Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File:                     3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier:          5SpG5qKNNGAzdKQN9gXNNxg4f693pEAcNlGXLOLsag0=
Subject key identifier:   EB:A7:78:BA:29:06:6D:C8:4A:82:53:E5:A3:5D:89:F6:5D:19:3A:20
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       36A379A67F87300F1EC353215AE6B81E7D76F1D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number:          0335
Signing time:             Sat 06 Jun 2026 07:10:36 +0000
Manifest this update:     Sat 06 Jun 2026 07:05:36 +0000
Manifest next update:     Sun 07 Jun 2026 10:29:36 +0000
Files and hashes:         1: AS2914.roa (hash: 2t79Dc48lM1NRGFZZiYzebTrp5NOXQIczJ6i0MsJxLQ=)
                          2: AS151380.roa (hash: DWrw1cQL1rZGcNIo3Oa+sQmgrclneYZFXQz9jD/Enc0=)
                          3: AS20326.roa (hash: bjlCs1cn8SZvrAA+XVOeFzTEEDwkFKKTeVLvOLa+FN0=)
                          4: AS152179.roa (hash: 3s5ZO5zsIBGOTYB/W7LkLPPbBTA+gesfrHvDmlpyA+0=)
                          5: AS151338.roa (hash: +BJQLRRwoI7mKYvkrnOiI851mZkxQTi1mnbnlIrD/ic=)
                          6: AS216138.roa (hash: C7rcV7oiPlI+oPnXML1Ct/QhSn1j0eN8y938N5o2x0c=)
                          7: AS214432.roa (hash: ZOZVU0gaB1zLrogTsATuG/tPO3vQAEUVKlSRdlaQ6PY=)
                          8: AS31924.roa (hash: WUGyoaTRPUZMT772GxrJ0EUaM0KNjehelnb2JiK13ZE=)
                          9: AS399073.roa (hash: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=)
                          10: AS209349.roa (hash: fuWxA00hn5w6KkPZVbdz2MgJjspkZh1ySmS7ZUVrwBM=)
                          11: AS8820.roa (hash: 37NLowiuT9jy/dagftAxkW62Xv5potfYYsy61mpYIOM=)
                          12: AS203090.roa (hash: AtZQiXBdWfevJeS9ni8F5oxZwYfsEjJFqy+rO2NW5P0=)
                          13: AS3214.roa (hash: jdza9PJ3CeFkyeGfFz9cYPmh+OJHouTGbuicXyr4m1M=)
                          14: AS64267.roa (hash: 9NR5KgAXq7OBNV4qYToFoteMTZc+d/n3KSlEv7KRAOE=)
                          15: AS214271.roa (hash: Ryxr7X7Ltqo6eG8diqWyYYKBcmlEtpuVl7WOq2jpWd4=)
                          16: AS209557.roa (hash: jDjRhaImqPxwgVUI1E6Opbkz4Zjula5zv/YhRqqwFSc=)
                          17: AS152672.roa (hash: 24CV6i0q0PLEjF37/NGv/norWYAfvb/T4LhYn9c7r4I=)
                          18: AS215748.roa (hash: 3x6iarwKX82be+ibel0x8bpdtYPfZ1tvpFoGL1m1VtU=)
                          19: AS200213.roa (hash: jHsWgHO4WsK8UwfX+EGNaRyozPf8mcg2Dl9LXjUSJHU=)
                          20: AS212238.roa (hash: 0IyslS3CG8KwMKdb6hG7WmS6/jX6BN24to036ny5Oec=)
                          21: AS402265.roa (hash: tAbI5PC+1Juw0kwtXVfvE3llWUP5kEZdlF6L1XQ7yGQ=)
                          22: AS55201.roa (hash: hHr+QQMrwUqQRqvT6GASepW5HYeplmwByVzCIF+VicQ=)
                          23: AS202736.roa (hash: mvaFQ8VzOiSlC6osU1pagjFGEUjuXEDkXWP0QHArhMs=)
                          24: AS212027.roa (hash: mwTmCqgr/BINwa+LRLW7yo0HSDw8DAufEvQaH4pf++8=)
                          25: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=)
                          26: AS60123.roa (hash: QtgZXfsHBEnogO7UuZmZIr/ZqG9Z8/NgNBqi4sK9HBo=)
                          27: AS42831.roa (hash: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=)
                          28: AS153383.roa (hash: vCi6FQYQWKC0ggluWhyMgm6QAvKbEiJEf7VAiTXWA9c=)
                          29: AS197537.roa (hash: JP3hx/IAvQ4SgOvsKr86baQJpbUUMchlqabqd0xftz0=)
                          30: AS61244.roa (hash: rBybT6KNUveYSpFmW0LV7SLnrcp5d5Ac6NXXIFW7N3g=)
                          31: AS214483.roa (hash: 4KtpSOnc/KWvq+zimWh8U+q+OC78oZRQovYOuN+I9XY=)
                          32: AS16276.roa (hash: EKpXTe4ys8FkDLvAjnRFYuDnQiF1p8xjjP1Ye2+AROI=)
                          33: AS13347.roa (hash: Vcr6EeUXObLLwMTr/P281IyX4fwZYhwUt1AVEFcBuD4=)
                          34: AS57043.roa (hash: 5kt0gUPpPlXUEkEZgXCUZ1bMA7kcongFeMkYDKoEOqw=)
                          35: AS151389.roa (hash: zl1L0GjfclEF/EG3ikjpKhjmIU3PKArvq2Xg/t/v1GM=)
                          36: AS7029.roa (hash: EQdsNpFUDlB6ynhRTbcYQBl7UF6yGjIXmjLtDYAN+1w=)
                          37: AS201002.roa (hash: b8ZITxaPgT55292RXOwDGuMuOURRGinQZs7OnZ+k958=)
                          38: AS9304.roa (hash: 7XYNjjnANlzyMDeCMMT0/RquRpkVauXBqm78vZthU+c=)
                          39: AS54252.roa (hash: LRBKfU3oZxsRDvjiCU60FMM0ioGajI+vpwmOzUPhljM=)
                          40: AS23532.roa (hash: aAn6W1nHAFh7NVqf0hfGrkzonEVGDCr4wgZgQ4dxQnY=)
                          41: AS208545.roa (hash: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=)
                          42: AS32132.roa (hash: AnbuErehQXFxV+kWQt2eul6q993RKYVkoz7/H8Ifyq0=)
                          43: AS395793.roa (hash: V5JEB7lz8FwA4enu53vGQgB/6Qx37KJCclmB6l2ZUq0=)
                          44: AS60128.roa (hash: LYwh4MoU7+i8XzsRvFs92IcyFCoJKzZY9vGXelEbElA=)
                          45: AS197213.roa (hash: iL160cQWNKHUy0vcqvlXB/T1DNAiTLZPMxsviVmWBAM=)
                          46: AS3320.roa (hash: 7KiC6+ZiUCIr0Twuc/O3EcLxGIvxYh8ifHqUangt8nQ=)
                          47: AS212980.roa (hash: Zoz/8g4QJTKbhJZrHf9/7XdXmBbc4ng74YzPeFjoYNk=)
                          48: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: qZVL37TaRzUeRbtdUhSdhXJ2cHTGYFC69jkRNMj3BaM=)
                          49: AS9009.roa (hash: bsO+KEDdsh042ly3XKZ18x6W8Jx5Y/tMwuWQMMg9A7o=)
                          50: AS834.roa (hash: ayyLPsnr3EyNqtFq590ynxlBsg2eQr8nLraCce8KkxM=)
                          51: AS5065.roa (hash: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=)
                          52: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=)
                          53: AS203054.roa (hash: qCR5hcDA8rviEUmKV2FClxskw3ALMn63SR49c/Q2Hcc=)
                          54: AS5650.roa (hash: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=)
                          55: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a3:79:a6:7f:87:30:0f:1e:c3:53:21:5a:e6:b8:1e:7d:76:f1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Jun  6 07:05:36 2026 GMT
            Not After : Jun  7 10:29:36 2026 GMT
        Subject: CN=EBA778BA29066DC84A8253E5A35D89F65D193A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:da:e7:31:7f:47:d4:04:f3:ce:b7:5c:e0:62:
                    50:e5:a4:98:b3:84:4b:e2:93:7f:9f:a5:33:50:55:
                    41:85:61:99:96:17:d7:14:aa:06:14:82:69:5c:ec:
                    02:70:ce:4b:0e:fc:d5:ea:a0:49:84:25:b1:ba:76:
                    38:e1:7c:50:4f:2e:55:ac:0b:c3:5f:dd:73:5b:fa:
                    63:1f:62:9d:e6:a0:f6:47:14:e4:92:80:47:2b:0a:
                    dc:7a:30:40:c5:a8:ce:9a:3e:2a:52:10:df:3e:df:
                    d2:9d:f1:19:46:99:6f:46:41:52:18:04:ab:39:ab:
                    3d:1b:58:0b:e1:b5:37:77:7f:cf:4b:fe:ad:88:b1:
                    bf:df:03:8d:13:c5:ee:8b:dc:12:83:c8:bf:88:d3:
                    8a:57:b9:ce:4f:76:f9:de:d9:fa:50:7b:68:85:1b:
                    ea:a4:fb:ae:74:59:55:42:1f:fb:e3:82:93:78:a3:
                    f5:a8:fc:2e:5b:98:13:04:aa:62:14:98:0e:4b:59:
                    94:a9:5a:d0:94:32:ff:c2:c4:33:d0:be:6f:95:0e:
                    d3:41:b3:c1:9d:69:f5:95:86:1f:26:40:ae:7f:22:
                    55:77:e1:bc:22:b9:a9:3f:43:54:ab:73:30:38:15:
                    44:c7:8d:c5:64:d4:16:86:8d:11:59:de:38:ce:e0:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A7:78:BA:29:06:6D:C8:4A:82:53:E5:A3:5D:89:F6:5D:19:3A:20
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a3:d5:5d:70:13:b8:56:ad:7c:47:61:c5:d8:b8:59:91:9b:
         bf:b2:cc:e4:2c:10:c6:ed:d3:d0:9a:9b:fc:be:b3:ca:d9:db:
         5c:a7:23:35:a2:16:ca:f3:90:74:65:f5:3a:ca:1a:3a:e7:6e:
         bd:7a:60:7e:ae:f7:e7:12:0b:ec:b5:6e:db:4a:38:81:d8:0b:
         c7:d1:d4:f4:f8:75:17:c1:b0:7c:a0:20:7f:6c:7c:da:d5:5b:
         7f:42:79:ee:fb:97:3a:15:ee:7d:1f:7e:76:3e:5f:33:cb:c9:
         55:10:cc:df:e5:81:3d:aa:8e:e8:ca:5b:53:05:d5:b8:e5:f3:
         4d:22:50:12:a2:6a:38:dd:0f:37:46:12:5b:72:6a:cc:7d:09:
         b7:61:9f:a7:ba:a8:21:0c:75:ff:3d:28:da:47:7e:03:e8:6f:
         e0:31:2e:19:60:44:a8:ae:79:80:93:14:84:14:06:6a:fa:46:
         5e:71:63:e0:06:94:12:96:70:be:90:50:d9:f4:3f:11:78:53:
         47:22:34:62:1b:6f:df:d8:98:f9:97:01:ea:a2:ce:11:35:52:
         56:fc:fd:22:7e:29:56:8e:78:0f:de:19:2f:bf:16:57:27:06:
         01:db:27:68:09:e4:fb:a0:5b:a0:aa:6a:be:99:fe:b3:56:af:
         f0:46:77:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----