Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File:                     FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier:          Cka6k+wPoIq9s+yYVUNhH33KDwMHmoHOjSTThdGtI1E=
Subject key identifier:   97:87:36:4E:29:77:6A:A6:14:68:3D:82:FE:1F:12:19:8C:3D:8E:F7
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       417C69737CA7A0C9BB54B90D0DFD1397479AA59D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number:          0287
Signing time:             Sat 13 Jun 2026 01:42:56 +0000
Manifest this update:     Sat 13 Jun 2026 01:37:56 +0000
Manifest next update:     Sun 14 Jun 2026 02:49:56 +0000
Files and hashes:         1: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: 2+e1pcV/1HjSIXMmpHYPl94RJ1VHndDhp/PzS1D2Aqo=)
                          2: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: 0UzTLd9sP5E9hVagexG3NWMHzI1vl2WYjkZP4E+bLVU=)
                          3: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: GcrirzUGj+baQQMYil8xBr+JSDUMr1IrAf8dPn6IBjc=)
                          4: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: buKU7JdPUK/SlkC4NNnK7hP12R2pJJz2VMgJgPeJ+UM=)
                          5: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: NgKAiWi/9kIzuK34CJYJ5NgD13mXufjklhJW/DfhGXg=)
                          6: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: Zjl5KzSbAzkvfaUcwe5cs8ZLZxM+i+5YDJPhsvemvlM=)
                          7: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: CpvbjfeRbXhRscVZ/ielFKngXJ9c+VFc+Z0l+iy/DYw=)
                          8: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: jzsWDx19Pycbrb5P3nX+LR9BkYXT+JSku+VMV2m2RIo=)
                          9: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: h+2AnEvh4aG7gOBRETVZO5ExBSI+bmaVuuXvVVF7vHs=)
                          10: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: SgkiaXA0IAiBax3MkrFfX1tZ3ARWy+WsqwuwSIqr97Y=)
                          11: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: qfYLsiXeU6PfA9fVBBtYwxz+ovi/EvnjjY5itv6zZZY=)
                          12: 36322e3132322e3138382e302f32342d3234203d3e203330303538.roa (hash: Sn6BjESg306oMG2v09CGJd3q5vLKGdFDpo5P27sfsZQ=)
                          13: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: xYbQlUPKxSQoHiHG8XgS+jBzfXDA0HmlH23UWrEEgRM=)
                          14: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: SBs8h2+t6QDU1J2FG/blrmN+qmqR4M4fBNi1SbYEnNU=)
                          15: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: ay+VpJAxhcK2h7cjcp2jQIWeYB+U5olryyBn7tyJvVg=)
                          16: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: lzKGUq9e6WEOxjU9fEiZs+XvjPLc/qut/jPBXboiWgc=)
                          17: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: WnRHsnv1v5lgeZmFGSte0JZSgCKL85MQLwyrUB8BqVw=)
                          18: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: sujdFNXoHRtVeqZ5b1HSqILk/kU5NautAQO2Xt1EnhA=)
                          19: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: LdHKLOhJhzl41We9BNwjvOcsg2A+zhlEI37K8ifS5/I=)
                          20: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: XrAwkqLyjKkliRAGb7YhNsmN3gefCa9P2PMxjWEJ07E=)
                          21: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: Cz/6kKDUzshq0L4EXVzYnwGNuJcQnGuP6YcPqQJcMJ8=)
                          22: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: NG6zwhRpuGaOaqAr2bnhB0WNjn5u7NK5ztm1d2XSjOs=)
                          23: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: dT0B0NOL6yGzF1BXtX0dsOyGoo8+tdfsmPM25BX1nFo=)
                          24: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: er+oPQhykc6ayg3rrrwvJra3JupeKvjV54bYH7L2tTg=)
                          25: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: IEXWaXuV3w8kiyUSn8Xb9ocu7wGkZqq6FHmShe2ilR0=)
                          26: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: RwKBGj41SrCoSwW63bP9iypbQ5/Pk2wZivtbfEbN3Qk=)
                          27: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: XjKzqWNr7Btvkj5JImVNsEp2dFZjVAsUHydrIsbVUoU=)
                          28: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: I1y2rQjnLv18d7wE8+32fRo+wpfEuaxk8+JYmCwkLpU=)
                          29: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: v+xhc6fxafxAfS7MdKJ1T7i4/dfRVtX123aAkTRxKjs=)
                          30: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: mNEln2sQigg3u81rooykzeehSg2L9J2uWDrMwZzSFwU=)
                          31: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: s7bJrOak+k6vmxZw3NK9sCosxffSZUuLUPKBmOsK+p8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7c:69:73:7c:a7:a0:c9:bb:54:b9:0d:0d:fd:13:97:47:9a:a5:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Jun 13 01:37:56 2026 GMT
            Not After : Jun 14 02:49:56 2026 GMT
        Subject: CN=9787364E29776AA614683D82FE1F12198C3D8EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:fd:f8:1b:24:de:aa:0f:36:f4:0f:92:f6:
                    3a:17:3e:e2:6d:70:50:6a:3e:ec:44:ec:d5:47:59:
                    2c:f1:43:b7:49:38:7a:87:86:c0:3b:7a:43:55:0d:
                    6a:b1:ff:6e:86:ed:32:ef:f5:10:58:a5:59:e3:62:
                    2d:19:f0:f1:d4:a4:91:ce:9b:d3:35:8e:6d:70:33:
                    84:11:29:56:ab:18:e8:54:a5:08:10:cf:a5:b6:d2:
                    09:1b:25:4b:be:8d:5e:45:26:cb:a2:f2:5c:b3:ca:
                    dc:59:24:5a:a4:2b:ea:27:4d:58:be:cc:37:b3:64:
                    ee:33:ef:1b:b7:18:25:a8:ac:92:49:26:a9:45:be:
                    53:bd:4e:cf:de:fe:1a:e9:cf:28:3c:c3:0d:e6:1a:
                    bc:39:87:a5:a5:d0:07:9f:da:0e:22:fa:19:d8:4c:
                    4b:d2:aa:a7:a6:59:b1:d3:69:8c:d3:8b:ee:ac:95:
                    cb:60:25:1a:85:53:13:3f:ed:82:c7:2d:a3:84:e6:
                    ea:a6:39:72:ba:2f:db:75:0c:5e:84:a0:4a:ac:3b:
                    d3:f2:40:87:e2:37:39:bf:d4:52:97:b8:14:d3:50:
                    53:cd:a5:94:94:71:49:9f:d4:f8:88:b0:f5:7d:13:
                    32:d3:10:c1:d0:e6:9f:f8:c1:c3:15:1b:fe:4d:01:
                    bb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:87:36:4E:29:77:6A:A6:14:68:3D:82:FE:1F:12:19:8C:3D:8E:F7
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:7c:1f:74:5e:0e:b6:39:32:c8:1b:c0:c3:7d:84:14:62:fe:
         8a:f9:93:4d:a7:13:01:47:b7:02:cf:2d:03:23:fd:7d:78:2d:
         ea:b7:c7:9a:b3:5f:35:0d:ff:4c:44:33:86:bc:23:a1:12:02:
         fa:ba:47:c2:f5:40:f9:3f:68:c7:d0:32:77:96:56:b5:4c:ac:
         02:bf:44:61:2e:26:0f:c4:40:45:e7:eb:98:db:0d:80:fa:dd:
         0e:ae:ad:ee:ed:26:80:fd:b7:b2:a6:92:0c:6d:7d:cc:13:b8:
         1b:dc:14:06:4e:87:43:e4:a6:c1:9c:3e:56:b5:8e:c4:5c:95:
         f2:dc:7a:1f:c0:2b:ac:be:5c:21:1b:d3:bb:75:f0:24:1d:58:
         21:68:02:f2:f0:02:06:c3:c3:48:c7:9e:a8:d8:97:a3:28:a4:
         19:d9:b4:33:99:e5:8b:0b:9c:72:bf:04:ea:0d:a9:e4:3d:6f:
         c0:0d:08:dc:d1:c6:ec:37:26:b6:56:e4:af:d9:d7:e0:bf:15:
         96:68:98:c6:66:b9:1d:cb:12:bb:97:75:b1:51:cd:65:e4:68:
         66:ec:68:ad:af:ea:bc:74:3d:26:b8:45:da:3a:c1:7e:82:3f:
         40:2c:37:14:5a:7f:17:64:90:b5:80:a3:3c:76:6b:8f:d5:46:
         0f:9b:70:b3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQXxpc3ynoMm7VLkNDf0Tl0eapZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmY0MjZmMTliYTY3YmM4OWRlNWFlNmRmNDg3YzFjOGMx
ZTc1MmUyNzAeFw0yNjA2MTMwMTM3NTZaFw0yNjA2MTQwMjQ5NTZaMDMxMTAvBgNV
BAMTKDk3ODczNjRFMjk3NzZBQTYxNDY4M0Q4MkZFMUYxMjE5OEMzRDhFRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Xv34GyTeqg829A+S9joXPuJt
cFBqPuxE7NVHWSzxQ7dJOHqHhsA7ekNVDWqx/26G7TLv9RBYpVnjYi0Z8PHUpJHO
m9M1jm1wM4QRKVarGOhUpQgQz6W20gkbJUu+jV5FJsui8lyzytxZJFqkK+onTVi+
zDezZO4z7xu3GCWorJJJJqlFvlO9Ts/e/hrpzyg8ww3mGrw5h6Wl0Aef2g4i+hnY
TEvSqqemWbHTaYzTi+6slctgJRqFUxM/7YLHLaOE5uqmOXK6L9t1DF6EoEqsO9Py
QIfiNzm/1FKXuBTTUFPNpZSUcUmf1PiIsPV9EzLTEMHQ5p/4wcMVG/5NAbszAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUl4c2Til3aqYUaD2C/h8SGYw9jvcwHwYDVR0j
BBgwFoAU/0JvGbpnvIneWubfSHwcjB51LicwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDY4YjA4MWUtYmE5My00NjVmLTliNmUtN2ZiZDYzYmRm
ZjYzLzAvRkY0MjZGMTlCQTY3QkM4OURFNUFFNkRGNDg3QzFDOEMxRTc1MkUyNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL18wSnZHYnBudkluZVd1YmZTSHdjakI1
MUxpYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80NjhiMDgxZS1i
YTkzLTQ2NWYtOWI2ZS03ZmJkNjNiZGZmNjMvMC9GRjQyNkYxOUJBNjdCQzg5REU1
QUU2REY0ODdDMUM4QzFFNzUyRTI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnwfdF4OtjkyyBvAw32E
FGL+ivmTTacTAUe3As8tAyP9fXgt6rfHmrNfNQ3/TEQzhrwjoRIC+rpHwvVA+T9o
x9Ayd5ZWtUysAr9EYS4mD8RARefrmNsNgPrdDq6t7u0mgP23sqaSDG19zBO4G9wU
Bk6HQ+SmwZw+VrWOxFyV8tx6H8ArrL5cIRvTu3XwJB1YIWgC8vACBsPDSMeeqNiX
oyikGdm0M5nliwuccr8E6g2p5D1vwA0I3NHG7Dcmtlbkr9nX4L8VlmiYxma5HcsS
u5d1sVHNZeRoZuxora/qvHQ9JrhF2jrBfoI/QCw3FFp/F2SQtYCjPHZrj9VGD5tw
sw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:38:44 2026 by rpki-client