Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
File:                     22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json)
Hash identifier:          l+CxnQ/0oZJYsWJkBhxuQ0jmkSegR+O9+upX3H+xj6U=
Subject key identifier:   6E:9D:86:76:A2:5E:57:D0:71:10:A5:AA:AB:2D:5F:19:CB:13:AF:FA
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Certificate issuer:       /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial:       41FABE1ABFB75824298B71EC2642C80DA9451B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
Manifest number:          62
Signing time:             Fri 17 Apr 2026 01:44:42 +0000
Manifest this update:     Fri 17 Apr 2026 01:39:42 +0000
Manifest next update:     Sat 18 Apr 2026 03:34:42 +0000
Files and hashes:         1: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=)
                          2: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=)
                          3: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=)
                          4: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=)
                          5: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=)
                          6: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=)
                          7: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: JFhktKOcWHZ6uyokA2yt9gCvmlb3FIfM/A8y4NEOJn4=)
                          8: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=)
                          9: 3138352e3231302e3136382e302f32342d3234203d3e20383334.roa (hash: PO6lININeTzy9+OgxiLUcDdp0+yx5XkE6ZtQ5rmO+Oc=)
                          10: 3138352e3231302e3136392e302f32342d3234203d3e203537303433.roa (hash: 7z9K9FbgeMuXCaln/1hsSe4DLUK7TEmfgfG1Y1Dfr7g=)
                          11: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=)
                          12: 38372e3235342e32312e302f32342d3234203d3e2039333034.roa (hash: fhuLKVJWOGU8sXL3S0QoWozOsb/OD2qOzlxonYH/GYk=)
                          13: 38372e3235342e32332e302f32342d3234203d3e20323135363732.roa (hash: /+BmUmf76rxab9lMUlp4SDJKTX/siHkrnlzW84acgzo=)
                          14: 38372e3235342e32352e302f32342d3234203d3e20313734.roa (hash: STs/Odq8qO0vXfvacpj/VHN/A8uqTrPbGQfYucpP36w=)
                          15: 38372e3235342e32362e302f32342d3234203d3e20383334.roa (hash: T1cCAJDRZwjzW9i5/Fg/+smVPcIPJkyoS++WeKvbW0g=)
                          16: 38372e3235342e32372e302f32342d3234203d3e203137343937.roa (hash: oJ5rvj5E9wUerv74B0/Wvc0SZ2sawHmom3dQkatBF5E=)
                          17: 38372e3235342e372e302f32342d3234203d3e20383334.roa (hash: uPveiCZb05Qe74m9ER/dRXkOE+jPcZGdhN1kbDCURUs=)
                          18: 38372e3235342e32392e302f32342d3234203d3e20343031383536.roa (hash: QHFnVOaeEPk8OHFM/vvl17YuczgNqBKqrZuDNL93LS0=)
                          19: 38372e3235342e392e302f32342d3234203d3e20313534303439.roa (hash: Hq9PYTOQCseLfaxNiEXnFMG4fnzCVo7PsWTjAFrRtkw=)
                          20: 38372e3235342e32382e302f32342d3234203d3e20313938323530.roa (hash: qLeT0qC2aRYaYvqMA7On+tHD955+P3rkrlhBt6zEGQc=)
                          21: 38372e3235342e31342e302f32332d3234203d3e2039333034.roa (hash: zOjJfKXFDDK8FWQuGoyGMyabfyxwg6zgnL0YaVQFH20=)
                          22: 3231372e32352e31352e302f32342d3234203d3e20383334.roa (hash: etjfV0kGb76d5lSxFiq8JUUbGdWAGGaQAAqGc0Sfyfo=)
                          23: 38372e3235342e32342e302f32342d3234203d3e20343032303437.roa (hash: I6nMkOW16PyXMxFt9RQFe/GpDqFqzj3Mh9XigQN7utc=)
                          24: 3231372e32352e332e302f32342d3234203d3e203230343733.roa (hash: Gtvwy4O2g92Wl34q1NG2a1KSHDIDcCrqvni9SpsOlEs=)
                          25: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=)
                          26: 38372e3235342e32302e302f32342d3234203d3e2039333034.roa (hash: 4X1RHbA+I5YPTr7RjepEQXD+DyuHivSCZH5v4rwZll4=)
                          27: 38372e3235342e362e302f32342d3234203d3e203230343733.roa (hash: U9mhVXn/Y2qy5SVslhyWTBFWO3Hfm0be6+7a6kbSGwo=)
                          28: 38372e3235342e31322e302f32332d3234203d3e20383334.roa (hash: UWjmZenZgQ6GpdGZbayi4FQY4UxY0dqXvzhbQdAIi5g=)
                          29: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=)
                          30: 3231372e32352e312e302f32342d3234203d3e203239383032.roa (hash: gVMFsL1+w+J00kOn7BuEjBsUXi6YaE8/Mve6X6O6dFo=)
                          31: 3231372e32352e31342e302f32342d3234203d3e2039333138.roa (hash: g2ofm16r16kl7irVfvgX1+7ziEvLdY7dJdeeSirOg4Y=)
                          32: 38372e3235342e342e302f32332d3234203d3e20383334.roa (hash: X9JcAlWz2cWHFDBQRn2/GiBUt95iJv417zAItTtavhU=)
                          33: 38372e3235342e32322e302f32342d3234203d3e20383334.roa (hash: rBcnHeM9UN/n2/ZoIT3IiOmRRqgoBqMFBe8vdR0Fp3M=)
                          34: 3231372e32352e31332e302f32342d3234203d3e20323033303438.roa (hash: emF4lgxVnHZ+9xIJd7lDbOPZA2U4UK1myb+9IST3mnM=)
                          35: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=)
                          36: 3231372e32352e312e302f32342d3234203d3e203631333137.roa (hash: AuTG5hLsCwUWbPjqPfLL3+sUc3GYo/fF3PPYDhERDx0=)
                          37: 38372e3235342e31302e302f32332d3234203d3e2039333034.roa (hash: ggxRDSIk4x8P9rbdr1wiNW32yw9uoE+S2USYJnBn0oI=)
                          38: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=)
                          39: 38372e3235342e33302e302f32342d3234203d3e20343031323933.roa (hash: cG6Y2sScw5gP4svJgcfFkXsy8sYFo7Vgb9i6WanPeyc=)
                          40: 3231372e32352e31322e302f32342d3234203d3e203533333536.roa (hash: ISZePjQZHgjZYw73RzwsKrdIyiH3v0ys4nWleWv3vxk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fa:be:1a:bf:b7:58:24:29:8b:71:ec:26:42:c8:0d:a9:45:1b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
        Validity
            Not Before: Apr 17 01:39:42 2026 GMT
            Not After : Apr 18 03:34:42 2026 GMT
        Subject: CN=6E9D8676A25E57D07110A5AAAB2D5F19CB13AFFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:70:b3:7e:47:f1:65:16:68:67:97:63:9b:
                    26:ed:b5:e4:cc:27:6c:9b:8b:65:1d:d1:e7:71:0b:
                    99:52:b5:f6:06:f3:e5:28:22:1f:35:e5:0c:9a:ff:
                    cb:58:ba:c6:bb:76:f2:46:1b:fa:f9:d9:ea:8c:0f:
                    c1:47:5d:ca:37:fd:47:72:f7:7b:30:a8:3d:6c:6f:
                    e9:93:69:c7:84:34:8f:b7:71:5d:bd:f0:c7:09:a5:
                    cc:ac:06:08:fe:15:50:fb:92:08:a4:d8:6a:53:aa:
                    c5:04:98:75:bc:d6:9d:68:89:88:b2:72:74:4c:93:
                    0e:33:94:02:47:ca:c4:01:db:e1:11:73:5a:cf:6b:
                    50:f4:df:e5:95:ee:f4:7f:74:a8:e6:b3:6e:32:51:
                    fb:82:7c:0f:e2:59:87:5b:3e:54:ca:63:10:da:55:
                    85:28:3e:ff:13:5a:06:a0:08:c0:46:f2:ab:c2:57:
                    30:c6:bc:b3:2f:ed:88:2a:41:fc:27:92:d8:bb:48:
                    d2:82:ee:25:54:cc:36:55:17:e0:f3:5a:f9:47:e0:
                    45:19:5c:72:19:6b:a8:d2:50:c9:49:b5:36:50:32:
                    ef:c0:64:51:09:d9:4f:66:b2:0d:0d:26:76:02:84:
                    a0:8e:71:4e:76:c0:fb:60:18:66:f0:80:35:59:4e:
                    24:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9D:86:76:A2:5E:57:D0:71:10:A5:AA:AB:2D:5F:19:CB:13:AF:FA
            X509v3 Authority Key Identifier:
                keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9e:ef:3d:c3:02:95:0a:ea:a1:58:bd:94:cf:15:de:ef:05:
         fb:b8:c6:c6:72:8b:28:56:de:69:eb:fa:00:94:b2:69:77:68:
         82:33:0d:a5:2b:30:e9:49:76:a9:29:19:00:a9:b2:cb:2d:52:
         d7:69:be:39:19:80:26:00:74:eb:3d:b5:1e:87:71:f1:af:e3:
         c3:9d:10:da:a2:93:b0:29:62:93:28:40:21:b2:21:45:b2:91:
         85:de:0a:b7:2f:2d:4d:cd:49:1c:94:0e:e1:ab:a9:6d:49:2f:
         f4:21:70:a8:09:da:4c:7d:f2:93:fa:99:cb:5e:dc:9f:e7:1d:
         d8:5a:34:b5:33:a3:d2:4b:c3:61:64:23:4f:15:09:55:ae:36:
         2f:b9:85:ec:c7:66:03:de:aa:11:d1:f3:d3:37:8d:50:ac:54:
         f4:41:e8:ad:f3:ba:a4:0e:cd:71:01:d0:6b:5a:24:70:5f:47:
         ce:30:94:ff:42:82:c4:03:b8:11:f3:10:0e:56:72:9d:51:78:
         a7:6e:8e:9a:f0:ce:04:0b:18:7c:f2:25:9f:40:0b:ee:75:4b:
         f3:a3:e0:77:fe:78:4a:be:1a:2f:ee:23:54:4b:0d:80:29:e1:
         34:79:98:95:f7:58:9b:50:64:2a:68:27:3f:8a:3f:5b:e7:b1:
         5d:30:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:32 2026 by rpki-client