Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File:                     FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier:          RaAyeLcnO1EQNr7NDBcE2Op2+yzcye+ExOLSv+3dWEs=
Subject key identifier:   02:76:9C:61:A1:D7:92:16:19:E3:A4:22:B1:B9:97:A1:B8:7D:6A:63
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       7609AB156165BCAA1BCF2CC7013C4890B005F7B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number:          0337
Signing time:             Fri 23 Oct 2026 23:51:56 +0000
Manifest this update:     Fri 23 Oct 2026 23:46:56 +0000
Manifest next update:     Sun 25 Oct 2026 00:24:56 +0000
Files and hashes:         1: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: er+oPQhykc6ayg3rrrwvJra3JupeKvjV54bYH7L2tTg=)
                          2: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: XjKzqWNr7Btvkj5JImVNsEp2dFZjVAsUHydrIsbVUoU=)
                          3: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: RwKBGj41SrCoSwW63bP9iypbQ5/Pk2wZivtbfEbN3Qk=)
                          4: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: jzsWDx19Pycbrb5P3nX+LR9BkYXT+JSku+VMV2m2RIo=)
                          5: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: ay+VpJAxhcK2h7cjcp2jQIWeYB+U5olryyBn7tyJvVg=)
                          6: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: xYbQlUPKxSQoHiHG8XgS+jBzfXDA0HmlH23UWrEEgRM=)
                          7: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: Zjl5KzSbAzkvfaUcwe5cs8ZLZxM+i+5YDJPhsvemvlM=)
                          8: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: v+xhc6fxafxAfS7MdKJ1T7i4/dfRVtX123aAkTRxKjs=)
                          9: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: NG6zwhRpuGaOaqAr2bnhB0WNjn5u7NK5ztm1d2XSjOs=)
                          10: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: s7bJrOak+k6vmxZw3NK9sCosxffSZUuLUPKBmOsK+p8=)
                          11: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: SBs8h2+t6QDU1J2FG/blrmN+qmqR4M4fBNi1SbYEnNU=)
                          12: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: 0UzTLd9sP5E9hVagexG3NWMHzI1vl2WYjkZP4E+bLVU=)
                          13: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: buKU7JdPUK/SlkC4NNnK7hP12R2pJJz2VMgJgPeJ+UM=)
                          14: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: XrAwkqLyjKkliRAGb7YhNsmN3gefCa9P2PMxjWEJ07E=)
                          15: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: NgKAiWi/9kIzuK34CJYJ5NgD13mXufjklhJW/DfhGXg=)
                          16: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: qfYLsiXeU6PfA9fVBBtYwxz+ovi/EvnjjY5itv6zZZY=)
                          17: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: lzKGUq9e6WEOxjU9fEiZs+XvjPLc/qut/jPBXboiWgc=)
                          18: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: GcrirzUGj+baQQMYil8xBr+JSDUMr1IrAf8dPn6IBjc=)
                          19: 36322e3132322e3138382e302f32342d3234203d3e203330303538.roa (hash: Sn6BjESg306oMG2v09CGJd3q5vLKGdFDpo5P27sfsZQ=)
                          20: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: dT0B0NOL6yGzF1BXtX0dsOyGoo8+tdfsmPM25BX1nFo=)
                          21: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: h+2AnEvh4aG7gOBRETVZO5ExBSI+bmaVuuXvVVF7vHs=)
                          22: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: IEXWaXuV3w8kiyUSn8Xb9ocu7wGkZqq6FHmShe2ilR0=)
                          23: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: I1y2rQjnLv18d7wE8+32fRo+wpfEuaxk8+JYmCwkLpU=)
                          24: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: mNEln2sQigg3u81rooykzeehSg2L9J2uWDrMwZzSFwU=)
                          25: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: 4JwYfbyWq95Yp4jT6BsRDNnWSnaAJ1PV4P1EpyzNmZY=)
                          26: 36322e3132322e3138382e302f32342d3234203d3e20343032393337.roa (hash: HkdbLUX2uZYZy/KNrbxq5iTdLxcVgG97NieRy3Oc0hk=)
                          27: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: Cz/6kKDUzshq0L4EXVzYnwGNuJcQnGuP6YcPqQJcMJ8=)
                          28: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: SgkiaXA0IAiBax3MkrFfX1tZ3ARWy+WsqwuwSIqr97Y=)
                          29: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: LdHKLOhJhzl41We9BNwjvOcsg2A+zhlEI37K8ifS5/I=)
                          30: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: WnRHsnv1v5lgeZmFGSte0JZSgCKL85MQLwyrUB8BqVw=)
                          31: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: sujdFNXoHRtVeqZ5b1HSqILk/kU5NautAQO2Xt1EnhA=)
                          32: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: 2+e1pcV/1HjSIXMmpHYPl94RJ1VHndDhp/PzS1D2Aqo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 00:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:09:ab:15:61:65:bc:aa:1b:cf:2c:c7:01:3c:48:90:b0:05:f7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Oct 23 23:46:56 2026 GMT
            Not After : Oct 25 00:24:56 2026 GMT
        Subject: CN=02769C61A1D7921619E3A422B1B997A1B87D6A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:ed:e9:11:aa:9e:f0:e1:70:ec:4c:31:27:
                    30:a0:fd:06:82:be:6e:ac:26:09:41:b9:56:2d:35:
                    c5:81:c4:20:3f:45:e8:7c:33:21:1d:54:06:63:8e:
                    e5:2f:e5:6d:b6:64:5a:d5:41:7a:50:48:24:bb:7a:
                    f1:7a:b2:c4:30:8d:f9:dd:eb:1e:72:17:ee:d4:31:
                    7a:fb:af:11:ae:c9:37:52:e3:d1:a2:c8:a0:2a:94:
                    8e:13:1e:53:e2:a7:b6:8c:73:ae:e6:57:f3:d3:4a:
                    fa:06:b8:b4:7a:bd:65:ab:b3:7c:3e:40:17:a6:28:
                    b6:56:91:44:fe:39:44:6e:af:c4:7d:11:47:79:b8:
                    b5:b7:1a:ca:22:ab:b3:43:d2:1b:6b:0d:86:3e:6e:
                    a5:7c:2f:94:b5:a0:bd:a9:1c:47:56:23:81:bb:c6:
                    a0:42:97:de:fa:ee:80:55:82:f0:12:35:77:cc:24:
                    da:ba:32:3b:2d:c7:59:87:77:eb:1b:80:1c:5d:50:
                    d5:ca:3c:03:fe:29:00:02:5c:75:fe:a2:46:53:37:
                    5e:1d:32:67:e8:65:17:24:9e:7e:2e:c5:83:82:65:
                    b9:22:b2:f0:8f:ff:fd:fa:b6:02:aa:02:23:05:58:
                    eb:64:82:a6:a5:c8:81:88:ae:50:5c:2c:be:5a:60:
                    c8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:76:9C:61:A1:D7:92:16:19:E3:A4:22:B1:B9:97:A1:B8:7D:6A:63
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:67:63:79:24:54:aa:7f:be:f4:7a:1a:cf:2f:57:96:4e:ad:
         23:b3:67:ec:9e:4b:2b:bd:d2:76:91:0b:4a:c8:60:7a:e8:5e:
         66:bb:98:cb:03:c7:e5:e2:de:45:9a:db:72:84:0c:0f:93:bd:
         55:8b:91:3f:33:f7:83:16:19:13:8a:c2:83:ff:3e:41:3b:14:
         93:95:36:a0:16:a0:6c:54:35:33:27:4a:50:c9:c2:18:05:16:
         c6:bb:36:94:82:95:a9:f4:50:e7:e7:5c:24:9f:5c:31:7d:f9:
         7c:a6:10:f0:96:4b:8f:8d:8b:61:03:65:eb:44:dc:74:f3:db:
         57:72:47:7b:a5:21:28:8b:be:97:74:97:7c:89:f3:3a:1c:9f:
         2f:c2:db:29:2c:fe:71:01:df:20:d9:04:2c:88:49:c3:91:2d:
         d1:bd:38:1e:f3:7c:25:b4:ef:ed:1f:9e:97:11:2c:9e:a6:ec:
         e3:8a:49:dc:9c:2d:66:59:e7:a4:96:8f:8b:48:2d:12:88:01:
         5b:7c:08:f5:61:0b:55:18:ab:9f:e9:c3:51:78:0b:7c:68:ff:
         6c:8c:d2:07:dd:9b:dd:f2:32:94:00:92:ea:67:5c:b8:d0:43:
         e5:54:52:9e:04:ac:32:16:48:84:c4:48:bf:db:aa:88:da:b5:
         d0:0e:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:32:14 2026 by rpki-client