Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
File:                     22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json)
Hash identifier:          AMWaYf0L1JkHAvbbnx+L9tOorFOytBfsWWTRF2K0MHM=
Subject key identifier:   A5:09:E8:7F:97:32:3E:1E:68:70:13:C4:18:89:BA:D1:F1:3F:E9:E3
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Certificate issuer:       /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial:       76589CF7BF93DFA86264189BB75BA4DCE517039C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
Manifest number:          E8
Signing time:             Fri 12 Jun 2026 18:46:32 +0000
Manifest this update:     Fri 12 Jun 2026 18:41:32 +0000
Manifest next update:     Sat 13 Jun 2026 22:35:32 +0000
Files and hashes:         1: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=)
                          2: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=)
                          3: 38372e3235342e32302e302f32342d3234203d3e2039333034.roa (hash: 4X1RHbA+I5YPTr7RjepEQXD+DyuHivSCZH5v4rwZll4=)
                          4: 38372e3235342e342e302f32342d3234203d3e20323039313034.roa (hash: dT2D5TLXRAKJLruER8UV5zR5nd3cD/krMcbOOopIoWg=)
                          5: 38372e3235342e31302e302f32332d3234203d3e2039333034.roa (hash: ggxRDSIk4x8P9rbdr1wiNW32yw9uoE+S2USYJnBn0oI=)
                          6: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=)
                          7: 3138352e3231302e3136382e302f32342d3234203d3e20383334.roa (hash: PO6lININeTzy9+OgxiLUcDdp0+yx5XkE6ZtQ5rmO+Oc=)
                          8: 38372e3235342e32362e302f32342d3234203d3e20383334.roa (hash: IlGOj4Fq9cmG2HYcdx1Ff+S28/NQNuVvBQ7XsNr4s20=)
                          9: 38372e3235342e362e302f32342d3234203d3e203230343733.roa (hash: U9mhVXn/Y2qy5SVslhyWTBFWO3Hfm0be6+7a6kbSGwo=)
                          10: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: sBmfiTy1w+Ws76RbeoQGwK3fRKRJC/WSPjaJpWKmtgA=)
                          11: 3138352e3231302e3136392e302f32342d3234203d3e203537303433.roa (hash: 7z9K9FbgeMuXCaln/1hsSe4DLUK7TEmfgfG1Y1Dfr7g=)
                          12: 3231372e32352e31342e302f32342d3234203d3e2039333138.roa (hash: g2ofm16r16kl7irVfvgX1+7ziEvLdY7dJdeeSirOg4Y=)
                          13: 3231372e32352e31352e302f32342d3234203d3e2039333138.roa (hash: R5MZ0SUrJW4CLZizJcr1R/s4uU+VevPvUalEFyfnK94=)
                          14: 3231372e32352e31312e302f32342d3234203d3e203432383331.roa (hash: LBGC7WX7bJkBy0/v1ZbPU/RfYLNVgPcvPJyw+DpE2j8=)
                          15: 38372e3235342e32372e302f32342d3234203d3e20323036313336.roa (hash: JzFwyOYzVK25Z09X3NCkKQHCSO5Wep/1CMAuENJROT8=)
                          16: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=)
                          17: 3231372e32352e31332e302f32342d3234203d3e20313939313836.roa (hash: BDZh1Pi8rbZh6nir2QxJGP9zEek0IBLtx5Db2CdXo48=)
                          18: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=)
                          19: 3231372e32352e31302e302f32342d3234203d3e20383334.roa (hash: 8dkRhViDL6svksS7wszcUnYLTFZf0MLMOb3PDwzqRgU=)
                          20: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=)
                          21: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=)
                          22: 38372e3235342e352e302f32342d3234203d3e20313939313836.roa (hash: HZquRjrtVmHqbu4fPIBJgtIt3FEOMJfNRllTAEB2bxc=)
                          23: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=)
                          24: 38372e3235342e32322e302f32332d3234203d3e20323735373134.roa (hash: Q017uW83uFb8COwcV2Dq8d6iP2iHdliF99e4gCzHkCU=)
                          25: 3231372e32352e332e302f32342d3234203d3e203230343733.roa (hash: Gtvwy4O2g92Wl34q1NG2a1KSHDIDcCrqvni9SpsOlEs=)
                          26: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=)
                          27: 38372e3235342e31322e302f32332d3234203d3e20383334.roa (hash: tYrkGJWiQCuECp68SDxP1zan/szsBNIKNYHcWzm+neA=)
                          28: 38372e3235342e32342e302f32342d3234203d3e20323036313336.roa (hash: bbQ31pjEJ7Unv83rj6JC1Rwyv1NsZ2cXmXyZK0zpF/s=)
                          29: 3231372e32352e31322e302f32342d3234203d3e203533333536.roa (hash: ISZePjQZHgjZYw73RzwsKrdIyiH3v0ys4nWleWv3vxk=)
                          30: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=)
                          31: 38372e3235342e32312e302f32342d3234203d3e2039333034.roa (hash: fhuLKVJWOGU8sXL3S0QoWozOsb/OD2qOzlxonYH/GYk=)
                          32: 38372e3235342e372e302f32342d3234203d3e20383334.roa (hash: AUroM3Ze9/bgNK4SmI1yZ3cWpG0YNFOdb8fywq9WEFo=)
                          33: 38372e3235342e32352e302f32342d3234203d3e20313734.roa (hash: STs/Odq8qO0vXfvacpj/VHN/A8uqTrPbGQfYucpP36w=)
                          34: 38372e3235342e31342e302f32332d3234203d3e2039333034.roa (hash: zOjJfKXFDDK8FWQuGoyGMyabfyxwg6zgnL0YaVQFH20=)
                          35: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=)
                          36: 3231372e32352e302e302f32342d3234203d3e2039333034.roa (hash: k5yt2ARsJzVvN+rqHsG78WoVyciVL8kFYaOJznIZOwM=)
                          37: 38372e3235342e392e302f32342d3234203d3e20313534303439.roa (hash: Hq9PYTOQCseLfaxNiEXnFMG4fnzCVo7PsWTjAFrRtkw=)
                          38: 3231372e32352e362e302f32332d3234203d3e20383334.roa (hash: lBgKW7MfWFpCCiYIPXIyT3IQMPdaMKH8epCdoqowelA=)
                          39: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:58:9c:f7:bf:93:df:a8:62:64:18:9b:b7:5b:a4:dc:e5:17:03:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
        Validity
            Not Before: Jun 12 18:41:32 2026 GMT
            Not After : Jun 13 22:35:32 2026 GMT
        Subject: CN=A509E87F97323E1E687013C41889BAD1F13FE9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2d:6f:64:3b:d1:f6:38:ce:1b:0f:7c:75:b7:
                    7b:d6:c8:61:e6:06:a6:5b:19:71:6f:fb:c4:f2:05:
                    3d:8f:93:b0:74:f7:9f:2f:5a:fb:10:46:68:ae:d6:
                    2d:a9:af:e4:e1:38:4d:01:66:09:c4:30:4e:f3:c7:
                    1b:9b:cd:c1:4c:c5:87:33:e4:36:88:48:0b:ad:f6:
                    9f:b7:40:e5:03:18:9f:77:ac:02:99:f7:6a:01:88:
                    d9:a2:ca:ae:98:2a:e6:c2:00:1c:98:db:60:22:81:
                    11:98:28:f4:83:40:88:13:56:96:54:b7:bc:8d:bd:
                    67:33:53:ca:48:c6:1e:56:12:15:83:84:fb:0d:a3:
                    17:a2:88:08:88:e1:51:5c:d9:d0:1a:a6:7f:1d:9f:
                    b0:be:76:a8:7d:85:90:dc:58:40:3c:40:d8:2e:5c:
                    41:07:f2:b2:83:5c:e5:03:35:f5:87:52:5a:45:f7:
                    00:27:e6:7b:2c:8d:06:c4:d7:b2:1d:ab:a7:cd:c2:
                    03:1d:a1:ad:51:2e:07:85:c0:4b:c2:d1:64:93:3e:
                    ab:c7:57:45:06:4d:8f:60:4b:b6:19:9e:e4:ab:08:
                    09:51:6f:db:f1:10:0f:29:b6:32:0b:a7:69:5e:a9:
                    6e:24:eb:86:62:1d:ca:23:c6:27:f2:34:ef:95:b7:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:09:E8:7F:97:32:3E:1E:68:70:13:C4:18:89:BA:D1:F1:3F:E9:E3
            X509v3 Authority Key Identifier:
                keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:8e:6e:9f:bd:ae:d6:93:0e:1e:7f:71:31:d3:a1:55:8c:2b:
         bf:1d:14:ac:d5:34:e1:5f:15:e1:fd:90:04:58:57:d3:a0:74:
         2a:d4:b9:eb:f2:49:ab:31:da:22:47:c5:b9:6e:2f:3e:0d:bc:
         ec:09:38:86:ae:d1:b9:e3:4f:7f:34:65:63:ec:73:13:bd:6b:
         64:ef:f1:e6:cd:57:56:ac:08:a1:6f:4c:db:5d:40:d8:bb:d4:
         fb:bf:63:b7:13:93:15:81:01:67:49:cc:b4:d4:42:cc:f1:8b:
         02:b5:c0:72:fe:96:68:4f:3c:7a:97:92:96:bf:da:03:e6:bf:
         6c:ec:60:9e:ed:1d:29:b4:22:68:34:92:54:69:6f:86:3f:55:
         0d:d1:94:c3:6c:19:5b:17:a4:e4:ff:17:ca:c7:c9:35:3f:7e:
         51:4e:3a:e1:9d:f5:85:3b:de:a9:48:69:c0:7f:de:d9:1d:6e:
         5a:8b:16:b5:7b:e5:88:74:ec:28:07:d0:e6:bd:bb:34:8f:d1:
         57:b5:c3:40:4c:80:b8:44:76:47:3f:a7:09:75:7e:ce:ed:e2:
         6c:a6:ac:7b:77:3d:bf:2f:f0:83:2a:ef:32:38:11:76:b3:6e:
         f8:5e:fd:35:8a:a4:da:38:fe:d6:d3:39:0b:26:f4:92:99:00:
         bf:27:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:53:32 2026 by rpki-client