Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          /DUJRmzywOB+RM20ENy3Y1H92tzqtudLHLTTsiwdKCc=
Subject key identifier:   5C:55:24:34:1F:B7:B2:D0:DB:E5:52:E3:AC:F2:17:83:BF:1E:F8:D3
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       0124DBEBAA222C5AF4BF4F75727874FBD0024228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          0284
Signing time:             Mon 27 Jul 2026 01:48:34 +0000
Manifest this update:     Mon 27 Jul 2026 01:43:34 +0000
Manifest next update:     Tue 28 Jul 2026 04:48:34 +0000
Files and hashes:         1: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: yBIbgSutRM6w0CO+SuN+puGD+EsV9mNPvZ8qHnyid+k=)
                          2: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: nRRoZUWievWeNIXlZwxB1AkzSXo51mCvnM+Ty+v6bqw=)
                          3: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: jnmt3whqRbI6D2vf6sBU5xOTdVKUeUwqqqV6QhoXPsE=)
                          4: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: IltzG0K+W6/4OY3N4Cei605pBnUrFv4cf5U0zN9qrBQ=)
                          5: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: pap59ktUA86YtgT6511v/VNfK45kjH0QXBPDQ6JB9oE=)
                          6: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=)
                          7: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: 9sHNJMiehNbP1O+jWpsdoBoSI67XbsxRM7NeVaaB37s=)
                          8: 39352e3231342e3137352e302f32342d3234203d3e20313937313733.roa (hash: lo0JSN5aKazPTiqbMrJgwOp03+OAip9xtK0I/OTfi/M=)
                          9: 39352e3231342e3137332e302f32342d3234203d3e203231383430.roa (hash: ufGlQ+DrhT42dGKvfqF9MmDLago1FeOS1zGb2GQoeMQ=)
                          10: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: 0Nw79EMxO4DuYLh23x86SyP3DqFJicDqK5+0xzSE8zA=)
                          11: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: OeUepdGW013uYU/3ky7RPXTs/YY6A1To2a3Shh6UEW8=)
                          12: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: S4ddw73hDoSEhNKtyBEjIhztHOdB0qUYUD8sWKdWm3o=)
                          13: 39352e3231342e3137352e302f32342d3234203d3e203530303439.roa (hash: WRu4t783fDaOJwwC8/mNMq2tKFQEdrL2H8Nv26yw9Sk=)
                          14: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: 6VJ0BRDW5vzl9vSQFhJrbqoPj47Dkmz6QrWwxneNt7M=)
                          15: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 0kzSFbUQv3IPSe44pUr9DkaCNbLJS/E0eVH3iom57gk=)
                          16: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (hash: AjgG1gM1OxMVlGFutJS1mpX2Qd4qqtcRZt6UVKIG+j4=)
                          17: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=)
                          18: 39352e3231342e3138332e302f32342d3234203d3e20383334.roa (hash: HQDEpyHc5r/FawZZCmNg/hl906n3C/tQL2ZPlj8o68A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 04:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:24:db:eb:aa:22:2c:5a:f4:bf:4f:75:72:78:74:fb:d0:02:42:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Jul 27 01:43:34 2026 GMT
            Not After : Jul 28 04:48:34 2026 GMT
        Subject: CN=5C5524341FB7B2D0DBE552E3ACF21783BF1EF8D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c7:03:d5:e0:19:71:22:e1:1f:c8:1c:45:aa:
                    9c:6a:0a:97:d0:19:49:39:a6:f3:a7:e5:0a:65:37:
                    72:5d:e8:1b:7e:be:d8:a6:e1:3a:be:4b:45:68:84:
                    14:f5:f7:db:66:46:b9:61:9e:50:ae:c3:bc:17:4a:
                    36:88:f5:41:76:b2:9c:1c:15:ec:6a:a6:be:7f:d8:
                    d9:9b:d0:60:21:8d:a4:96:22:28:d2:5e:d9:b9:33:
                    ab:b5:5f:22:a6:6a:a9:99:80:d8:0b:44:38:21:30:
                    69:05:90:e8:d0:1b:90:3b:a9:1e:27:97:ea:7a:3c:
                    73:1c:b5:73:20:7f:1d:de:4b:5f:9c:ef:22:ce:79:
                    ee:46:35:6e:8d:35:69:b4:b6:97:8f:83:20:78:00:
                    0e:1c:c2:b2:91:05:5a:99:ec:da:ce:b9:ae:95:e5:
                    d6:4d:34:5c:b4:8e:31:1f:2d:1e:e8:fc:15:ce:35:
                    84:0c:44:7d:38:03:2a:ae:b4:2c:60:84:f1:c1:2a:
                    46:4c:c6:22:bb:74:ca:07:0b:3f:81:b2:f0:97:08:
                    ac:12:7b:dc:42:48:d8:68:a5:db:d4:47:f6:61:9c:
                    cc:1b:f2:1a:1f:71:4c:6e:a3:77:cb:40:de:30:78:
                    a8:35:48:21:da:4f:d7:fa:1b:91:19:ac:14:67:23:
                    54:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:55:24:34:1F:B7:B2:D0:DB:E5:52:E3:AC:F2:17:83:BF:1E:F8:D3
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:be:2f:3e:39:91:ed:9d:43:16:7d:99:3d:0a:e4:e4:b9:23:
         71:7a:a9:73:6b:a4:45:93:bb:04:63:ae:1b:e2:93:d2:8a:5e:
         51:f8:e0:b8:9e:1b:d7:7f:f1:08:7e:8a:ae:ac:6c:07:bd:ab:
         58:41:c4:ec:17:58:6a:e6:b5:55:da:19:40:8f:76:25:3c:01:
         2b:2b:6f:61:65:cb:f1:13:13:c4:5f:b5:d1:51:35:39:91:d8:
         0b:eb:dc:7f:33:f2:e9:d2:ca:9e:d2:ad:8c:48:14:83:cf:af:
         8e:9a:ac:fb:14:dc:e0:21:1b:89:d8:07:db:9f:2b:dd:0c:81:
         a1:db:d9:6f:cb:2a:51:a9:43:0c:7e:2e:15:a0:da:c3:78:5b:
         cf:ad:a2:b5:9c:57:94:b7:1a:d5:ba:00:42:40:c4:c6:b8:ae:
         0e:e8:ae:3f:2d:bc:64:7c:e2:7b:cb:9a:f3:3e:d0:65:b3:81:
         62:4c:78:f1:b2:fb:ca:0a:fa:f5:3b:1a:2a:a7:c0:21:92:65:
         b1:0f:99:eb:e5:a3:7c:f1:5e:f7:12:3f:a1:0b:f9:b7:f0:9e:
         e3:f1:cb:2e:7f:f9:13:0c:d9:ee:33:d1:45:59:57:d1:69:c8:
         ff:8d:71:fd:8c:95:ab:2a:c5:33:89:2e:65:69:67:c6:89:4c:
         32:26:bd:d9
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUASTb66oiLFr0v091cnh0+9ACQigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4
MGM5MGI5NDAeFw0yNjA3MjcwMTQzMzRaFw0yNjA3MjgwNDQ4MzRaMDMxMTAvBgNV
BAMTKDVDNTUyNDM0MUZCN0IyRDBEQkU1NTJFM0FDRjIxNzgzQkYxRUY4RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdxwPV4BlxIuEfyBxFqpxqCpfQ
GUk5pvOn5QplN3Jd6Bt+vtim4Tq+S0VohBT199tmRrlhnlCuw7wXSjaI9UF2spwc
Fexqpr5/2Nmb0GAhjaSWIijSXtm5M6u1XyKmaqmZgNgLRDghMGkFkOjQG5A7qR4n
l+p6PHMctXMgfx3eS1+c7yLOee5GNW6NNWm0tpePgyB4AA4cwrKRBVqZ7NrOua6V
5dZNNFy0jjEfLR7o/BXONYQMRH04AyqutCxghPHBKkZMxiK7dMoHCz+BsvCXCKwS
e9xCSNhopdvUR/ZhnMwb8hofcUxuo3fLQN4weKg1SCHaT9f6G5EZrBRnI1SRAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUXFUkNB+3stDb5VLjrPIXg78e+NMwHwYDVR0j
BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw
M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E
SkM1US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MDkyMzM4OS0y
YmRlLTQzZTAtYjBkNS1mYzI0NGE2MzAzZDAvMC85MkY0OURFODY4NEYxMjg3RjRG
NkNCMTg1RDVDRjdERTgwQzkwQjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhb4vPjmR7Z1DFn2ZPQrk
5LkjcXqpc2ukRZO7BGOuG+KT0opeUfjguJ4b13/xCH6KrqxsB72rWEHE7BdYaua1
VdoZQI92JTwBKytvYWXL8RMTxF+10VE1OZHYC+vcfzPy6dLKntKtjEgUg8+vjpqs
+xTc4CEbidgH258r3QyBodvZb8sqUalDDH4uFaDaw3hbz62itZxXlLca1boAQkDE
xriuDuiuPy28ZHzie8ua8z7QZbOBYkx48bL7ygr69TsaKqfAIZJlsQ+Z6+WjfPFe
9xI/oQv5t/Ce4/HLLn/5EwzZ7jPRRVlX0WnI/41x/YyVqyrFM4kuZWlnxolMMia9
2Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:48:58 2026 by rpki-client