Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File:                     FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier:          ihR6xLOJVc/uwYdo4v3PwQ3snILhhCdOYvQxGo+0Tsg=
Subject key identifier:   34:D1:7A:0C:EC:66:09:03:23:B3:22:BB:2C:DA:AA:90:F3:A3:34:77
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       16456C1CA738A89889B9A1EDF0E55F5F8E3ECB48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number:          023B
Signing time:             Sat 18 Apr 2026 15:19:54 +0000
Manifest this update:     Sat 18 Apr 2026 15:14:54 +0000
Manifest next update:     Sun 19 Apr 2026 18:55:54 +0000
Files and hashes:         1: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: h+2AnEvh4aG7gOBRETVZO5ExBSI+bmaVuuXvVVF7vHs=)
                          2: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: SBs8h2+t6QDU1J2FG/blrmN+qmqR4M4fBNi1SbYEnNU=)
                          3: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: NG6zwhRpuGaOaqAr2bnhB0WNjn5u7NK5ztm1d2XSjOs=)
                          4: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: dT0B0NOL6yGzF1BXtX0dsOyGoo8+tdfsmPM25BX1nFo=)
                          5: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: I1y2rQjnLv18d7wE8+32fRo+wpfEuaxk8+JYmCwkLpU=)
                          6: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: LdHKLOhJhzl41We9BNwjvOcsg2A+zhlEI37K8ifS5/I=)
                          7: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: IEXWaXuV3w8kiyUSn8Xb9ocu7wGkZqq6FHmShe2ilR0=)
                          8: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: mNEln2sQigg3u81rooykzeehSg2L9J2uWDrMwZzSFwU=)
                          9: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: XjKzqWNr7Btvkj5JImVNsEp2dFZjVAsUHydrIsbVUoU=)
                          10: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: xYbQlUPKxSQoHiHG8XgS+jBzfXDA0HmlH23UWrEEgRM=)
                          11: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: GcrirzUGj+baQQMYil8xBr+JSDUMr1IrAf8dPn6IBjc=)
                          12: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: er+oPQhykc6ayg3rrrwvJra3JupeKvjV54bYH7L2tTg=)
                          13: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: s7bJrOak+k6vmxZw3NK9sCosxffSZUuLUPKBmOsK+p8=)
                          14: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: sujdFNXoHRtVeqZ5b1HSqILk/kU5NautAQO2Xt1EnhA=)
                          15: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: v+xhc6fxafxAfS7MdKJ1T7i4/dfRVtX123aAkTRxKjs=)
                          16: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: NgKAiWi/9kIzuK34CJYJ5NgD13mXufjklhJW/DfhGXg=)
                          17: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: qfYLsiXeU6PfA9fVBBtYwxz+ovi/EvnjjY5itv6zZZY=)
                          18: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: J27yblmrDzfrkLrlYCckR6Czv89uDruHFG4XT/rSEpc=)
                          19: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: 2+e1pcV/1HjSIXMmpHYPl94RJ1VHndDhp/PzS1D2Aqo=)
                          20: 36322e3132322e3138382e302f32342d3234203d3e203133333437.roa (hash: R59heAM0isF102GrpYHgNSOZjt5TEoubWayGdTfPAFs=)
                          21: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: ay+VpJAxhcK2h7cjcp2jQIWeYB+U5olryyBn7tyJvVg=)
                          22: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: Zjl5KzSbAzkvfaUcwe5cs8ZLZxM+i+5YDJPhsvemvlM=)
                          23: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: 0UzTLd9sP5E9hVagexG3NWMHzI1vl2WYjkZP4E+bLVU=)
                          24: 36322e3132322e3138382e302f32342d3234203d3e2035363530.roa (hash: b01UE1W2EGfzUcIfvNzwNjLl6EWZ+fK9rU0UVH/isX8=)
                          25: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: buKU7JdPUK/SlkC4NNnK7hP12R2pJJz2VMgJgPeJ+UM=)
                          26: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: XrAwkqLyjKkliRAGb7YhNsmN3gefCa9P2PMxjWEJ07E=)
                          27: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: jzsWDx19Pycbrb5P3nX+LR9BkYXT+JSku+VMV2m2RIo=)
                          28: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: lzKGUq9e6WEOxjU9fEiZs+XvjPLc/qut/jPBXboiWgc=)
                          29: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: WnRHsnv1v5lgeZmFGSte0JZSgCKL85MQLwyrUB8BqVw=)
                          30: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: Cz/6kKDUzshq0L4EXVzYnwGNuJcQnGuP6YcPqQJcMJ8=)
                          31: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: SgkiaXA0IAiBax3MkrFfX1tZ3ARWy+WsqwuwSIqr97Y=)
                          32: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: RwKBGj41SrCoSwW63bP9iypbQ5/Pk2wZivtbfEbN3Qk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:45:6c:1c:a7:38:a8:98:89:b9:a1:ed:f0:e5:5f:5f:8e:3e:cb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Apr 18 15:14:54 2026 GMT
            Not After : Apr 19 18:55:54 2026 GMT
        Subject: CN=34D17A0CEC66090323B322BB2CDAAA90F3A33477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:07:98:c3:bd:9f:6b:19:89:e2:88:45:42:ca:
                    94:7d:12:06:b6:94:47:e9:60:17:ca:6b:f1:76:e2:
                    77:63:3a:c5:48:f3:48:f8:13:1b:2f:ba:6d:7d:da:
                    63:bc:2e:db:74:ee:56:81:50:4b:e6:8d:d0:bc:ec:
                    dc:ab:02:55:1b:24:56:5d:38:d7:c6:0d:f2:9d:fd:
                    27:a7:51:d6:86:12:63:ae:3d:0b:88:7b:78:66:09:
                    c9:c2:70:fe:e7:01:f6:53:85:53:af:8e:3b:ab:76:
                    28:2b:1a:c3:c8:8c:2e:33:1e:c1:f9:e2:fc:05:a2:
                    9d:7a:77:70:8c:60:ef:92:2e:d4:e7:44:aa:5a:a7:
                    6e:db:54:a1:6c:cc:2d:be:b6:fc:c7:70:fa:ea:4d:
                    f5:e6:50:de:df:ce:28:ea:14:05:f6:28:24:13:60:
                    c4:a7:e9:30:ed:98:bd:ca:a2:4b:60:ea:30:e8:a2:
                    d2:dd:11:b0:d3:ec:bf:59:e8:93:30:13:5b:7e:ef:
                    30:14:2e:05:54:ab:73:5a:6b:92:60:d0:51:21:e3:
                    1d:63:ab:db:de:e9:97:4b:88:49:86:6d:6b:bf:dc:
                    4e:b4:59:2a:1f:8f:c8:ed:29:c3:33:c9:dd:07:34:
                    a2:88:63:27:c0:3f:91:9a:51:e0:a2:a0:af:fa:a5:
                    b0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D1:7A:0C:EC:66:09:03:23:B3:22:BB:2C:DA:AA:90:F3:A3:34:77
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:51:92:30:ff:7c:6f:c2:96:b0:60:3a:77:e4:99:53:5d:0f:
         b5:a7:9a:0b:56:e7:6b:dc:6a:3d:2c:4d:89:b0:18:62:09:4e:
         dc:d4:aa:89:2b:af:3f:ab:2d:4f:0f:5a:d2:a5:f8:85:ed:c4:
         1c:59:70:8a:b1:42:7a:67:fc:2b:8a:a1:62:e5:27:71:0c:fb:
         16:b9:fa:fe:95:49:5f:90:a4:d2:bf:c5:7a:61:9f:36:c4:5c:
         0d:90:f5:5a:d1:da:1f:a5:b9:ae:a4:b9:d9:fc:a6:c2:d7:30:
         14:1f:b4:95:c9:64:a7:44:ac:28:53:2d:1a:a4:30:07:08:06:
         66:18:bc:f5:a6:67:2e:68:43:7d:bf:b0:41:bd:00:26:77:f0:
         ab:ed:f2:8e:2a:b2:7b:12:91:fd:1d:b5:19:57:77:19:b5:9e:
         d6:39:22:68:86:20:ac:e0:8d:3a:0c:1b:52:a7:cc:c7:48:94:
         54:67:e8:e8:dc:b3:9d:92:86:fd:1e:0f:f6:bf:f5:5f:4c:ed:
         6c:79:c2:b9:6a:39:1d:cc:13:97:3c:6d:e4:d9:66:c9:dd:93:
         c4:26:d3:00:d1:a5:9c:44:d6:6b:32:13:99:3c:97:c8:a3:7d:
         b8:58:ad:f2:e2:04:0d:79:76:eb:80:f3:15:62:df:58:af:7b:
         78:8a:99:b6
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFkVsHKc4qJiJuaHt8OVfX44+y0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmY0MjZmMTliYTY3YmM4OWRlNWFlNmRmNDg3YzFjOGMx
ZTc1MmUyNzAeFw0yNjA0MTgxNTE0NTRaFw0yNjA0MTkxODU1NTRaMDMxMTAvBgNV
BAMTKDM0RDE3QTBDRUM2NjA5MDMyM0IzMjJCQjJDREFBQTkwRjNBMzM0NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIB5jDvZ9rGYniiEVCypR9Ega2
lEfpYBfKa/F24ndjOsVI80j4Exsvum192mO8Ltt07laBUEvmjdC87NyrAlUbJFZd
ONfGDfKd/SenUdaGEmOuPQuIe3hmCcnCcP7nAfZThVOvjjurdigrGsPIjC4zHsH5
4vwFop16d3CMYO+SLtTnRKpap27bVKFszC2+tvzHcPrqTfXmUN7fzijqFAX2KCQT
YMSn6TDtmL3Koktg6jDootLdEbDT7L9Z6JMwE1t+7zAULgVUq3Naa5Jg0FEh4x1j
q9ve6ZdLiEmGbWu/3E60WSofj8jtKcMzyd0HNKKIYyfAP5GaUeCioK/6pbA7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUNNF6DOxmCQMjsyK7LNqqkPOjNHcwHwYDVR0j
BBgwFoAU/0JvGbpnvIneWubfSHwcjB51LicwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDY4YjA4MWUtYmE5My00NjVmLTliNmUtN2ZiZDYzYmRm
ZjYzLzAvRkY0MjZGMTlCQTY3QkM4OURFNUFFNkRGNDg3QzFDOEMxRTc1MkUyNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL18wSnZHYnBudkluZVd1YmZTSHdjakI1
MUxpYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80NjhiMDgxZS1i
YTkzLTQ2NWYtOWI2ZS03ZmJkNjNiZGZmNjMvMC9GRjQyNkYxOUJBNjdCQzg5REU1
QUU2REY0ODdDMUM4QzFFNzUyRTI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlGSMP98b8KWsGA6d+SZ
U10PtaeaC1bna9xqPSxNibAYYglO3NSqiSuvP6stTw9a0qX4he3EHFlwirFCemf8
K4qhYuUncQz7Frn6/pVJX5Ck0r/FemGfNsRcDZD1WtHaH6W5rqS52fymwtcwFB+0
lclkp0SsKFMtGqQwBwgGZhi89aZnLmhDfb+wQb0AJnfwq+3yjiqyexKR/R21GVd3
GbWe1jkiaIYgrOCNOgwbUqfMx0iUVGfo6NyznZKG/R4P9r/1X0ztbHnCuWo5HcwT
lzxt5Nlmyd2TxCbTANGlnETWazITmTyXyKN9uFit8uIEDXl264DzFWLfWK97eIqZ
tg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 00:54:06 2026 by rpki-client