Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File:                     FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier:          +iSXh4iODp1+TNLd+tjjYYvR3GXEKgEWDE2b7WnKuw0=
Subject key identifier:   13:D6:E5:9E:44:D7:16:47:63:D5:CB:35:CE:A0:9A:28:4E:2F:30:E6
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       29BD02195142711B9B43179E4AF2E3F86ABFFF6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number:          030C
Signing time:             Mon 21 Sep 2026 14:50:46 +0000
Manifest this update:     Mon 21 Sep 2026 14:45:46 +0000
Manifest next update:     Tue 22 Sep 2026 14:59:46 +0000
Files and hashes:         1: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: XrAwkqLyjKkliRAGb7YhNsmN3gefCa9P2PMxjWEJ07E=)
                          2: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: RwKBGj41SrCoSwW63bP9iypbQ5/Pk2wZivtbfEbN3Qk=)
                          3: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: agQh3NiDcMgRwGnb+sJDjRyp+gf5HeOIS0xwQ015vbg=)
                          4: 36322e3132322e3138382e302f32342d3234203d3e20343032393337.roa (hash: HkdbLUX2uZYZy/KNrbxq5iTdLxcVgG97NieRy3Oc0hk=)
                          5: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: xYbQlUPKxSQoHiHG8XgS+jBzfXDA0HmlH23UWrEEgRM=)
                          6: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: NgKAiWi/9kIzuK34CJYJ5NgD13mXufjklhJW/DfhGXg=)
                          7: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: ay+VpJAxhcK2h7cjcp2jQIWeYB+U5olryyBn7tyJvVg=)
                          8: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: jzsWDx19Pycbrb5P3nX+LR9BkYXT+JSku+VMV2m2RIo=)
                          9: 36322e3132322e3138382e302f32342d3234203d3e203330303538.roa (hash: Sn6BjESg306oMG2v09CGJd3q5vLKGdFDpo5P27sfsZQ=)
                          10: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: LdHKLOhJhzl41We9BNwjvOcsg2A+zhlEI37K8ifS5/I=)
                          11: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: buKU7JdPUK/SlkC4NNnK7hP12R2pJJz2VMgJgPeJ+UM=)
                          12: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: er+oPQhykc6ayg3rrrwvJra3JupeKvjV54bYH7L2tTg=)
                          13: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: WnRHsnv1v5lgeZmFGSte0JZSgCKL85MQLwyrUB8BqVw=)
                          14: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: NG6zwhRpuGaOaqAr2bnhB0WNjn5u7NK5ztm1d2XSjOs=)
                          15: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: Cz/6kKDUzshq0L4EXVzYnwGNuJcQnGuP6YcPqQJcMJ8=)
                          16: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: s7bJrOak+k6vmxZw3NK9sCosxffSZUuLUPKBmOsK+p8=)
                          17: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: dT0B0NOL6yGzF1BXtX0dsOyGoo8+tdfsmPM25BX1nFo=)
                          18: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: v+xhc6fxafxAfS7MdKJ1T7i4/dfRVtX123aAkTRxKjs=)
                          19: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: Zjl5KzSbAzkvfaUcwe5cs8ZLZxM+i+5YDJPhsvemvlM=)
                          20: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: SgkiaXA0IAiBax3MkrFfX1tZ3ARWy+WsqwuwSIqr97Y=)
                          21: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: mNEln2sQigg3u81rooykzeehSg2L9J2uWDrMwZzSFwU=)
                          22: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: SBs8h2+t6QDU1J2FG/blrmN+qmqR4M4fBNi1SbYEnNU=)
                          23: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: IEXWaXuV3w8kiyUSn8Xb9ocu7wGkZqq6FHmShe2ilR0=)
                          24: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: lzKGUq9e6WEOxjU9fEiZs+XvjPLc/qut/jPBXboiWgc=)
                          25: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: 2+e1pcV/1HjSIXMmpHYPl94RJ1VHndDhp/PzS1D2Aqo=)
                          26: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: sujdFNXoHRtVeqZ5b1HSqILk/kU5NautAQO2Xt1EnhA=)
                          27: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: qfYLsiXeU6PfA9fVBBtYwxz+ovi/EvnjjY5itv6zZZY=)
                          28: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: h+2AnEvh4aG7gOBRETVZO5ExBSI+bmaVuuXvVVF7vHs=)
                          29: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: 0UzTLd9sP5E9hVagexG3NWMHzI1vl2WYjkZP4E+bLVU=)
                          30: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: I1y2rQjnLv18d7wE8+32fRo+wpfEuaxk8+JYmCwkLpU=)
                          31: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: GcrirzUGj+baQQMYil8xBr+JSDUMr1IrAf8dPn6IBjc=)
                          32: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: XjKzqWNr7Btvkj5JImVNsEp2dFZjVAsUHydrIsbVUoU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bd:02:19:51:42:71:1b:9b:43:17:9e:4a:f2:e3:f8:6a:bf:ff:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Sep 21 14:45:46 2026 GMT
            Not After : Sep 22 14:59:46 2026 GMT
        Subject: CN=13D6E59E44D7164763D5CB35CEA09A284E2F30E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:02:bd:74:27:da:ad:44:4d:2b:4f:ca:9a:36:
                    72:e4:6c:71:60:b9:6a:bf:97:b2:92:09:e2:7b:9a:
                    cb:1c:24:97:c3:e6:c5:8a:ad:8e:d8:4c:9d:a7:4c:
                    7c:8e:38:ac:78:68:5a:9f:d7:94:50:07:53:fb:86:
                    15:55:13:4b:e6:cf:55:1e:22:10:a1:bc:91:32:31:
                    1e:04:e3:c0:a5:3e:18:cd:22:8b:3b:30:e7:3b:76:
                    ad:33:11:bc:f5:54:d3:3b:99:fe:f7:83:2f:51:5a:
                    f0:23:7a:bd:7d:ba:00:8d:07:0f:e5:1e:5a:64:d0:
                    15:24:7d:fb:fa:e1:d5:68:cc:b7:e2:49:fb:93:19:
                    8e:f2:bf:2f:04:e0:65:0d:e2:87:bd:ad:dd:d1:80:
                    51:77:de:da:b6:91:da:81:dc:2d:bf:27:c1:9d:42:
                    9f:d4:b0:7f:87:a6:5c:98:63:b2:3e:00:6d:cc:18:
                    73:8f:4e:96:59:32:b6:eb:06:82:30:d8:8a:39:81:
                    03:63:24:1f:e7:69:6a:ac:43:7d:3f:1d:ba:07:a6:
                    05:6b:87:f8:0f:3e:82:2d:8e:31:94:23:b6:78:f5:
                    45:f4:1f:06:67:98:95:d9:3f:1a:3a:3b:06:19:bc:
                    c8:c0:5c:93:55:42:5c:38:d7:ae:0b:9a:9b:19:8c:
                    40:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D6:E5:9E:44:D7:16:47:63:D5:CB:35:CE:A0:9A:28:4E:2F:30:E6
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8b:98:a9:d8:f7:29:87:fc:02:2e:ce:4a:b7:19:09:59:2b:
         26:10:5a:bd:67:0e:22:4f:39:68:06:db:36:68:e6:e9:8f:d7:
         89:2b:2a:f8:06:f1:16:51:01:20:b5:b6:55:00:23:1b:7d:f5:
         7e:31:aa:b6:cb:39:4d:17:04:7d:71:54:f3:7f:d4:63:fd:37:
         38:75:e8:63:cc:1f:ef:b6:b3:61:5c:80:1e:49:6a:e4:b8:ac:
         53:6c:37:91:2c:1e:92:0f:6f:4f:67:7d:66:d9:20:19:71:ba:
         cc:ab:8e:76:34:73:40:93:54:3c:ae:c4:5c:b3:b0:7a:35:fe:
         48:60:f6:44:d8:1a:42:b2:fb:c2:15:36:d3:0a:ea:ec:8f:80:
         34:ea:8f:a7:9d:18:7d:75:4d:0d:e1:6c:dd:55:7b:f6:68:f6:
         b1:84:44:d9:43:49:7d:f7:db:02:35:35:9d:59:ba:1e:e9:f7:
         bd:0f:20:a0:64:eb:7d:c0:09:97:5b:ed:62:ca:e4:02:ed:ff:
         0b:49:1f:16:4b:05:a8:06:27:74:b5:bb:f3:e4:4b:10:da:30:
         c1:ee:4f:24:24:80:1d:a6:6f:48:33:14:18:0c:db:f4:5d:93:
         7f:9a:12:58:45:7c:cf:95:28:41:75:e0:d0:a2:69:57:25:be:
         c5:0e:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:42:50 2026 by rpki-client