Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
File:                     3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json)
Hash identifier:          NmM7Tiv603I+weUClld1BOKP+12suGgPEH6of5qVzGs=
Subject key identifier:   66:DE:B2:7A:DE:DC:E8:B5:2B:89:EC:54:74:86:7D:44:C4:F7:FB:CB
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer:       /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial:       3D333974EA342828B99F925B0FA8FF184DFAF0A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
Manifest number:          036F
Signing time:             Fri 13 Mar 2026 01:13:47 +0000
Manifest this update:     Fri 13 Mar 2026 01:08:47 +0000
Manifest next update:     Sat 14 Mar 2026 03:32:47 +0000
Files and hashes:         1: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: jzgTEml4YLsCpJ5PWa0CjR2ZyZx1iGCX4c7IWy4h9Uw=)
                          2: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: ITJiuOJiPhL9zGFnR/kFwwhgRvQux+ehMzGBms69CVM=)
                          3: 326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa (hash: g+1tMLXY3SN1Y/zUSSaWRJc99akoWdOPFvMCxkZrGLU=)
                          4: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: Wi5+YIc762ypl+B2WINgJse4hzMgAIpn5Ywt7Gts2zw=)
                          5: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (hash: buWW9LxxoX84xDGlXRuc7ac6Vqdjfpe3tuguLo1bU7c=)
                          6: 326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa (hash: CR1Da8B3Ve/Ki5AH4lTB+zn6wD6Vb8CX/Tfk65mSnm4=)
                          7: 326131343a366634343a3432303a3a2f34342d3438203d3e20323036373531.roa (hash: tAH3E769OlzQWJEjgXPQBoGBF8R2vjgSThIJK0OhT8g=)
                          8: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: Gh/w94WLUPZNwP3yscIWB0P8fPzMkD8rKLwHE/CiSik=)
                          9: 326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa (hash: mVRk7OX5nwehY6QXOhw6587D02FFEQfLM0VwJdYXtak=)
                          10: AS200242.asa (hash: MTBOWqmzNf0Vnku8o0Fu5uKujpvtI67QUi2gh/CZB+M=)
                          11: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: x7hOPFZjN7RZHBsYqLnDpQUy2G9KH75g5Bkk7YCqeYo=)
                          12: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (hash: E5i+93dh5I/S5MMaZahzwFpc+FrF3/j8/oPFxMb1ofg=)
                          13: 326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa (hash: ga3nLrPruxDKXz/HZkq9lRMiU1IAca5YQ8TT+rGp+T4=)
                          14: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (hash: 37pW5zkUWwecCqjFHAdYxHEZTGOlFK8BvptTevydiHI=)
                          15: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: wghHBUAPyTh1k75qu9+3ST+twxsY88XGIADNiAK2tow=)
                          16: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (hash: 9H5bHORS1buGdk6dUDjyuqRIpPDaKxv77H5RNmLlgrw=)
                          17: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (hash: qTx2l+4Rmw9QcHHVu+RMfEZ9wVvbUUTMbX9wtkxLgYk=)
                          18: 326131343a366634343a353630383a3a2f34382d3438203d3e20323030323432.roa (hash: tIzxcCSG/V5QyAqn4lWVGbnRYKGordkU7LLlPvgkHMc=)
                          19: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: m8+D+okBVVmTzlPUuDfmEBZbvua+N+sKP5fs6j2S33Y=)
                          20: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: 6DvqghhOIIMjT98qGn7JjCidAECDJAv8OZRBSzLihNQ=)
                          21: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: dC8rQUoWVp/X7YVAzZ2dHrxEZrdm+LkwjO9CaebKOYE=)
                          22: 326131343a366634343a343430303a3a2f34302d3438203d3e20323133313336.roa (hash: HawlF8j6AaLKvNQu2aTpKUa6yLzB5NKlnnf7Xm6b/mk=)
                          23: 326131343a366634343a353336303a3a2f34342d3438203d3e20323136303338.roa (hash: kV9C6QKeijySZWnfoj92GJUvF6GdpqcT/jUq1YV72FQ=)
                          24: 326131343a366634343a65663a3a2f34382d3438203d3e20323136303338.roa (hash: QG09fxLJtKa1Y7d6YZoiVLo1F1ttiuWxvVNqxNhuPNo=)
                          25: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: FmiBX7ObUBJXMx50BEJxB5rcHYX/1xnmOVK+ALpTHJE=)
                          26: 326131343a366634353a3a2f33362d3438203d3e203530323234.roa (hash: Cm6iG7rXYSmOBRLZv4C/D104nGz4969UDdr1rCKUD0A=)
                          27: 326131343a366634343a663030643a3a2f34382d3438203d3e20323037313138.roa (hash: ccOOAjxyylksS3iqkMGCPb0MvRpljc/bOW2a58HaGeg=)
                          28: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (hash: 7HzMy3EQC4VhBpQQuwAgqmxWq4MZqQyb1t+9r/yAxck=)
                          29: D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer (hash: Q2vhZWloe/hFTaW+/yQJuXwBq/8isuRI5XNeSyWobfQ=)
                          30: 326131343a366634343a636133303a3a2f34342d3438203d3e20323030333738.roa (hash: FMuCbBdzp6p9ySj22p+fUaROVQxj2tYK0a25mbwUBXo=)
                          31: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: J9QsdPj5DQDhu5mtlU23kktl0EvwgihwetcbiHJN5aI=)
                          32: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: +RB/H3yC2Zhqk6dbZnb2AoHhKMIePUOM6t4+sjUxfqU=)
                          33: 37372e37332e3131372e302f32342d3234203d3e20323030323432.roa (hash: eQCFDDvBb9p3KuzX9nQDyWev7idoWrZ4UxFS/r5wLgI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 03:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:33:39:74:ea:34:28:28:b9:9f:92:5b:0f:a8:ff:18:4d:fa:f0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
        Validity
            Not Before: Mar 13 01:08:47 2026 GMT
            Not After : Mar 14 03:32:47 2026 GMT
        Subject: CN=66DEB27ADEDCE8B52B89EC5474867D44C4F7FBCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e6:e0:e7:29:5e:c1:26:99:11:20:42:cb:aa:
                    c4:be:06:c1:80:4f:d6:e2:50:13:fa:68:67:98:a5:
                    14:dc:ce:cd:14:53:1a:5a:66:5b:93:bf:aa:dd:40:
                    ba:9c:5e:ce:1c:f5:5f:04:b1:0a:bb:82:b3:d2:2e:
                    81:18:94:d4:cb:1f:fa:e0:3a:ca:5d:0e:2e:25:ce:
                    3f:a3:9a:c1:f2:22:9f:a3:61:af:fe:aa:b4:73:df:
                    e4:77:d5:73:67:cf:8a:fa:c1:c3:5b:1b:7c:98:5b:
                    87:08:d5:32:3c:47:9c:95:97:88:c1:f2:ee:f4:72:
                    e2:3b:2a:c2:a5:2c:bf:e7:1a:35:c3:e8:9f:0d:1c:
                    a3:d7:33:e5:34:2b:6d:23:ae:33:0c:22:06:45:09:
                    58:ee:72:04:c6:d6:37:db:1c:93:79:77:67:60:02:
                    9a:d8:39:c1:ee:79:b3:85:e3:72:36:00:e1:3d:22:
                    05:a1:6a:9f:de:f0:a1:82:d5:06:4a:4e:cc:4d:f9:
                    29:58:b3:58:e1:69:c7:19:3f:f1:1e:52:23:1e:6c:
                    cc:02:4b:53:bf:08:23:76:c3:28:b7:7c:fc:c9:99:
                    78:46:f8:b1:62:71:94:91:af:47:1d:d4:33:ac:7b:
                    5c:26:06:f0:de:9c:ad:8d:97:49:c2:e2:55:e7:e8:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DE:B2:7A:DE:DC:E8:B5:2B:89:EC:54:74:86:7D:44:C4:F7:FB:CB
            X509v3 Authority Key Identifier:
                keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ab:aa:9a:a8:e8:c2:c9:4e:24:a7:09:1f:02:35:9c:dd:40:
         cf:65:7e:a4:67:05:3a:43:c2:23:17:ef:9b:7d:d8:07:75:96:
         54:22:e2:5c:53:16:d6:35:61:c5:ff:bd:92:24:0f:28:37:af:
         f1:cd:d6:80:5f:7b:6f:95:f2:98:b9:70:95:46:e3:d4:12:6d:
         f6:f5:a5:fd:8b:e9:5d:ee:27:fb:91:56:1a:34:6d:49:65:76:
         7a:3b:a2:37:8e:45:0d:72:08:bf:2b:07:e0:e9:ed:63:cc:d6:
         10:5b:32:a4:dc:a8:a8:8a:34:f4:11:ad:c5:f7:d0:86:e1:5b:
         f8:2b:09:7b:27:29:71:9d:b6:78:a5:f4:6d:f2:7a:ae:2f:71:
         d8:3e:a3:9b:82:ea:ce:15:d6:b6:a4:e8:13:30:2a:bf:31:99:
         ee:2d:7b:7a:45:d9:41:66:0e:e0:da:6a:81:40:b7:31:1f:aa:
         f5:a5:d7:81:92:68:72:27:c4:08:bd:fb:dd:e4:2a:8f:fe:30:
         38:a6:d0:37:b4:84:5f:a4:22:03:53:74:b0:f7:b7:bf:22:4f:
         9f:78:d3:82:65:39:1e:90:1c:69:9f:1d:24:64:b9:fd:67:40:
         1f:24:fb:67:47:e9:4a:a4:01:6a:c2:d2:cb:58:72:d2:e6:1f:
         1a:0d:9d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:30:11 2026 by rpki-client