Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File:                     FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier:          rZBvW2JajAiAiR/XvNbAUI/K0h2BBqi3Qmui2HXLb6s=
Subject key identifier:   A4:52:56:40:8C:33:89:6E:64:AA:79:57:C1:27:33:F5:CE:C2:F4:0E
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       3217B52AAF00272CB80A4535D379E4357655A2E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number:          027A
Signing time:             Wed 03 Jun 2026 05:00:53 +0000
Manifest this update:     Wed 03 Jun 2026 04:55:53 +0000
Manifest next update:     Thu 04 Jun 2026 07:38:53 +0000
Files and hashes:         1: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: 0UzTLd9sP5E9hVagexG3NWMHzI1vl2WYjkZP4E+bLVU=)
                          2: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: gwISRBF1/sYpHy3bx5gq11UZvhZviyj8Bn/xOu8zRHY=)
                          3: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: LdHKLOhJhzl41We9BNwjvOcsg2A+zhlEI37K8ifS5/I=)
                          4: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: er+oPQhykc6ayg3rrrwvJra3JupeKvjV54bYH7L2tTg=)
                          5: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: NG6zwhRpuGaOaqAr2bnhB0WNjn5u7NK5ztm1d2XSjOs=)
                          6: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: WnRHsnv1v5lgeZmFGSte0JZSgCKL85MQLwyrUB8BqVw=)
                          7: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: XjKzqWNr7Btvkj5JImVNsEp2dFZjVAsUHydrIsbVUoU=)
                          8: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: I1y2rQjnLv18d7wE8+32fRo+wpfEuaxk8+JYmCwkLpU=)
                          9: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: buKU7JdPUK/SlkC4NNnK7hP12R2pJJz2VMgJgPeJ+UM=)
                          10: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: IEXWaXuV3w8kiyUSn8Xb9ocu7wGkZqq6FHmShe2ilR0=)
                          11: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: qfYLsiXeU6PfA9fVBBtYwxz+ovi/EvnjjY5itv6zZZY=)
                          12: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: xYbQlUPKxSQoHiHG8XgS+jBzfXDA0HmlH23UWrEEgRM=)
                          13: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: v+xhc6fxafxAfS7MdKJ1T7i4/dfRVtX123aAkTRxKjs=)
                          14: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: s7bJrOak+k6vmxZw3NK9sCosxffSZUuLUPKBmOsK+p8=)
                          15: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: Zjl5KzSbAzkvfaUcwe5cs8ZLZxM+i+5YDJPhsvemvlM=)
                          16: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: mNEln2sQigg3u81rooykzeehSg2L9J2uWDrMwZzSFwU=)
                          17: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: GcrirzUGj+baQQMYil8xBr+JSDUMr1IrAf8dPn6IBjc=)
                          18: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: RwKBGj41SrCoSwW63bP9iypbQ5/Pk2wZivtbfEbN3Qk=)
                          19: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: ay+VpJAxhcK2h7cjcp2jQIWeYB+U5olryyBn7tyJvVg=)
                          20: 36322e3132322e3138382e302f32342d3234203d3e203330303538.roa (hash: Sn6BjESg306oMG2v09CGJd3q5vLKGdFDpo5P27sfsZQ=)
                          21: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: sujdFNXoHRtVeqZ5b1HSqILk/kU5NautAQO2Xt1EnhA=)
                          22: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: SgkiaXA0IAiBax3MkrFfX1tZ3ARWy+WsqwuwSIqr97Y=)
                          23: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: h+2AnEvh4aG7gOBRETVZO5ExBSI+bmaVuuXvVVF7vHs=)
                          24: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: XrAwkqLyjKkliRAGb7YhNsmN3gefCa9P2PMxjWEJ07E=)
                          25: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: 2+e1pcV/1HjSIXMmpHYPl94RJ1VHndDhp/PzS1D2Aqo=)
                          26: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: jzsWDx19Pycbrb5P3nX+LR9BkYXT+JSku+VMV2m2RIo=)
                          27: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: NgKAiWi/9kIzuK34CJYJ5NgD13mXufjklhJW/DfhGXg=)
                          28: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: dT0B0NOL6yGzF1BXtX0dsOyGoo8+tdfsmPM25BX1nFo=)
                          29: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: SBs8h2+t6QDU1J2FG/blrmN+qmqR4M4fBNi1SbYEnNU=)
                          30: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: Cz/6kKDUzshq0L4EXVzYnwGNuJcQnGuP6YcPqQJcMJ8=)
                          31: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: lzKGUq9e6WEOxjU9fEiZs+XvjPLc/qut/jPBXboiWgc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:17:b5:2a:af:00:27:2c:b8:0a:45:35:d3:79:e4:35:76:55:a2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Jun  3 04:55:53 2026 GMT
            Not After : Jun  4 07:38:53 2026 GMT
        Subject: CN=A45256408C33896E64AA7957C12733F5CEC2F40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2a:a8:0e:85:c5:e6:69:f3:b3:fd:73:62:03:
                    b6:bf:53:ed:d5:bf:86:e0:4b:a4:f5:a2:be:4c:66:
                    4e:eb:9a:f4:09:b9:82:43:e8:11:b4:3b:2e:ba:d0:
                    1c:66:58:63:30:05:36:d9:a4:16:31:db:cb:85:4c:
                    58:91:6d:dc:0c:17:ab:1a:4c:71:95:4d:f3:ed:73:
                    32:d9:5f:d7:c6:6b:99:f3:f0:e8:94:05:9b:d6:67:
                    51:26:ee:26:44:9a:b5:16:dd:89:55:cc:87:67:82:
                    ec:d0:ba:12:0d:55:87:97:79:25:03:f5:c7:c6:46:
                    03:00:fb:96:58:bb:7f:b7:67:11:32:51:27:be:fd:
                    75:28:c7:19:36:c1:91:f3:21:12:39:68:f0:fd:48:
                    4b:8f:6c:2a:42:04:0e:ea:04:b3:9b:5d:9e:e5:1c:
                    70:6e:16:28:fb:2a:fc:6f:28:a6:14:32:66:32:5a:
                    05:0c:bc:56:d0:38:d5:c4:51:de:3a:08:1e:8d:ca:
                    52:f7:eb:a2:05:b2:cd:78:23:c1:d9:f3:75:1e:b7:
                    b4:4f:62:72:dc:bd:b0:23:bf:08:3a:33:bb:3d:b6:
                    9f:0a:4f:ee:de:01:db:40:dd:54:15:2b:94:a7:91:
                    85:61:62:d5:18:f9:a6:08:fb:68:7f:52:a8:f2:64:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:52:56:40:8C:33:89:6E:64:AA:79:57:C1:27:33:F5:CE:C2:F4:0E
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:04:bc:85:17:8b:56:9b:51:96:8b:bf:e9:68:f3:82:9f:41:
         16:ed:c3:43:90:34:97:71:21:a0:61:73:df:47:10:4e:b5:2c:
         28:3d:e3:db:9f:9b:b1:7c:3f:71:3c:d3:b1:59:f0:40:dc:1b:
         8e:e0:ef:b0:06:91:41:db:54:ca:0b:e3:fb:01:15:f9:f8:25:
         56:14:73:a2:a5:a7:b3:47:fd:28:58:de:02:f4:53:73:26:3d:
         c5:30:f1:24:17:fa:c8:44:fa:70:d3:49:56:f2:54:eb:c3:5b:
         35:b7:24:91:0a:0f:18:7a:91:fe:2a:20:6e:ed:35:d4:5c:e8:
         7e:e0:06:d4:ee:2d:bd:4a:0e:f7:43:02:f2:c7:43:1d:ba:cb:
         a4:40:81:60:07:47:ec:3e:be:39:d1:fe:a2:a0:56:fb:36:f7:
         95:0c:19:6f:2b:ad:5a:47:1f:cc:e4:ba:99:5a:28:db:2c:2d:
         ad:29:9e:3e:52:e4:3f:72:92:72:3b:0e:a0:44:a4:4b:2a:d9:
         1b:45:5e:ba:54:32:60:78:f8:1e:83:19:61:0d:f0:3a:e6:e8:
         82:f0:34:5d:9e:09:94:a4:c6:b8:b5:4c:98:b4:1d:29:37:d5:
         5d:5a:68:f4:1f:df:be:d4:12:96:0c:cd:12:ee:08:19:d1:52:
         50:35:28:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:24:34 2026 by rpki-client