Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File:                     FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier:          b7ZrqzKVd0Itv5Sa4WMGNC4+DLFojpYnr0MTzerl0P8=
Subject key identifier:   41:A6:15:AD:BE:35:F0:D7:19:A7:A5:AC:27:1C:4A:26:32:EF:80:3C
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       1002518FFF76E01CB195DE9DC97B178F6B0F1847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number:          A0
Signing time:             Sat 14 Jun 2025 12:42:53 +0000
Manifest this update:     Sat 14 Jun 2025 12:37:53 +0000
Manifest next update:     Sun 15 Jun 2025 14:12:53 +0000
Files and hashes:         1: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: yzlstLnidlbzwukvV9D/QvVE7rWc67Q28lja1LYs6xM=)
                          2: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: zj1ARbGG0KKWVGhyBIQnR9Ua0u7oCe2HCtyMecubnF8=)
                          3: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: /XIIDyQLovgvuWo+FMAvONj9QZYopmDAHKNtoUoPi4w=)
                          4: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: y+MccKPhc/2KhhvHGoqYvoNRkkUTzEwbJt4GOMeUfuU=)
                          5: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: 8dmyIVl1xfWSQlImAzdtHKnEErtwf9VZhG0c0l+lwWM=)
                          6: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: C4YEp8j4LdYsTYvi6G+irz5U3tTH6rayAYxhSvLGLbo=)
                          7: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: +zJlwocjllLnsQbU3Pz9rSlrsgFZqIsBvJ2vFa1jc64=)
                          8: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: GKO1xHzUJGinckXhhCthyQ7yu4eOcaWTxHAnYAzelTo=)
                          9: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: gBowB4M9spFJyhtGeGBV6pXmZemrPQZEhgmMEW2ghgQ=)
                          10: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: HZ1FcP6uKIG0ErisyoB210/El4Tl/fdKRO4f//GIOhY=)
                          11: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: 4kV2/I3YxBchjG3IOXi1hr0lRxiFuT7fxsWyAbTDWfo=)
                          12: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: wE97ifCwuCsHZoyv+UtvDLCrOhOpwPEVh3JX3wVqIpE=)
                          13: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: +nnxoDraZp1GnJqnPBkJVf2tvjIfmjIdjzZ1kJJ3DOg=)
                          14: 36322e3132322e3138382e302f32342d3234203d3e2035363530.roa (hash: 6OwCLICEQXAEg/tDtW6A/oDneiVaxu+1cpVQR9TCH00=)
                          15: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: rFtvfsVQHKCdQAqKZM/z0xrzFdBj+H8lvhfwWrdW4dw=)
                          16: 36322e3132322e3138382e302f32342d3234203d3e203133333437.roa (hash: r1huf6kbJmsHFssAQxCRNN3d80N61L6+aVoF7yxiSko=)
                          17: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: O/uOtyjfl4MlQDYp72kf544XXXljSkWM6HF13huBkEM=)
                          18: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: OHKDfo5l5/jEy46ijNWjc2QXFRSDD6WocUfsgvZEdnk=)
                          19: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: GO8jazaT07yHqE0/NadQwAelqQjPVTo+2xINwt+os7M=)
                          20: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: x+RYo6wjWwk6+BVxPpNh5bRjqAt+Gok7rpn9qho5bkg=)
                          21: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: DmLW24LZ1vnZeM7Yk9oInpGtra92p8B8+f/VK3l3ndo=)
                          22: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: 0f4WAabP3xZvH36q2OTX1i3if9moXyHYYV6+CfUNtlk=)
                          23: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: H3nzZLDuD+hMyo0VXetwr0aEFusgjbaL4Ptg0xbrpOA=)
                          24: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: fgX7JOs0CLQUJu45+RMzl8sB0KWTVxumN6S/L327z0k=)
                          25: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: 4U+lv5fdVNtShdj/snUUKz+UGwwRicG7k/GaBlfpAoA=)
                          26: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: NxII85muRlkPy6Ue9rBPty6Qe2NOTHZ5aybygZpMWdo=)
                          27: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: I6eMklUSFiAulRI2b++yFtpDHfGf+yyRunITvHHP3rY=)
                          28: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: 71oMnaD+PuWZV7BvhtzPPQeNlDxQyG0wDFfLkuYGFh0=)
                          29: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: uyzQxNfCQuPRUilhbFb9igirZqWyG0ghryABccswsyE=)
                          30: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: uDISVLlw/nJy4wy96JtWj7K3NXKh8ecGghWlBzzixw0=)
                          31: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: /Kq4VkHWPBjYK33PPSBMXdIWaIDemEZf9s/0PNOi978=)
                          32: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: yxk4TFt/ObXReJM9hZWCrSiaxkBBnmZ/PajmEhPrCIU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:02:51:8f:ff:76:e0:1c:b1:95:de:9d:c9:7b:17:8f:6b:0f:18:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Jun 14 12:37:53 2025 GMT
            Not After : Jun 15 14:12:53 2025 GMT
        Subject: CN=41A615ADBE35F0D719A7A5AC271C4A2632EF803C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b2:3b:f5:f4:bf:72:fd:5d:de:89:a3:bb:ec:
                    fe:be:65:4f:b3:92:88:c0:af:2c:17:0c:ff:c9:44:
                    51:78:b3:9e:ff:b4:1b:73:5d:4a:d6:d2:f4:24:8b:
                    c1:8f:f2:5a:17:7d:76:7a:e7:22:ec:9a:88:f2:82:
                    95:4f:61:8e:33:2a:21:10:ef:d6:2c:0d:ae:67:62:
                    7d:04:54:dd:9e:b6:cf:36:23:2f:37:8e:e2:9a:3f:
                    d2:e5:84:12:79:7d:d0:88:5a:77:90:93:a7:89:52:
                    24:da:4c:88:8c:56:0d:96:1d:40:90:2e:38:b9:82:
                    b7:d2:94:01:e6:63:b4:10:11:18:cc:98:bc:46:ec:
                    7a:2f:12:bf:9c:a6:b6:2c:9d:58:99:da:ae:50:60:
                    b7:52:47:cd:24:96:ff:02:5e:67:3c:90:44:d7:64:
                    17:88:43:bf:16:ac:8d:cf:37:65:7f:4f:5d:b1:7e:
                    2b:bb:49:06:d3:85:80:c5:79:6a:6f:0d:95:6d:a0:
                    90:c0:da:af:50:69:88:9a:bf:bc:9a:f7:dd:c0:80:
                    45:15:61:56:f8:4a:7d:81:3d:f4:cb:91:1f:91:60:
                    7e:15:dd:1f:2b:c4:e1:15:15:cf:d1:6b:99:e7:ba:
                    7b:13:5c:d5:fc:c1:db:6d:c1:9c:3a:30:51:ba:a6:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A6:15:AD:BE:35:F0:D7:19:A7:A5:AC:27:1C:4A:26:32:EF:80:3C
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f2:cf:10:70:f6:ae:f6:28:48:2a:cd:ff:3d:e0:f7:f0:af:
         60:29:ea:6b:bb:5a:fe:29:41:83:70:69:81:27:b1:bf:25:c1:
         62:7b:28:c4:26:06:15:72:06:56:93:e1:99:8c:57:04:5e:12:
         7a:8c:9f:e3:6c:00:ce:1f:df:e3:1c:d6:d7:b9:32:d2:58:47:
         54:88:70:db:c2:09:a3:d4:2f:ff:c8:8c:23:08:45:83:77:9b:
         c5:97:93:90:d2:15:1e:13:50:66:c4:db:d3:18:81:2b:5c:41:
         0c:89:66:4b:d9:c2:15:50:60:c6:1f:2c:bd:4f:4c:71:b4:2a:
         d6:8f:1b:95:3a:15:8a:93:9c:48:2a:66:41:33:d9:42:8c:e8:
         fc:10:d1:d7:9f:26:0c:a8:0f:4f:98:db:d3:80:01:8b:c6:a6:
         bc:fd:f5:31:f9:dc:c8:99:59:02:88:a7:f7:22:63:01:38:7c:
         ac:05:49:c5:ad:b0:cc:39:a5:97:6d:63:ec:1b:59:96:dc:05:
         ec:1e:f9:66:7f:18:d8:fc:af:5a:1e:77:d4:1f:5a:99:1a:d7:
         1f:9a:19:5e:13:da:61:af:6f:8f:35:da:0b:37:8d:c6:a2:a4:
         38:c5:05:6e:b9:09:d0:24:f5:2f:de:ae:66:31:4b:ec:21:b2:
         6e:42:24:d0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUEAJRj/924Byxld6dyXsXj2sPGEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmY0MjZmMTliYTY3YmM4OWRlNWFlNmRmNDg3YzFjOGMx
ZTc1MmUyNzAeFw0yNTA2MTQxMjM3NTNaFw0yNTA2MTUxNDEyNTNaMDMxMTAvBgNV
BAMTKDQxQTYxNUFEQkUzNUYwRDcxOUE3QTVBQzI3MUM0QTI2MzJFRjgwM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOsjv19L9y/V3eiaO77P6+ZU+z
kojArywXDP/JRFF4s57/tBtzXUrW0vQki8GP8loXfXZ65yLsmojygpVPYY4zKiEQ
79YsDa5nYn0EVN2ets82Iy83juKaP9LlhBJ5fdCIWneQk6eJUiTaTIiMVg2WHUCQ
Lji5grfSlAHmY7QQERjMmLxG7HovEr+cprYsnViZ2q5QYLdSR80klv8CXmc8kETX
ZBeIQ78WrI3PN2V/T12xfiu7SQbThYDFeWpvDZVtoJDA2q9QaYiav7ya993AgEUV
YVb4Sn2BPfTLkR+RYH4V3R8rxOEVFc/Ra5nnunsTXNX8wdttwZw6MFG6pmE5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUQaYVrb418NcZp6WsJxxKJjLvgDwwHwYDVR0j
BBgwFoAU/0JvGbpnvIneWubfSHwcjB51LicwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDY4YjA4MWUtYmE5My00NjVmLTliNmUtN2ZiZDYzYmRm
ZjYzLzAvRkY0MjZGMTlCQTY3QkM4OURFNUFFNkRGNDg3QzFDOEMxRTc1MkUyNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL18wSnZHYnBudkluZVd1YmZTSHdjakI1
MUxpYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80NjhiMDgxZS1i
YTkzLTQ2NWYtOWI2ZS03ZmJkNjNiZGZmNjMvMC9GRjQyNkYxOUJBNjdCQzg5REU1
QUU2REY0ODdDMUM4QzFFNzUyRTI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvLPEHD2rvYoSCrN/z3g
9/CvYCnqa7ta/ilBg3BpgSexvyXBYnsoxCYGFXIGVpPhmYxXBF4Seoyf42wAzh/f
4xzW17ky0lhHVIhw28IJo9Qv/8iMIwhFg3ebxZeTkNIVHhNQZsTb0xiBK1xBDIlm
S9nCFVBgxh8svU9McbQq1o8blToVipOcSCpmQTPZQozo/BDR158mDKgPT5jb04AB
i8amvP31MfncyJlZAoin9yJjATh8rAVJxa2wzDmll21j7BtZltwF7B75Zn8Y2Pyv
Wh531B9amRrXH5oZXhPaYa9vjzXaCzeNxqKkOMUFbrkJ0CT1L96uZjFL7CGybkIk
0A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:54:10 2025 by rpki-client