Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File:                     FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier:          1G+JLHZleBwL5F1IPLXMJW3PxYlUepaIvkgDh1g83K0=
Subject key identifier:   1A:C8:5A:50:ED:C6:17:0C:49:C2:28:51:51:76:64:C4:E8:35:DB:61
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       0ECDF4FB0C845C755C67966567FE923A42DBE5C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number:          02B9
Signing time:             Mon 20 Jul 2026 21:34:56 +0000
Manifest this update:     Mon 20 Jul 2026 21:29:56 +0000
Manifest next update:     Tue 21 Jul 2026 22:48:56 +0000
Files and hashes:         1: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: IEXWaXuV3w8kiyUSn8Xb9ocu7wGkZqq6FHmShe2ilR0=)
                          2: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: SgkiaXA0IAiBax3MkrFfX1tZ3ARWy+WsqwuwSIqr97Y=)
                          3: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: Cz/6kKDUzshq0L4EXVzYnwGNuJcQnGuP6YcPqQJcMJ8=)
                          4: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: XjKzqWNr7Btvkj5JImVNsEp2dFZjVAsUHydrIsbVUoU=)
                          5: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: SBs8h2+t6QDU1J2FG/blrmN+qmqR4M4fBNi1SbYEnNU=)
                          6: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: buKU7JdPUK/SlkC4NNnK7hP12R2pJJz2VMgJgPeJ+UM=)
                          7: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: lzKGUq9e6WEOxjU9fEiZs+XvjPLc/qut/jPBXboiWgc=)
                          8: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: 2+e1pcV/1HjSIXMmpHYPl94RJ1VHndDhp/PzS1D2Aqo=)
                          9: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: Zjl5KzSbAzkvfaUcwe5cs8ZLZxM+i+5YDJPhsvemvlM=)
                          10: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: /rbxCGxT1mbEJJvgjruthfaSYepbF3HOfj/FYjJq8+w=)
                          11: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: ay+VpJAxhcK2h7cjcp2jQIWeYB+U5olryyBn7tyJvVg=)
                          12: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: sujdFNXoHRtVeqZ5b1HSqILk/kU5NautAQO2Xt1EnhA=)
                          13: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: s7bJrOak+k6vmxZw3NK9sCosxffSZUuLUPKBmOsK+p8=)
                          14: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: v+xhc6fxafxAfS7MdKJ1T7i4/dfRVtX123aAkTRxKjs=)
                          15: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: WnRHsnv1v5lgeZmFGSte0JZSgCKL85MQLwyrUB8BqVw=)
                          16: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: h+2AnEvh4aG7gOBRETVZO5ExBSI+bmaVuuXvVVF7vHs=)
                          17: 36322e3132322e3138382e302f32342d3234203d3e203330303538.roa (hash: Sn6BjESg306oMG2v09CGJd3q5vLKGdFDpo5P27sfsZQ=)
                          18: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: qfYLsiXeU6PfA9fVBBtYwxz+ovi/EvnjjY5itv6zZZY=)
                          19: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: I1y2rQjnLv18d7wE8+32fRo+wpfEuaxk8+JYmCwkLpU=)
                          20: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: er+oPQhykc6ayg3rrrwvJra3JupeKvjV54bYH7L2tTg=)
                          21: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: RwKBGj41SrCoSwW63bP9iypbQ5/Pk2wZivtbfEbN3Qk=)
                          22: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: GcrirzUGj+baQQMYil8xBr+JSDUMr1IrAf8dPn6IBjc=)
                          23: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: 0UzTLd9sP5E9hVagexG3NWMHzI1vl2WYjkZP4E+bLVU=)
                          24: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: NgKAiWi/9kIzuK34CJYJ5NgD13mXufjklhJW/DfhGXg=)
                          25: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: mNEln2sQigg3u81rooykzeehSg2L9J2uWDrMwZzSFwU=)
                          26: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: xYbQlUPKxSQoHiHG8XgS+jBzfXDA0HmlH23UWrEEgRM=)
                          27: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: XrAwkqLyjKkliRAGb7YhNsmN3gefCa9P2PMxjWEJ07E=)
                          28: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: dT0B0NOL6yGzF1BXtX0dsOyGoo8+tdfsmPM25BX1nFo=)
                          29: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: LdHKLOhJhzl41We9BNwjvOcsg2A+zhlEI37K8ifS5/I=)
                          30: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: NG6zwhRpuGaOaqAr2bnhB0WNjn5u7NK5ztm1d2XSjOs=)
                          31: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: jzsWDx19Pycbrb5P3nX+LR9BkYXT+JSku+VMV2m2RIo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 22:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cd:f4:fb:0c:84:5c:75:5c:67:96:65:67:fe:92:3a:42:db:e5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Jul 20 21:29:56 2026 GMT
            Not After : Jul 21 22:48:56 2026 GMT
        Subject: CN=1AC85A50EDC6170C49C22851517664C4E835DB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:18:02:40:39:40:79:62:46:ea:8a:df:78:cc:
                    3e:6a:8d:1b:a8:5d:07:b9:8b:e8:d1:08:a9:16:a8:
                    13:e9:49:6a:ff:fa:d6:b0:51:45:66:b2:3b:f0:ba:
                    e8:55:84:80:fe:0b:50:94:44:e5:46:31:2e:2c:05:
                    ca:3e:a0:20:56:c2:f4:81:04:1a:88:49:12:aa:73:
                    d7:ad:3c:b6:6b:8d:6f:77:ef:6d:c8:1f:bc:1e:55:
                    a6:04:e4:26:3d:fa:a6:3a:ed:f3:4a:69:0a:17:b7:
                    e7:ea:61:12:26:17:8a:33:85:38:ca:d9:47:c8:b1:
                    b7:c0:a1:01:da:39:17:54:00:c8:81:76:d6:62:c2:
                    14:0c:58:d0:6e:1f:61:7e:56:d0:0e:ed:da:2e:ca:
                    ca:a9:36:2f:fa:88:21:ed:93:fb:b7:b9:f5:5e:7c:
                    85:9d:46:b0:28:85:2b:13:80:b6:9f:1d:d0:4b:49:
                    a5:d7:e3:37:86:40:fe:47:db:a7:c1:be:dc:df:11:
                    53:7e:1d:20:a4:68:26:2f:be:0e:14:b6:be:c9:51:
                    2a:47:df:bd:b0:e9:59:e8:9b:b0:e1:9c:62:ff:c9:
                    83:ef:24:9a:b7:ea:27:4a:a1:bd:1e:e1:ce:dc:7c:
                    3f:24:67:ef:ba:fe:a5:4c:55:e7:a2:f5:d0:59:53:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C8:5A:50:ED:C6:17:0C:49:C2:28:51:51:76:64:C4:E8:35:DB:61
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3e:05:c1:f8:2f:35:73:4a:d8:35:f5:52:67:82:37:8e:4e:
         e1:01:84:a4:6a:3f:29:5d:6a:0d:e1:2c:36:f0:29:e6:f7:bf:
         1a:91:0a:1e:64:ff:48:0c:41:e8:d8:a3:8a:c9:0f:93:7e:98:
         fd:55:b8:1f:20:a3:0b:fc:c3:ef:b8:35:4c:c4:be:d3:b3:da:
         51:b8:53:37:60:30:1f:04:c6:38:3d:69:2c:a2:4d:50:2b:4c:
         3c:b0:50:45:19:15:76:cc:c6:98:d3:a0:16:99:89:de:5b:ee:
         56:84:d7:1d:61:5c:2e:d3:1f:4a:5b:bf:63:b8:28:68:ac:9f:
         a1:e1:93:e5:16:95:07:5f:33:d7:6f:50:1c:eb:94:e5:57:e6:
         b1:dd:84:28:7e:b3:e7:a3:c9:ee:c6:b0:14:46:3d:67:96:29:
         05:99:d1:a8:39:5a:da:59:5b:77:66:e2:62:e2:d2:33:18:c4:
         d3:a6:57:e9:7b:67:a9:87:df:71:75:a3:b0:67:2a:5e:3b:43:
         14:51:b1:20:c0:5b:93:22:a3:08:8c:a3:71:9d:0f:2a:c2:a0:
         9d:91:3f:a0:83:a4:67:ed:e6:08:61:ad:d2:46:26:8f:b3:2f:
         d9:2f:53:82:ad:5d:6e:2d:e9:2b:e4:07:a1:d7:4d:92:d8:53:
         c9:d5:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:53:22 2026 by rpki-client