Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
File:                     22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json)
Hash identifier:          S5LIU+L7/GBR2dvOaakry4/hk76qeq9OJupbYp3AcDI=
Subject key identifier:   73:CA:D1:6A:BF:47:B9:98:E3:57:CD:8E:8F:8A:0E:A6:97:B2:DF:61
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Certificate issuer:       /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial:       2F479595AEBB3BE90767EF41276F4162A5F533DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
Manifest number:          66
Signing time:             Sun 19 Apr 2026 23:09:55 +0000
Manifest this update:     Sun 19 Apr 2026 23:04:55 +0000
Manifest next update:     Mon 20 Apr 2026 23:44:55 +0000
Files and hashes:         1: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=)
                          2: 3231372e32352e31322e302f32342d3234203d3e203533333536.roa (hash: ISZePjQZHgjZYw73RzwsKrdIyiH3v0ys4nWleWv3vxk=)
                          3: 38372e3235342e32352e302f32342d3234203d3e20313734.roa (hash: STs/Odq8qO0vXfvacpj/VHN/A8uqTrPbGQfYucpP36w=)
                          4: 38372e3235342e32382e302f32342d3234203d3e20313938323530.roa (hash: qLeT0qC2aRYaYvqMA7On+tHD955+P3rkrlhBt6zEGQc=)
                          5: 38372e3235342e31302e302f32332d3234203d3e2039333034.roa (hash: ggxRDSIk4x8P9rbdr1wiNW32yw9uoE+S2USYJnBn0oI=)
                          6: 38372e3235342e31322e302f32332d3234203d3e20383334.roa (hash: UWjmZenZgQ6GpdGZbayi4FQY4UxY0dqXvzhbQdAIi5g=)
                          7: 3138352e3231302e3136392e302f32342d3234203d3e203537303433.roa (hash: 7z9K9FbgeMuXCaln/1hsSe4DLUK7TEmfgfG1Y1Dfr7g=)
                          8: 38372e3235342e32342e302f32342d3234203d3e20343032303437.roa (hash: I6nMkOW16PyXMxFt9RQFe/GpDqFqzj3Mh9XigQN7utc=)
                          9: 38372e3235342e32312e302f32342d3234203d3e2039333034.roa (hash: fhuLKVJWOGU8sXL3S0QoWozOsb/OD2qOzlxonYH/GYk=)
                          10: 3138352e3231302e3136382e302f32342d3234203d3e20383334.roa (hash: PO6lININeTzy9+OgxiLUcDdp0+yx5XkE6ZtQ5rmO+Oc=)
                          11: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=)
                          12: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=)
                          13: 3231372e32352e332e302f32342d3234203d3e203230343733.roa (hash: Gtvwy4O2g92Wl34q1NG2a1KSHDIDcCrqvni9SpsOlEs=)
                          14: 38372e3235342e32372e302f32342d3234203d3e203137343937.roa (hash: oJ5rvj5E9wUerv74B0/Wvc0SZ2sawHmom3dQkatBF5E=)
                          15: 38372e3235342e362e302f32342d3234203d3e203230343733.roa (hash: U9mhVXn/Y2qy5SVslhyWTBFWO3Hfm0be6+7a6kbSGwo=)
                          16: 38372e3235342e372e302f32342d3234203d3e20383334.roa (hash: uPveiCZb05Qe74m9ER/dRXkOE+jPcZGdhN1kbDCURUs=)
                          17: 38372e3235342e32332e302f32342d3234203d3e20323135363732.roa (hash: /+BmUmf76rxab9lMUlp4SDJKTX/siHkrnlzW84acgzo=)
                          18: 38372e3235342e31342e302f32332d3234203d3e2039333034.roa (hash: zOjJfKXFDDK8FWQuGoyGMyabfyxwg6zgnL0YaVQFH20=)
                          19: 3231372e32352e312e302f32342d3234203d3e203631333137.roa (hash: AuTG5hLsCwUWbPjqPfLL3+sUc3GYo/fF3PPYDhERDx0=)
                          20: 38372e3235342e32362e302f32342d3234203d3e20383334.roa (hash: T1cCAJDRZwjzW9i5/Fg/+smVPcIPJkyoS++WeKvbW0g=)
                          21: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=)
                          22: 3231372e32352e312e302f32342d3234203d3e203239383032.roa (hash: gVMFsL1+w+J00kOn7BuEjBsUXi6YaE8/Mve6X6O6dFo=)
                          23: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=)
                          24: 38372e3235342e342e302f32332d3234203d3e20383334.roa (hash: X9JcAlWz2cWHFDBQRn2/GiBUt95iJv417zAItTtavhU=)
                          25: 3231372e32352e31352e302f32342d3234203d3e20383334.roa (hash: etjfV0kGb76d5lSxFiq8JUUbGdWAGGaQAAqGc0Sfyfo=)
                          26: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: iIZtBRnp6Ay7KIWOr4fIH0j7JsF+sHtNgc2dmfZn58o=)
                          27: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=)
                          28: 38372e3235342e32392e302f32342d3234203d3e20343031383536.roa (hash: QHFnVOaeEPk8OHFM/vvl17YuczgNqBKqrZuDNL93LS0=)
                          29: 38372e3235342e392e302f32342d3234203d3e20313534303439.roa (hash: Hq9PYTOQCseLfaxNiEXnFMG4fnzCVo7PsWTjAFrRtkw=)
                          30: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=)
                          31: 38372e3235342e32302e302f32342d3234203d3e2039333034.roa (hash: 4X1RHbA+I5YPTr7RjepEQXD+DyuHivSCZH5v4rwZll4=)
                          32: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=)
                          33: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=)
                          34: 3231372e32352e31332e302f32342d3234203d3e20323033303438.roa (hash: emF4lgxVnHZ+9xIJd7lDbOPZA2U4UK1myb+9IST3mnM=)
                          35: 38372e3235342e32322e302f32342d3234203d3e20383334.roa (hash: rBcnHeM9UN/n2/ZoIT3IiOmRRqgoBqMFBe8vdR0Fp3M=)
                          36: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=)
                          37: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=)
                          38: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=)
                          39: 3231372e32352e31342e302f32342d3234203d3e2039333138.roa (hash: g2ofm16r16kl7irVfvgX1+7ziEvLdY7dJdeeSirOg4Y=)
                          40: 38372e3235342e33302e302f32342d3234203d3e20343031323933.roa (hash: cG6Y2sScw5gP4svJgcfFkXsy8sYFo7Vgb9i6WanPeyc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:47:95:95:ae:bb:3b:e9:07:67:ef:41:27:6f:41:62:a5:f5:33:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
        Validity
            Not Before: Apr 19 23:04:55 2026 GMT
            Not After : Apr 20 23:44:55 2026 GMT
        Subject: CN=73CAD16ABF47B998E357CD8E8F8A0EA697B2DF61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:07:bb:94:b8:ba:8d:a0:11:c7:b7:af:ab:1e:
                    7c:dc:dc:c4:b8:cb:39:6f:42:09:8b:31:5f:0b:2b:
                    67:fd:f3:9b:26:57:59:25:34:66:86:f6:83:48:8b:
                    0a:a3:fd:20:64:c0:3a:f6:f5:79:c2:e2:53:5e:51:
                    76:cf:94:f3:c4:35:f3:99:70:8e:0b:5f:f7:c6:e0:
                    cd:27:b9:1e:d7:e1:37:f1:8a:d5:a9:eb:12:f7:f9:
                    c3:cb:6d:7c:78:dd:cc:e6:40:3a:92:d7:e9:8e:61:
                    2e:c3:c9:08:6f:fd:53:c8:6f:ed:1d:6e:78:48:61:
                    3b:f0:68:88:bd:d4:42:7c:31:84:ab:6d:8c:84:3f:
                    0a:06:a4:d4:72:28:f9:bc:d0:ba:27:c9:64:4a:31:
                    35:b5:ab:36:dd:da:c2:77:36:1e:d4:37:78:01:38:
                    6d:24:19:a3:b9:f4:83:ff:3d:c4:64:99:02:e8:54:
                    d1:02:ea:47:27:83:e4:7e:0c:e6:ff:f7:05:14:b3:
                    e8:07:de:a2:4a:b2:50:ca:3c:c0:0b:09:37:8d:cf:
                    bf:e9:8e:0a:31:b4:b6:5e:f7:7a:f3:f5:28:0c:50:
                    bf:e6:86:ad:c2:cf:e3:1c:5f:de:86:8a:d7:56:c9:
                    c2:ea:ea:db:4f:7d:37:ef:d5:95:97:2e:3e:b0:8f:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CA:D1:6A:BF:47:B9:98:E3:57:CD:8E:8F:8A:0E:A6:97:B2:DF:61
            X509v3 Authority Key Identifier:
                keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:1d:ad:9d:cc:71:b1:7a:b5:67:6a:93:a6:4d:53:71:45:38:
         f0:de:d0:f6:9a:48:ab:1b:a4:32:57:35:0c:d3:33:e2:99:45:
         7c:13:cb:82:c5:55:7e:b0:ed:fb:16:8b:c4:10:81:90:5b:72:
         0a:07:ba:64:94:44:58:23:4a:ac:46:89:e3:df:f3:af:36:73:
         2f:59:24:c6:51:ef:45:fe:65:bc:32:01:0a:3e:c8:9a:bc:73:
         eb:97:8e:d7:62:38:e6:90:e6:cb:0d:8a:2a:e6:37:6c:bf:02:
         5d:0d:6f:5b:2c:6b:43:ad:7d:2c:b4:f8:80:2d:d9:7d:17:8f:
         3f:9c:29:28:a5:62:4d:49:e7:86:fd:b8:69:e5:71:15:69:c0:
         bf:a1:47:01:7a:a0:7e:7b:56:4d:ad:bd:03:0d:08:1c:dd:ac:
         67:e3:f1:bf:c9:e7:56:86:a6:58:b0:0c:03:c6:82:be:c2:fb:
         3c:cc:ac:0d:65:d5:9b:2e:55:f0:51:98:76:3b:5e:38:1a:ff:
         40:f7:b9:e9:61:46:b9:b8:35:a2:5d:ff:8f:9d:5a:38:d6:0a:
         8b:45:87:e0:12:26:43:8c:0b:0b:3f:47:e9:96:11:8c:5c:54:
         75:b1:bb:26:eb:bd:1d:21:7b:fe:e3:3a:a3:f9:ce:af:be:92:
         f1:d4:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:28:21 2026 by rpki-client