Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File:                     CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier:          o8ErwdMWkIBNyF3fevmVqK4agWz4fURb5ywA+u++Ag0=
Subject key identifier:   1F:D2:74:DE:36:11:5E:3A:07:BB:A8:81:B0:7B:29:EE:2E:E8:8C:A3
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer:       /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial:       33B0ECD12B7DD9555E0ED9D0E886CB2B02DFD158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number:          07A8
Signing time:             Thu 29 Oct 2026 11:12:43 +0000
Manifest this update:     Thu 29 Oct 2026 11:07:43 +0000
Manifest next update:     Fri 30 Oct 2026 12:16:43 +0000
Files and hashes:         1: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=)
                          2: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: M/VDbD6X7IWmHx3gMi6h9miP6a1jez1ttIkf8txe0i8=)
                          3: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=)
                          4: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=)
                          5: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: e0SSS0xo7gvmOJksQW02nulgd/BU6NIi1E4uFnNkKKU=)
                          6: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=)
                          7: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
                          8: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: ckCO7TR7+FOS8cfzD18uh07ljhtm2G97mBL23DKu09I=)
                          9: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=)
                          10: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: WeteA5qOGTmhboj/I1IbXUTAA6Vr+NpjXoqkx1UDFSQ=)
                          11: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=)
                          12: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: ZeyolARCBdnsWHMtggmGQcHiKd280GfS1/j3/Bp8NX4=)
                          13: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=)
                          14: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: OQXHvkMUYk1QDZhR0DoeAz0QI4bv3B7tsWGIo840D3k=)
                          15: 36322e3132322e3138362e302f32342d3234203d3e20343032383636.roa (hash: Gi/MFaHQEM/Dn6eXagj6hZsyESLpGovppu9NGfn557s=)
                          16: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: iUAlfRBN5KS/1VqvPfEgfqMU6CFwcD1SlH+jygOFSU8=)
                          17: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: 39Ecrxd/FkCAGTvy7OXLB4dzwM2Ae3nIKwg+e1og5Lc=)
                          18: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: 2T8d9j//ixeFGVAUX0jaZjAvKikAyceNqE4eC70GAlk=)
                          19: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: VpEKhz7umJbmzKVJDVzsQ68HCIsHIOJmXbqn2EpmOdc=)
                          20: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: kMNRAnqn2ex5ku/KO9MIvv7GjcuVg1AMPoliCEdigOQ=)
                          21: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: SdcwEbkus3fU0o7cBKTaBNOCGVAaOP4dNZ/gPtIXWqM=)
                          22: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
                          23: 34352e382e3137332e302f32342d3234203d3e20313937313936.roa (hash: 3jTf9ki7y9rdeYaN5lJ4A9BLxW2mRTrdw0puXBgOnH8=)
                          24: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: Aze0H1EmJtfCr2E388tFbkXXQhKMmQb0+wnPTMjfsF4=)
                          25: 34352e36362e3134382e302f32342d3234203d3e20313532363036.roa (hash: EKOgOzOtGvJuJZn6XL7WpW4xB1wA+9sc389+2dbv3Ag=)
                          26: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: yycXD37CweWcSXqvIiIHSQ/Otu/gODYxcJV0XE2Z5fg=)
                          27: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: pS/eZrVME59ud2VP8KwPxGWBL24h8w3UQ9ffY1z+hqM=)
                          28: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: AtBxdbDSCGMlhk1DR/UjZZkrH6SVbsoHhpopN+8q4gI=)
                          29: 3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa (hash: C+TxIzF6QDeooBljKtU5g8jHCoJKYteQs88g8gs89EQ=)
                          30: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=)
                          31: 3134362e31392e3231352e302f32342d3234203d3e20323031313331.roa (hash: u4ojb2YE51vFgMkjWXXe4FgVm1kbuMMqef5geHX+2I4=)
                          32: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
                          33: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=)
                          34: 3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa (hash: Mxn8uOU1SwCqejZhgNenv9gthI4/mGec1zouYkB+GgA=)
                          35: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: VnT6f7eup0/WhMwv7EXnvyzWk35rQ2W/LJCTBqUDvJk=)
                          36: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: c/Yz31+s1JRtEa56J5u/pby9Ytkxm/pcxDdQ6MvJfKc=)
                          37: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=)
                          38: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=)
                          39: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: MdfTVQ7HqQE/BTej48Bfu9Pqv6K4PX/zinQBHh0QPbw=)
                          40: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
                          41: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: DqkOkBW2woP2N8YHrabfFdqR1xr69WhJQBP7HpN+bxQ=)
                          42: 322e35382e38352e302f32342d3234203d3e203136323736.roa (hash: 7BCCo1S44O1GzhjGjkFaT0HearfARUjEUX+ZehyGppM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 12:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b0:ec:d1:2b:7d:d9:55:5e:0e:d9:d0:e8:86:cb:2b:02:df:d1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
        Validity
            Not Before: Oct 29 11:07:43 2026 GMT
            Not After : Oct 30 12:16:43 2026 GMT
        Subject: CN=1FD274DE36115E3A07BBA881B07B29EE2EE88CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:75:a6:79:14:ab:3d:ac:d1:79:c9:5e:87:44:
                    53:f5:2b:22:25:e6:72:d3:93:61:76:12:2a:51:6b:
                    28:07:96:5f:1c:b3:bd:56:64:ad:c2:67:84:1d:dd:
                    64:a8:3d:df:76:37:6f:ae:a0:b5:5b:78:51:37:75:
                    f8:d2:ef:b7:02:27:9b:e6:b4:0a:a1:a9:5e:6d:78:
                    41:40:a7:fc:38:e3:39:55:92:07:29:bc:ed:5a:48:
                    d5:03:a7:ca:38:00:21:f8:4b:04:bd:5b:97:62:7c:
                    65:7f:a8:78:c3:45:e2:77:2c:19:7b:70:70:c4:fb:
                    cb:15:ec:b7:a1:a6:d3:89:fe:5f:e5:82:df:c1:c1:
                    4b:ac:3d:62:0c:2b:2d:07:b8:84:fc:04:ca:d6:52:
                    f5:4b:26:27:5f:b9:e8:d8:0f:69:74:fa:4e:1d:79:
                    7c:05:c9:00:ab:e7:08:ad:8e:86:bb:5d:ea:46:83:
                    95:ba:eb:3d:d2:41:d6:4a:74:81:d9:3f:f6:7d:aa:
                    6b:9b:7e:08:37:0f:43:63:d6:5e:21:1a:ce:fc:c1:
                    fb:78:1e:39:27:43:97:f4:d0:07:29:8f:46:36:bf:
                    c2:2f:8c:fb:20:36:1d:c8:4f:ff:33:11:50:4c:65:
                    d4:66:be:70:99:3f:e0:0f:90:b9:61:49:7b:4a:08:
                    03:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D2:74:DE:36:11:5E:3A:07:BB:A8:81:B0:7B:29:EE:2E:E8:8C:A3
            X509v3 Authority Key Identifier:
                keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:86:55:06:74:bc:8d:9c:d0:98:61:40:53:5c:7e:f0:cb:c0:
         02:8b:c5:f8:9e:cd:68:b1:69:9d:84:26:fe:1d:cb:28:d0:4f:
         c9:26:5f:58:95:cd:28:02:ba:ec:57:f1:70:e1:f6:60:7e:09:
         77:55:dc:28:f0:30:20:4d:51:6a:bb:ca:91:16:98:10:5d:63:
         f2:61:49:28:3b:ad:df:38:30:7f:ae:27:95:ba:74:ed:75:91:
         80:eb:3d:9c:74:e9:d5:bf:55:98:b2:13:5b:ce:38:3f:bc:6d:
         35:6f:a6:ac:17:e1:de:5d:8e:30:87:e1:a4:df:24:82:fb:b1:
         37:97:ce:be:05:db:26:4b:09:ca:bc:45:f5:62:3c:90:d6:8b:
         15:9f:95:e9:12:c7:f4:28:ff:ac:d6:dd:07:d5:d4:e4:73:83:
         7a:08:3e:e8:d7:ca:e4:86:7e:7f:48:10:5b:42:57:c2:88:65:
         0f:46:1b:5b:f3:3b:a9:b4:13:1a:77:48:37:b8:80:da:a7:80:
         a9:4f:41:e3:87:36:1e:ee:64:2d:7c:10:1a:10:c8:53:5b:8b:
         6e:dc:b3:2e:5f:b8:fa:de:31:91:a2:c7:43:08:a0:cc:4c:d5:
         39:a1:69:0b:eb:ba:4f:ce:cf:5c:16:87:9a:b2:30:93:a3:26:
         56:26:11:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:09:18 2026 by rpki-client