Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File:                     3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier:          E0ypW/vAeWzhuzUB8aevTM8C78/d6boTY1EpwwyBQD0=
Subject key identifier:   34:74:84:F1:C3:27:69:FB:1F:97:AD:D8:F1:CB:78:15:7F:D9:81:9E
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       3C11AF30CE3EE4EA1A589A2F29E8F616F8A57F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number:          04E3
Signing time:             Sun 25 Oct 2026 13:24:04 +0000
Manifest this update:     Sun 25 Oct 2026 13:19:04 +0000
Manifest next update:     Mon 26 Oct 2026 14:40:04 +0000
Files and hashes:         1: AS9304.roa (hash: fL5MH2zhS62XmnHpLWm3BYhgNfOfrVbDJyeiA8Nbdmo=)
                          2: AS7029.roa (hash: LNpotZy4Xd78zNyYSAPBKx5qCBaXbji0m0T6N0Om+PQ=)
                          3: AS203090.roa (hash: AtZQiXBdWfevJeS9ni8F5oxZwYfsEjJFqy+rO2NW5P0=)
                          4: AS212027.roa (hash: mwTmCqgr/BINwa+LRLW7yo0HSDw8DAufEvQaH4pf++8=)
                          5: AS16509.roa (hash: TZaso8O1mBIsvh6LRG6GIj/6hyWmaWTZBE1WFlLb3Uw=)
                          6: AS208545.roa (hash: EXsxDT665iD+A3CM8pHZF0iPzZmKCcnLPW/HZGIm+WY=)
                          7: AS218780.roa (hash: fRh6VVgJDnzXWAcZKV8uyK9gxBpDYm8uiC7ihNT5BnU=)
                          8: AS152726.roa (hash: r9e5weORdSj3QpMZ9KPd0qVwsCFWUPGHmEvLzlFSGrE=)
                          9: AS174.roa (hash: emkybcUOP7mXyXUP8EkhnVHXE5wFezPALIrQeEBfrag=)
                          10: AS16276.roa (hash: 5c47yRX8sKbfs5icPJxN831sp6h6MSWbBvEuXw5p5uE=)
                          11: AS216138.roa (hash: C7rcV7oiPlI+oPnXML1Ct/QhSn1j0eN8y938N5o2x0c=)
                          12: AS8820.roa (hash: DzCHT9hefZEbLyVKRengSck6pje5aRTj8oUekfaWSLI=)
                          13: AS214432.roa (hash: ZOZVU0gaB1zLrogTsATuG/tPO3vQAEUVKlSRdlaQ6PY=)
                          14: AS152672.roa (hash: 24CV6i0q0PLEjF37/NGv/norWYAfvb/T4LhYn9c7r4I=)
                          15: AS218797.roa (hash: 1gI6RSTTZZSgUJ6+NmtPNQIELMhuD7wtkosHo2G6gcY=)
                          16: AS25198.roa (hash: e/ApHINhC/YRu0sK0KfV2kMflIgIJK6s4uRSAtQa6yY=)
                          17: AS197213.roa (hash: m24hawxS+c+IptS6tO7BZTjRFDwOhR1Z2/CpE9EYHf0=)
                          18: AS212238.roa (hash: N89YlRznWlYXhMwAGglqZH3OEPPtAbjwAeHWAiVsRTQ=)
                          19: AS3214.roa (hash: jdza9PJ3CeFkyeGfFz9cYPmh+OJHouTGbuicXyr4m1M=)
                          20: AS14618.roa (hash: AVy/MTTJtlfXtFJhySN/YcD3NqU2V9RR9Nz/gM8xuAU=)
                          21: AS13347.roa (hash: ePmHeORHlOZbB5pF6OuvLKOgbTni3yT91/Kj8L1N+XE=)
                          22: AS395793.roa (hash: 072Af//FGf2COy0anYSUB24XVoRiWBVL1/HQX0lTH38=)
                          23: AS20326.roa (hash: hZnA9AJQ8LccJ1+YPDxK01q3EKKoKcwlaINXLkEch4s=)
                          24: AS219217.roa (hash: fxg/BZj5g7AKYTzjHEQ3dTbX49zcxtqWB630qxBN1Cg=)
                          25: AS152179.roa (hash: YcViGnpRAt1Q1T/OsNGRarhbBZvtU6D9q0ZOQucaJAw=)
                          26: AS19429.roa (hash: MOJDEFsxIGPKn08kavJSaKsfq/WTlf7gy32ERKiA6Jo=)
                          27: AS30088.roa (hash: fi5h1XhSVP5bIlglUWEflB5z/S2ablziBGRj7yb+JBE=)
                          28: AS151338.roa (hash: AmYhZvwfJAE0DPXyieEiLJvQUIOvIThQ5FEeciWlPxE=)
                          29: AS834.roa (hash: VUuaxwBv3o/NTT2EiSIGyfhnp0nLT1Hf9e6KDkbBrzA=)
                          30: AS8075.roa (hash: 3cTQjOtMW6GJ/xtwZDOiPHB2SP8DZODC+kIloQS9S2s=)
                          31: AS60128.roa (hash: wa4cIQNPWnzU7hUrUn58xARa+9FlY0wMiBco7gr3ZEw=)
                          32: AS2914.roa (hash: 2t79Dc48lM1NRGFZZiYzebTrp5NOXQIczJ6i0MsJxLQ=)
                          33: AS199030.roa (hash: +l1jGMTwf7+wGU2Clp1Ezh0EMeN82sJqUUud7mGDeS0=)
                          34: AS402475.roa (hash: LAHRpQwK0oJi5BSDJs5jT+GSmLxnatizBWGDDxvly3Y=)
                          35: AS147281.roa (hash: nd8WE3Tw/fviIpY65PS22BP/+nksCvYOMLXdYRexSzw=)
                          36: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=)
                          37: AS32132.roa (hash: BoBvNY/WJCk2Mc0mHAc39NhaN2in8vZf3gTCPvr2V88=)
                          38: AS214483.roa (hash: 549KWAruPIwRewMoeCJz2Q7AKkWNgR7Odnymn+SK9QM=)
                          39: AS60123.roa (hash: waKSX3kLZPrsyaZzRZJdMv2qcFW94Fi4IaZoXhlRuu4=)
                          40: AS214271.roa (hash: UCHe29xFLtQ1gAzjWXNiHJ8NKs1aDAGPAzVxEhJG8Do=)
                          41: AS397630.roa (hash: fiCi5UsMCspeqdFSwclp5/nVWvZUKOzwdyg8GsO+anM=)
                          42: AS5650.roa (hash: hJ59++XEh/bB7KaM3MbLki+q3w5S1Bpq98TiOIgbSpU=)
                          43: AS402866.roa (hash: ID25UVR/G2cFfypX1E46z5udcU4h2H4GKx7+BhZZq4Q=)
                          44: AS55201.roa (hash: hHr+QQMrwUqQRqvT6GASepW5HYeplmwByVzCIF+VicQ=)
                          45: AS153383.roa (hash: vCi6FQYQWKC0ggluWhyMgm6QAvKbEiJEf7VAiTXWA9c=)
                          46: AS218799.roa (hash: VzYZMrck7GzcfCRo+kytdpW3DO9KRQOoXVrI20dCG1w=)
                          47: AS197537.roa (hash: Vv/geVTG5FCGVmbMBJLxtEM23lz1FomP0ERHUKJVTL0=)
                          48: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: nbSoTD4iBnmpEe5oqFVqWyzO5HY3911PSqP0TxWu+w8=)
                          49: AS399073.roa (hash: WVbCJHWiNZRHGmJNGzgiysG5FC/81As2A7As9yWVYEA=)
                          50: AS201002.roa (hash: b8ZITxaPgT55292RXOwDGuMuOURRGinQZs7OnZ+k958=)
                          51: AS42831.roa (hash: BCWrnj/JiU+VUZoOyWOqbE0NUMJ5Sl3BYNdffweZa78=)
                          52: AS979.roa (hash: FZzJe2WIOW2H+2QQXXeyLNaDLIbIRMw30pYDhaF+Xg0=)
                          53: AS218965.roa (hash: lX91zUEspkKRCI1oyzM6eOQQpxN2f9FJ+XRFbIpVa+A=)
                          54: AS61244.roa (hash: tx+MizKBhdMazdXKX+OUiYPvw9h3S4+md2sq9Qmz5yg=)
                          55: AS198566.roa (hash: 4boVHaLlCy7AeN2MW7kaoecmRvvRQ0JrzqUnks5pUGs=)
                          56: AS200213.roa (hash: jHsWgHO4WsK8UwfX+EGNaRyozPf8mcg2Dl9LXjUSJHU=)
                          57: AS48529.roa (hash: sJ45dfFVodPhRxdb0JyOxMSCrixBQNlBAeJLRTx5cnI=)
                          58: AS9009.roa (hash: Uw1SUj3qHKiQ+ByPYk1sxAxNALDfZPF2cAWmoq+ZfXY=)
                          59: AS215748.roa (hash: 3x6iarwKX82be+ibel0x8bpdtYPfZ1tvpFoGL1m1VtU=)
                          60: AS23532.roa (hash: aAn6W1nHAFh7NVqf0hfGrkzonEVGDCr4wgZgQ4dxQnY=)
                          61: AS399631.roa (hash: 2FOLE3PPvFUhGWQGS93WxJslXGYvOaG2Q0uliqKb9Gc=)
                          62: AS57043.roa (hash: yi2TQH7e8B1igP9vlOWRBdOwKO17dHiy8BYSk3P4gjo=)
                          63: AS5065.roa (hash: atPI+WaWV+J+odkHEVuRYBp70O4LKqLtSXvb4R88c1s=)
                          64: AS218736.roa (hash: ai4Bd+OvDcDIO4ai8D9jf66bCCOqcjZK8QkFC/wskwU=)
                          65: AS202736.roa (hash: 7TAfkeSnlmZZjOEwdkgs/It5zMPmWXmgqhW5G50dNbw=)
                          66: AS206300.roa (hash: BqXRE4Q1/U0lRDzyBl10U1oPqEdOfFYFOggxrxr8LNw=)
                          67: AS274983.roa (hash: zuwMv4yGw69KylZrvgblV7msd/PtImDMbugEiS85suc=)
                          68: AS12083.roa (hash: MUe2cqtFEnaNoT3tD8wok4X+5BCnUWDTrUI/cBFsEiI=)
                          69: AS212980.roa (hash: Zoz/8g4QJTKbhJZrHf9/7XdXmBbc4ng74YzPeFjoYNk=)
                          70: AS199550.roa (hash: ssNHTzba22P3fSR/hkFMsopCuACVXS1jz2fvBlI58Mw=)
                          71: AS137409.roa (hash: X6yg0POX/fvoKs44kRzPGZyVPWwkQY4silLD8bs9mA4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:11:af:30:ce:3e:e4:ea:1a:58:9a:2f:29:e8:f6:16:f8:a5:7f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Oct 25 13:19:04 2026 GMT
            Not After : Oct 26 14:40:04 2026 GMT
        Subject: CN=347484F1C32769FB1F97ADD8F1CB78157FD9819E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:bb:b9:2d:06:b4:d0:ec:8c:9c:85:11:26:
                    b0:b5:5c:50:00:77:86:ce:b7:7a:55:b4:0e:d6:11:
                    d2:20:d3:d0:91:a6:49:4e:bd:9d:20:f0:da:de:7d:
                    61:15:ef:d4:93:d3:c7:44:de:5e:5f:5c:b5:d5:a3:
                    b9:ed:29:79:80:c2:f0:af:b4:4f:6e:ba:5a:cc:b6:
                    4b:5e:0a:17:13:db:12:4d:8b:fb:bf:76:4c:a1:9a:
                    40:a2:de:f9:52:ea:b8:e8:34:7c:4d:63:16:ee:24:
                    3e:0b:89:69:4f:2f:a5:a8:9e:9b:fb:86:0f:b5:ae:
                    92:41:67:ae:7d:85:fd:6c:e0:49:6d:28:03:c6:5d:
                    54:0b:2d:61:7f:6e:99:80:ca:1b:0a:3a:44:4c:c2:
                    98:77:94:bb:2e:82:59:a0:5e:61:52:cf:d3:e2:d5:
                    99:a7:75:6b:e7:1e:03:5c:bc:18:f8:8b:a1:19:f4:
                    0f:fe:62:01:67:81:0d:ef:ce:65:6b:bd:f9:af:36:
                    da:e3:14:9f:6f:94:f1:68:9e:54:70:58:ad:a6:16:
                    74:9a:28:80:ca:5e:8a:81:97:34:db:39:aa:1f:ab:
                    79:ec:c7:de:3a:9c:33:fc:82:63:1f:43:05:47:0b:
                    6d:d6:20:1b:a4:24:96:89:2a:8f:5e:d6:f7:2d:73:
                    c4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:74:84:F1:C3:27:69:FB:1F:97:AD:D8:F1:CB:78:15:7F:D9:81:9E
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:49:ea:31:b5:b0:03:e6:d9:43:44:69:ee:22:f4:cc:da:15:
         e5:03:fd:ae:2d:56:c7:7e:cc:56:68:3f:21:2a:5a:3c:08:f7:
         2a:93:81:46:36:55:40:61:e7:62:82:af:f0:0d:ef:0f:39:9b:
         c4:21:77:70:cf:e8:ba:1c:34:eb:52:c9:eb:f4:1c:d1:f0:f3:
         a4:59:e0:5e:56:c5:89:83:ac:19:64:ec:dc:2e:3e:8e:1a:dc:
         f6:ca:cc:d4:b6:bb:4d:cd:74:28:a4:1f:3d:cb:a1:7b:88:e4:
         8b:89:97:92:3f:0a:86:ba:bc:5d:f1:2d:9a:53:e3:96:1c:c8:
         ad:40:ae:e7:cc:d3:6b:df:1a:f9:7f:87:b4:d7:ec:39:71:f0:
         28:35:62:7d:6a:72:8f:61:0f:bc:d0:fa:03:78:0d:aa:3c:6e:
         92:f6:e6:da:bb:89:5f:40:c7:b2:db:43:65:5a:e5:45:2c:e4:
         d9:b9:c7:fe:1b:0c:25:ea:5a:6e:98:05:9f:ac:c3:40:ec:57:
         94:03:0d:15:ba:68:30:cd:de:40:da:a7:be:0e:41:e7:01:2e:
         8e:5f:c8:0f:38:b1:17:9e:49:93:48:f0:06:48:5e:26:97:55:
         a3:30:6b:b4:07:b3:e6:b6:f7:91:15:cf:aa:be:06:4e:dc:44:
         f3:2d:f9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:44:25 2026 by rpki-client