Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          A24E+Wfrug2dC6trwgojfmL5FAiHbGryVY5vpQB7TLA=
Subject key identifier:   AB:3C:1C:64:CD:27:A4:C4:8D:02:D3:8C:3E:53:6B:F8:E6:F0:71:19
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       7F46D80EBAC3E1B473DF6D1CE843CF40878679A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          0286
Signing time:             Tue 28 Jul 2026 14:23:56 +0000
Manifest this update:     Tue 28 Jul 2026 14:18:56 +0000
Manifest next update:     Wed 29 Jul 2026 16:39:56 +0000
Files and hashes:         1: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: pap59ktUA86YtgT6511v/VNfK45kjH0QXBPDQ6JB9oE=)
                          2: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: S4ddw73hDoSEhNKtyBEjIhztHOdB0qUYUD8sWKdWm3o=)
                          3: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=)
                          4: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: IltzG0K+W6/4OY3N4Cei605pBnUrFv4cf5U0zN9qrBQ=)
                          5: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: nRRoZUWievWeNIXlZwxB1AkzSXo51mCvnM+Ty+v6bqw=)
                          6: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: xr6IWJ6YFJVxyVrA9B3Mrz/89jTE/R2mfd3x1CsAlM0=)
                          7: 39352e3231342e3137332e302f32342d3234203d3e203231383430.roa (hash: ufGlQ+DrhT42dGKvfqF9MmDLago1FeOS1zGb2GQoeMQ=)
                          8: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: 0Nw79EMxO4DuYLh23x86SyP3DqFJicDqK5+0xzSE8zA=)
                          9: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: yBIbgSutRM6w0CO+SuN+puGD+EsV9mNPvZ8qHnyid+k=)
                          10: 39352e3231342e3137352e302f32342d3234203d3e20313937313733.roa (hash: lo0JSN5aKazPTiqbMrJgwOp03+OAip9xtK0I/OTfi/M=)
                          11: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: jnmt3whqRbI6D2vf6sBU5xOTdVKUeUwqqqV6QhoXPsE=)
                          12: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: 9sHNJMiehNbP1O+jWpsdoBoSI67XbsxRM7NeVaaB37s=)
                          13: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (hash: AjgG1gM1OxMVlGFutJS1mpX2Qd4qqtcRZt6UVKIG+j4=)
                          14: 39352e3231342e3137352e302f32342d3234203d3e203530303439.roa (hash: WRu4t783fDaOJwwC8/mNMq2tKFQEdrL2H8Nv26yw9Sk=)
                          15: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=)
                          16: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 0kzSFbUQv3IPSe44pUr9DkaCNbLJS/E0eVH3iom57gk=)
                          17: 39352e3231342e3138332e302f32342d3234203d3e20383334.roa (hash: HQDEpyHc5r/FawZZCmNg/hl906n3C/tQL2ZPlj8o68A=)
                          18: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: 6VJ0BRDW5vzl9vSQFhJrbqoPj47Dkmz6QrWwxneNt7M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:46:d8:0e:ba:c3:e1:b4:73:df:6d:1c:e8:43:cf:40:87:86:79:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Jul 28 14:18:56 2026 GMT
            Not After : Jul 29 16:39:56 2026 GMT
        Subject: CN=AB3C1C64CD27A4C48D02D38C3E536BF8E6F07119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3c:8a:8d:60:23:87:64:5d:14:72:dd:ee:7e:
                    2e:d3:b1:54:fb:50:16:dc:d2:b1:68:55:00:dd:38:
                    03:64:b8:3e:85:6e:ae:06:63:aa:6f:19:8a:4e:2d:
                    4a:ab:38:5f:c3:80:9c:49:14:c4:c6:04:3e:2c:93:
                    19:3a:9e:58:a9:d2:d7:f2:57:63:f3:1b:91:6c:d1:
                    14:a4:32:57:df:06:a3:66:3e:c6:35:2e:8b:30:dd:
                    e7:67:9a:59:39:b4:f0:4e:77:71:8a:57:5a:b3:0e:
                    a2:5b:0e:29:d2:88:54:86:ed:2e:6f:75:6b:7b:46:
                    b2:94:c8:fa:cd:07:a1:da:8d:36:46:bd:55:ed:97:
                    1f:f6:5c:f2:73:38:b2:b4:8f:28:12:de:f2:a1:8f:
                    8c:54:8a:bf:24:8a:53:b9:79:dc:4d:8c:9b:77:35:
                    52:77:14:66:2f:24:b1:54:f7:ba:2a:98:be:ee:20:
                    3a:a0:7d:4f:10:2c:c9:84:2b:7b:28:9e:51:1e:c6:
                    97:b4:12:ad:33:67:43:61:f5:25:64:ef:7e:f2:97:
                    28:78:4c:38:f7:ba:26:f4:93:6c:3e:59:15:1a:67:
                    9e:35:7b:0d:33:2b:49:a2:b3:88:ab:a9:d0:10:fa:
                    8e:78:fc:72:2f:3a:3d:1f:78:7b:49:f6:db:6c:fa:
                    c0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3C:1C:64:CD:27:A4:C4:8D:02:D3:8C:3E:53:6B:F8:E6:F0:71:19
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b4:2d:a3:e9:7f:4d:42:45:b0:22:6f:f6:0a:91:c5:d0:bf:
         26:6c:ba:7e:b1:34:d3:b8:19:5c:b4:80:e8:0a:82:b4:e8:3c:
         1f:40:a4:8e:61:72:83:2c:de:6c:34:4d:b9:48:02:f6:cd:34:
         9f:be:de:13:43:dd:a2:1e:2b:65:72:04:61:53:9b:76:5e:29:
         41:2a:38:23:db:ca:8d:27:e7:c0:11:69:6a:8f:6e:9b:dd:aa:
         3d:c7:38:49:c2:32:62:4f:51:25:39:a4:2e:10:00:6d:9e:29:
         4a:e2:ca:ce:74:68:cc:48:d2:b3:64:5f:3f:d3:17:9f:8a:f2:
         4c:ae:e6:54:0a:67:9e:52:ec:68:95:e3:e7:18:61:32:af:82:
         7e:7d:03:42:82:31:72:bf:b6:9d:6f:7a:17:ff:83:bf:c4:f4:
         72:b0:87:f0:9f:45:6a:9f:f0:7c:86:09:ee:a2:d5:61:7f:28:
         59:0a:03:6d:ab:7b:ed:d5:ed:11:c0:b3:25:f7:fc:1d:8d:45:
         d3:51:c8:88:2d:ab:64:8f:e7:c3:33:28:3b:b9:47:2f:ab:e9:
         a1:9e:89:dd:d8:e7:21:30:d0:15:05:a0:cc:9c:2d:3f:6b:3f:
         21:ce:72:20:38:e5:62:d5:3a:f1:82:d2:53:74:9f:43:12:30:
         7e:3f:dc:9b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUf0bYDrrD4bRz320c6EPPQIeGeagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4
MGM5MGI5NDAeFw0yNjA3MjgxNDE4NTZaFw0yNjA3MjkxNjM5NTZaMDMxMTAvBgNV
BAMTKEFCM0MxQzY0Q0QyN0E0QzQ4RDAyRDM4QzNFNTM2QkY4RTZGMDcxMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVPIqNYCOHZF0Uct3ufi7TsVT7
UBbc0rFoVQDdOANkuD6Fbq4GY6pvGYpOLUqrOF/DgJxJFMTGBD4skxk6nlip0tfy
V2PzG5Fs0RSkMlffBqNmPsY1Losw3ednmlk5tPBOd3GKV1qzDqJbDinSiFSG7S5v
dWt7RrKUyPrNB6HajTZGvVXtlx/2XPJzOLK0jygS3vKhj4xUir8kilO5edxNjJt3
NVJ3FGYvJLFU97oqmL7uIDqgfU8QLMmEK3sonlEexpe0Eq0zZ0Nh9SVk737ylyh4
TDj3uib0k2w+WRUaZ541ew0zK0mis4irqdAQ+o54/HIvOj0feHtJ9tts+sB5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUqzwcZM0npMSNAtOMPlNr+ObwcRkwHwYDVR0j
BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw
M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E
SkM1US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MDkyMzM4OS0y
YmRlLTQzZTAtYjBkNS1mYzI0NGE2MzAzZDAvMC85MkY0OURFODY4NEYxMjg3RjRG
NkNCMTg1RDVDRjdERTgwQzkwQjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLQto+l/TUJFsCJv9gqR
xdC/Jmy6frE007gZXLSA6AqCtOg8H0CkjmFygyzebDRNuUgC9s00n77eE0Pdoh4r
ZXIEYVObdl4pQSo4I9vKjSfnwBFpao9um92qPcc4ScIyYk9RJTmkLhAAbZ4pSuLK
znRozEjSs2RfP9MXn4ryTK7mVApnnlLsaJXj5xhhMq+Cfn0DQoIxcr+2nW96F/+D
v8T0crCH8J9Fap/wfIYJ7qLVYX8oWQoDbat77dXtEcCzJff8HY1F01HIiC2rZI/n
wzMoO7lHL6vpoZ6J3djnITDQFQWgzJwtP2s/Ic5yIDjlYtU68YLSU3SfQxIwfj/c
mw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:31:12 2026 by rpki-client