Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
File:                     22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json)
Hash identifier:          oqjboMaSKeB/l18JXAcOwxVSmSKv1y3IoUMvjNoEMG0=
Subject key identifier:   2B:E3:1A:B8:DE:41:EE:2D:80:89:42:53:16:54:A1:82:1F:4E:E9:3D
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Certificate issuer:       /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial:       1CE1BD97C2B6843D2645F1DC01B58DA041678B0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
Manifest number:          01A5
Signing time:             Wed 23 Sep 2026 18:30:53 +0000
Manifest this update:     Wed 23 Sep 2026 18:25:53 +0000
Manifest next update:     Thu 24 Sep 2026 21:59:53 +0000
Files and hashes:         1: 38372e3235342e32312e302f32342d3234203d3e20323138393131.roa (hash: 7tSYuQ71mqHiPabmM7s3mhhfcknamp56jVy7dHHL490=)
                          2: 38372e3235342e362e302f32342d3234203d3e20343031333632.roa (hash: lNHbvVUsjRQWADwz+5BXy+SD2pwhPF26pAipPx7926o=)
                          3: 3231372e32352e31302e302f32342d3234203d3e20343032383537.roa (hash: niaZez5rWCfPwIynJuAiVBnG0HUl9oIbnXZCHjb7z20=)
                          4: 38372e3235342e32362e302f32342d3234203d3e20323138383239.roa (hash: E6a3DUIrDtWaQWEAr7GxRUGI6lo4FcU/j93xxkkfpm8=)
                          5: 3231372e32352e332e302f32342d3234203d3e203230343733.roa (hash: Gtvwy4O2g92Wl34q1NG2a1KSHDIDcCrqvni9SpsOlEs=)
                          6: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=)
                          7: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=)
                          8: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=)
                          9: 3231372e32352e31332e302f32342d3234203d3e203133333335.roa (hash: io4UFoc1YGnqjZfuSBnWpQH/OPOtN9A1OFdVrMznZWc=)
                          10: 38372e3235342e33302e302f32342d3234203d3e2039333034.roa (hash: 7Tnim3fXGqGd5eTDeVNv6sYNxMRFIvUpyP1tJtD3Ws0=)
                          11: 3138352e3231302e3136392e302f32342d3234203d3e203537303433.roa (hash: 7z9K9FbgeMuXCaln/1hsSe4DLUK7TEmfgfG1Y1Dfr7g=)
                          12: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=)
                          13: 38372e3235342e33312e302f32342d3234203d3e20323030303137.roa (hash: lbbXKkkoJ4X5dFgdoGsgrLdnfR7I5el1vS65pf+Zkis=)
                          14: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=)
                          15: 38372e3235342e31352e302f32342d3234203d3e20383334.roa (hash: njhEifPxZZKVIloAWauyfC9OvNCqT8sr5N2tyte4o24=)
                          16: 38372e3235342e32342e302f32342d3234203d3e20383334.roa (hash: QqbNiLA4Ey35PuR/YTL6yb8zsH4X0ajw3l/v7xwOynE=)
                          17: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=)
                          18: 3231372e32352e31322e302f32342d3234203d3e203533333536.roa (hash: ISZePjQZHgjZYw73RzwsKrdIyiH3v0ys4nWleWv3vxk=)
                          19: 38372e3235342e352e302f32342d3234203d3e20383334.roa (hash: TH/lHyvSX1bcP1rWoyrHpYLpCP0c65V843XP3yzhA3Q=)
                          20: 38372e3235342e32352e302f32342d3234203d3e20343032323635.roa (hash: PRZtxjYbgqdYHgrXt1B72AkNdzyck5gWx69C5yMLpR8=)
                          21: 38372e3235342e31342e302f32342d3234203d3e20323138383632.roa (hash: F1OX6LNWl+YwC+chgvQSQD6NIxsSYKS/34Wqd3CKlgY=)
                          22: 38372e3235342e31322e302f32342d3234203d3e20383334.roa (hash: Csmnwo2TPrFnpdtdygd8M5axyO7EMgidxtaGyRO6HZ8=)
                          23: 38372e3235342e32372e302f32342d3234203d3e20383334.roa (hash: kiTSwv3uqR6oTn4IFY97OArFJxGF8LStqZIKpFNtfPc=)
                          24: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=)
                          25: 3231372e32352e31342e302f32342d3234203d3e2039333138.roa (hash: g2ofm16r16kl7irVfvgX1+7ziEvLdY7dJdeeSirOg4Y=)
                          26: 38372e3235342e372e302f32342d3234203d3e20343031333632.roa (hash: l/Tir1KU5tQPgEhXt4OgP3+S+oyGyQEzW5JVvi4C4LM=)
                          27: 3231372e32352e31312e302f32342d3234203d3e203432383331.roa (hash: LBGC7WX7bJkBy0/v1ZbPU/RfYLNVgPcvPJyw+DpE2j8=)
                          28: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=)
                          29: 3231372e32352e31352e302f32342d3234203d3e20383334.roa (hash: mWRPxVUkqekpfjDM++QyDd8qxoSq2MT3KscZbrzZvoM=)
                          30: 38372e3235342e32322e302f32332d3234203d3e20323735373134.roa (hash: Q017uW83uFb8COwcV2Dq8d6iP2iHdliF99e4gCzHkCU=)
                          31: 3138352e3231302e3136382e302f32342d3234203d3e20383334.roa (hash: PO6lININeTzy9+OgxiLUcDdp0+yx5XkE6ZtQ5rmO+Oc=)
                          32: 38372e3235342e342e302f32342d3234203d3e20313532313739.roa (hash: Y+fm5Z1hQ5CX1kAf8N1IWb6MLSFELQii0Oe4LqXPgVI=)
                          33: 3231372e32352e322e302f32342d3234203d3e20323138383239.roa (hash: sTD/ELsmS5B/a3PpivXKnGnrDUxMqbqdUHt+yyguBew=)
                          34: 38372e3235342e31332e302f32342d3234203d3e20323036303932.roa (hash: oUikqYBVi4RcjOhDQmNNaH8TAOGVNq7wtpKIRIIaXQc=)
                          35: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: 4jigwMlldcIuNu6lldT6EvOG4qkpgJ3oFOixLGYJ4CE=)
                          36: 38372e3235342e32302e302f32342d3234203d3e20323138383837.roa (hash: ZhpNPPOoxuBKWgyygAwSStAMQzGmmwb/Gzjd7NA4m2g=)
                          37: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=)
                          38: 3231372e32352e312e302f32342d3234203d3e20343032323635.roa (hash: VANfTBfZigI792G4QZ62stYln+FE6haw31ZdE6HIoqY=)
                          39: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=)
                          40: 38372e3235342e31302e302f32332d3234203d3e20383334.roa (hash: l0t8ICvVIvlIV+AR+CpQg130G3E7cVDVhiMIlHw2OaQ=)
                          41: 38372e3235342e32392e302f32342d3234203d3e20333939333539.roa (hash: ai/dN9s+EI66RGZOYc3SnH50a9pPhR+Tuj1MQUDS0jQ=)
                          42: 3231372e32352e362e302f32332d3234203d3e20383334.roa (hash: kuLwFCmf8Whna0mXwpfLAstA+xJncXgqXwYveSIDWeI=)
                          43: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=)
                          44: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=)
                          45: 38372e3235342e392e302f32342d3234203d3e20383334.roa (hash: 9xNWK0CP8AKiSnG1dUeeFmXs6klwdHgCE4UZ1NbhInI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e1:bd:97:c2:b6:84:3d:26:45:f1:dc:01:b5:8d:a0:41:67:8b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
        Validity
            Not Before: Sep 23 18:25:53 2026 GMT
            Not After : Sep 24 21:59:53 2026 GMT
        Subject: CN=2BE31AB8DE41EE2D808942531654A1821F4EE93D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:5b:17:19:d6:b4:32:77:a5:80:cb:45:a9:
                    bd:98:2c:94:bc:d2:0c:c5:13:06:20:f4:a2:36:26:
                    bd:e1:63:e8:1c:49:13:ad:92:15:51:8b:32:cb:73:
                    b4:8d:5f:89:e1:85:74:5e:8f:35:5c:96:a2:d8:4a:
                    a8:70:49:e9:49:3c:44:ca:4f:d1:09:b6:1e:6b:4b:
                    f6:74:32:0f:f9:6f:f2:a1:42:34:df:63:b4:e9:d6:
                    03:09:9e:b6:52:6f:f4:6a:34:77:c5:36:04:71:e7:
                    0c:42:8c:86:06:2d:aa:e8:5f:06:1a:dc:81:fa:48:
                    55:3a:7e:12:16:6e:98:fa:19:a3:51:7f:9e:39:6a:
                    8d:23:b1:b1:dc:7e:0b:b1:5e:54:73:af:5a:fe:ab:
                    db:7b:a3:e0:2a:88:94:c0:c7:d5:0b:14:fa:2a:14:
                    66:0a:8f:42:d6:99:9b:55:5a:90:f4:45:81:dc:ae:
                    e7:79:2f:8f:d1:44:6a:65:2a:42:fc:79:10:74:e0:
                    62:d1:f2:54:64:95:fe:8b:dc:17:91:42:e8:7c:3f:
                    cb:a9:91:45:5a:58:a7:7e:c6:9b:4c:24:15:f0:56:
                    f6:5e:b5:07:5b:32:8e:ea:c2:b8:46:7a:f5:4a:91:
                    84:ff:d9:f0:ed:b2:2e:3f:dd:f2:13:d9:c3:91:92:
                    d4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E3:1A:B8:DE:41:EE:2D:80:89:42:53:16:54:A1:82:1F:4E:E9:3D
            X509v3 Authority Key Identifier:
                keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9b:3b:dc:3d:5a:00:f1:92:1d:e5:79:cc:91:a2:f0:d1:d6:
         fa:19:cb:8d:80:d7:d0:52:60:b8:62:41:4b:e4:f1:bb:b0:fe:
         c0:16:38:96:34:6b:4d:54:85:64:12:26:d9:8b:d4:76:25:f6:
         16:fa:ac:2f:79:19:c1:81:7c:c0:8b:6d:12:5d:26:81:89:dd:
         64:30:a4:80:71:61:e2:56:e7:90:7d:f7:27:89:d9:0b:48:50:
         06:16:ec:38:c9:ba:58:15:ab:2a:a0:10:3b:2b:f8:d2:c0:42:
         8c:45:bc:27:e8:a5:46:a4:dd:b3:16:65:31:84:63:1e:b3:c7:
         18:0a:aa:19:57:b8:c8:5e:b5:d1:21:b5:48:b0:12:de:6d:e9:
         4d:bb:bb:0e:8a:ad:57:ac:c9:ec:b5:6b:c3:31:fb:30:c6:6d:
         4c:31:2a:90:db:e1:a4:7d:e0:1b:2d:89:df:b7:1d:57:3d:44:
         2e:72:30:f6:37:e3:17:70:c6:d3:0d:56:90:92:b9:34:0d:2a:
         18:fe:fa:8c:50:bb:c6:36:70:16:e3:be:ce:25:9a:6f:b3:ff:
         a4:d5:76:39:bc:75:3c:11:c7:52:2d:e0:c8:11:f9:fd:2b:3f:
         c5:ff:94:64:1a:57:c5:63:3d:3a:69:47:f6:3a:7e:32:af:58:
         bf:91:1a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:07:21 2026 by rpki-client