Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File:                     3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier:          zoodvtA324mN2jxgUhbVk4ig6kCdzPFJTI36E9mvnrw=
Subject key identifier:   2A:E9:A6:2F:B9:15:AA:8A:20:3F:79:DA:90:DA:0E:0C:C9:F9:36:7F
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       323CBAB9818EE92BA8020E63338FB50FBD3C7DF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number:          04DB
Signing time:             Wed 21 Oct 2026 13:41:47 +0000
Manifest this update:     Wed 21 Oct 2026 13:36:47 +0000
Manifest next update:     Thu 22 Oct 2026 15:23:47 +0000
Files and hashes:         1: AS214271.roa (hash: UCHe29xFLtQ1gAzjWXNiHJ8NKs1aDAGPAzVxEhJG8Do=)
                          2: AS60123.roa (hash: waKSX3kLZPrsyaZzRZJdMv2qcFW94Fi4IaZoXhlRuu4=)
                          3: AS199030.roa (hash: +l1jGMTwf7+wGU2Clp1Ezh0EMeN82sJqUUud7mGDeS0=)
                          4: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=)
                          5: AS137409.roa (hash: X6yg0POX/fvoKs44kRzPGZyVPWwkQY4silLD8bs9mA4=)
                          6: AS20326.roa (hash: hZnA9AJQ8LccJ1+YPDxK01q3EKKoKcwlaINXLkEch4s=)
                          7: AS212238.roa (hash: N89YlRznWlYXhMwAGglqZH3OEPPtAbjwAeHWAiVsRTQ=)
                          8: AS203090.roa (hash: AtZQiXBdWfevJeS9ni8F5oxZwYfsEjJFqy+rO2NW5P0=)
                          9: AS395793.roa (hash: 072Af//FGf2COy0anYSUB24XVoRiWBVL1/HQX0lTH38=)
                          10: AS23532.roa (hash: aAn6W1nHAFh7NVqf0hfGrkzonEVGDCr4wgZgQ4dxQnY=)
                          11: AS5065.roa (hash: atPI+WaWV+J+odkHEVuRYBp70O4LKqLtSXvb4R88c1s=)
                          12: AS197537.roa (hash: Vv/geVTG5FCGVmbMBJLxtEM23lz1FomP0ERHUKJVTL0=)
                          13: AS153383.roa (hash: vCi6FQYQWKC0ggluWhyMgm6QAvKbEiJEf7VAiTXWA9c=)
                          14: AS174.roa (hash: emkybcUOP7mXyXUP8EkhnVHXE5wFezPALIrQeEBfrag=)
                          15: AS42831.roa (hash: BCWrnj/JiU+VUZoOyWOqbE0NUMJ5Sl3BYNdffweZa78=)
                          16: AS25198.roa (hash: e/ApHINhC/YRu0sK0KfV2kMflIgIJK6s4uRSAtQa6yY=)
                          17: AS402475.roa (hash: LAHRpQwK0oJi5BSDJs5jT+GSmLxnatizBWGDDxvly3Y=)
                          18: AS979.roa (hash: FZzJe2WIOW2H+2QQXXeyLNaDLIbIRMw30pYDhaF+Xg0=)
                          19: AS19429.roa (hash: MOJDEFsxIGPKn08kavJSaKsfq/WTlf7gy32ERKiA6Jo=)
                          20: AS60128.roa (hash: wa4cIQNPWnzU7hUrUn58xARa+9FlY0wMiBco7gr3ZEw=)
                          21: AS214432.roa (hash: ZOZVU0gaB1zLrogTsATuG/tPO3vQAEUVKlSRdlaQ6PY=)
                          22: AS48529.roa (hash: sJ45dfFVodPhRxdb0JyOxMSCrixBQNlBAeJLRTx5cnI=)
                          23: AS147281.roa (hash: nd8WE3Tw/fviIpY65PS22BP/+nksCvYOMLXdYRexSzw=)
                          24: AS55201.roa (hash: hHr+QQMrwUqQRqvT6GASepW5HYeplmwByVzCIF+VicQ=)
                          25: AS12083.roa (hash: MUe2cqtFEnaNoT3tD8wok4X+5BCnUWDTrUI/cBFsEiI=)
                          26: AS274983.roa (hash: zuwMv4yGw69KylZrvgblV7msd/PtImDMbugEiS85suc=)
                          27: AS3214.roa (hash: jdza9PJ3CeFkyeGfFz9cYPmh+OJHouTGbuicXyr4m1M=)
                          28: AS61244.roa (hash: tx+MizKBhdMazdXKX+OUiYPvw9h3S4+md2sq9Qmz5yg=)
                          29: AS9304.roa (hash: fL5MH2zhS62XmnHpLWm3BYhgNfOfrVbDJyeiA8Nbdmo=)
                          30: AS202736.roa (hash: 7TAfkeSnlmZZjOEwdkgs/It5zMPmWXmgqhW5G50dNbw=)
                          31: AS2914.roa (hash: 2t79Dc48lM1NRGFZZiYzebTrp5NOXQIczJ6i0MsJxLQ=)
                          32: AS197213.roa (hash: m24hawxS+c+IptS6tO7BZTjRFDwOhR1Z2/CpE9EYHf0=)
                          33: AS215748.roa (hash: 3x6iarwKX82be+ibel0x8bpdtYPfZ1tvpFoGL1m1VtU=)
                          34: AS218736.roa (hash: ai4Bd+OvDcDIO4ai8D9jf66bCCOqcjZK8QkFC/wskwU=)
                          35: AS218965.roa (hash: lX91zUEspkKRCI1oyzM6eOQQpxN2f9FJ+XRFbIpVa+A=)
                          36: AS402866.roa (hash: ID25UVR/G2cFfypX1E46z5udcU4h2H4GKx7+BhZZq4Q=)
                          37: AS397630.roa (hash: fiCi5UsMCspeqdFSwclp5/nVWvZUKOzwdyg8GsO+anM=)
                          38: AS206300.roa (hash: BqXRE4Q1/U0lRDzyBl10U1oPqEdOfFYFOggxrxr8LNw=)
                          39: AS198566.roa (hash: 4boVHaLlCy7AeN2MW7kaoecmRvvRQ0JrzqUnks5pUGs=)
                          40: AS30088.roa (hash: fi5h1XhSVP5bIlglUWEflB5z/S2ablziBGRj7yb+JBE=)
                          41: AS7029.roa (hash: LNpotZy4Xd78zNyYSAPBKx5qCBaXbji0m0T6N0Om+PQ=)
                          42: AS212027.roa (hash: mwTmCqgr/BINwa+LRLW7yo0HSDw8DAufEvQaH4pf++8=)
                          43: AS14618.roa (hash: AVy/MTTJtlfXtFJhySN/YcD3NqU2V9RR9Nz/gM8xuAU=)
                          44: AS8075.roa (hash: 3cTQjOtMW6GJ/xtwZDOiPHB2SP8DZODC+kIloQS9S2s=)
                          45: AS151338.roa (hash: AmYhZvwfJAE0DPXyieEiLJvQUIOvIThQ5FEeciWlPxE=)
                          46: AS152179.roa (hash: YcViGnpRAt1Q1T/OsNGRarhbBZvtU6D9q0ZOQucaJAw=)
                          47: AS9009.roa (hash: Uw1SUj3qHKiQ+ByPYk1sxAxNALDfZPF2cAWmoq+ZfXY=)
                          48: AS16509.roa (hash: TZaso8O1mBIsvh6LRG6GIj/6hyWmaWTZBE1WFlLb3Uw=)
                          49: AS13347.roa (hash: ePmHeORHlOZbB5pF6OuvLKOgbTni3yT91/Kj8L1N+XE=)
                          50: AS200213.roa (hash: jHsWgHO4WsK8UwfX+EGNaRyozPf8mcg2Dl9LXjUSJHU=)
                          51: AS8820.roa (hash: DzCHT9hefZEbLyVKRengSck6pje5aRTj8oUekfaWSLI=)
                          52: AS214483.roa (hash: 549KWAruPIwRewMoeCJz2Q7AKkWNgR7Odnymn+SK9QM=)
                          53: AS57043.roa (hash: yi2TQH7e8B1igP9vlOWRBdOwKO17dHiy8BYSk3P4gjo=)
                          54: AS201002.roa (hash: b8ZITxaPgT55292RXOwDGuMuOURRGinQZs7OnZ+k958=)
                          55: AS212980.roa (hash: Zoz/8g4QJTKbhJZrHf9/7XdXmBbc4ng74YzPeFjoYNk=)
                          56: AS218799.roa (hash: VzYZMrck7GzcfCRo+kytdpW3DO9KRQOoXVrI20dCG1w=)
                          57: AS16276.roa (hash: 5c47yRX8sKbfs5icPJxN831sp6h6MSWbBvEuXw5p5uE=)
                          58: AS32132.roa (hash: BoBvNY/WJCk2Mc0mHAc39NhaN2in8vZf3gTCPvr2V88=)
                          59: AS5650.roa (hash: hJ59++XEh/bB7KaM3MbLki+q3w5S1Bpq98TiOIgbSpU=)
                          60: AS399631.roa (hash: 2FOLE3PPvFUhGWQGS93WxJslXGYvOaG2Q0uliqKb9Gc=)
                          61: AS152726.roa (hash: r9e5weORdSj3QpMZ9KPd0qVwsCFWUPGHmEvLzlFSGrE=)
                          62: AS208545.roa (hash: EXsxDT665iD+A3CM8pHZF0iPzZmKCcnLPW/HZGIm+WY=)
                          63: AS834.roa (hash: 4P5jNNoeW6BW5Xurr2s33B3zoHeOEOB5CHfqCs2I7hM=)
                          64: AS219217.roa (hash: fxg/BZj5g7AKYTzjHEQ3dTbX49zcxtqWB630qxBN1Cg=)
                          65: AS152672.roa (hash: 24CV6i0q0PLEjF37/NGv/norWYAfvb/T4LhYn9c7r4I=)
                          66: AS199550.roa (hash: ssNHTzba22P3fSR/hkFMsopCuACVXS1jz2fvBlI58Mw=)
                          67: AS216138.roa (hash: C7rcV7oiPlI+oPnXML1Ct/QhSn1j0eN8y938N5o2x0c=)
                          68: AS399073.roa (hash: WVbCJHWiNZRHGmJNGzgiysG5FC/81As2A7As9yWVYEA=)
                          69: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: NtFYn0PzSbN0ou/W2hB2V0aSDcacITxXS7NZN4oRUgE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3c:ba:b9:81:8e:e9:2b:a8:02:0e:63:33:8f:b5:0f:bd:3c:7d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Oct 21 13:36:47 2026 GMT
            Not After : Oct 22 15:23:47 2026 GMT
        Subject: CN=2AE9A62FB915AA8A203F79DA90DA0E0CC9F9367F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:74:21:08:01:10:e6:5f:0a:25:55:20:51:34:
                    d3:92:ee:8a:2c:ce:70:ce:98:67:93:8d:79:20:af:
                    c8:9f:51:fa:58:f8:2e:ed:a9:ad:6f:47:f0:2b:9b:
                    0f:64:d7:08:90:02:39:08:c4:10:1b:c1:d9:cd:cd:
                    b1:2f:54:43:2e:0a:b7:02:a1:00:86:9c:52:63:a5:
                    fa:5c:cc:8a:2b:e1:d0:a5:24:60:44:3a:bc:9b:8b:
                    b3:e9:8a:52:28:5a:1c:32:b5:7b:30:f1:4b:5b:e8:
                    b9:34:b1:67:09:5d:cc:ec:3c:17:0c:02:3f:25:63:
                    bd:25:de:8e:a0:84:a1:68:40:a2:a5:e6:7d:e9:d0:
                    1f:cb:8b:fa:1f:2f:f6:90:5b:80:85:0e:cf:bf:a2:
                    20:21:a2:2f:93:e8:34:bd:74:4b:f6:dc:99:af:3a:
                    68:40:2d:83:3b:a7:fc:9e:27:e0:d8:27:ba:10:e0:
                    73:e7:43:3d:89:c4:90:3b:c0:0e:77:61:37:04:2a:
                    7e:a5:5a:3e:fa:59:8f:14:93:a8:b4:41:cc:23:a9:
                    d1:62:98:a6:a6:ce:ee:06:f1:da:1b:58:81:b4:ff:
                    ee:8b:4a:e2:88:57:08:da:9f:31:7d:3a:bc:81:87:
                    43:c5:8a:8d:88:6f:01:71:66:75:01:37:ae:77:40:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E9:A6:2F:B9:15:AA:8A:20:3F:79:DA:90:DA:0E:0C:C9:F9:36:7F
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:2c:fc:85:84:9b:02:46:7a:2b:a7:b0:56:b0:70:0a:2f:07:
         0b:8c:0d:46:ee:17:6f:2f:d1:02:6b:df:f7:db:86:93:3c:d4:
         a5:f0:05:cb:7b:e5:a7:79:07:b4:ec:c3:63:b0:31:06:f1:bc:
         75:19:70:ce:d1:c4:16:bd:f4:7a:cc:21:13:b7:3d:de:12:2d:
         76:7d:f3:be:7b:9c:3a:c2:95:30:1c:9a:d7:5c:7c:0d:15:a6:
         9f:b7:93:89:a7:67:db:13:6e:e1:7a:43:a0:22:1c:42:c3:ee:
         fc:41:d5:36:6e:9a:46:03:26:62:24:0c:c9:92:37:86:23:bc:
         c4:de:73:cd:41:a4:21:65:83:7f:3d:49:c5:31:a1:1e:ef:e8:
         26:2f:bf:3d:94:be:0f:54:3e:67:1d:79:db:7f:16:13:55:d7:
         92:79:a1:d3:ea:9a:15:37:d7:60:9f:7a:c0:62:1c:53:b5:cb:
         2f:f3:30:b9:86:32:20:0e:41:e5:66:04:4b:ad:41:10:8c:a4:
         62:24:e9:54:49:3d:23:ba:00:f5:58:a0:b3:f0:c9:54:ba:a1:
         91:df:a4:95:80:b7:af:60:54:26:d2:68:4e:8a:6d:af:7a:6d:
         79:c3:97:e4:6b:70:ab:7e:e6:ab:2a:ab:6d:ca:82:d5:50:4c:
         dc:04:ef:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:51:33 2026 by rpki-client