Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File:                     2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier:          1SKd6KjLxPqZmGIW/KnzTQRgFI7oiARDCHBui3P+SNY=
Subject key identifier:   A9:C0:74:79:E1:6A:83:C1:81:A1:A3:69:5F:4D:F5:4D:4C:70:23:2A
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       6602C01CA8511547C9751AE1B1214BF707B4F249
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number:          0CEA
Signing time:             Thu 23 Jul 2026 15:46:20 +0000
Manifest this update:     Thu 23 Jul 2026 15:41:20 +0000
Manifest next update:     Fri 24 Jul 2026 18:18:20 +0000
Files and hashes:         1: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: K8umBIyysIyTKzGAPqQYfyOuH8+F5WnTKQ7wEtfjocE=)
                          2: 323630323a663939323a62303a3a2f34342d3438203d3e20323134363330.roa (hash: PHjDJexK/Eklx6InBXxOBTRmjtOGLIjGAGFc7gbqZb8=)
                          3: 323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa (hash: Jp0C0pT8pWJqRBdKs6Z8Yx69PQ+TPEU5WL+UawocJjE=)
                          4: 323630323a663939323a66383a3a2f34382d3438203d3e203236323836.roa (hash: znzq1JNqY7nwa0VK1203olEAlMeBqmP7Bua598HbZwY=)
                          5: 323630323a663939323a64313a3a2f34382d3438203d3e203230343733.roa (hash: 2w2powaZlQJtb8QkEXb0ohWSFkr6EssBYE5641X43+A=)
                          6: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: e0fhRMu+yRz12dIijmE9iRjZQQKxfzNFVogUT3jtPD0=)
                          7: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: b0Y9KTtLcurzLdN0rHLtotfhQYSBbk9yeBAxIWe6UDM=)
                          8: 323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (hash: dIrRhUCsqIlQRkKASf3euKWdJjEjwQuOt/Ix4ZqqXVk=)
                          9: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: KWH8Ovuqx/y3H4AAJUNJvIHwsmgVGLp2CBK03qDVs7o=)
                          10: 323630323a663939323a66373a3a2f34382d3438203d3e2030.roa (hash: vzUfgaw6t33aMyp+BMlfruWNIdCIRwsxwR92D/70/Gg=)
                          11: 323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa (hash: PZcVyL8vIuz1TfPEqhA5pOHyLmlUeeqRgiDSdJ3aNe0=)
                          12: 323630323a663939323a66363a3a2f34382d3438203d3e203332303937.roa (hash: kE1kpmMDp8GjruAgtywhyzaN8hi23zrLAMHpXdRpJq4=)
                          13: 323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa (hash: iEqw6oJFOmidQ4uO2TC0uMGKQbiMPYv6XpkzxfqW6/I=)
                          14: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: YYf0/nCM78+V7tIM0LmBS6Dvc8Dkds5cV7+r3azqm7c=)
                          15: 323630323a663939323a66643a3a2f34382d3438203d3e20343031383132.roa (hash: wAfmyB2afeLBYzqnHSKyZpZAxNmFmG7YJ7nw05PKumo=)
                          16: 323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (hash: dfiSzAj0dxIHRnbrV3sYNv7QdmVgZOpy7/5qQbU3b3U=)
                          17: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: dhvuFNP+dKjaylM9bJGDtxRtOBzy7kE4O1dRl7JrhAc=)
                          18: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: wWs8ib9AxdStlITj+fRhlFovwHg1pfm3ljVihr6bW+k=)
                          19: 323630323a663939323a39303a3a2f34342d3438203d3e2030.roa (hash: aPsopjlXsO9PjZXI0aAo9bHjjiesxBjYYeoVF6XSASU=)
                          20: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: HhVByOYrx2S9pHnEb1O7wXoTQ+/5YLny6hPGL1uYyM8=)
                          21: 323630323a663939323a61303a3a2f34342d3438203d3e203433363431.roa (hash: VOrAFxco2wif90ptN+7JtyQbdIcEhDu8JRBfxWeM5AA=)
                          22: 323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa (hash: YcD6OJ+CkZWZoPFilNIvkHcy621Zn+qrN1B3xkNtwQc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:02:c0:1c:a8:51:15:47:c9:75:1a:e1:b1:21:4b:f7:07:b4:f2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Jul 23 15:41:20 2026 GMT
            Not After : Jul 24 18:18:20 2026 GMT
        Subject: CN=A9C07479E16A83C181A1A3695F4DF54D4C70232A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:2a:bd:b8:b2:e0:17:23:35:8a:32:69:1a:
                    cd:da:ef:44:44:78:58:9b:2c:1e:8d:61:5d:57:c9:
                    6b:09:ca:47:6b:da:db:c7:9c:4c:49:10:c2:3d:d9:
                    0b:69:1a:7f:90:78:fb:49:bf:6d:35:55:18:f0:e6:
                    35:d1:1a:06:64:ba:cb:a5:41:59:c0:6f:f6:2c:32:
                    65:36:5b:0c:79:28:61:9d:9b:8b:df:39:ca:91:3f:
                    c5:36:68:c6:30:a6:02:a5:3b:e6:89:c5:74:f3:c4:
                    e9:b6:a8:0a:e3:50:5c:dd:a1:7c:36:9e:52:5e:c2:
                    9b:88:24:00:eb:93:ff:c8:9c:00:c7:f4:d8:af:16:
                    b0:2a:29:70:5e:c2:82:ac:8e:4b:cb:db:b6:d0:00:
                    af:4d:8f:58:c4:2a:44:3b:46:80:15:a2:4d:54:4f:
                    63:44:c6:a7:c5:eb:7d:03:42:58:19:1b:19:40:0c:
                    b8:a0:f7:77:0f:f8:4b:3f:1e:7d:24:99:61:c1:2b:
                    d1:59:73:b8:35:26:3a:77:5b:47:48:e6:3f:d8:d5:
                    3e:32:6e:17:be:84:b3:df:28:c5:4d:97:33:c4:59:
                    16:a4:73:25:82:01:b2:d9:ac:65:a1:1a:1a:e8:c8:
                    a7:bb:64:f7:72:3d:dd:e1:76:ee:2c:13:7a:4d:be:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C0:74:79:E1:6A:83:C1:81:A1:A3:69:5F:4D:F5:4D:4C:70:23:2A
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:72:61:e4:13:4c:4f:0a:45:eb:e9:de:85:ea:1f:18:80:08:
         8d:4a:85:2f:c4:4e:ee:de:1d:6d:44:78:e8:60:e8:05:01:a3:
         65:e1:2f:9c:d6:7b:f4:d6:d1:e2:a9:3c:71:96:2c:12:0f:e6:
         e4:35:bc:1f:fe:12:9a:2a:20:f1:80:de:b7:45:21:29:ca:1d:
         1b:c8:5d:e2:23:72:8f:13:b9:65:3f:64:2f:45:e7:e5:10:f6:
         b7:4f:cd:6a:a8:32:62:c6:0b:c0:f4:76:d9:99:b9:c3:b0:f0:
         35:00:d2:99:d2:28:8c:b1:fa:0c:8e:eb:b4:85:68:a4:2f:4a:
         ff:83:ee:0f:08:ae:5e:d6:79:42:98:a4:c5:2a:73:f0:37:2f:
         5e:ad:e3:ea:b2:23:e6:8e:1d:70:97:9b:40:f3:2c:08:a4:0d:
         10:c0:11:b3:58:06:37:57:b1:cb:a2:e9:15:49:d1:12:9a:26:
         b1:cc:10:00:77:1e:76:bf:3f:85:d2:35:62:af:9f:bc:67:6b:
         ef:19:a3:f7:f9:9d:c7:4e:49:80:41:3a:2d:80:53:6b:b8:b6:
         c7:e8:b5:19:e4:13:24:68:00:cc:30:48:62:84:f5:ad:76:54:
         f8:d2:63:2f:4a:82:27:10:24:4a:92:e3:db:aa:e3:18:67:83:
         d0:ea:9d:f6
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUZgLAHKhRFUfJdRrhsSFL9we08kkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi
ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjYwNzIzMTU0MTIwWhcNMjYwNzI0MTgxODIw
WjAzMTEwLwYDVQQDEyhBOUMwNzQ3OUUxNkE4M0MxODFBMUEzNjk1RjRERjU0RDRD
NzAyMzJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuagqvbiy4Bcj
NYoyaRrN2u9ERHhYmywejWFdV8lrCcpHa9rbx5xMSRDCPdkLaRp/kHj7Sb9tNVUY
8OY10RoGZLrLpUFZwG/2LDJlNlsMeShhnZuL3znKkT/FNmjGMKYCpTvmicV088Tp
tqgK41Bc3aF8Np5SXsKbiCQA65P/yJwAx/TYrxawKilwXsKCrI5Ly9u20ACvTY9Y
xCpEO0aAFaJNVE9jRManxet9A0JYGRsZQAy4oPd3D/hLPx59JJlhwSvRWXO4NSY6
d1tHSOY/2NU+Mm4XvoSz3yjFTZczxFkWpHMlggGy2axloRoa6Minu2T3cj3d4Xbu
LBN6Tb6TLQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFKnAdHnhaoPBgaGjaV9N9U1M
cCMqMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5
LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD
MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00
OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4
MTc2ZmE0MzEwYjYzNTUuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
ODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzEvMkYwRjFCQzY3
REQyQjlBN0UyNTQ1NjM4QzE3M0Q1RUMwNjBDMjdEMC5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEZyYeQT
TE8KRevp3oXqHxiACI1KhS/ETu7eHW1EeOhg6AUBo2XhL5zWe/TW0eKpPHGWLBIP
5uQ1vB/+EpoqIPGA3rdFISnKHRvIXeIjco8TuWU/ZC9F5+UQ9rdPzWqoMmLGC8D0
dtmZucOw8DUA0pnSKIyx+gyO67SFaKQvSv+D7g8Irl7WeUKYpMUqc/A3L16t4+qy
I+aOHXCXm0DzLAikDRDAEbNYBjdXscui6RVJ0RKaJrHMEAB3Hna/P4XSNWKvn7xn
a+8Zo/f5ncdOSYBBOi2AU2u4tsfotRnkEyRoAMwwSGKE9a12VPjSYy9KgicQJEqS
49uq4xhng9DqnfY=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:34 2026 by rpki-client