Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
File:                     A912092CFA11F378852F52266C793AB678233205.mft (raw, json)
Hash identifier:          ag8wtmJpaHpNxiSLXACQKUYlVYVMO6quegp+CgW21K8=
Subject key identifier:   8B:2F:0A:0A:96:6F:59:56:62:61:0D:7E:89:D6:CD:55:AA:E8:F6:79
Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Certificate issuer:       /CN=A912092CFA11F378852F52266C793AB678233205
Certificate serial:       7C95CC811052EF1FEE0A64FBAA2E01E49833243E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
Manifest number:          02C5
Signing time:             Sun 19 Apr 2026 02:08:44 +0000
Manifest this update:     Sun 19 Apr 2026 02:03:44 +0000
Manifest next update:     Mon 20 Apr 2026 06:03:44 +0000
Files and hashes:         1: 3131312e3233352e3135312e302f32342d3332203d3e20323135313437.roa (hash: vew4LNWCVofm5qe2BK5sopfMvrn3w6T63/5S4aLPNx0=)
                          2: 326130393a353463333a613130313a3a2f34382d313238203d3e20323135313437.roa (hash: 90FGOeqqLptd8qlXcfjJgcF07gJvM1oxc2QmHLuTM1Y=)
                          3: 326130393a353463333a363030303a3a2f34342d313238203d3e20323135313130.roa (hash: yfuWP7yG7wZycm5FNAWN7L7AL5ePZ3cOQL4dLvNYem8=)
                          4: A912092CFA11F378852F52266C793AB678233205.crl (hash: UcIZ1B571LNIcDTk2SvMZxO40aFdeeVewnFh2gqUZn8=)
                          5: 326130393a353463333a613230303a3a2f34302d313238203d3e20323039383734.roa (hash: bwL4xPqc/uz8Pz2knWoJ8zvpAw8HB5XXWez7oPoDaEI=)
                          6: 326130393a353463333a613130303a3a2f34382d313238203d3e20323135313437.roa (hash: 5vA7kcahmkhnv7Pjx7uA7TrGRG+XVrMF+mKhb2vEG5U=)
                          7: 326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa (hash: /KjIFlpbNb1VbdyEsAMlwZ6y7EnP5aEMV+JQt9I/CYU=)
                          8: 326130393a353463333a363031313a3a2f34382d313238203d3e20323130373936.roa (hash: oOMJGE7w6MdhwxTQz0JIkTzWwBWrWIJlxBtQDJHxYz8=)
                          9: 326130393a353463333a613130323a3a2f34382d313238203d3e20323135313437.roa (hash: vs9kXuBMMWCplaNsRIcMMGKaCF4FLRTK4Bq5jqpLQYc=)
                          10: 326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa (hash: m/KS3U1L5fK6/ozUyGVO/HofrXSxDH++GoaQCE6VLqY=)
                          11: 326130393a353463333a663861303a3a2f34382d3438203d3e20323130373936.roa (hash: X0CUZY7eCVPdKNVYgU4CZQOyS/PtQA7Qu11pXSHBTAY=)
                          12: 326130393a353463333a363031303a3a2f34342d313238203d3e20323135313437.roa (hash: /uKkUitQmfvZHwOyXacfV/Jk4h2wHyCXDmi/rApbaHk=)
                          13: 326130393a353463333a613030303a3a2f34302d313238203d3e20323039383734.roa (hash: ca9GKU5mOXVUfI7Du4XvHpxs7R00F6F4l3yz+1HGWmo=)
                          14: 326130393a353463333a613130313a3a2f34382d313238203d3e20323037323532.roa (hash: Ilh1UAu+jca7lLH/J3OsImOkho4aJFpMyXWBFJO/olw=)
                          15: 326130393a353463333a613130343a3a2f34382d313238203d3e20323135313437.roa (hash: mqZWFx8mEs19q6avxgn8ro9WrQffoF4FToEMy+hXzM0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 19:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:95:cc:81:10:52:ef:1f:ee:0a:64:fb:aa:2e:01:e4:98:33:24:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912092CFA11F378852F52266C793AB678233205
        Validity
            Not Before: Apr 19 02:03:44 2026 GMT
            Not After : Apr 20 06:03:44 2026 GMT
        Subject: CN=8B2F0A0A966F595662610D7E89D6CD55AAE8F679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:76:c5:c8:34:52:63:f4:0e:68:e8:66:bb:
                    6c:0e:11:78:e7:d1:f6:bf:a0:f6:4a:6f:e3:cd:80:
                    ee:6f:2f:9d:0d:9f:c9:48:5c:00:c4:b9:63:3a:b2:
                    62:25:db:56:13:2f:7b:5b:ff:2d:5e:3f:a3:ba:c9:
                    f9:bd:d1:35:2a:6c:f7:8b:da:42:ec:59:18:cf:f9:
                    8a:55:a2:55:f6:b1:e2:93:0c:63:db:9a:cb:cb:a5:
                    f4:b9:80:28:f7:b2:aa:ce:71:69:42:81:5f:c0:02:
                    ae:1c:9d:59:cf:6c:99:b4:6f:58:27:2f:35:a8:44:
                    35:19:46:b5:af:84:b4:ca:5e:6e:98:6c:f7:26:d7:
                    23:0b:c5:a0:ad:5d:21:fe:10:80:67:4c:aa:0a:45:
                    c0:bc:0a:6c:a5:4e:11:a5:4a:27:ef:83:65:cb:9a:
                    65:ff:26:a6:bc:fc:30:fd:0f:3e:07:5a:6e:fd:7e:
                    40:9e:d3:2e:01:3a:82:98:43:47:43:5d:6b:d0:ad:
                    d3:8c:cc:40:9a:10:c3:08:6e:df:4f:85:26:b5:06:
                    80:7b:6f:6f:8e:84:bf:4e:44:62:e3:6c:a2:68:fc:
                    5d:d0:3d:8a:96:97:65:c2:93:af:fc:fc:95:02:24:
                    7f:0a:65:9a:79:62:1a:5d:51:ff:5e:97:a8:ce:85:
                    79:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2F:0A:0A:96:6F:59:56:62:61:0D:7E:89:D6:CD:55:AA:E8:F6:79
            X509v3 Authority Key Identifier:
                keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ad:cc:18:bf:d6:78:97:21:3e:99:f6:68:a3:7f:7e:98:f5:
         47:9e:f8:59:22:20:c7:03:86:cb:5c:c9:9d:72:84:eb:97:d0:
         8b:17:d9:d8:58:6d:1a:90:8f:73:0c:58:56:2f:80:c8:06:4e:
         ce:91:1c:0d:36:11:9d:64:8c:21:97:91:c7:c8:46:f9:92:38:
         21:7b:bc:26:ad:e5:ab:55:69:40:e2:46:e9:2a:d7:83:78:32:
         a5:33:10:b2:45:58:b6:8a:36:44:df:88:18:40:db:5b:e6:26:
         b3:20:bc:f4:56:c5:56:d4:83:a1:8c:22:3d:fc:2a:6c:08:df:
         6a:39:6d:a7:89:cb:28:67:8c:24:23:d2:74:4b:a0:33:a7:37:
         cb:68:1d:f3:bd:49:d0:7b:b3:d0:d0:c2:97:a5:7d:75:07:20:
         98:aa:6f:6b:dd:99:da:6d:28:22:6e:e5:3f:79:ea:00:41:a9:
         11:0b:d4:b2:2e:cb:28:fe:69:12:e8:f6:ac:68:14:d2:3d:72:
         f0:20:ec:43:4d:a8:e5:88:6c:e7:17:9b:ad:5c:d6:97:c1:62:
         b7:ef:19:b1:6c:08:4e:dc:98:53:20:6c:2f:99:31:6d:80:50:
         2e:1e:46:74:f5:bb:77:67:57:f5:79:7f:a9:64:cd:4b:50:59:
         df:0b:9d:de
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUfJXMgRBS7x/uCmT7qi4B5JgzJD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3
ODIzMzIwNTAeFw0yNjA0MTkwMjAzNDRaFw0yNjA0MjAwNjAzNDRaMDMxMTAvBgNV
BAMTKDhCMkYwQTBBOTY2RjU5NTY2MjYxMEQ3RTg5RDZDRDU1QUFFOEY2NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixHbFyDRSY/QOaOhmu2wOEXjn
0fa/oPZKb+PNgO5vL50Nn8lIXADEuWM6smIl21YTL3tb/y1eP6O6yfm90TUqbPeL
2kLsWRjP+YpVolX2seKTDGPbmsvLpfS5gCj3sqrOcWlCgV/AAq4cnVnPbJm0b1gn
LzWoRDUZRrWvhLTKXm6YbPcm1yMLxaCtXSH+EIBnTKoKRcC8CmylThGlSifvg2XL
mmX/Jqa8/DD9Dz4HWm79fkCe0y4BOoKYQ0dDXWvQrdOMzECaEMMIbt9PhSa1BoB7
b2+OhL9ORGLjbKJo/F3QPYqWl2XCk6/8/JUCJH8KZZp5YhpdUf9el6jOhXmzAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUiy8KCpZvWVZiYQ1+idbNVaro9nkwHwYDVR0j
BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz
MzIwNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m
MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS9BOTEyMDkyQ0ZBMTFGMzc4ODUy
RjUyMjY2Qzc5M0FCNjc4MjMzMjA1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqa3MGL/WeJchPpn2aKN/
fpj1R574WSIgxwOGy1zJnXKE65fQixfZ2FhtGpCPcwxYVi+AyAZOzpEcDTYRnWSM
IZeRx8hG+ZI4IXu8Jq3lq1VpQOJG6SrXg3gypTMQskVYtoo2RN+IGEDbW+YmsyC8
9FbFVtSDoYwiPfwqbAjfajltp4nLKGeMJCPSdEugM6c3y2gd871J0Huz0NDCl6V9
dQcgmKpva92Z2m0oIm7lP3nqAEGpEQvUsi7LKP5pEuj2rGgU0j1y8CDsQ02o5Yhs
5xebrVzWl8Fit+8ZsWwITtyYUyBsL5kxbYBQLh5GdPW7d2dX9Xl/qWTNS1BZ3wud
3g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 05:42:58 2026 by rpki-client