Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          bWiw6Yn9fnx+N2arFnq1IXNm3t9QJ74P5wzI6vIZ1H8=
Subject key identifier:   E2:57:94:F8:0F:10:92:D6:81:C3:57:D2:D0:72:B9:AC:A6:74:B1:E4
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       04395F8A6EC48DC6D2CA0FC334CF980A0DA776CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          0205
Signing time:             Sun 26 Apr 2026 23:10:57 +0000
Manifest this update:     Sun 26 Apr 2026 23:05:57 +0000
Manifest next update:     Mon 27 Apr 2026 23:25:57 +0000
Files and hashes:         1: 39352e3231342e3138332e302f32342d3234203d3e20313938323530.roa (hash: Ov/x1oZaBVg9UzR84S4kZKaf9zCxK3034xSjk7KKlY4=)
                          2: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=)
                          3: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: S4ddw73hDoSEhNKtyBEjIhztHOdB0qUYUD8sWKdWm3o=)
                          4: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: vcQjjrd4LrzEWLJ4GvzfU7rTN0GRXfJ01XCuhpYjWSM=)
                          5: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=)
                          6: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: yBIbgSutRM6w0CO+SuN+puGD+EsV9mNPvZ8qHnyid+k=)
                          7: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=)
                          8: 39352e3231342e3137332e302f32342d3234203d3e203231383430.roa (hash: ufGlQ+DrhT42dGKvfqF9MmDLago1FeOS1zGb2GQoeMQ=)
                          9: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: IltzG0K+W6/4OY3N4Cei605pBnUrFv4cf5U0zN9qrBQ=)
                          10: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (hash: AjgG1gM1OxMVlGFutJS1mpX2Qd4qqtcRZt6UVKIG+j4=)
                          11: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: 6VJ0BRDW5vzl9vSQFhJrbqoPj47Dkmz6QrWwxneNt7M=)
                          12: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: 0Nw79EMxO4DuYLh23x86SyP3DqFJicDqK5+0xzSE8zA=)
                          13: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: jnmt3whqRbI6D2vf6sBU5xOTdVKUeUwqqqV6QhoXPsE=)
                          14: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: 7k+RlsbEAvDIHt5Is/doveA233QJ/dZMJOIDSEPgfCs=)
                          15: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 0kzSFbUQv3IPSe44pUr9DkaCNbLJS/E0eVH3iom57gk=)
                          16: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: 9sHNJMiehNbP1O+jWpsdoBoSI67XbsxRM7NeVaaB37s=)
                          17: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:39:5f:8a:6e:c4:8d:c6:d2:ca:0f:c3:34:cf:98:0a:0d:a7:76:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Apr 26 23:05:57 2026 GMT
            Not After : Apr 27 23:25:57 2026 GMT
        Subject: CN=E25794F80F1092D681C357D2D072B9ACA674B1E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:ef:ae:01:b5:06:47:04:b7:04:f6:67:1b:
                    f7:1d:22:13:d3:f1:f9:e1:c3:27:cb:7d:2e:67:79:
                    04:66:e1:73:3f:19:bc:9d:c8:48:ee:75:67:9e:56:
                    19:b6:4e:01:14:45:37:86:7e:ad:ce:85:47:6a:ac:
                    eb:a1:2f:b5:1a:57:38:b7:49:8a:d8:6d:38:47:5a:
                    7c:aa:e1:02:cf:92:eb:7b:99:0f:96:b4:14:41:b1:
                    67:67:e7:4e:1f:fd:7b:f7:3e:6a:0b:72:fd:eb:9d:
                    92:ba:54:e4:51:3e:fb:de:f3:2c:40:6a:a7:e3:14:
                    14:57:c3:4b:56:f8:23:29:fa:e0:d7:49:cb:b0:c8:
                    cb:a5:18:b9:d3:25:71:85:d9:d0:ff:52:01:5c:a8:
                    b9:16:19:11:e3:50:8a:1b:b4:0e:af:fb:05:48:76:
                    96:e9:1b:fb:e8:36:cd:9d:53:b1:45:fc:c3:32:4c:
                    12:40:04:77:e1:f1:3d:4b:a3:02:4e:f5:a4:4d:6e:
                    e0:13:fa:14:b8:4a:68:da:e9:2d:49:34:ca:ea:ac:
                    ca:54:d9:e1:d1:f0:a2:da:0f:89:0e:e2:0f:7a:5d:
                    81:25:d3:cb:ff:85:39:23:a8:e0:b3:09:8e:cd:e3:
                    39:33:e3:6d:5a:81:c4:a9:85:11:29:22:23:ec:53:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:57:94:F8:0F:10:92:D6:81:C3:57:D2:D0:72:B9:AC:A6:74:B1:E4
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:84:fd:0b:7e:01:f7:68:79:14:47:0a:a6:da:26:de:37:81:
         0b:a7:35:ba:3f:9f:d9:ab:3b:72:08:35:81:01:97:e3:f8:d7:
         6b:08:42:d5:8b:81:b2:52:77:66:c9:59:36:ab:66:e5:64:b2:
         6a:48:e1:f1:85:b9:b6:4d:bb:47:23:7f:12:5b:a3:c0:8d:22:
         b0:9b:d5:a7:e5:ea:d1:eb:52:3b:0f:05:b4:12:d3:19:2f:e2:
         fc:09:56:fc:2f:ee:b1:a5:6d:e0:8d:7f:9c:b7:15:9d:57:7a:
         24:25:a1:0e:da:e0:88:a4:9f:ca:65:65:6b:05:ed:41:11:72:
         96:c0:89:c0:58:75:16:20:79:79:ff:41:7c:08:31:08:02:3a:
         88:24:cd:0d:f6:1f:ba:6b:64:f5:62:6f:ec:e7:2a:ac:42:8b:
         1d:46:ea:49:e5:f5:19:59:a2:b0:91:44:0f:ca:59:49:85:f3:
         15:ab:42:47:2c:db:45:80:09:17:63:49:8c:e9:20:80:2f:01:
         ef:4f:51:78:2a:25:73:3d:72:74:5b:e8:89:f0:ef:3a:31:37:
         b4:c2:bf:e2:cf:4b:a3:f9:b3:0e:bb:2d:f8:90:60:10:26:68:
         e2:0a:3b:15:05:4a:9c:9c:79:8b:8a:af:ce:64:9b:fc:bf:8b:
         74:aa:6b:e6
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUBDlfim7EjcbSyg/DNM+YCg2nds0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4
MGM5MGI5NDAeFw0yNjA0MjYyMzA1NTdaFw0yNjA0MjcyMzI1NTdaMDMxMTAvBgNV
BAMTKEUyNTc5NEY4MEYxMDkyRDY4MUMzNTdEMkQwNzJCOUFDQTY3NEIxRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ne+uAbUGRwS3BPZnG/cdIhPT
8fnhwyfLfS5neQRm4XM/GbydyEjudWeeVhm2TgEURTeGfq3OhUdqrOuhL7UaVzi3
SYrYbThHWnyq4QLPkut7mQ+WtBRBsWdn504f/Xv3PmoLcv3rnZK6VORRPvve8yxA
aqfjFBRXw0tW+CMp+uDXScuwyMulGLnTJXGF2dD/UgFcqLkWGRHjUIobtA6v+wVI
dpbpG/voNs2dU7FF/MMyTBJABHfh8T1LowJO9aRNbuAT+hS4Smja6S1JNMrqrMpU
2eHR8KLaD4kO4g96XYEl08v/hTkjqOCzCY7N4zkz421agcSphREpIiPsU86ZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU4leU+A8QktaBw1fS0HK5rKZ0seQwHwYDVR0j
BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw
M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E
SkM1US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MDkyMzM4OS0y
YmRlLTQzZTAtYjBkNS1mYzI0NGE2MzAzZDAvMC85MkY0OURFODY4NEYxMjg3RjRG
NkNCMTg1RDVDRjdERTgwQzkwQjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYT9C34B92h5FEcKptom
3jeBC6c1uj+f2as7cgg1gQGX4/jXawhC1YuBslJ3ZslZNqtm5WSyakjh8YW5tk27
RyN/ElujwI0isJvVp+Xq0etSOw8FtBLTGS/i/AlW/C/usaVt4I1/nLcVnVd6JCWh
DtrgiKSfymVlawXtQRFylsCJwFh1FiB5ef9BfAgxCAI6iCTNDfYfumtk9WJv7Ocq
rEKLHUbqSeX1GVmisJFED8pZSYXzFatCRyzbRYAJF2NJjOkggC8B709ReColcz1y
dFvoifDvOjE3tMK/4s9Lo/mzDrst+JBgECZo4go7FQVKnJx5i4qvzmSb/L+LdKpr
5g==
-----END CERTIFICATE-----
Generated at Mon Apr 27 12:41:54 2026 by rpki-client