Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
File:                     20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json)
Hash identifier:          1VOyxGZsYLqo3c+kdX2wp+X6NtzqxsypVXakO+58ESU=
Subject key identifier:   00:36:30:27:A5:58:8A:3E:17:F9:6B:AA:FC:58:D6:56:A2:C2:C2:C5
Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Certificate issuer:       /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Certificate serial:       1F2B4C47BE7FE6DC1537594CDBE661F1FF8C8E2E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
Manifest number:          05F2
Signing time:             Thu 23 Jul 2026 17:28:38 +0000
Manifest this update:     Thu 23 Jul 2026 17:23:38 +0000
Manifest next update:     Fri 24 Jul 2026 21:27:38 +0000
Files and hashes:         1: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=)
                          2: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: 5zFC0aBKrn16Glyaue2oFptFutD2x5iVGxip/IIewrc=)
                          3: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: O5hXxs076gE3Ctu2AmKUIcSxIccZcu0zLTOjhJ6fNNY=)
                          4: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: M7y4yNzKisPGrMDI6N/h2uK0LmUwgVtJCXB3eT1YcCs=)
                          5: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: QHZUdTVGV2CHeEi/xwH6jUeYlRlXEpg0OAN7LbdYhcg=)
                          6: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=)
                          7: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: 0MGh72HtcBIx2dyROH4vCwTGrkjWjpybf+czr46U9xA=)
                          8: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: wCpGpHKdqFN1DO1NvTXNItL3x3NUD8VGRqAFwBrJITc=)
                          9: 326131343a316563303a3a2f33322d3332203d3e2030.roa (hash: l1LgH+twMvgdn7/1KBWGxkEdCOcMXQ/E9AMQuJ/4pWU=)
                          10: 326131343a316563313a313630303a3a2f34302d3430203d3e20323139353233.roa (hash: 9E1PsTjd11hXDLZSZeoJaNnT7ONzxHIoAoZBFV00R+U=)
                          11: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: EOUQ1JZ1oz2xZOU8+mEukp9ybbKV7scsmw0lQsJAxX4=)
                          12: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=)
                          13: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: 3/JDrgPcwa3QkItCqhf73S0kH72VYqnJSSE72cvYDCQ=)
                          14: 326131343a316563313a376235303a3a2f34342d3438203d3e20323135363835.roa (hash: IzwkS06+TU6xlgmjKohwCnvrPjgEE+53/+TvwhGB5Kg=)
                          15: 326131343a316563313a313730303a3a2f34302d3430203d3e20323139353233.roa (hash: A8bwWH9/ybdeySNN01RK//BZzg4rKSE3B00g1VeCR5M=)
                          16: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=)
                          17: 326131343a316563313a313030303a3a2f33362d3438203d3e20323131303636.roa (hash: VwMdcB7cjunOknijcMaBRHJjTJhyW3Liym/2KH9Cpo0=)
                          18: 326131343a316563313a313030303a3a2f33362d3438203d3e20323135313336.roa (hash: Hy38nW7g7jg3g8NEUSSR9hX3QcE4UfBQyRuLYa5OQGw=)
                          19: 326131343a316563313a376234303a3a2f34342d3438203d3e20323139353339.roa (hash: lk2g+VMPJ2e0ffh4BXNf9T04tdPmSZpAFUml3dW+JwM=)
                          20: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: 8VhdvV/ADl1dQyHcZOJm0iqoZEaI9FAWV7wRLCn1Kkc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 07:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2b:4c:47:be:7f:e6:dc:15:37:59:4c:db:e6:61:f1:ff:8c:8e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
        Validity
            Not Before: Jul 23 17:23:38 2026 GMT
            Not After : Jul 24 21:27:38 2026 GMT
        Subject: CN=00363027A5588A3E17F96BAAFC58D656A2C2C2C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c0:65:7a:14:67:b1:5b:a2:55:84:c0:77:5f:
                    15:1b:57:1a:8a:c8:9c:e0:49:0e:16:3c:20:bc:b1:
                    56:e8:81:d9:97:cf:6c:70:8c:4c:fb:92:a6:3b:be:
                    19:92:5b:c6:0d:71:5d:17:ab:89:81:21:fc:19:01:
                    54:16:72:de:fb:a7:2c:85:14:fe:0b:69:2e:a2:c5:
                    61:f2:5e:61:54:22:37:b6:0c:03:33:27:1f:93:f0:
                    23:b3:cc:0a:50:5f:18:4c:29:79:08:fb:10:10:26:
                    e0:37:06:83:8e:3b:85:5c:c0:cc:e9:34:c5:4b:a1:
                    c0:c0:60:a5:af:16:76:94:42:31:62:22:b9:ef:ba:
                    bc:bc:f7:48:7d:81:0b:10:f0:0a:09:7a:03:70:c2:
                    09:37:7c:54:38:12:06:7c:2d:dd:70:18:00:13:e3:
                    74:95:10:36:9e:6e:51:60:49:26:3c:59:4e:97:93:
                    07:01:fb:2b:47:52:8b:3c:d3:f7:c9:d2:1b:f2:fd:
                    7e:5c:c1:97:46:47:4d:4b:d2:78:e3:51:76:ac:ed:
                    59:36:8a:9d:b4:6f:b8:9d:16:06:ed:64:b5:f1:f0:
                    99:e2:4c:f0:4f:e1:aa:c6:98:24:00:a7:f2:0e:3d:
                    57:55:6f:c7:3e:1b:26:82:1c:54:ed:3d:5d:cd:ac:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:36:30:27:A5:58:8A:3E:17:F9:6B:AA:FC:58:D6:56:A2:C2:C2:C5
            X509v3 Authority Key Identifier:
                keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b9:a9:e8:be:47:b2:8e:95:53:d6:bc:18:20:bb:7a:15:9e:
         71:bb:33:50:9a:60:e9:05:20:4a:00:d6:e0:03:94:42:6f:3f:
         1a:75:8e:e9:96:31:51:5c:02:7b:41:a8:43:15:a1:da:82:a5:
         fa:8c:51:e0:21:2f:d4:e4:cd:0f:51:28:f2:67:d1:bd:ac:f7:
         fa:47:c2:86:63:ec:c1:fa:f0:e0:2a:b1:93:4a:c3:b8:d5:be:
         b3:91:80:33:2c:8b:f0:95:c9:d6:ee:71:57:86:0b:92:57:fe:
         f2:51:01:18:fa:d5:dd:d7:2b:ee:cd:78:61:1b:63:6a:9e:98:
         21:a5:af:7a:8f:de:24:5d:8a:8e:f7:42:fe:a3:e7:87:9c:47:
         e1:27:21:33:ba:da:90:9e:64:ae:8b:14:99:f2:cc:1d:99:01:
         8b:92:9d:69:c1:89:d5:4a:16:3a:fd:24:4a:dd:36:9b:fe:c4:
         08:d3:0b:4d:17:29:51:e2:aa:4b:bd:32:ca:f9:33:4d:fe:b7:
         59:9c:60:39:97:93:55:5e:74:65:95:61:3e:0b:bb:57:76:5c:
         bd:33:c1:81:24:98:90:d6:94:66:b3:ec:26:2c:cd:97:96:84:
         c9:0e:d6:87:21:35:9b:ca:d4:42:b3:f4:0a:6f:9a:f1:5d:ca:
         17:6e:ac:5d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUHytMR75/5twVN1lM2+Zh8f+Mji4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG
NEFCREVDNjAeFw0yNjA3MjMxNzIzMzhaFw0yNjA3MjQyMTI3MzhaMDMxMTAvBgNV
BAMTKDAwMzYzMDI3QTU1ODhBM0UxN0Y5NkJBQUZDNThENjU2QTJDMkMyQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCowGV6FGexW6JVhMB3XxUbVxqK
yJzgSQ4WPCC8sVbogdmXz2xwjEz7kqY7vhmSW8YNcV0Xq4mBIfwZAVQWct77pyyF
FP4LaS6ixWHyXmFUIje2DAMzJx+T8COzzApQXxhMKXkI+xAQJuA3BoOOO4VcwMzp
NMVLocDAYKWvFnaUQjFiIrnvury890h9gQsQ8AoJegNwwgk3fFQ4EgZ8Ld1wGAAT
43SVEDaeblFgSSY8WU6XkwcB+ytHUos80/fJ0hvy/X5cwZdGR01L0njjUXas7Vk2
ip20b7idFgbtZLXx8JniTPBP4arGmCQAp/IOPVdVb8c+GyaCHFTtPV3NrMqJAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUADYwJ6VYij4X+Wuq/FjWVqLCwsUwHwYDVR0j
BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm
NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj
N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD
QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD
MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+uano
vkeyjpVT1rwYILt6FZ5xuzNQmmDpBSBKANbgA5RCbz8adY7pljFRXAJ7QahDFaHa
gqX6jFHgIS/U5M0PUSjyZ9G9rPf6R8KGY+zB+vDgKrGTSsO41b6zkYAzLIvwlcnW
7nFXhguSV/7yUQEY+tXd1yvuzXhhG2Nqnpghpa96j94kXYqO90L+o+eHnEfhJyEz
utqQnmSuixSZ8swdmQGLkp1pwYnVShY6/SRK3Tab/sQI0wtNFylR4qpLvTLK+TNN
/rdZnGA5l5NVXnRllWE+C7tXdly9M8GBJJiQ1pRms+wmLM2XloTJDtaHITWbytRC
s/QKb5rxXcoXbqxd
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:48 2026 by rpki-client