Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File:                     2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier:          n0VnYanIP3fV5wtPp6ljNrHDQuGD+YPR55Aq5992+1A=
Subject key identifier:   8C:F7:5E:05:0F:3E:86:94:90:87:DD:65:CB:83:18:5D:C3:98:BC:3B
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       7FD9839E919730FAB474E95516678654BA55DEB9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number:          0A74
Signing time:             Mon 27 Apr 2026 13:14:08 +0000
Manifest this update:     Mon 27 Apr 2026 13:09:08 +0000
Manifest next update:     Tue 28 Apr 2026 14:26:08 +0000
Files and hashes:         1: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: lmeonO2o30jrIUmff5p0q1g2BKAKpSOoIlSReYakKN8=)
                          2: 323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa (hash: Fgcu73F4DxRvaLksBuPTG0jHcKxfTvgmmVGQl4chyzs=)
                          3: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: tl8M/rg4fzRj4HcLbXbMPjG2fJQE/fLu0oqk+/bvTJ4=)
                          4: 323630323a663939323a62303a3a2f34342d3438203d3e20323134363330.roa (hash: PHjDJexK/Eklx6InBXxOBTRmjtOGLIjGAGFc7gbqZb8=)
                          5: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: NUE/UX3oXJFnmyAE2FoTGPVQs404K4mf9BK/aBACO14=)
                          6: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: b0Y9KTtLcurzLdN0rHLtotfhQYSBbk9yeBAxIWe6UDM=)
                          7: 323630323a663939323a66363a3a2f34382d3438203d3e203236323836.roa (hash: ion8ML+Yfv2dxyo0ppsgmr/V3XUxA9UrqDHj/Zke1A0=)
                          8: 323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa (hash: JcXzbGu5aoqW4eGRLqUocgWZf+gjmi1jki466ucPd4g=)
                          9: 323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa (hash: WWuZlGD19cauNNFGP8lkHygPrhsjx/40EDpoW/B2wUc=)
                          10: 323630323a663939323a66643a3a2f34382d3438203d3e20343031383132.roa (hash: 59uZAy7XXfBP2lTYymBUstkE3+Fixf8c03kHK/e8F/o=)
                          11: 323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (hash: izLerJCXQHRMj4EuHnpJKhCKBCsakjo+L9Seyo/D9Sg=)
                          12: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: HhVByOYrx2S9pHnEb1O7wXoTQ+/5YLny6hPGL1uYyM8=)
                          13: 323630323a663939323a66373a3a2f34382d3438203d3e2030.roa (hash: vzUfgaw6t33aMyp+BMlfruWNIdCIRwsxwR92D/70/Gg=)
                          14: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: xsTimzkeTJXF4Nr71zJnv2bONR0iZSrLPJdDzaLfkdY=)
                          15: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: YYf0/nCM78+V7tIM0LmBS6Dvc8Dkds5cV7+r3azqm7c=)
                          16: 323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa (hash: +regh0iXnX1+G7oho+N8MToCO88rnVaGwW232okUqZA=)
                          17: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: e0fhRMu+yRz12dIijmE9iRjZQQKxfzNFVogUT3jtPD0=)
                          18: 323630323a663939323a39303a3a2f34342d3438203d3e2030.roa (hash: NC2ZhEPelpHdoSSljxfD6WpRWcBV8zPEY0f/OMUilVM=)
                          19: 323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (hash: TsDzPexWiyW7o35YhRgMnmXGuAARZmgF1yTYqL8wkn4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d9:83:9e:91:97:30:fa:b4:74:e9:55:16:67:86:54:ba:55:de:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Apr 27 13:09:08 2026 GMT
            Not After : Apr 28 14:26:08 2026 GMT
        Subject: CN=8CF75E050F3E86949087DD65CB83185DC398BC3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:83:49:74:04:5c:59:28:e7:a9:32:72:f1:a9:
                    fd:47:0a:de:9d:3d:98:ac:53:b2:5a:e2:1e:0d:3a:
                    de:bf:f1:30:27:92:0e:20:81:cd:63:f4:ed:a9:61:
                    27:86:62:f0:3e:6f:5c:ce:ea:c9:b3:dd:14:78:23:
                    2e:36:53:31:7d:a0:b7:2d:1e:cc:03:2b:47:64:4c:
                    78:fa:c0:99:91:ba:f1:59:3e:c7:6a:f3:95:26:ec:
                    eb:0d:e9:38:de:a9:7b:4d:be:b0:1c:2f:a6:6a:5a:
                    b6:e8:2f:06:94:bb:5a:84:7e:aa:5b:ad:8a:c8:66:
                    ee:6b:33:7f:0c:2f:25:73:26:2a:fa:63:0c:77:f7:
                    02:d0:1f:82:28:bf:f6:54:f3:2c:42:25:d0:28:9b:
                    fb:8a:7c:c4:22:6e:3d:ea:8f:94:9e:35:0c:9b:82:
                    bb:bb:64:db:65:db:77:a3:c9:3a:d0:93:98:3b:66:
                    55:38:d4:7e:81:27:d7:a3:15:47:24:57:54:55:52:
                    46:d0:96:e4:de:8b:ec:f6:3a:82:02:bd:62:51:3f:
                    85:ae:4c:07:b4:81:f8:33:c2:3f:ed:1e:eb:a6:45:
                    20:af:cc:bf:c1:1b:e2:72:6b:7e:fd:59:d8:5c:9f:
                    5c:2e:b3:ac:79:6f:d8:a6:ca:72:17:cf:f5:ab:7b:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F7:5E:05:0F:3E:86:94:90:87:DD:65:CB:83:18:5D:C3:98:BC:3B
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:87:2f:45:91:11:5b:22:77:32:11:a6:ad:d9:23:f6:a2:5d:
         31:46:8e:ae:c1:06:96:eb:a7:fb:de:d1:b1:48:e1:63:16:f8:
         f0:6e:3d:db:75:db:d8:ef:df:64:28:c8:94:25:f5:d3:61:50:
         a7:03:fd:8a:a3:32:f5:88:37:2e:55:b6:e4:e4:df:3f:c5:51:
         e3:70:33:10:44:7d:f8:dc:c1:d1:c2:a5:6d:c8:d8:8b:b7:7e:
         d1:ae:50:43:f7:6b:d5:3e:e1:4e:85:3a:77:cd:2c:03:36:0d:
         eb:5d:19:d5:53:45:06:b3:04:15:b5:a0:a4:17:62:85:b4:25:
         1d:a4:e4:b0:14:10:7d:9c:9a:e7:56:2f:2b:c0:08:5f:2d:34:
         cf:17:6d:e7:68:aa:e2:bc:10:56:a2:60:20:d8:7f:61:77:ce:
         30:5d:cc:70:43:8b:9d:eb:9e:e7:38:c7:8c:1d:e4:ad:3f:29:
         a3:51:85:17:f0:34:89:ee:0e:53:ca:71:d7:7c:78:34:67:f1:
         88:1f:d1:ef:f5:f0:64:fd:fb:7a:b1:6c:2e:86:df:8d:0e:c2:
         7f:de:61:3f:9a:ea:e7:9a:a7:7d:57:5d:b4:c1:49:41:cd:0b:
         b0:9f:87:2f:eb:e4:e1:7f:07:80:e3:63:eb:28:55:0e:bc:2e:
         15:55:44:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:12:03 2026 by rpki-client