Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File:                     FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier:          ng9IyuJrQYnj7OofzYbfR8/IiH5OddLtPw6etdsrOig=
Subject key identifier:   97:55:E6:6F:59:21:6A:FA:22:0D:8B:2D:1B:E8:73:B0:9C:4A:75:7E
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       5AC90C3E03641BBC7F9D510907DE54FB7C49E729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number:          FA
Signing time:             Wed 20 Aug 2025 16:37:30 +0000
Manifest this update:     Wed 20 Aug 2025 16:32:30 +0000
Manifest next update:     Thu 21 Aug 2025 17:22:30 +0000
Files and hashes:         1: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: rFtvfsVQHKCdQAqKZM/z0xrzFdBj+H8lvhfwWrdW4dw=)
                          2: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: fgX7JOs0CLQUJu45+RMzl8sB0KWTVxumN6S/L327z0k=)
                          3: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: uDISVLlw/nJy4wy96JtWj7K3NXKh8ecGghWlBzzixw0=)
                          4: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: /Kq4VkHWPBjYK33PPSBMXdIWaIDemEZf9s/0PNOi978=)
                          5: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: yxk4TFt/ObXReJM9hZWCrSiaxkBBnmZ/PajmEhPrCIU=)
                          6: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: x+RYo6wjWwk6+BVxPpNh5bRjqAt+Gok7rpn9qho5bkg=)
                          7: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: I6eMklUSFiAulRI2b++yFtpDHfGf+yyRunITvHHP3rY=)
                          8: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: H3nzZLDuD+hMyo0VXetwr0aEFusgjbaL4Ptg0xbrpOA=)
                          9: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: NxII85muRlkPy6Ue9rBPty6Qe2NOTHZ5aybygZpMWdo=)
                          10: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: +zJlwocjllLnsQbU3Pz9rSlrsgFZqIsBvJ2vFa1jc64=)
                          11: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: 4U+lv5fdVNtShdj/snUUKz+UGwwRicG7k/GaBlfpAoA=)
                          12: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: OHKDfo5l5/jEy46ijNWjc2QXFRSDD6WocUfsgvZEdnk=)
                          13: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: 8dmyIVl1xfWSQlImAzdtHKnEErtwf9VZhG0c0l+lwWM=)
                          14: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: BOCsVmyn2Q4BlXgpNLG/uNq6i0u73j56MkiXd5tQhbY=)
                          15: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: wE97ifCwuCsHZoyv+UtvDLCrOhOpwPEVh3JX3wVqIpE=)
                          16: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: uyzQxNfCQuPRUilhbFb9igirZqWyG0ghryABccswsyE=)
                          17: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: GO8jazaT07yHqE0/NadQwAelqQjPVTo+2xINwt+os7M=)
                          18: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: gBowB4M9spFJyhtGeGBV6pXmZemrPQZEhgmMEW2ghgQ=)
                          19: 36322e3132322e3138382e302f32342d3234203d3e203133333437.roa (hash: r1huf6kbJmsHFssAQxCRNN3d80N61L6+aVoF7yxiSko=)
                          20: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: +nnxoDraZp1GnJqnPBkJVf2tvjIfmjIdjzZ1kJJ3DOg=)
                          21: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: HZ1FcP6uKIG0ErisyoB210/El4Tl/fdKRO4f//GIOhY=)
                          22: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: DmLW24LZ1vnZeM7Yk9oInpGtra92p8B8+f/VK3l3ndo=)
                          23: 36322e3132322e3138382e302f32342d3234203d3e2035363530.roa (hash: 6OwCLICEQXAEg/tDtW6A/oDneiVaxu+1cpVQR9TCH00=)
                          24: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: /XIIDyQLovgvuWo+FMAvONj9QZYopmDAHKNtoUoPi4w=)
                          25: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: y+MccKPhc/2KhhvHGoqYvoNRkkUTzEwbJt4GOMeUfuU=)
                          26: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: zj1ARbGG0KKWVGhyBIQnR9Ua0u7oCe2HCtyMecubnF8=)
                          27: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: O/uOtyjfl4MlQDYp72kf544XXXljSkWM6HF13huBkEM=)
                          28: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: C4YEp8j4LdYsTYvi6G+irz5U3tTH6rayAYxhSvLGLbo=)
                          29: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: GKO1xHzUJGinckXhhCthyQ7yu4eOcaWTxHAnYAzelTo=)
                          30: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: 0f4WAabP3xZvH36q2OTX1i3if9moXyHYYV6+CfUNtlk=)
                          31: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: 4kV2/I3YxBchjG3IOXi1hr0lRxiFuT7fxsWyAbTDWfo=)
                          32: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: yzlstLnidlbzwukvV9D/QvVE7rWc67Q28lja1LYs6xM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 17:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c9:0c:3e:03:64:1b:bc:7f:9d:51:09:07:de:54:fb:7c:49:e7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Aug 20 16:32:30 2025 GMT
            Not After : Aug 21 17:22:30 2025 GMT
        Subject: CN=9755E66F59216AFA220D8B2D1BE873B09C4A757E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:e1:c8:62:5d:ec:ad:6e:86:d4:d8:16:67:
                    e8:92:e3:a0:9a:66:05:56:a5:9d:21:73:c9:7e:62:
                    60:19:f9:34:8c:54:07:b2:01:70:fb:65:f0:6f:ff:
                    bd:97:84:3e:d2:b9:d5:d7:f3:f1:f9:73:d9:50:2f:
                    2d:07:04:4e:ef:23:a1:cf:4e:a2:4e:ea:de:92:cf:
                    60:8a:17:84:7b:2a:5e:1a:83:3c:a1:8e:c9:7a:e2:
                    89:98:23:db:c3:8d:1a:72:03:c9:b3:c9:10:37:ff:
                    ed:09:c9:82:e2:b1:83:18:39:8a:1a:0e:ee:6a:af:
                    54:fa:2c:89:4d:cf:be:24:2e:bb:09:53:4e:13:23:
                    4b:ed:16:56:d4:09:55:43:b7:60:dc:1b:47:05:5b:
                    44:ab:37:cb:73:0f:bd:19:ca:1f:9e:bc:bb:ee:77:
                    12:7d:36:ee:19:ef:b9:1f:e2:66:d0:4f:fb:99:70:
                    63:58:79:e0:83:ad:91:b9:97:4d:13:bd:28:78:d4:
                    68:2b:eb:55:72:dc:e8:f6:ce:2d:d4:b7:94:3c:35:
                    e9:ed:2f:53:88:fe:44:20:07:c3:2a:48:40:73:e3:
                    a4:f0:db:02:67:ff:e4:d1:c5:10:cc:0b:1d:3e:a2:
                    a4:06:21:4a:35:98:70:31:9c:ec:2b:80:5c:f7:00:
                    33:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:55:E6:6F:59:21:6A:FA:22:0D:8B:2D:1B:E8:73:B0:9C:4A:75:7E
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:27:35:76:c4:8b:01:fa:a9:91:b2:ab:0f:da:49:8c:bf:00:
         b7:46:51:16:99:b5:ad:df:ae:a8:9b:88:b3:f1:b7:df:3f:2c:
         99:08:50:ef:e1:d4:ef:3f:4c:a6:0f:1f:58:36:61:36:c2:7f:
         cf:93:55:2e:72:4f:18:cc:c1:eb:82:b2:4b:27:bf:14:5f:f6:
         72:13:d7:05:38:f3:e1:3f:22:5d:62:f1:c1:8d:db:8d:ad:b8:
         f7:92:43:47:f7:19:f0:81:1f:92:ae:79:f7:b8:30:8e:53:5f:
         7e:a5:29:da:d4:b1:4a:e4:2c:4d:be:68:b4:32:5e:6e:78:56:
         8a:6d:bd:c5:9e:bf:2b:0f:fc:88:4c:88:07:22:f3:de:b7:10:
         44:52:d6:f9:d0:52:36:3d:fe:6d:40:4c:1b:04:d2:f4:2e:4f:
         db:97:f7:19:5f:60:94:46:81:61:94:4b:a4:7b:87:ac:91:7b:
         06:38:4b:a9:17:c4:34:f3:04:0c:1d:70:07:d1:5c:b2:41:29:
         85:fb:9d:e3:ec:57:e9:c8:a6:90:d5:f8:ca:50:08:dc:c0:9e:
         20:49:fd:ad:2f:26:ad:8b:6f:4f:4a:ca:c2:8d:7b:ac:f9:08:
         22:34:b6:d1:26:ee:cf:bb:f1:e4:a3:b2:f8:10:1c:81:8f:17:
         77:f3:a6:c7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWskMPgNkG7x/nVEJB95U+3xJ5ykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmY0MjZmMTliYTY3YmM4OWRlNWFlNmRmNDg3YzFjOGMx
ZTc1MmUyNzAeFw0yNTA4MjAxNjMyMzBaFw0yNTA4MjExNzIyMzBaMDMxMTAvBgNV
BAMTKDk3NTVFNjZGNTkyMTZBRkEyMjBEOEIyRDFCRTg3M0IwOUM0QTc1N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUauHIYl3srW6G1NgWZ+iS46Ca
ZgVWpZ0hc8l+YmAZ+TSMVAeyAXD7ZfBv/72XhD7SudXX8/H5c9lQLy0HBE7vI6HP
TqJO6t6Sz2CKF4R7Kl4agzyhjsl64omYI9vDjRpyA8mzyRA3/+0JyYLisYMYOYoa
Du5qr1T6LIlNz74kLrsJU04TI0vtFlbUCVVDt2DcG0cFW0SrN8tzD70Zyh+evLvu
dxJ9Nu4Z77kf4mbQT/uZcGNYeeCDrZG5l00TvSh41Ggr61Vy3Oj2zi3Ut5Q8Nent
L1OI/kQgB8MqSEBz46Tw2wJn/+TRxRDMCx0+oqQGIUo1mHAxnOwrgFz3ADPHAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUl1Xmb1khavoiDYstG+hzsJxKdX4wHwYDVR0j
BBgwFoAU/0JvGbpnvIneWubfSHwcjB51LicwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDY4YjA4MWUtYmE5My00NjVmLTliNmUtN2ZiZDYzYmRm
ZjYzLzAvRkY0MjZGMTlCQTY3QkM4OURFNUFFNkRGNDg3QzFDOEMxRTc1MkUyNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL18wSnZHYnBudkluZVd1YmZTSHdjakI1
MUxpYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80NjhiMDgxZS1i
YTkzLTQ2NWYtOWI2ZS03ZmJkNjNiZGZmNjMvMC9GRjQyNkYxOUJBNjdCQzg5REU1
QUU2REY0ODdDMUM4QzFFNzUyRTI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyc1dsSLAfqpkbKrD9pJ
jL8At0ZRFpm1rd+uqJuIs/G33z8smQhQ7+HU7z9Mpg8fWDZhNsJ/z5NVLnJPGMzB
64KySye/FF/2chPXBTjz4T8iXWLxwY3bja2495JDR/cZ8IEfkq5597gwjlNffqUp
2tSxSuQsTb5otDJebnhWim29xZ6/Kw/8iEyIByLz3rcQRFLW+dBSNj3+bUBMGwTS
9C5P25f3GV9glEaBYZRLpHuHrJF7BjhLqRfENPMEDB1wB9FcskEphfud4+xX6cim
kNX4ylAI3MCeIEn9rS8mrYtvT0rKwo17rPkIIjS20Sbuz7vx5KOy+BAcgY8Xd/Om
xw==
-----END CERTIFICATE-----
Generated at Thu Aug 21 05:44:27 2025 by rpki-client