Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
File:                     22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json)
Hash identifier:          T13oLZkB6d4KA+/lybqYTiWAEMmh6o/W4VYadluYwGs=
Subject key identifier:   32:F9:A1:01:B6:E8:6A:00:26:83:AE:A5:2B:5F:84:98:42:28:06:EA
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Certificate issuer:       /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial:       5B743E9505D829559294C74A8DDDFEEA91173C23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
Manifest number:          A6
Signing time:             Tue 12 May 2026 19:15:04 +0000
Manifest this update:     Tue 12 May 2026 19:10:04 +0000
Manifest next update:     Wed 13 May 2026 20:14:04 +0000
Files and hashes:         1: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: +rf/ty786cDuBqUT/7/uRFW+Om5WMm24qfHJVSAatpM=)
                          2: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=)
                          3: 3231372e32352e302e302f32342d3234203d3e203531303832.roa (hash: r+Zz3WVzXA07AoYsFrhfnagmX4oriEkd7cdwYOTPd78=)
                          4: 38372e3235342e392e302f32342d3234203d3e20313534303439.roa (hash: Hq9PYTOQCseLfaxNiEXnFMG4fnzCVo7PsWTjAFrRtkw=)
                          5: 3231372e32352e31302e302f32342d3234203d3e20343032333639.roa (hash: tt8K++HA2G+c3OYgrEct+y28lctmG7NnuvtsSouwvpY=)
                          6: 38372e3235342e362e302f32342d3234203d3e203230343733.roa (hash: U9mhVXn/Y2qy5SVslhyWTBFWO3Hfm0be6+7a6kbSGwo=)
                          7: 38372e3235342e372e302f32342d3234203d3e20313531333839.roa (hash: 1Tzx5DQRwmTkt6C12jNRCoCqpdsvp6el2+ypdu0Bwro=)
                          8: 3231372e32352e31352e302f32342d3234203d3e20383334.roa (hash: etjfV0kGb76d5lSxFiq8JUUbGdWAGGaQAAqGc0Sfyfo=)
                          9: 3231372e32352e362e302f32342d3234203d3e20313531333839.roa (hash: 7io71Z7e3prfZYGBiZo+qcVjsUHTCxzskRDmwMsuWN4=)
                          10: 38372e3235342e32352e302f32342d3234203d3e20313734.roa (hash: STs/Odq8qO0vXfvacpj/VHN/A8uqTrPbGQfYucpP36w=)
                          11: 3231372e32352e352e302f32342d3234203d3e20343032323638.roa (hash: m6GVFGT3chGDddVmeN56HbfdXm/0nlLfVkYgH2NWLMU=)
                          12: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=)
                          13: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=)
                          14: 38372e3235342e31342e302f32332d3234203d3e2039333034.roa (hash: zOjJfKXFDDK8FWQuGoyGMyabfyxwg6zgnL0YaVQFH20=)
                          15: 38372e3235342e342e302f32342d3234203d3e20323039313034.roa (hash: dT2D5TLXRAKJLruER8UV5zR5nd3cD/krMcbOOopIoWg=)
                          16: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=)
                          17: 38372e3235342e32362e302f32332d3234203d3e20383334.roa (hash: w9sLIE/EHsISMO1IIkxi33z9DQ/fromvY/u2VTNmgo4=)
                          18: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=)
                          19: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=)
                          20: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=)
                          21: 38372e3235342e32302e302f32342d3234203d3e2039333034.roa (hash: 4X1RHbA+I5YPTr7RjepEQXD+DyuHivSCZH5v4rwZll4=)
                          22: 3231372e32352e31342e302f32342d3234203d3e2039333138.roa (hash: g2ofm16r16kl7irVfvgX1+7ziEvLdY7dJdeeSirOg4Y=)
                          23: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=)
                          24: 3231372e32352e382e302f32342d3234203d3e20313531333839.roa (hash: ION442ZnInYYQy2Ta0C69D4We7O4SxjZisdqNNvMBQ8=)
                          25: 38372e3235342e32312e302f32342d3234203d3e2039333034.roa (hash: fhuLKVJWOGU8sXL3S0QoWozOsb/OD2qOzlxonYH/GYk=)
                          26: 3231372e32352e362e302f32342d3234203d3e203633373933.roa (hash: INM60jl1cf01X8Dit6vIBFxI1U5BBx8k+1yHI+R5aYQ=)
                          27: 3138352e3231302e3136382e302f32342d3234203d3e20383334.roa (hash: PO6lININeTzy9+OgxiLUcDdp0+yx5XkE6ZtQ5rmO+Oc=)
                          28: 3231372e32352e31312e302f32342d3234203d3e203432383331.roa (hash: LBGC7WX7bJkBy0/v1ZbPU/RfYLNVgPcvPJyw+DpE2j8=)
                          29: 38372e3235342e32382e302f32342d3234203d3e20313938323530.roa (hash: qLeT0qC2aRYaYvqMA7On+tHD955+P3rkrlhBt6zEGQc=)
                          30: 3231372e32352e372e302f32342d3234203d3e20323033313439.roa (hash: ORaaFsuJfbCQ5gK+iP6X7HGTL9jsKreKKdMqaXidIEY=)
                          31: 3231372e32352e322e302f32342d3234203d3e20343032323638.roa (hash: eO9NqT6i2l2HEGs+WVV7UTiynn+SIqeiEipfCYpnbLk=)
                          32: 38372e3235342e31302e302f32332d3234203d3e2039333034.roa (hash: ggxRDSIk4x8P9rbdr1wiNW32yw9uoE+S2USYJnBn0oI=)
                          33: 38372e3235342e32322e302f32342d3234203d3e20383334.roa (hash: rBcnHeM9UN/n2/ZoIT3IiOmRRqgoBqMFBe8vdR0Fp3M=)
                          34: 38372e3235342e31332e302f32342d3234203d3e20383334.roa (hash: OXClm11L7B4KQMtboKCAGazXbwccz8w1E47tvtW+E9Q=)
                          35: 38372e3235342e32332e302f32342d3234203d3e20323135363732.roa (hash: /+BmUmf76rxab9lMUlp4SDJKTX/siHkrnlzW84acgzo=)
                          36: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=)
                          37: 3138352e3231302e3136392e302f32342d3234203d3e203537303433.roa (hash: 7z9K9FbgeMuXCaln/1hsSe4DLUK7TEmfgfG1Y1Dfr7g=)
                          38: 3231372e32352e31322e302f32342d3234203d3e203533333536.roa (hash: ISZePjQZHgjZYw73RzwsKrdIyiH3v0ys4nWleWv3vxk=)
                          39: 38372e3235342e31322e302f32342d3234203d3e20313531333839.roa (hash: 9zA+dszgJN5AP3J45oSwZmskcmnOlaFWG4lzA3aNK2Q=)
                          40: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=)
                          41: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=)
                          42: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=)
                          43: 38372e3235342e352e302f32342d3234203d3e203531303832.roa (hash: 0HnaDsDo2UX9wDKSm/WMFUG8xs3WsZvg6JVekoAYPCA=)
                          44: 38372e3235342e32382e302f32342d3234203d3e20343032323135.roa (hash: SGNaeNVqZGf07yOteWt8edtRnKOa52xBHwzvPwvg5pw=)
                          45: 3231372e32352e312e302f32342d3234203d3e20343032303434.roa (hash: xCcm9OSDFoiRAyZGskXdn1FDK0ugz/jCcwYJjik/uSg=)
                          46: 38372e3235342e32342e302f32342d3234203d3e20383334.roa (hash: 7yikp/z/qWH5JI/YxCl7e8W/SvKcj65ynkk8VMtUC0s=)
                          47: 3231372e32352e332e302f32342d3234203d3e203230343733.roa (hash: Gtvwy4O2g92Wl34q1NG2a1KSHDIDcCrqvni9SpsOlEs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:74:3e:95:05:d8:29:55:92:94:c7:4a:8d:dd:fe:ea:91:17:3c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
        Validity
            Not Before: May 12 19:10:04 2026 GMT
            Not After : May 13 20:14:04 2026 GMT
        Subject: CN=32F9A101B6E86A002683AEA52B5F8498422806EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:76:0d:f5:d7:52:15:6a:e9:3f:b4:d0:a1:
                    ce:0e:c4:1b:b7:96:a7:58:01:c9:1d:ec:88:d9:13:
                    f3:de:d1:39:72:87:b7:f8:32:1f:49:d9:9d:3a:3c:
                    29:0e:61:7e:64:f3:78:87:78:4a:c4:bd:3a:c7:af:
                    2e:ee:80:77:11:c4:bf:97:09:3a:ad:65:21:37:57:
                    97:6f:be:c2:8b:ad:d6:26:ce:1b:cb:75:26:21:06:
                    13:c4:a5:6a:07:dd:c8:0f:52:a3:3b:6e:47:56:c1:
                    a9:21:22:e3:dd:51:37:36:73:50:b4:e5:8d:b0:e2:
                    ac:d7:e2:c5:8c:e3:d6:34:35:76:d0:d5:f6:7f:d9:
                    7f:58:24:02:da:04:9b:62:40:dc:90:75:eb:57:4b:
                    a4:af:80:9a:a2:c2:3e:c4:9e:9b:a3:a2:4a:e8:18:
                    77:20:3b:2d:c6:e6:14:81:fc:61:37:72:7a:29:d4:
                    1f:81:b9:1b:00:12:40:41:a0:f2:8c:3f:5e:92:45:
                    08:dc:37:bb:8c:66:32:b2:8e:92:f4:d1:c4:08:88:
                    14:c4:14:c2:97:57:4b:cc:57:33:37:2e:51:39:93:
                    dd:64:02:55:66:e0:7b:5d:cc:dc:a7:6e:77:0b:c8:
                    57:b5:91:c5:b7:d0:1e:a4:b7:f8:52:54:57:99:58:
                    81:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F9:A1:01:B6:E8:6A:00:26:83:AE:A5:2B:5F:84:98:42:28:06:EA
            X509v3 Authority Key Identifier:
                keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:23:c5:a8:ef:c5:a2:b1:47:9e:7e:a8:a6:56:e9:de:db:b2:
         ff:15:34:16:60:7f:37:9a:cc:5a:f8:73:03:03:34:a7:b6:c1:
         98:be:d3:d0:e6:5b:47:96:b4:d3:14:72:98:29:66:a3:ec:47:
         4b:0e:52:a5:c5:2b:18:6b:ea:f8:21:ee:89:26:c7:35:e3:e3:
         c5:59:ff:d9:b0:43:71:7e:23:c0:c2:9e:54:96:5f:ec:d9:34:
         24:22:d5:08:50:0c:94:fb:cf:bd:8a:51:f1:49:9b:f7:59:a9:
         69:78:7c:9b:b9:35:b6:72:42:04:6c:b6:29:e9:10:e6:13:65:
         33:66:76:85:02:88:84:00:5e:9d:cd:46:3b:b2:20:10:90:a9:
         ce:e1:4e:4d:1f:ba:77:22:ef:b9:e6:b3:d6:f2:45:ed:ba:b1:
         21:af:da:8c:ee:d6:70:45:08:38:36:eb:ca:db:a6:9e:ee:39:
         51:d2:4b:6d:70:aa:65:b3:87:78:7d:62:ad:7d:af:80:95:b5:
         82:22:ec:dd:29:6d:7e:d9:46:47:a7:82:b1:a3:ce:fc:fa:1a:
         8d:79:7a:b4:f6:b2:24:00:84:3d:54:83:4a:4d:33:26:f4:a8:
         ce:c6:b1:fa:e1:ca:9b:fa:35:73:ca:07:5e:c4:7d:c1:50:91:
         15:3c:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:54 2026 by rpki-client