Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File:                     3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier:          C9cKZ+v3gyUMssDuyLXW8uq57lknfvAh7FXR4exA9Ho=
Subject key identifier:   1D:31:95:90:D0:4C:7E:FC:DA:2E:35:A5:F4:F3:59:6C:3D:40:04:02
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       1EA57DEE30973262468359CE1C98D2EE7D3EEDA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number:          0233
Signing time:             Fri 06 Mar 2026 20:26:38 +0000
Manifest this update:     Fri 06 Mar 2026 20:21:38 +0000
Manifest next update:     Sat 07 Mar 2026 23:40:38 +0000
Files and hashes:         1: AS64267.roa (hash: 9NR5KgAXq7OBNV4qYToFoteMTZc+d/n3KSlEv7KRAOE=)
                          2: AS399073.roa (hash: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=)
                          3: AS48266.roa (hash: 5XHsHWtEphXEUuyM9GSRd9gYVMapRAebR1SxMatNo3k=)
                          4: AS47690.roa (hash: Vh1Ty7tlH+VOQXMAOOcicLwKUoXs0XqB/ZQhqHasRzU=)
                          5: AS214025.roa (hash: FogOqjBd/pqOZk2o+FJtKIklp33wwQWO2Dy7T4wwFeA=)
                          6: AS401856.roa (hash: PcqYuWw+WLjFd7xYMMDLh2PknwsMH4AN2HIAPKmy7hg=)
                          7: AS212238.roa (hash: 0IyslS3CG8KwMKdb6hG7WmS6/jX6BN24to036ny5Oec=)
                          8: AS3320.roa (hash: J0gCdn8aWPQr54/0F/uediEv8Z8fjukYJoHGgqTaPFs=)
                          9: AS8820.roa (hash: 37NLowiuT9jy/dagftAxkW62Xv5potfYYsy61mpYIOM=)
                          10: AS214483.roa (hash: 6RqqmAQfiH5vxDsevnysTOwpoPe3+DXp3DMdAvOkobQ=)
                          11: AS152179.roa (hash: CLoHb65khJ/xkZgyKfE4QHe9gx+LzXYYD8aDDeekOmU=)
                          12: AS32132.roa (hash: AnbuErehQXFxV+kWQt2eul6q993RKYVkoz7/H8Ifyq0=)
                          13: AS215607.roa (hash: aEN59Wc1sVi2FLSpwvDtv0eo94DsoVyzU3FjhKwkevc=)
                          14: AS25198.roa (hash: CCnsq2vsfk775w/3K3jWx94uGydEOpfDWn7bLZtLzhg=)
                          15: AS834.roa (hash: 15Gs2cXMkYeC2y0VlXzZf9fv08+GzsHuORDxqRBHpas=)
                          16: AS61244.roa (hash: rBybT6KNUveYSpFmW0LV7SLnrcp5d5Ac6NXXIFW7N3g=)
                          17: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=)
                          18: AS60128.roa (hash: LYwh4MoU7+i8XzsRvFs92IcyFCoJKzZY9vGXelEbElA=)
                          19: AS60123.roa (hash: QtgZXfsHBEnogO7UuZmZIr/ZqG9Z8/NgNBqi4sK9HBo=)
                          20: AS9009.roa (hash: bsO+KEDdsh042ly3XKZ18x6W8Jx5Y/tMwuWQMMg9A7o=)
                          21: AS5065.roa (hash: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=)
                          22: AS13347.roa (hash: Vcr6EeUXObLLwMTr/P281IyX4fwZYhwUt1AVEFcBuD4=)
                          23: AS16276.roa (hash: KW9MPVc+GYoziUSGxGJkc9sN3s6o49VGu2rqobWKOO8=)
                          24: AS208545.roa (hash: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=)
                          25: AS20326.roa (hash: bjlCs1cn8SZvrAA+XVOeFzTEEDwkFKKTeVLvOLa+FN0=)
                          26: AS7029.roa (hash: EQdsNpFUDlB6ynhRTbcYQBl7UF6yGjIXmjLtDYAN+1w=)
                          27: AS42831.roa (hash: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=)
                          28: AS402044.roa (hash: TeXNOXPE0PZ4n/aRbVwNBzdg/LSUcNFTcaTL81QpG7c=)
                          29: AS214271.roa (hash: Ryxr7X7Ltqo6eG8diqWyYYKBcmlEtpuVl7WOq2jpWd4=)
                          30: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=)
                          31: AS206216.roa (hash: u7wkYxEC5ndWFvyXiBE7Cp4juVxJvsG5zlBy7AjbcGM=)
                          32: AS203090.roa (hash: 95D0Arn7lpyqFL3B8dufB9pDMQUEoH2IzMD4dnhwEvw=)
                          33: AS57043.roa (hash: 5kt0gUPpPlXUEkEZgXCUZ1bMA7kcongFeMkYDKoEOqw=)
                          34: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: weuj3yFt3T/seEgrkGounQlLNVsxCFAciMMs4fQwpWU=)
                          35: AS54252.roa (hash: LRBKfU3oZxsRDvjiCU60FMM0ioGajI+vpwmOzUPhljM=)
                          36: AS212980.roa (hash: Zoz/8g4QJTKbhJZrHf9/7XdXmBbc4ng74YzPeFjoYNk=)
                          37: AS203446.roa (hash: oqoiqzh1+ViDUf4HKID2vR8MgIa8o5lwgPwsNCMr93E=)
                          38: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=)
                          39: AS2914.roa (hash: 2t79Dc48lM1NRGFZZiYzebTrp5NOXQIczJ6i0MsJxLQ=)
                          40: AS202736.roa (hash: mvaFQ8VzOiSlC6osU1pagjFGEUjuXEDkXWP0QHArhMs=)
                          41: AS174.roa (hash: L29ZEQDEH3243d+/AQ2LR51XSuJJ5zMoUqLFbIzDgMI=)
                          42: AS5650.roa (hash: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=)
                          43: AS395793.roa (hash: V5JEB7lz8FwA4enu53vGQgB/6Qx37KJCclmB6l2ZUq0=)
                          44: AS206781.roa (hash: u5AtvuN8DZoybC5jmpdLGiJIsJAgQ1te19Ty/6LaNP8=)
                          45: AS401322.roa (hash: W4cMpPKmxhD6uwt7Rw0QCZ+NWoDsMZpiT0qHt8rao6I=)
                          46: AS197537.roa (hash: JP3hx/IAvQ4SgOvsKr86baQJpbUUMchlqabqd0xftz0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 23:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a5:7d:ee:30:97:32:62:46:83:59:ce:1c:98:d2:ee:7d:3e:ed:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Mar  6 20:21:38 2026 GMT
            Not After : Mar  7 23:40:38 2026 GMT
        Subject: CN=1D319590D04C7EFCDA2E35A5F4F3596C3D400402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8c:46:7f:1f:82:94:cb:0d:c5:7c:f9:b3:c4:
                    4c:52:aa:15:46:2f:d0:4b:81:e4:f2:99:fd:de:c1:
                    ef:12:eb:4d:ca:4f:2b:df:83:c4:36:06:90:70:6d:
                    a0:b7:52:b2:bb:9f:0c:84:c1:80:6e:c5:ec:d5:ef:
                    ce:70:53:b3:b8:80:d5:52:f5:1b:40:ce:dc:eb:22:
                    4b:ca:7b:d5:fa:c1:b2:a6:65:19:68:47:e7:9f:c1:
                    fa:9c:ba:6e:48:4d:1e:ee:6f:33:2f:fc:d4:aa:d2:
                    fd:59:50:99:db:14:9f:c2:ba:51:15:5f:d5:a9:95:
                    5b:4f:de:14:78:ba:b6:8f:a3:96:64:c2:24:83:c8:
                    80:04:be:75:5a:27:2f:77:d7:38:05:3f:e0:fc:47:
                    3a:3b:18:91:82:6d:ab:fb:21:5f:5b:f4:c9:f6:b6:
                    35:85:e0:59:30:c5:4f:8b:bb:93:8d:22:0d:46:3a:
                    1d:b7:b3:d1:4d:8a:85:a1:67:38:6b:29:50:86:41:
                    a3:27:44:cf:94:77:b1:76:e4:10:02:c0:85:b1:0d:
                    33:55:ae:d6:e7:dd:9f:5b:cf:55:fb:2a:28:a7:8f:
                    1e:cd:51:7c:e6:8a:c5:89:50:00:6f:34:42:f9:18:
                    12:4d:ce:12:e7:9c:ad:76:92:f6:80:d1:8c:27:83:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:31:95:90:D0:4C:7E:FC:DA:2E:35:A5:F4:F3:59:6C:3D:40:04:02
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:4d:66:62:2e:78:4b:20:77:3a:3a:1c:3e:eb:2e:e9:3f:b5:
         59:33:23:3d:76:2d:62:b4:7c:c1:21:b1:30:29:0f:30:54:40:
         24:5d:55:b1:f5:1c:4f:a0:89:03:25:41:f0:8a:42:01:e9:29:
         d2:b3:07:7a:69:03:e9:20:1a:8f:4e:a5:a4:da:6a:f6:c7:29:
         69:a2:c7:5b:c1:89:67:1a:0f:67:49:5d:4e:4d:97:18:17:4b:
         a8:60:06:53:01:bd:6c:2e:1e:b1:ec:f2:50:5d:f6:3f:d9:ac:
         15:0f:44:7d:c4:c1:f3:6f:1d:82:9b:60:f4:dc:ed:16:4f:2c:
         2c:c3:a3:b7:dd:6e:d3:c4:1f:fa:9d:32:90:58:78:2f:74:89:
         87:53:60:7f:bf:0a:4f:26:8c:4c:fd:52:b0:7a:ce:6b:f5:35:
         b9:b4:98:92:11:bf:49:cb:3c:c5:63:ac:6f:4b:0c:3c:8a:59:
         61:3b:6a:f5:29:b9:df:1d:59:1b:33:b1:c6:7d:4d:09:6f:b2:
         31:78:b7:53:88:59:42:53:23:cd:cb:9f:6a:6c:39:b2:86:44:
         19:23:72:2b:cf:22:ab:a3:ba:c6:70:79:14:bc:36:5f:8a:25:
         7f:bb:e2:10:5e:40:3e:2b:1e:91:04:4b:3d:e2:d0:d3:22:cd:
         63:fc:5c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:14:30 2026 by rpki-client