Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File:                     3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier:          up1eK8rd73PeU7NcEXgKH2CRFBZshMWvgC+/k65fOdA=
Subject key identifier:   7D:4E:5E:CB:3C:04:6A:1E:91:5A:D8:8E:E1:09:A4:B0:1A:E2:51:C8
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       41E77E85C08DC93A8B51ECF4CBFE51995BFAE07F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number:          0429
Signing time:             Fri 04 Sep 2026 05:12:09 +0000
Manifest this update:     Fri 04 Sep 2026 05:07:09 +0000
Manifest next update:     Sat 05 Sep 2026 08:42:09 +0000
Files and hashes:         1: AS25198.roa (hash: e/ApHINhC/YRu0sK0KfV2kMflIgIJK6s4uRSAtQa6yY=)
                          2: AS8075.roa (hash: 3cTQjOtMW6GJ/xtwZDOiPHB2SP8DZODC+kIloQS9S2s=)
                          3: AS34989.roa (hash: Z0A6hFrruxussUsjDnWBFiBWTz/nbiNyrJokyACJyzc=)
                          4: AS208545.roa (hash: EXsxDT665iD+A3CM8pHZF0iPzZmKCcnLPW/HZGIm+WY=)
                          5: AS214432.roa (hash: ZOZVU0gaB1zLrogTsATuG/tPO3vQAEUVKlSRdlaQ6PY=)
                          6: AS209349.roa (hash: fuWxA00hn5w6KkPZVbdz2MgJjspkZh1ySmS7ZUVrwBM=)
                          7: AS16276.roa (hash: 5c47yRX8sKbfs5icPJxN831sp6h6MSWbBvEuXw5p5uE=)
                          8: AS212980.roa (hash: Zoz/8g4QJTKbhJZrHf9/7XdXmBbc4ng74YzPeFjoYNk=)
                          9: AS8820.roa (hash: DzCHT9hefZEbLyVKRengSck6pje5aRTj8oUekfaWSLI=)
                          10: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=)
                          11: AS9009.roa (hash: QiaKQLst91P0xnAj7wi5Xph7LhnTvgwq7qe19BdIYQY=)
                          12: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: rdcIdqlxIPOd2Ibf8E+d6TY+aRGlvgenPgzrEnf68rw=)
                          13: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=)
                          14: AS399631.roa (hash: 2FOLE3PPvFUhGWQGS93WxJslXGYvOaG2Q0uliqKb9Gc=)
                          15: AS401362.roa (hash: kPNKMAbfGTT0bsViC8/rlLAkuGrSMsmAvZnUIcZQ+H4=)
                          16: AS197213.roa (hash: m24hawxS+c+IptS6tO7BZTjRFDwOhR1Z2/CpE9EYHf0=)
                          17: AS20326.roa (hash: hZnA9AJQ8LccJ1+YPDxK01q3EKKoKcwlaINXLkEch4s=)
                          18: AS5065.roa (hash: atPI+WaWV+J+odkHEVuRYBp70O4LKqLtSXvb4R88c1s=)
                          19: AS152672.roa (hash: 24CV6i0q0PLEjF37/NGv/norWYAfvb/T4LhYn9c7r4I=)
                          20: AS834.roa (hash: cvxubz+WSf7lK4/jlgCu62lyX2bd1J6e1wU9vLMtqNI=)
                          21: AS214271.roa (hash: UCHe29xFLtQ1gAzjWXNiHJ8NKs1aDAGPAzVxEhJG8Do=)
                          22: AS152179.roa (hash: YcViGnpRAt1Q1T/OsNGRarhbBZvtU6D9q0ZOQucaJAw=)
                          23: AS12083.roa (hash: MUe2cqtFEnaNoT3tD8wok4X+5BCnUWDTrUI/cBFsEiI=)
                          24: AS60128.roa (hash: wa4cIQNPWnzU7hUrUn58xARa+9FlY0wMiBco7gr3ZEw=)
                          25: AS3214.roa (hash: jdza9PJ3CeFkyeGfFz9cYPmh+OJHouTGbuicXyr4m1M=)
                          26: AS402265.roa (hash: QLi6EfjfDjNgJ6oc7Lg83/Van/MyyaaO3bcaQnvCZPc=)
                          27: AS5650.roa (hash: hJ59++XEh/bB7KaM3MbLki+q3w5S1Bpq98TiOIgbSpU=)
                          28: AS32132.roa (hash: BoBvNY/WJCk2Mc0mHAc39NhaN2in8vZf3gTCPvr2V88=)
                          29: AS13347.roa (hash: ePmHeORHlOZbB5pF6OuvLKOgbTni3yT91/Kj8L1N+XE=)
                          30: AS402475.roa (hash: LAHRpQwK0oJi5BSDJs5jT+GSmLxnatizBWGDDxvly3Y=)
                          31: AS174.roa (hash: wSYy2UG52kIWDG8OeOehsUyUu+lyLhy1AX2Y3j0EK/M=)
                          32: AS197537.roa (hash: JP3hx/IAvQ4SgOvsKr86baQJpbUUMchlqabqd0xftz0=)
                          33: AS153383.roa (hash: vCi6FQYQWKC0ggluWhyMgm6QAvKbEiJEf7VAiTXWA9c=)
                          34: AS9304.roa (hash: u0HHqbVGK0HG59OfxuqGbPEFL4GiFNdGpNxgOQb5NVo=)
                          35: AS42831.roa (hash: BCWrnj/JiU+VUZoOyWOqbE0NUMJ5Sl3BYNdffweZa78=)
                          36: AS395793.roa (hash: 072Af//FGf2COy0anYSUB24XVoRiWBVL1/HQX0lTH38=)
                          37: AS202736.roa (hash: mvaFQ8VzOiSlC6osU1pagjFGEUjuXEDkXWP0QHArhMs=)
                          38: AS23532.roa (hash: aAn6W1nHAFh7NVqf0hfGrkzonEVGDCr4wgZgQ4dxQnY=)
                          39: AS55201.roa (hash: hHr+QQMrwUqQRqvT6GASepW5HYeplmwByVzCIF+VicQ=)
                          40: AS198566.roa (hash: 4boVHaLlCy7AeN2MW7kaoecmRvvRQ0JrzqUnks5pUGs=)
                          41: AS142240.roa (hash: KJMY0icgJy2W1kbCxN2A5TNW6QH7OLI+RcHSvskNrNk=)
                          42: AS61244.roa (hash: tx+MizKBhdMazdXKX+OUiYPvw9h3S4+md2sq9Qmz5yg=)
                          43: AS16509.roa (hash: xakUDvlpLL+5/pSc+Mol6Bti5FAa23ETPOv48eIwm3k=)
                          44: AS397630.roa (hash: fiCi5UsMCspeqdFSwclp5/nVWvZUKOzwdyg8GsO+anM=)
                          45: AS201002.roa (hash: b8ZITxaPgT55292RXOwDGuMuOURRGinQZs7OnZ+k958=)
                          46: AS200213.roa (hash: jHsWgHO4WsK8UwfX+EGNaRyozPf8mcg2Dl9LXjUSJHU=)
                          47: AS218965.roa (hash: lX91zUEspkKRCI1oyzM6eOQQpxN2f9FJ+XRFbIpVa+A=)
                          48: AS60123.roa (hash: waKSX3kLZPrsyaZzRZJdMv2qcFW94Fi4IaZoXhlRuu4=)
                          49: AS212238.roa (hash: N89YlRznWlYXhMwAGglqZH3OEPPtAbjwAeHWAiVsRTQ=)
                          50: AS209505.roa (hash: AxWeKPGDD2PWzas5BuplVT0GIK/3EeSkUOLKEFsZ5ws=)
                          51: AS219217.roa (hash: fxg/BZj5g7AKYTzjHEQ3dTbX49zcxtqWB630qxBN1Cg=)
                          52: AS214483.roa (hash: Y+wOmMNJk/qbO04jyJPyuHU8kUrTJXXRArZaExBxa4o=)
                          53: AS212027.roa (hash: mwTmCqgr/BINwa+LRLW7yo0HSDw8DAufEvQaH4pf++8=)
                          54: AS57043.roa (hash: 5kt0gUPpPlXUEkEZgXCUZ1bMA7kcongFeMkYDKoEOqw=)
                          55: AS219427.roa (hash: ytX+53MkEAuJlPXj49kx9dtg2GpS5s9V7bWQYfSlD4A=)
                          56: AS399073.roa (hash: WVbCJHWiNZRHGmJNGzgiysG5FC/81As2A7As9yWVYEA=)
                          57: AS215748.roa (hash: 3x6iarwKX82be+ibel0x8bpdtYPfZ1tvpFoGL1m1VtU=)
                          58: AS979.roa (hash: FZzJe2WIOW2H+2QQXXeyLNaDLIbIRMw30pYDhaF+Xg0=)
                          59: AS206300.roa (hash: BqXRE4Q1/U0lRDzyBl10U1oPqEdOfFYFOggxrxr8LNw=)
                          60: AS151338.roa (hash: AmYhZvwfJAE0DPXyieEiLJvQUIOvIThQ5FEeciWlPxE=)
                          61: AS2914.roa (hash: 2t79Dc48lM1NRGFZZiYzebTrp5NOXQIczJ6i0MsJxLQ=)
                          62: AS203090.roa (hash: AtZQiXBdWfevJeS9ni8F5oxZwYfsEjJFqy+rO2NW5P0=)
                          63: AS216138.roa (hash: C7rcV7oiPlI+oPnXML1Ct/QhSn1j0eN8y938N5o2x0c=)
                          64: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=)
                          65: AS50049.roa (hash: B2ET5HOjvcrDs2iwsXqurxWz0jaZFhWhivb7tIp4cmQ=)
                          66: AS14618.roa (hash: 7lFiRUD9Mee0wPobGgkhZ+wmKkqRWzyzVGFp8Rvi0Cw=)
                          67: AS7029.roa (hash: LNpotZy4Xd78zNyYSAPBKx5qCBaXbji0m0T6N0Om+PQ=)
                          68: AS399359.roa (hash: VyxxE3vs3aJ3IszM7Jq7t7ixQfOPDpVnSNo1m5jNx0M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 08:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e7:7e:85:c0:8d:c9:3a:8b:51:ec:f4:cb:fe:51:99:5b:fa:e0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Sep  4 05:07:09 2026 GMT
            Not After : Sep  5 08:42:09 2026 GMT
        Subject: CN=7D4E5ECB3C046A1E915AD88EE109A4B01AE251C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:ff:9f:47:c1:c6:2b:d7:ad:29:ed:79:ef:
                    3a:b9:65:13:42:e2:83:bc:bf:fc:e5:4d:7b:15:ef:
                    ae:49:7b:a4:ae:94:da:4a:6a:9b:9e:a5:a7:7d:de:
                    b6:7f:41:3e:7d:f9:b6:f3:36:ee:42:4b:58:07:98:
                    7b:32:86:ae:43:f3:4a:c1:4c:00:1f:3a:fb:0d:e7:
                    67:f5:7d:75:e4:c9:44:ce:7a:74:21:3a:b2:e2:a5:
                    25:b3:5e:f7:e0:c7:89:f6:68:f1:8f:e9:b3:12:f0:
                    80:b0:cb:21:d4:07:33:04:65:06:07:5c:4f:9f:e8:
                    91:3d:fa:6f:d9:61:f4:61:5e:62:f6:60:4c:d3:ae:
                    e1:2e:11:2a:97:df:6a:dd:43:7b:3f:62:60:18:36:
                    7e:db:3f:2a:97:f6:62:a8:4d:2b:a0:ce:99:60:ce:
                    ad:6f:3f:fa:19:41:f8:11:ca:65:1c:df:2e:0d:9f:
                    26:00:a3:78:29:de:c6:91:9b:4e:13:63:b1:76:91:
                    3d:5a:f5:52:0b:89:49:02:db:9c:f9:00:de:79:af:
                    df:0c:a1:38:fc:47:56:73:f5:30:aa:f2:07:6f:f9:
                    17:3a:88:0e:10:ad:3d:ff:78:56:2e:56:d3:35:f4:
                    73:0c:99:6c:c8:5e:7c:ae:4a:bc:e6:97:1f:15:db:
                    c0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4E:5E:CB:3C:04:6A:1E:91:5A:D8:8E:E1:09:A4:B0:1A:E2:51:C8
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8a:3d:71:61:73:76:1e:ab:09:f8:7d:c4:de:10:f0:64:df:
         57:24:f9:4d:dc:dd:dc:35:09:a3:75:17:7d:64:ba:93:d9:6c:
         78:bf:3a:13:9f:90:53:11:05:eb:c7:36:de:fd:da:d8:c1:5a:
         ff:2c:1c:3f:88:62:6c:18:dc:06:c6:3e:b9:8b:97:67:8a:db:
         0f:b6:91:58:44:7a:cf:1f:97:34:32:a3:bf:97:86:9d:25:2d:
         fe:54:1f:d1:aa:44:d4:42:40:d0:a7:84:70:1b:b7:47:54:b5:
         ff:4f:db:06:f3:35:1f:9f:a7:ed:ae:7f:86:07:58:22:bc:a4:
         f8:03:ba:ac:c5:cf:68:8e:9e:6a:a8:c4:83:6f:19:4f:5c:92:
         0d:b3:7a:c1:48:25:8a:6c:5a:d1:fb:5f:31:eb:dc:ef:29:5b:
         9d:e4:1f:ce:7c:3a:0a:03:57:6b:e1:b7:ab:a7:2a:fc:86:ba:
         aa:39:ae:0a:70:46:f9:25:ef:69:85:18:08:a7:4d:b6:61:76:
         c3:33:da:39:dd:8c:69:ee:c5:15:e9:52:54:3b:fa:88:28:ab:
         83:08:50:f8:d1:8d:56:10:05:d9:52:5b:d3:e6:d9:da:b7:d0:
         18:d8:02:65:6b:5c:3e:38:a2:2d:ba:ba:b6:fe:5e:57:3c:f7:
         3b:7d:b4:7b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQed+hcCNyTqLUez0y/5RmVv64H8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA5MDQwNTA3MDlaFw0yNjA5MDUwODQyMDlaMDMxMTAvBgNV
BAMTKDdENEU1RUNCM0MwNDZBMUU5MTVBRDg4RUUxMDlBNEIwMUFFMjUxQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzaP+fR8HGK9etKe157zq5ZRNC
4oO8v/zlTXsV765Je6SulNpKapuepad93rZ/QT59+bbzNu5CS1gHmHsyhq5D80rB
TAAfOvsN52f1fXXkyUTOenQhOrLipSWzXvfgx4n2aPGP6bMS8ICwyyHUBzMEZQYH
XE+f6JE9+m/ZYfRhXmL2YEzTruEuESqX32rdQ3s/YmAYNn7bPyqX9mKoTSugzplg
zq1vP/oZQfgRymUc3y4NnyYAo3gp3saRm04TY7F2kT1a9VILiUkC25z5AN55r98M
oTj8R1Zz9TCq8gdv+Rc6iA4QrT3/eFYuVtM19HMMmWzIXnyuSrzmlx8V28BVAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUfU5eyzwEah6RWtiO4QmksBriUcgwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmRiNzU1NS05
YWE0LTQ5ODMtOTMxNi03MzgwOWRkMzU0YmMvMC8zRkVDQ0IxN0JFNTFFRTU5RUM3
NEQ2NEVFRDkxN0UyMjFFRTI4QTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4o9cWFzdh6rCfh9xN4Q
8GTfVyT5Tdzd3DUJo3UXfWS6k9lseL86E5+QUxEF68c23v3a2MFa/ywcP4hibBjc
BsY+uYuXZ4rbD7aRWER6zx+XNDKjv5eGnSUt/lQf0apE1EJA0KeEcBu3R1S1/0/b
BvM1H5+n7a5/hgdYIryk+AO6rMXPaI6eaqjEg28ZT1ySDbN6wUglimxa0ftfMevc
7ylbneQfznw6CgNXa+G3q6cq/Ia6qjmuCnBG+SXvaYUYCKdNtmF2wzPaOd2Mae7F
FelSVDv6iCirgwhQ+NGNVhAF2VJb0+bZ2rfQGNgCZWtcPjiiLbq6tv5eVzz3O320
ew==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:45:34 2026 by rpki-client