Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File:                     FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier:          0HCvBQ6OqJvchC9Qf2yM9ybw6oqAC1WQ5fdJupdcoto=
Subject key identifier:   58:C4:13:EF:14:6F:3E:B5:79:20:A1:10:D5:28:F3:F6:88:0C:F5:6B
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       2856B054920CFB1904A50B617B0D84145F612C5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number:          014A
Signing time:             Sun 19 Oct 2025 02:06:34 +0000
Manifest this update:     Sun 19 Oct 2025 02:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 03:23:34 +0000
Files and hashes:         1: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: 8dmyIVl1xfWSQlImAzdtHKnEErtwf9VZhG0c0l+lwWM=)
                          2: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: NxII85muRlkPy6Ue9rBPty6Qe2NOTHZ5aybygZpMWdo=)
                          3: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: DmLW24LZ1vnZeM7Yk9oInpGtra92p8B8+f/VK3l3ndo=)
                          4: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: C4YEp8j4LdYsTYvi6G+irz5U3tTH6rayAYxhSvLGLbo=)
                          5: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: /XIIDyQLovgvuWo+FMAvONj9QZYopmDAHKNtoUoPi4w=)
                          6: 36322e3132322e3138382e302f32342d3234203d3e2035363530.roa (hash: 6OwCLICEQXAEg/tDtW6A/oDneiVaxu+1cpVQR9TCH00=)
                          7: 36322e3132322e3138382e302f32342d3234203d3e203133333437.roa (hash: r1huf6kbJmsHFssAQxCRNN3d80N61L6+aVoF7yxiSko=)
                          8: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: wE97ifCwuCsHZoyv+UtvDLCrOhOpwPEVh3JX3wVqIpE=)
                          9: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: I6eMklUSFiAulRI2b++yFtpDHfGf+yyRunITvHHP3rY=)
                          10: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: OHKDfo5l5/jEy46ijNWjc2QXFRSDD6WocUfsgvZEdnk=)
                          11: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: y+MccKPhc/2KhhvHGoqYvoNRkkUTzEwbJt4GOMeUfuU=)
                          12: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: +zJlwocjllLnsQbU3Pz9rSlrsgFZqIsBvJ2vFa1jc64=)
                          13: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: O/uOtyjfl4MlQDYp72kf544XXXljSkWM6HF13huBkEM=)
                          14: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: GO8jazaT07yHqE0/NadQwAelqQjPVTo+2xINwt+os7M=)
                          15: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: gBowB4M9spFJyhtGeGBV6pXmZemrPQZEhgmMEW2ghgQ=)
                          16: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: km7AckNvLv1q0pbCqzHi3LeRsruPHxBbk7Xp2zqpMMY=)
                          17: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: zj1ARbGG0KKWVGhyBIQnR9Ua0u7oCe2HCtyMecubnF8=)
                          18: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: yxk4TFt/ObXReJM9hZWCrSiaxkBBnmZ/PajmEhPrCIU=)
                          19: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: 4U+lv5fdVNtShdj/snUUKz+UGwwRicG7k/GaBlfpAoA=)
                          20: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: GKO1xHzUJGinckXhhCthyQ7yu4eOcaWTxHAnYAzelTo=)
                          21: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: x+RYo6wjWwk6+BVxPpNh5bRjqAt+Gok7rpn9qho5bkg=)
                          22: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: 4kV2/I3YxBchjG3IOXi1hr0lRxiFuT7fxsWyAbTDWfo=)
                          23: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: H3nzZLDuD+hMyo0VXetwr0aEFusgjbaL4Ptg0xbrpOA=)
                          24: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: yzlstLnidlbzwukvV9D/QvVE7rWc67Q28lja1LYs6xM=)
                          25: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: 0f4WAabP3xZvH36q2OTX1i3if9moXyHYYV6+CfUNtlk=)
                          26: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: HZ1FcP6uKIG0ErisyoB210/El4Tl/fdKRO4f//GIOhY=)
                          27: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: +nnxoDraZp1GnJqnPBkJVf2tvjIfmjIdjzZ1kJJ3DOg=)
                          28: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: fgX7JOs0CLQUJu45+RMzl8sB0KWTVxumN6S/L327z0k=)
                          29: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: uDISVLlw/nJy4wy96JtWj7K3NXKh8ecGghWlBzzixw0=)
                          30: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: /Kq4VkHWPBjYK33PPSBMXdIWaIDemEZf9s/0PNOi978=)
                          31: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: rFtvfsVQHKCdQAqKZM/z0xrzFdBj+H8lvhfwWrdW4dw=)
                          32: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: uyzQxNfCQuPRUilhbFb9igirZqWyG0ghryABccswsyE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:56:b0:54:92:0c:fb:19:04:a5:0b:61:7b:0d:84:14:5f:61:2c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Oct 19 02:01:34 2025 GMT
            Not After : Oct 20 03:23:34 2025 GMT
        Subject: CN=58C413EF146F3EB57920A110D528F3F6880CF56B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e6:20:13:9b:63:ce:58:94:90:e5:05:35:95:
                    9d:60:d5:0d:ee:98:43:72:bf:91:14:6e:7f:ae:4c:
                    d0:fb:58:5c:fb:e7:23:d2:60:91:b5:b7:f0:85:f9:
                    71:5b:e0:09:2c:d4:7a:cd:f2:61:06:e5:3b:2e:c2:
                    fa:df:7b:4c:f9:f3:e7:50:62:e5:31:af:14:4c:70:
                    27:69:c6:ff:d3:03:9d:50:39:19:5d:5a:a0:0b:2b:
                    f8:f2:b7:ac:6a:b1:91:69:bb:b7:4d:f1:00:f2:4c:
                    0d:18:3f:ea:57:a4:8a:55:de:e4:0c:d1:ae:4b:57:
                    15:6b:62:6e:6d:55:df:9f:c0:c9:5c:87:9e:c4:71:
                    d5:4e:74:d0:25:50:12:db:56:ae:5d:11:a0:e4:7d:
                    f4:af:70:31:98:fc:b8:ff:36:85:8c:00:fa:be:07:
                    ff:c8:d3:af:d6:06:9a:d2:56:69:e1:15:3e:e0:3f:
                    8e:a6:4f:22:ab:17:a5:77:6c:3a:a5:6e:86:cd:85:
                    fc:e5:43:8f:6a:bb:81:29:e0:19:f4:5c:2f:c2:04:
                    62:7e:b5:a0:69:df:f3:a0:38:cb:ec:11:a0:de:40:
                    0b:dc:61:e7:0a:47:45:d1:f5:fe:7c:67:c7:38:9b:
                    d7:eb:8d:07:1e:f1:37:90:f1:7c:65:0d:b7:32:74:
                    b2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C4:13:EF:14:6F:3E:B5:79:20:A1:10:D5:28:F3:F6:88:0C:F5:6B
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f8:da:9c:92:eb:bd:f7:71:b8:f8:26:55:41:8a:f4:e5:04:
         cc:b3:fc:bd:9a:4b:e3:a2:ab:ad:b2:a0:99:71:25:ad:d5:99:
         08:56:b3:aa:29:b2:a0:74:81:f6:6e:4f:14:a8:52:30:47:d8:
         b9:61:fd:ee:42:17:fe:06:34:f5:03:b9:d7:df:f2:bc:5f:3d:
         ed:a2:91:71:85:9a:19:85:68:2a:82:de:13:28:ea:ce:26:a5:
         6a:75:e9:42:7e:d7:c8:45:a9:94:2d:e6:d8:28:5a:8f:b4:a6:
         c0:59:7b:a3:73:b6:c9:2b:ab:83:eb:85:38:83:28:b1:79:82:
         c5:d7:18:32:27:cb:9e:72:da:87:cb:70:a3:76:f7:b4:23:3d:
         bd:55:d7:b1:b9:11:19:95:f6:7f:fa:96:10:be:a6:13:84:59:
         ee:71:8a:c0:af:f5:7b:19:c1:05:72:a4:9c:93:bb:dd:06:5e:
         26:de:47:3e:ae:50:17:cc:10:16:cb:2d:4e:4d:e5:78:73:b9:
         b7:2f:ac:88:b0:6b:67:36:b6:5b:6a:61:60:99:8f:63:d7:cd:
         10:7e:5a:7e:36:5f:77:3a:a7:f2:67:9d:d9:bc:ad:cc:c7:7f:
         bb:81:95:c9:fa:0c:0e:11:3a:62:fa:41:9d:de:20:fa:3c:f5:
         7e:cb:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:43 2025 by rpki-client