Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File:                     FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier:          vGyyD/xdl2aCeE9vfbvLPoDq7hDA3QlW0Cm8AJf3cDs=
Subject key identifier:   0F:3B:FF:E4:A1:CD:F2:55:B3:C2:29:8C:4C:92:8C:70:61:F2:17:2E
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       139113D4D8860043E44EF4477914F6C324176420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number:          025E
Signing time:             Wed 13 May 2026 00:30:19 +0000
Manifest this update:     Wed 13 May 2026 00:25:19 +0000
Manifest next update:     Thu 14 May 2026 02:32:19 +0000
Files and hashes:         1: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: IEXWaXuV3w8kiyUSn8Xb9ocu7wGkZqq6FHmShe2ilR0=)
                          2: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: RwKBGj41SrCoSwW63bP9iypbQ5/Pk2wZivtbfEbN3Qk=)
                          3: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: mNEln2sQigg3u81rooykzeehSg2L9J2uWDrMwZzSFwU=)
                          4: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: buKU7JdPUK/SlkC4NNnK7hP12R2pJJz2VMgJgPeJ+UM=)
                          5: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: NgKAiWi/9kIzuK34CJYJ5NgD13mXufjklhJW/DfhGXg=)
                          6: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: 2+e1pcV/1HjSIXMmpHYPl94RJ1VHndDhp/PzS1D2Aqo=)
                          7: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: v+xhc6fxafxAfS7MdKJ1T7i4/dfRVtX123aAkTRxKjs=)
                          8: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: LdHKLOhJhzl41We9BNwjvOcsg2A+zhlEI37K8ifS5/I=)
                          9: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: 6Eykl0udGSCGMvj9cIGdhRxd2X+avfnVRLM9ixFxokE=)
                          10: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: SgkiaXA0IAiBax3MkrFfX1tZ3ARWy+WsqwuwSIqr97Y=)
                          11: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: WnRHsnv1v5lgeZmFGSte0JZSgCKL85MQLwyrUB8BqVw=)
                          12: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: s7bJrOak+k6vmxZw3NK9sCosxffSZUuLUPKBmOsK+p8=)
                          13: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: XjKzqWNr7Btvkj5JImVNsEp2dFZjVAsUHydrIsbVUoU=)
                          14: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: Zjl5KzSbAzkvfaUcwe5cs8ZLZxM+i+5YDJPhsvemvlM=)
                          15: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: xYbQlUPKxSQoHiHG8XgS+jBzfXDA0HmlH23UWrEEgRM=)
                          16: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: 0UzTLd9sP5E9hVagexG3NWMHzI1vl2WYjkZP4E+bLVU=)
                          17: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: GcrirzUGj+baQQMYil8xBr+JSDUMr1IrAf8dPn6IBjc=)
                          18: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: sujdFNXoHRtVeqZ5b1HSqILk/kU5NautAQO2Xt1EnhA=)
                          19: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: XrAwkqLyjKkliRAGb7YhNsmN3gefCa9P2PMxjWEJ07E=)
                          20: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: h+2AnEvh4aG7gOBRETVZO5ExBSI+bmaVuuXvVVF7vHs=)
                          21: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: NG6zwhRpuGaOaqAr2bnhB0WNjn5u7NK5ztm1d2XSjOs=)
                          22: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: SBs8h2+t6QDU1J2FG/blrmN+qmqR4M4fBNi1SbYEnNU=)
                          23: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: I1y2rQjnLv18d7wE8+32fRo+wpfEuaxk8+JYmCwkLpU=)
                          24: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: dT0B0NOL6yGzF1BXtX0dsOyGoo8+tdfsmPM25BX1nFo=)
                          25: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: jzsWDx19Pycbrb5P3nX+LR9BkYXT+JSku+VMV2m2RIo=)
                          26: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: ay+VpJAxhcK2h7cjcp2jQIWeYB+U5olryyBn7tyJvVg=)
                          27: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: Cz/6kKDUzshq0L4EXVzYnwGNuJcQnGuP6YcPqQJcMJ8=)
                          28: 36322e3132322e3138382e302f32342d3234203d3e203330303538.roa (hash: Sn6BjESg306oMG2v09CGJd3q5vLKGdFDpo5P27sfsZQ=)
                          29: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: er+oPQhykc6ayg3rrrwvJra3JupeKvjV54bYH7L2tTg=)
                          30: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: qfYLsiXeU6PfA9fVBBtYwxz+ovi/EvnjjY5itv6zZZY=)
                          31: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: lzKGUq9e6WEOxjU9fEiZs+XvjPLc/qut/jPBXboiWgc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:91:13:d4:d8:86:00:43:e4:4e:f4:47:79:14:f6:c3:24:17:64:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: May 13 00:25:19 2026 GMT
            Not After : May 14 02:32:19 2026 GMT
        Subject: CN=0F3BFFE4A1CDF255B3C2298C4C928C7061F2172E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0d:21:0b:dc:8d:fd:cc:42:bb:cb:89:cc:6c:
                    10:2a:da:3b:e8:1b:63:a4:0d:76:52:10:e1:b8:b1:
                    d3:50:43:53:cf:51:13:e5:85:bc:36:dd:f0:4f:26:
                    09:79:46:80:1b:d3:1e:c1:ae:4a:c3:a8:0e:1e:16:
                    eb:4a:e6:8f:b5:94:1a:c3:48:1a:25:46:9e:cf:e4:
                    f6:da:86:3b:33:06:dd:d5:51:af:be:b2:1b:1b:32:
                    35:59:09:c3:d2:ba:39:fe:b2:03:c5:4c:4c:40:3c:
                    81:80:03:a4:f8:9a:88:66:b8:c7:ca:87:25:95:ea:
                    b0:a9:a2:71:0a:f0:95:0b:49:36:5f:06:05:c9:38:
                    bd:ed:d5:91:1f:13:ef:bb:d4:b6:8f:0e:39:3d:8d:
                    a5:aa:5d:06:85:cc:81:7f:63:e8:7a:32:5e:88:c2:
                    56:52:3f:1a:95:0c:3d:d4:e1:cb:aa:10:78:9d:60:
                    0d:d3:c2:bb:30:2f:7d:48:09:51:8d:cb:fc:42:2a:
                    93:f3:4f:71:83:10:7a:9a:a3:75:de:2f:28:44:e8:
                    3d:5d:08:f8:7f:ed:ce:84:a6:a3:81:96:cf:94:fc:
                    78:aa:68:11:e0:98:f6:86:81:99:a1:71:ea:0b:36:
                    13:2c:67:e8:37:17:43:cb:6a:27:b9:0a:aa:86:5d:
                    04:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3B:FF:E4:A1:CD:F2:55:B3:C2:29:8C:4C:92:8C:70:61:F2:17:2E
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4f:04:5e:b9:6b:96:35:ac:a2:c0:c0:a1:da:26:88:b0:13:
         9e:e5:29:15:6c:73:46:ea:92:fb:1a:ce:c3:26:66:bf:c3:96:
         56:51:f2:15:53:c4:5f:8a:5c:69:cf:e7:4b:c3:81:b4:6e:0c:
         14:41:c1:06:ad:02:5f:d3:39:0c:3a:00:d0:a8:12:85:aa:b2:
         8b:39:67:ad:6f:57:52:b1:c8:1d:e4:eb:64:ef:bf:94:ff:04:
         35:82:80:28:ca:15:01:53:74:66:af:41:68:9c:2d:21:45:bc:
         d7:ba:48:a4:99:5b:85:d5:fd:31:42:9e:30:aa:5e:f9:c0:b2:
         cb:cc:43:e9:8d:e2:fc:fe:82:32:36:dc:7d:4b:39:5d:26:a5:
         e6:c6:45:a0:45:7d:a5:cc:ac:48:23:ff:a4:a2:14:b4:5e:01:
         3b:d6:ec:b3:0f:6a:64:fd:12:4f:c4:fa:ca:c7:df:cd:8b:d1:
         11:41:86:ff:dd:36:b3:c4:30:ab:f7:70:95:ff:3c:1d:ec:53:
         1b:34:c9:a5:27:35:21:68:75:ac:16:06:8f:52:df:e1:4f:fc:
         31:33:d1:3e:4b:ba:20:ed:38:cc:44:62:e9:3b:09:8b:7e:9c:
         64:70:84:36:42:d2:c9:65:cb:b4:dd:1e:ff:3b:79:25:5d:41:
         15:37:15:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:38 2026 by rpki-client