Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          BjMBnuNsWV1PSDIo9RB8quhXYZxzSF51EX9wipNbRqU=
Subject key identifier:   0A:61:74:8F:1F:FD:F6:CE:A5:3C:FA:42:04:C7:6F:A2:E8:F3:B9:10
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       0F87B98245134D7DFB82ED5E51402AB787B7928A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          0248
Signing time:             Fri 12 Jun 2026 22:57:22 +0000
Manifest this update:     Fri 12 Jun 2026 22:52:22 +0000
Manifest next update:     Sun 14 Jun 2026 02:31:22 +0000
Files and hashes:         1: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=)
                          2: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: 0Nw79EMxO4DuYLh23x86SyP3DqFJicDqK5+0xzSE8zA=)
                          3: 39352e3231342e3138332e302f32342d3234203d3e20323130353534.roa (hash: OJvSmtbOOWmX2vvNUuPyZlT7+76nk7dIwwJ4pZHj/08=)
                          4: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=)
                          5: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: 6VJ0BRDW5vzl9vSQFhJrbqoPj47Dkmz6QrWwxneNt7M=)
                          6: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (hash: AjgG1gM1OxMVlGFutJS1mpX2Qd4qqtcRZt6UVKIG+j4=)
                          7: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: 4Vq7AgGMlCeUx5C2t/5EFPIAMaRQl2wYVwbiaTfXAVA=)
                          8: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: S4ddw73hDoSEhNKtyBEjIhztHOdB0qUYUD8sWKdWm3o=)
                          9: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 0kzSFbUQv3IPSe44pUr9DkaCNbLJS/E0eVH3iom57gk=)
                          10: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: 9sHNJMiehNbP1O+jWpsdoBoSI67XbsxRM7NeVaaB37s=)
                          11: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: jnmt3whqRbI6D2vf6sBU5xOTdVKUeUwqqqV6QhoXPsE=)
                          12: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=)
                          13: 39352e3231342e3137352e302f32342d3234203d3e203530303439.roa (hash: WRu4t783fDaOJwwC8/mNMq2tKFQEdrL2H8Nv26yw9Sk=)
                          14: 39352e3231342e3137332e302f32342d3234203d3e203231383430.roa (hash: ufGlQ+DrhT42dGKvfqF9MmDLago1FeOS1zGb2GQoeMQ=)
                          15: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: nRRoZUWievWeNIXlZwxB1AkzSXo51mCvnM+Ty+v6bqw=)
                          16: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: yBIbgSutRM6w0CO+SuN+puGD+EsV9mNPvZ8qHnyid+k=)
                          17: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: IltzG0K+W6/4OY3N4Cei605pBnUrFv4cf5U0zN9qrBQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:87:b9:82:45:13:4d:7d:fb:82:ed:5e:51:40:2a:b7:87:b7:92:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Jun 12 22:52:22 2026 GMT
            Not After : Jun 14 02:31:22 2026 GMT
        Subject: CN=0A61748F1FFDF6CEA53CFA4204C76FA2E8F3B910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:6e:54:82:5b:a9:21:6d:4e:c2:f9:e9:9b:
                    2c:bf:7a:e9:03:ed:23:fe:47:08:a1:0a:d9:37:06:
                    ca:22:0b:52:20:db:95:fb:6d:88:29:dc:c3:72:af:
                    4c:5d:8e:7e:7e:3c:f9:f4:de:9b:7d:c5:bf:3a:f2:
                    bd:b4:3b:2d:25:9e:a2:a0:c0:73:ca:89:49:24:a2:
                    51:f5:07:74:8a:8f:74:41:40:64:a9:59:9b:3a:57:
                    6c:c7:e6:15:cf:1d:61:f6:2f:d6:20:08:ab:21:34:
                    95:90:b6:2d:27:19:83:7b:8b:1e:65:42:e4:5e:7e:
                    6a:63:15:72:5c:82:a2:88:54:96:e9:ed:31:51:aa:
                    71:bb:28:ed:2b:56:29:c0:63:73:76:6e:47:4a:74:
                    b6:d2:46:56:13:37:cf:fc:32:18:8b:18:9b:62:65:
                    71:43:bd:b0:b4:9d:d4:3f:a5:f1:9a:0e:40:60:4a:
                    cb:21:84:9c:78:47:cf:53:ef:13:ef:6f:7c:5e:2e:
                    55:4f:23:69:3d:b5:81:9b:20:22:1b:4b:53:45:cc:
                    61:92:ea:db:d4:76:ef:b8:91:e0:15:ad:30:56:41:
                    a9:ea:c3:36:ac:97:8c:ae:d9:98:d4:32:e8:5b:fe:
                    52:16:98:d1:57:7b:e6:bb:c1:ed:aa:23:f1:b5:70:
                    de:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:61:74:8F:1F:FD:F6:CE:A5:3C:FA:42:04:C7:6F:A2:E8:F3:B9:10
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a9:c0:d1:f5:18:a9:60:51:16:8b:59:f7:04:f5:71:69:70:
         fe:cb:9d:66:7d:cd:9e:28:86:fd:8d:f3:f5:9f:8e:d8:48:a9:
         30:11:86:ea:bd:e8:b8:a1:79:86:48:6d:9c:c9:e2:69:67:cd:
         d3:f5:59:01:06:61:a7:4a:f9:8a:93:39:d1:ac:39:a8:01:4d:
         56:a1:81:df:83:c4:9e:6a:d4:27:cd:a6:74:46:90:33:63:c1:
         93:1c:fa:08:89:02:15:06:13:46:c5:e9:fe:77:73:3a:a3:eb:
         42:c8:88:5d:89:9a:bf:1b:95:96:f2:ec:ff:9c:2a:99:43:e6:
         26:e4:93:28:5f:b7:fd:87:03:fd:ea:c0:b4:9c:4d:54:6f:61:
         f2:5d:7e:eb:a7:02:0f:33:a9:33:7e:59:e6:52:3b:00:ae:0d:
         0e:c7:a5:6f:5a:46:62:02:dc:3d:91:de:ff:ad:a8:e5:b8:39:
         01:a3:e3:59:32:63:78:0a:83:c9:8a:81:88:18:c2:75:65:75:
         c3:47:eb:50:4b:c2:96:69:0f:13:5a:25:35:5f:7d:27:e8:76:
         4e:fc:9f:de:67:87:6a:2e:65:4f:e2:8c:2a:72:d6:01:84:15:
         c0:17:4c:c8:37:59:78:5d:5e:69:ae:cc:fa:e7:53:6f:e7:96:
         1d:45:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:33:58 2026 by rpki-client