Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File:                     3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier:          uQt2z9sPyEXcNKnm4ipaE5y/PsbORY6XZlipn4gvxgY=
Subject key identifier:   C6:35:1C:F7:92:EE:66:06:EB:B1:54:BC:0F:13:43:59:27:BC:2D:04
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       1011A0A54DAA4F8DE74BDB99850BE61D46E6F134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number:          04DA
Signing time:             Tue 20 Oct 2026 18:01:42 +0000
Manifest this update:     Tue 20 Oct 2026 17:56:42 +0000
Manifest next update:     Wed 21 Oct 2026 21:40:42 +0000
Files and hashes:         1: AS57043.roa (hash: yi2TQH7e8B1igP9vlOWRBdOwKO17dHiy8BYSk3P4gjo=)
                          2: AS197537.roa (hash: Vv/geVTG5FCGVmbMBJLxtEM23lz1FomP0ERHUKJVTL0=)
                          3: AS395793.roa (hash: 072Af//FGf2COy0anYSUB24XVoRiWBVL1/HQX0lTH38=)
                          4: AS151338.roa (hash: AmYhZvwfJAE0DPXyieEiLJvQUIOvIThQ5FEeciWlPxE=)
                          5: AS274983.roa (hash: zuwMv4yGw69KylZrvgblV7msd/PtImDMbugEiS85suc=)
                          6: AS214432.roa (hash: ZOZVU0gaB1zLrogTsATuG/tPO3vQAEUVKlSRdlaQ6PY=)
                          7: AS399073.roa (hash: WVbCJHWiNZRHGmJNGzgiysG5FC/81As2A7As9yWVYEA=)
                          8: AS212980.roa (hash: Zoz/8g4QJTKbhJZrHf9/7XdXmBbc4ng74YzPeFjoYNk=)
                          9: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: aXtn9YFUpdCRLbdNwNZ9xRSsnWtQcoHUB92cMYzfJvk=)
                          10: AS152672.roa (hash: 24CV6i0q0PLEjF37/NGv/norWYAfvb/T4LhYn9c7r4I=)
                          11: AS16509.roa (hash: TZaso8O1mBIsvh6LRG6GIj/6hyWmaWTZBE1WFlLb3Uw=)
                          12: AS208545.roa (hash: EXsxDT665iD+A3CM8pHZF0iPzZmKCcnLPW/HZGIm+WY=)
                          13: AS200213.roa (hash: jHsWgHO4WsK8UwfX+EGNaRyozPf8mcg2Dl9LXjUSJHU=)
                          14: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=)
                          15: AS202736.roa (hash: 7TAfkeSnlmZZjOEwdkgs/It5zMPmWXmgqhW5G50dNbw=)
                          16: AS399631.roa (hash: 2FOLE3PPvFUhGWQGS93WxJslXGYvOaG2Q0uliqKb9Gc=)
                          17: AS60123.roa (hash: waKSX3kLZPrsyaZzRZJdMv2qcFW94Fi4IaZoXhlRuu4=)
                          18: AS402866.roa (hash: ID25UVR/G2cFfypX1E46z5udcU4h2H4GKx7+BhZZq4Q=)
                          19: AS13347.roa (hash: ePmHeORHlOZbB5pF6OuvLKOgbTni3yT91/Kj8L1N+XE=)
                          20: AS834.roa (hash: 4P5jNNoeW6BW5Xurr2s33B3zoHeOEOB5CHfqCs2I7hM=)
                          21: AS203090.roa (hash: AtZQiXBdWfevJeS9ni8F5oxZwYfsEjJFqy+rO2NW5P0=)
                          22: AS218736.roa (hash: ai4Bd+OvDcDIO4ai8D9jf66bCCOqcjZK8QkFC/wskwU=)
                          23: AS5065.roa (hash: atPI+WaWV+J+odkHEVuRYBp70O4LKqLtSXvb4R88c1s=)
                          24: AS137409.roa (hash: X6yg0POX/fvoKs44kRzPGZyVPWwkQY4silLD8bs9mA4=)
                          25: AS30088.roa (hash: fi5h1XhSVP5bIlglUWEflB5z/S2ablziBGRj7yb+JBE=)
                          26: AS32132.roa (hash: BoBvNY/WJCk2Mc0mHAc39NhaN2in8vZf3gTCPvr2V88=)
                          27: AS152179.roa (hash: YcViGnpRAt1Q1T/OsNGRarhbBZvtU6D9q0ZOQucaJAw=)
                          28: AS402475.roa (hash: LAHRpQwK0oJi5BSDJs5jT+GSmLxnatizBWGDDxvly3Y=)
                          29: AS147281.roa (hash: nd8WE3Tw/fviIpY65PS22BP/+nksCvYOMLXdYRexSzw=)
                          30: AS206300.roa (hash: BqXRE4Q1/U0lRDzyBl10U1oPqEdOfFYFOggxrxr8LNw=)
                          31: AS42831.roa (hash: BCWrnj/JiU+VUZoOyWOqbE0NUMJ5Sl3BYNdffweZa78=)
                          32: AS48529.roa (hash: sJ45dfFVodPhRxdb0JyOxMSCrixBQNlBAeJLRTx5cnI=)
                          33: AS218965.roa (hash: lX91zUEspkKRCI1oyzM6eOQQpxN2f9FJ+XRFbIpVa+A=)
                          34: AS212027.roa (hash: mwTmCqgr/BINwa+LRLW7yo0HSDw8DAufEvQaH4pf++8=)
                          35: AS7029.roa (hash: LNpotZy4Xd78zNyYSAPBKx5qCBaXbji0m0T6N0Om+PQ=)
                          36: AS14618.roa (hash: AVy/MTTJtlfXtFJhySN/YcD3NqU2V9RR9Nz/gM8xuAU=)
                          37: AS201002.roa (hash: b8ZITxaPgT55292RXOwDGuMuOURRGinQZs7OnZ+k958=)
                          38: AS8075.roa (hash: 3cTQjOtMW6GJ/xtwZDOiPHB2SP8DZODC+kIloQS9S2s=)
                          39: AS16276.roa (hash: 5c47yRX8sKbfs5icPJxN831sp6h6MSWbBvEuXw5p5uE=)
                          40: AS214271.roa (hash: UCHe29xFLtQ1gAzjWXNiHJ8NKs1aDAGPAzVxEhJG8Do=)
                          41: AS215748.roa (hash: 3x6iarwKX82be+ibel0x8bpdtYPfZ1tvpFoGL1m1VtU=)
                          42: AS8820.roa (hash: DzCHT9hefZEbLyVKRengSck6pje5aRTj8oUekfaWSLI=)
                          43: AS20326.roa (hash: hZnA9AJQ8LccJ1+YPDxK01q3EKKoKcwlaINXLkEch4s=)
                          44: AS12083.roa (hash: MUe2cqtFEnaNoT3tD8wok4X+5BCnUWDTrUI/cBFsEiI=)
                          45: AS174.roa (hash: emkybcUOP7mXyXUP8EkhnVHXE5wFezPALIrQeEBfrag=)
                          46: AS397630.roa (hash: fiCi5UsMCspeqdFSwclp5/nVWvZUKOzwdyg8GsO+anM=)
                          47: AS9304.roa (hash: fL5MH2zhS62XmnHpLWm3BYhgNfOfrVbDJyeiA8Nbdmo=)
                          48: AS218799.roa (hash: VzYZMrck7GzcfCRo+kytdpW3DO9KRQOoXVrI20dCG1w=)
                          49: AS979.roa (hash: FZzJe2WIOW2H+2QQXXeyLNaDLIbIRMw30pYDhaF+Xg0=)
                          50: AS152726.roa (hash: r9e5weORdSj3QpMZ9KPd0qVwsCFWUPGHmEvLzlFSGrE=)
                          51: AS5650.roa (hash: hJ59++XEh/bB7KaM3MbLki+q3w5S1Bpq98TiOIgbSpU=)
                          52: AS198566.roa (hash: 4boVHaLlCy7AeN2MW7kaoecmRvvRQ0JrzqUnks5pUGs=)
                          53: AS216138.roa (hash: C7rcV7oiPlI+oPnXML1Ct/QhSn1j0eN8y938N5o2x0c=)
                          54: AS199550.roa (hash: ssNHTzba22P3fSR/hkFMsopCuACVXS1jz2fvBlI58Mw=)
                          55: AS197213.roa (hash: m24hawxS+c+IptS6tO7BZTjRFDwOhR1Z2/CpE9EYHf0=)
                          56: AS60128.roa (hash: wa4cIQNPWnzU7hUrUn58xARa+9FlY0wMiBco7gr3ZEw=)
                          57: AS9009.roa (hash: Uw1SUj3qHKiQ+ByPYk1sxAxNALDfZPF2cAWmoq+ZfXY=)
                          58: AS61244.roa (hash: tx+MizKBhdMazdXKX+OUiYPvw9h3S4+md2sq9Qmz5yg=)
                          59: AS219217.roa (hash: fxg/BZj5g7AKYTzjHEQ3dTbX49zcxtqWB630qxBN1Cg=)
                          60: AS199030.roa (hash: +l1jGMTwf7+wGU2Clp1Ezh0EMeN82sJqUUud7mGDeS0=)
                          61: AS25198.roa (hash: e/ApHINhC/YRu0sK0KfV2kMflIgIJK6s4uRSAtQa6yY=)
                          62: AS212238.roa (hash: N89YlRznWlYXhMwAGglqZH3OEPPtAbjwAeHWAiVsRTQ=)
                          63: AS214483.roa (hash: 549KWAruPIwRewMoeCJz2Q7AKkWNgR7Odnymn+SK9QM=)
                          64: AS55201.roa (hash: hHr+QQMrwUqQRqvT6GASepW5HYeplmwByVzCIF+VicQ=)
                          65: AS19429.roa (hash: MOJDEFsxIGPKn08kavJSaKsfq/WTlf7gy32ERKiA6Jo=)
                          66: AS2914.roa (hash: 2t79Dc48lM1NRGFZZiYzebTrp5NOXQIczJ6i0MsJxLQ=)
                          67: AS3214.roa (hash: jdza9PJ3CeFkyeGfFz9cYPmh+OJHouTGbuicXyr4m1M=)
                          68: AS153383.roa (hash: vCi6FQYQWKC0ggluWhyMgm6QAvKbEiJEf7VAiTXWA9c=)
                          69: AS23532.roa (hash: aAn6W1nHAFh7NVqf0hfGrkzonEVGDCr4wgZgQ4dxQnY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:11:a0:a5:4d:aa:4f:8d:e7:4b:db:99:85:0b:e6:1d:46:e6:f1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Oct 20 17:56:42 2026 GMT
            Not After : Oct 21 21:40:42 2026 GMT
        Subject: CN=C6351CF792EE6606EBB154BC0F13435927BC2D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9c:c4:f8:b5:f8:65:74:f1:c5:fd:7f:97:27:
                    17:c6:cb:db:79:53:7e:21:5b:70:32:84:c7:26:a9:
                    5b:fb:9e:66:c6:4f:4f:b4:ba:31:9e:2d:0d:67:97:
                    6a:a0:fd:0a:e3:24:a1:a1:8d:c7:ec:af:b3:7c:46:
                    3d:67:d7:61:8c:6e:2d:f6:c3:9f:6c:4e:78:89:40:
                    eb:02:27:7a:29:78:32:e3:81:fc:27:00:6b:06:1d:
                    96:ab:06:67:f1:8e:3c:c2:a6:1f:0e:bf:5e:de:73:
                    8e:f7:fa:6e:7a:7b:79:7e:eb:3e:50:18:a5:ba:68:
                    49:97:93:cf:bc:0a:f9:22:18:3d:18:64:9b:b4:f0:
                    79:cd:b5:da:44:29:f7:eb:3c:d2:76:21:9d:67:c7:
                    8b:aa:ef:e1:a4:24:d2:08:7a:15:a8:9f:7c:9d:a3:
                    02:be:36:e0:fe:5b:e1:44:53:3a:47:63:d1:8a:b8:
                    9e:c5:b4:82:6f:6d:36:54:8c:88:6b:f6:cb:fd:4b:
                    d5:98:28:75:6e:b8:79:0d:f5:b5:eb:f4:4e:fe:ce:
                    37:15:79:e8:01:17:f3:a2:2b:3e:aa:52:1e:c6:46:
                    46:41:85:6e:ca:ba:2a:08:3d:26:6c:83:3a:61:f1:
                    63:76:3e:06:fa:9d:f1:d2:83:a9:b0:ee:f5:6d:48:
                    a1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:35:1C:F7:92:EE:66:06:EB:B1:54:BC:0F:13:43:59:27:BC:2D:04
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:99:07:4f:98:73:1f:f5:6d:54:f7:c5:03:65:49:f0:c4:79:
         30:75:a5:37:e0:2c:75:5c:d4:53:f0:c6:02:82:c3:1a:10:3e:
         f1:d9:fc:a5:50:38:42:6c:fc:06:75:95:81:f7:66:29:a0:b0:
         9c:70:7d:49:7a:82:93:2d:b4:d5:21:97:20:53:e4:e6:31:dc:
         be:e5:34:8a:c3:fe:dd:dc:01:60:07:99:e3:d8:d1:c9:24:76:
         04:59:e6:ae:7c:b8:86:9d:f3:c7:44:72:a3:4f:a7:b4:8b:07:
         d2:f8:a5:12:39:21:1e:0b:57:99:45:46:68:09:b2:2d:05:2b:
         12:70:45:97:8b:9f:5e:8d:ea:8d:27:e2:70:99:53:52:f6:bc:
         48:84:60:f8:f9:01:41:5b:6f:9a:07:4b:3d:d6:58:d4:61:78:
         4f:cc:0e:78:70:d3:ed:67:ed:4a:81:d4:23:14:6a:20:39:8d:
         58:b7:c7:ae:ae:ff:37:89:8f:a6:aa:37:69:a8:5d:5d:4a:55:
         32:c0:30:b4:e3:d1:0a:cc:e2:7d:d2:0e:90:c4:97:a8:27:5c:
         17:20:98:87:45:fe:df:63:17:ab:ba:58:45:7a:bc:31:08:e4:
         71:6a:9f:5f:b6:72:07:49:ee:ef:8e:bc:a7:f4:db:b9:03:31:
         c7:65:29:17
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUEBGgpU2qT43nS9uZhQvmHUbm8TQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjEwMjAxNzU2NDJaFw0yNjEwMjEyMTQwNDJaMDMxMTAvBgNV
BAMTKEM2MzUxQ0Y3OTJFRTY2MDZFQkIxNTRCQzBGMTM0MzU5MjdCQzJEMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVnMT4tfhldPHF/X+XJxfGy9t5
U34hW3AyhMcmqVv7nmbGT0+0ujGeLQ1nl2qg/QrjJKGhjcfsr7N8Rj1n12GMbi32
w59sTniJQOsCJ3opeDLjgfwnAGsGHZarBmfxjjzCph8Ov17ec473+m56e3l+6z5Q
GKW6aEmXk8+8CvkiGD0YZJu08HnNtdpEKffrPNJ2IZ1nx4uq7+GkJNIIehWon3yd
owK+NuD+W+FEUzpHY9GKuJ7FtIJvbTZUjIhr9sv9S9WYKHVuuHkN9bXr9E7+zjcV
eegBF/OiKz6qUh7GRkZBhW7KuioIPSZsgzph8WN2Pgb6nfHSg6mw7vVtSKHpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUxjUc95LuZgbrsVS8DxNDWSe8LQQwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmRiNzU1NS05
YWE0LTQ5ODMtOTMxNi03MzgwOWRkMzU0YmMvMC8zRkVDQ0IxN0JFNTFFRTU5RUM3
NEQ2NEVFRDkxN0UyMjFFRTI4QTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZkHT5hzH/VtVPfFA2VJ
8MR5MHWlN+AsdVzUU/DGAoLDGhA+8dn8pVA4Qmz8BnWVgfdmKaCwnHB9SXqCky20
1SGXIFPk5jHcvuU0isP+3dwBYAeZ49jRySR2BFnmrny4hp3zx0Ryo0+ntIsH0vil
EjkhHgtXmUVGaAmyLQUrEnBFl4ufXo3qjSficJlTUva8SIRg+PkBQVtvmgdLPdZY
1GF4T8wOeHDT7WftSoHUIxRqIDmNWLfHrq7/N4mPpqo3aahdXUpVMsAwtOPRCszi
fdIOkMSXqCdcFyCYh0X+32MXq7pYRXq8MQjkcWqfX7ZyB0nu7468p/TbuQMxx2Up
Fw==
-----END CERTIFICATE-----
Generated at Wed Oct 21 15:32:00 2026 by rpki-client