         6e:a5:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:41:41 2026 by rpki-client