Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
File:                     22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json)
Hash identifier:          0RXW/GIJ1FZvJfP6Oku13+ER49IZZYFhSVYL+CKQ9Y8=
Subject key identifier:   3D:01:D1:D5:B3:2C:3E:92:CD:AA:5B:F9:49:AA:13:24:07:2D:7C:98
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Certificate issuer:       /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial:       6E7A936724444674001E5D797A81A06DBF6F437B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
Manifest number:          013D
Signing time:             Tue 28 Jul 2026 20:04:36 +0000
Manifest this update:     Tue 28 Jul 2026 19:59:36 +0000
Manifest next update:     Wed 29 Jul 2026 22:07:36 +0000
Files and hashes:         1: 3231372e32352e31352e302f32342d3234203d3e2039333138.roa (hash: R5MZ0SUrJW4CLZizJcr1R/s4uU+VevPvUalEFyfnK94=)
                          2: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=)
                          3: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=)
                          4: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=)
                          5: 3231372e32352e382e302f32342d3234203d3e20333939363331.roa (hash: liRAHxY1zWqdiQcxc2Hwg5kJJEz2RCHG2+ULjCE1an8=)
                          6: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=)
                          7: 3231372e32352e362e302f32342d3234203d3e20313937313733.roa (hash: kYFhpIFB7sQ4plsLv55NXEH2ur4uD2Dvnnf/Bn8wlhY=)
                          8: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=)
                          9: 3231372e32352e31312e302f32342d3234203d3e203432383331.roa (hash: LBGC7WX7bJkBy0/v1ZbPU/RfYLNVgPcvPJyw+DpE2j8=)
                          10: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=)
                          11: 3231372e32352e31302e302f32342d3234203d3e20383334.roa (hash: 8dkRhViDL6svksS7wszcUnYLTFZf0MLMOb3PDwzqRgU=)
                          12: 38372e3235342e32342e302f32342d3234203d3e20383334.roa (hash: 3heYW94siEFBzrT3gihXCI5Vho56FAEmPFruRGdpNo8=)
                          13: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=)
                          14: 38372e3235342e32302e302f32332d3234203d3e20383334.roa (hash: JNmHzwHPRq7qlddj0jcOBGMR8vn3SIVE2cJH7b/pCQQ=)
                          15: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=)
                          16: 3138352e3231302e3136382e302f32342d3234203d3e20383334.roa (hash: PO6lININeTzy9+OgxiLUcDdp0+yx5XkE6ZtQ5rmO+Oc=)
                          17: 3138352e3231302e3136392e302f32342d3234203d3e203537303433.roa (hash: 7z9K9FbgeMuXCaln/1hsSe4DLUK7TEmfgfG1Y1Dfr7g=)
                          18: 3231372e32352e332e302f32342d3234203d3e203230343733.roa (hash: Gtvwy4O2g92Wl34q1NG2a1KSHDIDcCrqvni9SpsOlEs=)
                          19: 38372e3235342e32352e302f32342d3234203d3e20313734.roa (hash: STs/Odq8qO0vXfvacpj/VHN/A8uqTrPbGQfYucpP36w=)
                          20: 38372e3235342e32322e302f32332d3234203d3e20323735373134.roa (hash: Q017uW83uFb8COwcV2Dq8d6iP2iHdliF99e4gCzHkCU=)
                          21: 3231372e32352e31322e302f32342d3234203d3e203533333536.roa (hash: ISZePjQZHgjZYw73RzwsKrdIyiH3v0ys4nWleWv3vxk=)
                          22: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=)
                          23: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=)
                          24: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=)
                          25: 38372e3235342e392e302f32342d3234203d3e20383334.roa (hash: 9xNWK0CP8AKiSnG1dUeeFmXs6klwdHgCE4UZ1NbhInI=)
                          26: 38372e3235342e342e302f32322d3234203d3e20383334.roa (hash: 2I1ByI1ShJrhfbJoS5XMVbgzL/j4V3zDgV1b9EtKL3Y=)
                          27: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=)
                          28: 38372e3235342e31322e302f32332d3234203d3e20383334.roa (hash: tYrkGJWiQCuECp68SDxP1zan/szsBNIKNYHcWzm+neA=)
                          29: 3231372e32352e31342e302f32342d3234203d3e2039333138.roa (hash: g2ofm16r16kl7irVfvgX1+7ziEvLdY7dJdeeSirOg4Y=)
                          30: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: PMydnLUPO/zqS81zhjL5Dj1MRVjOk5gA1vxJrD4NLVs=)
                          31: 38372e3235342e32362e302f32332d3234203d3e20383334.roa (hash: BuP+f963iMyPecbwlN2GWTfpsJgkISywaFBeNCGmp5M=)
                          32: 3231372e32352e372e302f32342d3234203d3e20383334.roa (hash: E7YJ5DTD2yRF0BHGNuEBNEYqAZ0elyP0EYfo+7qxNLU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7a:93:67:24:44:46:74:00:1e:5d:79:7a:81:a0:6d:bf:6f:43:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
        Validity
            Not Before: Jul 28 19:59:36 2026 GMT
            Not After : Jul 29 22:07:36 2026 GMT
        Subject: CN=3D01D1D5B32C3E92CDAA5BF949AA1324072D7C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:b7:b5:76:a6:21:22:85:bd:6e:d1:04:54:
                    d4:43:ee:ee:16:fc:ba:e3:27:86:86:b2:55:20:f9:
                    70:5b:4e:9f:ee:91:75:1f:ee:06:dd:59:0a:bd:ee:
                    c9:ca:98:88:ec:98:7a:10:95:dc:08:d7:09:5d:2c:
                    4b:ae:51:d2:e3:b0:0e:7c:3c:ea:f8:e2:b1:ae:4d:
                    1e:ee:c6:6c:e3:aa:13:b4:81:42:71:b5:bd:d6:b9:
                    a7:48:0c:9f:1e:ed:32:70:ca:0a:41:fc:ee:e0:6e:
                    49:54:98:ee:be:ef:42:a1:46:cf:8a:e5:1d:47:47:
                    77:dc:81:1f:65:70:69:ff:b8:88:6b:8f:70:fe:81:
                    15:f8:2f:3c:b3:d3:5f:45:a7:df:b4:73:12:cb:37:
                    02:82:08:48:8d:42:57:0e:b0:2f:d1:48:6b:49:d9:
                    52:94:33:33:68:1c:6d:22:63:7a:3c:ba:dd:be:55:
                    f0:47:08:dd:b6:aa:e1:ba:77:3a:f7:2c:ec:6d:b5:
                    63:48:8f:64:6f:4c:2e:0f:3b:24:d9:d4:5b:4b:0e:
                    28:11:f5:0c:33:65:ef:f2:e4:97:f4:b4:0a:73:a4:
                    ef:e0:60:05:a9:33:50:86:ea:e6:0d:2e:f2:17:f7:
                    1b:03:1a:93:c6:d8:f8:c0:93:ed:20:4d:9e:9a:b6:
                    78:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:01:D1:D5:B3:2C:3E:92:CD:AA:5B:F9:49:AA:13:24:07:2D:7C:98
            X509v3 Authority Key Identifier:
                keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f0:7c:f8:3a:a7:a5:ca:f3:82:a4:57:8f:b7:8f:45:50:94:
         e9:4f:5a:75:e3:dc:ac:c6:4e:52:c4:e6:1d:06:9e:e7:7c:19:
         6c:f0:7e:e4:33:f7:41:7f:00:96:ac:76:11:63:a2:52:6c:98:
         b0:1e:90:55:4e:5c:84:4d:74:91:62:f7:e1:3d:24:ab:e7:ae:
         cb:88:40:cb:d2:8c:d5:d4:d6:75:1d:93:13:95:91:99:69:e0:
         fd:72:c9:cd:ea:af:1f:87:2c:58:27:4f:bd:71:20:c8:bd:86:
         38:22:07:28:23:15:01:85:5a:e7:eb:09:6c:47:0e:e7:70:54:
         ef:f2:bb:b4:e2:31:f5:e2:5a:a8:2f:21:32:b1:a7:08:b0:a9:
         59:55:95:b3:87:93:d5:82:0f:50:06:71:95:ed:ac:78:0e:2d:
         fc:2a:bf:e3:3d:7f:e8:34:42:ed:27:de:87:59:9d:df:c3:59:
         c7:a7:87:a8:1e:77:4c:a7:4c:55:ca:8b:16:d3:88:6d:65:0c:
         12:78:48:c5:f0:97:07:76:c3:83:50:ca:a3:c7:b5:52:cd:22:
         16:cb:26:6b:df:8b:89:3b:e6:ca:62:74:e4:10:c1:22:b5:0b:
         e0:32:2d:80:05:45:8d:d3:7c:73:21:61:71:66:57:37:60:28:
         4d:73:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:38:49 2026 by rpki-client