Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File:                     FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier:          rkQa+gD5ZGUyU5yuqcolvwl88pxfCeUPFw1dxjeQV9s=
Subject key identifier:   6D:D2:8E:12:2A:15:B8:EB:A0:6E:3C:09:E2:98:06:BA:66:22:45:68
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       35F9477519410A99BCFFA2F54B158038B9A66DDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number:          01FF
Signing time:             Wed 04 Mar 2026 12:18:55 +0000
Manifest this update:     Wed 04 Mar 2026 12:13:55 +0000
Manifest next update:     Thu 05 Mar 2026 15:50:55 +0000
Files and hashes:         1: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: mNEln2sQigg3u81rooykzeehSg2L9J2uWDrMwZzSFwU=)
                          2: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: SgkiaXA0IAiBax3MkrFfX1tZ3ARWy+WsqwuwSIqr97Y=)
                          3: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: s7bJrOak+k6vmxZw3NK9sCosxffSZUuLUPKBmOsK+p8=)
                          4: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: er+oPQhykc6ayg3rrrwvJra3JupeKvjV54bYH7L2tTg=)
                          5: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: LdHKLOhJhzl41We9BNwjvOcsg2A+zhlEI37K8ifS5/I=)
                          6: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: qfYLsiXeU6PfA9fVBBtYwxz+ovi/EvnjjY5itv6zZZY=)
                          7: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: 0UzTLd9sP5E9hVagexG3NWMHzI1vl2WYjkZP4E+bLVU=)
                          8: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: jzsWDx19Pycbrb5P3nX+LR9BkYXT+JSku+VMV2m2RIo=)
                          9: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: NG6zwhRpuGaOaqAr2bnhB0WNjn5u7NK5ztm1d2XSjOs=)
                          10: 36322e3132322e3138382e302f32342d3234203d3e2035363530.roa (hash: b01UE1W2EGfzUcIfvNzwNjLl6EWZ+fK9rU0UVH/isX8=)
                          11: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: Zjl5KzSbAzkvfaUcwe5cs8ZLZxM+i+5YDJPhsvemvlM=)
                          12: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: XjKzqWNr7Btvkj5JImVNsEp2dFZjVAsUHydrIsbVUoU=)
                          13: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: XrAwkqLyjKkliRAGb7YhNsmN3gefCa9P2PMxjWEJ07E=)
                          14: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: IEXWaXuV3w8kiyUSn8Xb9ocu7wGkZqq6FHmShe2ilR0=)
                          15: 36322e3132322e3138382e302f32342d3234203d3e203133333437.roa (hash: R59heAM0isF102GrpYHgNSOZjt5TEoubWayGdTfPAFs=)
                          16: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: xYbQlUPKxSQoHiHG8XgS+jBzfXDA0HmlH23UWrEEgRM=)
                          17: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: sujdFNXoHRtVeqZ5b1HSqILk/kU5NautAQO2Xt1EnhA=)
                          18: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: buKU7JdPUK/SlkC4NNnK7hP12R2pJJz2VMgJgPeJ+UM=)
                          19: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: Cz/6kKDUzshq0L4EXVzYnwGNuJcQnGuP6YcPqQJcMJ8=)
                          20: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: dT0B0NOL6yGzF1BXtX0dsOyGoo8+tdfsmPM25BX1nFo=)
                          21: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: RwKBGj41SrCoSwW63bP9iypbQ5/Pk2wZivtbfEbN3Qk=)
                          22: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: DmU4Lo/xUuNdeTABWOUU24FMPMm3fzg0v2pbFUIaFr0=)
                          23: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: 2+e1pcV/1HjSIXMmpHYPl94RJ1VHndDhp/PzS1D2Aqo=)
                          24: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: WnRHsnv1v5lgeZmFGSte0JZSgCKL85MQLwyrUB8BqVw=)
                          25: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: ay+VpJAxhcK2h7cjcp2jQIWeYB+U5olryyBn7tyJvVg=)
                          26: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: v+xhc6fxafxAfS7MdKJ1T7i4/dfRVtX123aAkTRxKjs=)
                          27: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: GcrirzUGj+baQQMYil8xBr+JSDUMr1IrAf8dPn6IBjc=)
                          28: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: SBs8h2+t6QDU1J2FG/blrmN+qmqR4M4fBNi1SbYEnNU=)
                          29: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: I1y2rQjnLv18d7wE8+32fRo+wpfEuaxk8+JYmCwkLpU=)
                          30: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: h+2AnEvh4aG7gOBRETVZO5ExBSI+bmaVuuXvVVF7vHs=)
                          31: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: NgKAiWi/9kIzuK34CJYJ5NgD13mXufjklhJW/DfhGXg=)
                          32: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: lzKGUq9e6WEOxjU9fEiZs+XvjPLc/qut/jPBXboiWgc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 14:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f9:47:75:19:41:0a:99:bc:ff:a2:f5:4b:15:80:38:b9:a6:6d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Mar  4 12:13:55 2026 GMT
            Not After : Mar  5 15:50:55 2026 GMT
        Subject: CN=6DD28E122A15B8EBA06E3C09E29806BA66224568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:ef:cc:1d:24:57:8c:34:27:28:a6:60:84:
                    09:02:be:9f:dd:c4:77:c4:0d:d7:98:ed:04:dd:0c:
                    8e:e2:0b:75:b8:f0:cc:d5:6b:a2:6d:97:74:94:ef:
                    b1:47:7b:2f:d6:72:e2:a9:34:8a:04:9e:90:60:3c:
                    eb:54:62:97:47:7e:bb:f0:eb:82:ff:90:89:7e:c4:
                    e2:e0:85:c0:af:7c:56:2f:57:8a:22:64:04:60:cb:
                    7d:03:9b:ac:ca:b1:d9:35:cf:64:0b:0b:33:ea:4a:
                    31:9a:6e:7f:bc:9a:63:c3:91:d4:f5:94:3a:23:17:
                    86:18:72:4e:18:11:50:63:97:75:87:49:9d:cf:5c:
                    9e:5b:1f:ab:c5:3c:92:f5:33:61:22:65:61:ae:c0:
                    11:b7:da:3c:69:47:22:99:a8:49:e3:73:8b:f4:89:
                    48:60:d9:5f:b0:f8:03:23:0d:b4:b8:02:d9:06:fe:
                    f5:65:7f:a8:62:6e:8f:ce:3e:bb:c7:fb:ea:6e:e3:
                    6f:67:ae:bc:b0:17:d3:12:a8:f4:2c:f5:bd:1c:a6:
                    cc:e6:14:ee:40:7b:ed:2a:45:4f:3f:45:02:38:ac:
                    11:48:f3:0a:41:37:55:63:2c:ec:51:d2:ed:04:11:
                    23:6b:43:55:df:e2:7e:6f:15:8d:6b:37:db:0a:4c:
                    52:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D2:8E:12:2A:15:B8:EB:A0:6E:3C:09:E2:98:06:BA:66:22:45:68
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d8:10:cc:5f:60:fc:7b:33:b4:1f:9e:72:d6:59:3e:a4:52:
         91:b1:a6:2e:f1:16:77:75:cf:1b:0e:74:a8:f5:27:3e:fe:a8:
         ff:10:8a:69:06:c3:4e:54:01:5c:1c:26:79:c0:df:d7:13:36:
         c6:f6:a5:c6:01:4c:5c:9e:80:1c:52:06:a8:72:77:d0:a8:4c:
         21:56:28:be:0c:6e:37:d4:a9:2c:65:1a:09:38:4f:e5:2e:0c:
         cc:5b:f3:76:f2:f5:8b:c8:00:8f:43:b2:e7:e2:3a:05:43:de:
         79:74:0b:56:b0:3e:bd:3f:69:32:1f:50:de:d0:83:68:ed:0e:
         42:ed:26:d7:4e:12:e7:b7:33:1b:5e:92:38:d1:33:4b:c4:87:
         f9:d3:6a:a0:17:bd:0f:9d:a2:bb:e9:1c:58:20:41:58:72:6d:
         38:8b:28:18:62:6c:ab:3c:5c:f1:c9:1c:e5:0c:17:ee:f1:8f:
         86:74:a9:72:7c:3c:57:f7:bb:f0:54:c6:f3:91:63:bd:8e:da:
         4d:e9:69:c8:f4:7a:aa:e7:09:ac:bc:8c:85:fc:d7:6d:ae:bb:
         52:75:8a:7c:f2:6f:11:fb:a8:23:ce:19:31:77:9a:bd:f1:5e:
         fd:9b:48:c0:d8:80:76:63:13:1d:5b:79:4a:f7:fe:2d:63:03:
         28:d1:bb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:53 2026 by rpki-client