Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
File:                     3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json)
Hash identifier:          /3IymhizEKZ/zAo47NnkEMixshjppgoOb7PsEC+zrfs=
Subject key identifier:   78:B1:0F:65:07:03:2A:DB:9F:89:92:9E:8C:E5:91:38:A5:5C:4A:31
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Certificate issuer:       /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial:       33C7C1020DC2B044D17C3EA340C89B5A4E30282D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
Manifest number:          0460
Signing time:             Tue 21 Apr 2026 17:00:17 +0000
Manifest this update:     Tue 21 Apr 2026 16:55:17 +0000
Manifest next update:     Wed 22 Apr 2026 18:46:17 +0000
Files and hashes:         1: 36352e38372e3232332e302f32342d3234203d3e20323033363632.roa (hash: uDqsDbk+jAyhFocaRSPAMdO9Mr05b3roPn4X2XhRNdQ=)
                          2: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: AzYa7RDrX7Q1VHrLi8vFoQKqyqrJXx3reOTqmh9K+u4=)
                          3: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: fsC5R2jSf0zN6FKSYFtxtwVTHpeg2ZkeyTIcsF+VEMM=)
                          4: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: 5YTG/aX/q14ztW70EmkvpbUisFMjDuHcQHuueFeo4BU=)
                          5: 326131343a316563373a663230303a3a2f34302d3438203d3e20323036353430.roa (hash: qSdNZRVsblfNLTN5jWJzdVW0nG7dD+fw8GdvqXWqzCg=)
                          6: 326131343a316563373a663830303a3a2f34302d3438203d3e20323131303139.roa (hash: AGI7e/F2Snd3LJvhDdI7M6IquMMB8CwXmbzdMBVWefQ=)
                          7: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: CW97iqZhXof9oXzh23WU9MPYgheevo+XAjJxWsnvTm8=)
                          8: 326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa (hash: IUL9dWtw0Umsxfs7xwdo1JVZ6ulAsKal+ROC0kpiHgM=)
                          9: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: 26SEXU3Pd+BR8SHx6kufhwY94Io89XBTIVQPTTPnVB8=)
                          10: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: +6Y3KVlvaUJJZxInhCfF9G7aeXeQiHstagBkncM3DOw=)
                          11: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=)
                          12: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: XuQKj6LnTQvpgGqSnWZyBkgZgiMu2bqG4KDi3+Nxn60=)
                          13: 326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa (hash: s/Nou3yfPszN+70d0fh1KxFGk9lHz9YF1rBNojiEJcI=)
                          14: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: lKH4mtM4mbN517zmwoqLWw8tyiIkqEd3YjyFosJunqY=)
                          15: 326131343a316563373a663730303a3a2f34302d3438203d3e20323033363632.roa (hash: TXZSGetReOdbEu0rJcDlVY8E6EFEIEHEr5rTFcqv3xU=)
                          16: 39312e3139362e362e302f32342d3234203d3e20323135333138.roa (hash: j1BjBA5NyrZGkTgGio3bSgpZw6QFV9sBz2jgQ+DhB30=)
                          17: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: xZUrImBqLTyDeR72wpVM4lsAOoGQUUCtTTKhcbIof5E=)
                          18: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: l6K8Ipuv+LpAjKBvLV7xS+N25xPDi1Q5md9XNlMDt3o=)
                          19: 326131343a316563373a653030303a3a2f33362d3430203d3e20323135343637.roa (hash: 8zn5/SYYTxV7VwG8yZqKVCEQWHP2snDfA0WDaiSQRAU=)
                          20: 326131343a316563373a663330303a3a2f34302d3438203d3e20323132303835.roa (hash: /N5wUQJdysICqY/mrt3+ONpnXUY6EQuvRkeb07T1NVw=)
                          21: 36352e38372e3232322e302f32342d3234203d3e203430363633.roa (hash: mLclMCNMLbDiO2eCmAMru9Zn22BaYCw/mHBIgX3VJGc=)
                          22: 326131343a316563373a663830313a3a2f34382d3438203d3e20323131303139.roa (hash: q5taedROXWkWDrb/6D/rTI85VzK640g7YzLTCK454po=)
                          23: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: D7vq42LlJ1JkjKrlS8EXaLer6htaFFui19vj1Iz46+0=)
                          24: 326131343a316563373a663733303a3a2f34342d3438203d3e20313431343039.roa (hash: TPn5Qje9HW3EcfDEdBb6Zdaos4imk6wTDX53NehQb3o=)
                          25: 326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa (hash: D0UhxJixjH/6ED4b7asHdvZhN16xQRz9JstOKq1KOMc=)
                          26: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=)
                          27: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: 6sbDIpUdSHX0FTMOKlearYu/OQGfXVeJ+MaPKM9U7ig=)
                          28: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: yrmUkh2zhJT/xSP/7Jfi+g6f8lKZuHKQWMYNLFOV8/4=)
                          29: 326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa (hash: 3NaEQ7JEzM4oESWmvkMu3mTAfj7phWpZMjjU4RHfTkQ=)
                          30: 326131343a316563323a3a2f34302d3434203d3e20323135333138.roa (hash: 1f8XyNlehbCOnOttGzyrDosIHnqaI9sKAvrNf1ADCiI=)
                          31: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: jfvc4Qyrnftgf9GYsuLUox0bHp6mia0CtR4lMdTVrZY=)
                          32: 326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa (hash: 354DUYTmwYIpJ7s6pAfElMpcSbsG0UySE6atyDydlaw=)
                          33: AS215318.asa (hash: Cq1YNeZujV2DCB3+fofzEgyWvtRNnETlVqcvQ1iCKVE=)
                          34: 326131343a316563373a663930303a3a2f34302d3438203d3e20323131363733.roa (hash: eFx1IPRipEBged0ZijUlxcw0OO6jOfnGP3TjandnEEA=)
                          35: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: 6hKao63oIzBdls8N02e3UeaWWtVa56Xgit+XQJDfjec=)
                          36: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: wpdOSr6wb1B5p911Qa1PmNux8g1stpcpdfynkPskNSo=)
                          37: 326131343a316563343a3a2f33322d3430203d3e203535323031.roa (hash: J7TluaWBMRkzmoR+yQUgqy6TY9pp5e+qFllmxawGaBk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 14:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c7:c1:02:0d:c2:b0:44:d1:7c:3e:a3:40:c8:9b:5a:4e:30:28:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
        Validity
            Not Before: Apr 21 16:55:17 2026 GMT
            Not After : Apr 22 18:46:17 2026 GMT
        Subject: CN=78B10F6507032ADB9F89929E8CE59138A55C4A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c0:98:42:29:82:e2:d4:23:3b:8a:15:65:6d:
                    c5:ba:a3:94:96:6b:90:fe:43:d7:56:74:74:d9:2f:
                    9c:c6:e6:ca:59:5f:9e:e1:44:d5:54:79:01:12:4e:
                    12:32:dc:a4:5e:54:ae:f6:03:e0:50:2b:e5:7d:ba:
                    6b:05:04:b6:37:c1:3b:cf:42:02:b7:84:26:92:da:
                    5a:71:87:cb:77:11:c4:13:59:48:53:8c:5e:30:5a:
                    cc:17:02:83:fc:62:a2:40:62:c3:6f:dc:67:4a:ec:
                    d4:6f:2c:dc:bd:75:50:b7:df:cf:3f:18:80:73:ff:
                    58:b3:ea:48:a0:fb:ea:60:84:1d:6f:2e:f6:d9:84:
                    e5:29:bd:99:5a:5c:b0:c5:67:78:e1:ef:ef:0c:9b:
                    eb:09:52:87:55:bc:84:d7:a9:2b:0b:78:27:fc:57:
                    e6:0c:0a:de:72:31:60:11:f5:df:2f:f7:51:6c:e0:
                    47:9e:55:17:c4:b7:22:d1:6c:d1:30:dd:96:8d:87:
                    c5:f1:b4:7b:62:a8:8f:28:1f:7f:fd:7c:ff:91:e6:
                    57:3f:00:5c:76:e7:fa:60:02:55:56:73:42:13:a3:
                    4e:a5:c6:57:5f:d3:42:dc:f2:c1:41:7d:cf:3c:5f:
                    b1:78:16:63:35:e3:21:53:c5:d9:9e:c6:6d:95:83:
                    80:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B1:0F:65:07:03:2A:DB:9F:89:92:9E:8C:E5:91:38:A5:5C:4A:31
            X509v3 Authority Key Identifier:
                keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:96:9c:28:d8:0f:01:1c:3e:86:9d:b3:b4:a0:2e:50:02:0a:
         75:e3:64:49:90:7b:7a:cd:72:ee:cb:4a:d9:0d:2c:f8:10:3b:
         43:29:b8:d2:77:b4:6d:70:e7:7e:14:d7:23:f7:bc:7f:be:95:
         1c:7f:1d:fc:80:1b:f1:54:fc:66:08:4a:72:ef:2c:88:fa:d4:
         e8:e4:d3:ec:42:41:c2:f8:66:28:52:54:98:41:bf:00:5a:d8:
         bf:c2:f2:36:fa:19:03:c1:f8:ed:d7:99:c7:13:2f:94:7e:ca:
         eb:2d:d9:b4:8c:55:ac:6f:61:e2:82:9f:43:92:6d:e2:2e:49:
         e7:cd:f2:d4:e6:d6:46:3a:82:83:ab:39:e0:1d:26:a4:88:a9:
         9f:d6:51:ab:b8:5f:5f:b0:87:9d:3d:da:dc:df:fd:b3:cf:67:
         92:42:90:56:42:49:66:3d:4c:a4:99:a9:82:ed:63:30:31:b4:
         61:d8:3d:85:cd:38:d1:69:92:7b:32:08:68:f1:49:24:8f:e0:
         b3:3d:92:cf:80:d3:ff:16:a8:eb:2c:1c:9b:20:76:45:5a:7c:
         aa:e7:9a:55:bf:d8:9b:37:94:40:8c:fc:f0:fa:de:52:f7:51:
         7b:f7:f1:d4:76:47:82:f3:e5:43:f7:b0:96:5b:c5:5f:ee:4c:
         a2:94:83:26
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUM8fBAg3CsETRfD6jQMibWk4wKC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj
NGYzNTQzNDAeFw0yNjA0MjExNjU1MTdaFw0yNjA0MjIxODQ2MTdaMDMxMTAvBgNV
BAMTKDc4QjEwRjY1MDcwMzJBREI5Rjg5OTI5RThDRTU5MTM4QTU1QzRBMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCawJhCKYLi1CM7ihVlbcW6o5SW
a5D+Q9dWdHTZL5zG5spZX57hRNVUeQESThIy3KReVK72A+BQK+V9umsFBLY3wTvP
QgK3hCaS2lpxh8t3EcQTWUhTjF4wWswXAoP8YqJAYsNv3GdK7NRvLNy9dVC3388/
GIBz/1iz6kig++pghB1vLvbZhOUpvZlaXLDFZ3jh7+8Mm+sJUodVvITXqSsLeCf8
V+YMCt5yMWAR9d8v91Fs4EeeVRfEtyLRbNEw3ZaNh8XxtHtiqI8oH3/9fP+R5lc/
AFx25/pgAlVWc0ITo06lxldf00Lc8sFBfc88X7F4FmM14yFTxdmexm2Vg4AlAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUeLEPZQcDKtufiZKejOWROKVcSjEwHwYDVR0j
BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4
NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U
elZEUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05
OGE0LTRjN2UtYTBlMS04MDU3YTRmMDg2YzkvMC8zMTM0RUU5ODdFMDhEOEI1NTgz
RkVFRjYyMUEwMzE1MEM0RjM1NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpacKNgPARw+hp2ztKAu
UAIKdeNkSZB7es1y7stK2Q0s+BA7Qym40ne0bXDnfhTXI/e8f76VHH8d/IAb8VT8
ZghKcu8siPrU6OTT7EJBwvhmKFJUmEG/AFrYv8LyNvoZA8H47deZxxMvlH7K6y3Z
tIxVrG9h4oKfQ5Jt4i5J583y1ObWRjqCg6s54B0mpIipn9ZRq7hfX7CHnT3a3N/9
s89nkkKQVkJJZj1MpJmpgu1jMDG0Ydg9hc040WmSezIIaPFJJI/gsz2Sz4DT/xao
6ywcmyB2RVp8queaVb/YmzeUQIz88PreUvdRe/fx1HZHgvPlQ/ewllvFX+5MopSD
Jg==
-----END CERTIFICATE-----
Generated at Tue Apr 21 22:53:40 2026 by rpki-client