Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
File:                     20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json)
Hash identifier:          Ch5Np8CMLueCuCNA4wSfHbSvqSpwyQpUy+T5cR/j8KY=
Subject key identifier:   A9:D0:51:45:09:E2:F2:83:5C:7F:CD:86:46:10:FA:3F:04:24:89:72
Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Certificate issuer:       /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Certificate serial:       12913D7FE78591243AB13114EBCBAD89B7D65D00
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
Manifest number:          0564
Signing time:             Sat 13 Jun 2026 07:20:16 +0000
Manifest this update:     Sat 13 Jun 2026 07:15:16 +0000
Manifest next update:     Sun 14 Jun 2026 10:37:16 +0000
Files and hashes:         1: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: eAJT0TAUgT1Z0zEt6HjQDiULFFQfl/5bfiuV2VMW7e0=)
                          2: 326131343a316563313a376235303a3a2f34342d3438203d3e20323135363835.roa (hash: IzwkS06+TU6xlgmjKohwCnvrPjgEE+53/+TvwhGB5Kg=)
                          3: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: M7y4yNzKisPGrMDI6N/h2uK0LmUwgVtJCXB3eT1YcCs=)
                          4: 326131343a316563313a313030303a3a2f33362d3438203d3e20323135313336.roa (hash: Hy38nW7g7jg3g8NEUSSR9hX3QcE4UfBQyRuLYa5OQGw=)
                          5: 69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer (hash: xAYLg9xwMzhfn7yeX4sZhbINK9SiMXP3e/i/klKaS9Y=)
                          6: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=)
                          7: 326131343a316563313a313630303a3a2f34302d3430203d3e20323139353233.roa (hash: 9E1PsTjd11hXDLZSZeoJaNnT7ONzxHIoAoZBFV00R+U=)
                          8: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=)
                          9: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: 0MGh72HtcBIx2dyROH4vCwTGrkjWjpybf+czr46U9xA=)
                          10: 326131343a316563313a313730303a3a2f34302d3430203d3e20323139353233.roa (hash: A8bwWH9/ybdeySNN01RK//BZzg4rKSE3B00g1VeCR5M=)
                          11: 326131343a316563313a313030303a3a2f33362d3438203d3e20323131303636.roa (hash: VwMdcB7cjunOknijcMaBRHJjTJhyW3Liym/2KH9Cpo0=)
                          12: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: 3/JDrgPcwa3QkItCqhf73S0kH72VYqnJSSE72cvYDCQ=)
                          13: 326131343a316563313a376234303a3a2f34342d3438203d3e20323139353339.roa (hash: lk2g+VMPJ2e0ffh4BXNf9T04tdPmSZpAFUml3dW+JwM=)
                          14: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=)
                          15: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: 5zFC0aBKrn16Glyaue2oFptFutD2x5iVGxip/IIewrc=)
                          16: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: 8VhdvV/ADl1dQyHcZOJm0iqoZEaI9FAWV7wRLCn1Kkc=)
                          17: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: EOUQ1JZ1oz2xZOU8+mEukp9ybbKV7scsmw0lQsJAxX4=)
                          18: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=)
                          19: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: wCpGpHKdqFN1DO1NvTXNItL3x3NUD8VGRqAFwBrJITc=)
                          20: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:91:3d:7f:e7:85:91:24:3a:b1:31:14:eb:cb:ad:89:b7:d6:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
        Validity
            Not Before: Jun 13 07:15:16 2026 GMT
            Not After : Jun 14 10:37:16 2026 GMT
        Subject: CN=A9D0514509E2F2835C7FCD864610FA3F04248972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:89:12:ce:ac:d3:5f:89:20:13:a5:0c:65:56:
                    4e:ed:f4:28:5b:81:bc:58:bc:28:ec:c3:a5:63:a9:
                    68:e6:17:b4:63:2b:d1:85:93:60:77:e6:e0:32:05:
                    10:05:b6:af:ff:4b:d3:58:d1:b2:b2:6e:06:9a:65:
                    ff:58:fd:27:c8:5f:dc:3f:70:02:47:62:d4:f5:70:
                    a9:af:8d:c1:5a:8b:5d:a8:96:41:7a:52:9e:f8:a0:
                    2b:e8:ef:7e:9a:15:37:f4:ee:6c:90:e3:5c:fb:3d:
                    71:5b:a8:41:0c:0c:16:ec:25:b1:59:f2:9e:c8:02:
                    3f:ae:ae:b9:51:5a:98:73:fd:94:0c:50:bf:3d:a8:
                    02:6d:95:12:38:3a:9d:9b:cc:08:ca:2a:95:1c:c2:
                    8e:ac:84:3f:53:76:52:89:43:dc:06:8e:25:6b:aa:
                    b1:44:cc:9a:63:51:0a:06:dd:97:e4:f3:09:57:52:
                    75:95:6a:1d:dd:e2:5a:98:23:6f:ba:9d:a7:52:85:
                    fb:49:06:8f:dd:ac:98:02:d3:bc:67:3e:7e:a3:24:
                    23:d6:4f:b2:0c:56:a1:4b:70:5e:24:9d:15:24:a5:
                    2a:18:3e:1f:7d:9a:25:2c:cd:01:6f:ba:4a:cf:ae:
                    7f:bc:01:42:e5:7a:95:b0:0e:9c:d3:4a:5f:5c:6e:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D0:51:45:09:E2:F2:83:5C:7F:CD:86:46:10:FA:3F:04:24:89:72
            X509v3 Authority Key Identifier:
                keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7f:4e:a7:15:68:55:6b:f2:5d:b7:37:6b:42:6a:8d:9e:2e:
         b6:af:4f:4d:9d:43:a2:ea:fe:7e:02:22:50:4c:d9:68:a2:78:
         67:cb:4f:c7:79:4b:b9:5a:b5:14:e5:32:d6:ed:95:94:93:4c:
         68:95:3d:c5:4e:47:2d:10:d3:3b:e6:c4:d2:c9:c8:bb:53:bc:
         82:fe:93:23:df:a4:b8:42:66:3c:03:15:cb:ec:27:12:6e:51:
         e9:2f:77:54:7d:9a:ad:2e:4a:ec:27:f7:26:82:b9:10:c6:2e:
         2a:e4:f3:68:87:7a:7d:84:5f:33:a1:6e:c9:41:5f:55:ee:e5:
         2f:73:aa:b7:d1:ff:a5:34:fe:af:47:f0:95:df:f5:3d:9c:3b:
         37:53:ec:d9:7a:00:d8:af:c5:30:63:cc:f9:dd:6b:13:07:80:
         73:47:36:9d:83:11:09:70:af:03:2a:5d:a5:b8:6a:aa:1f:27:
         57:9a:f1:e3:bd:48:7f:2e:5b:a9:a1:d8:15:5b:a3:04:b5:7d:
         b9:d2:b2:15:02:9d:73:75:b7:fb:18:76:0d:b1:45:11:45:3f:
         03:d5:8c:dd:e2:45:19:b6:db:fd:ed:b8:51:f5:1c:cd:89:cc:
         f9:19:9d:15:1d:59:a9:c2:4a:cc:48:23:27:bc:4b:64:25:19:
         e6:7a:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:47:15 2026 by rpki-client