Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File:                     CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier:          F4mG3Dhak+dO6vcYgxfAjkn240AamiE6LWx8/EgkOFk=
Subject key identifier:   7F:A8:1D:1C:B2:88:D5:81:24:D3:B8:A2:20:2F:CA:58:49:CC:59:FA
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer:       /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial:       1EF9AB1F4C2E3FB0993950E8C61ADE226B1EDD13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number:          06BF
Signing time:             Mon 01 Jun 2026 21:47:22 +0000
Manifest this update:     Mon 01 Jun 2026 21:42:22 +0000
Manifest next update:     Wed 03 Jun 2026 00:48:22 +0000
Files and hashes:         1: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=)
                          2: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=)
                          3: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
                          4: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
                          5: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
                          6: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=)
                          7: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
                          8: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
                          9: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: p+Be19DO+AcFb4gkjYPxJHkKBEIAgNCzzJgXrpyeezM=)
                          10: 34352e382e3137332e302f32342d3234203d3e20313937313936.roa (hash: 3jTf9ki7y9rdeYaN5lJ4A9BLxW2mRTrdw0puXBgOnH8=)
                          11: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=)
                          12: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=)
                          13: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=)
                          14: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=)
                          15: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
                          16: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=)
                          17: 3138352e3231322e3131332e302f32342d3234203d3e20323034373635.roa (hash: jzdw70rY3Cvb0hkp0ZVzOD2XaQWIqZDI2bu4xbZxcTA=)
                          18: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
                          19: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
                          20: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=)
                          21: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=)
                          22: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: rPMAE/Emhe8ab0enxKSEB8g0vJLbwLIQWJGIysDgBSk=)
                          23: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: rZD8rahYSCJKmrmYmBTS/7vmJS9IDa+dMQdQnVTzzLc=)
                          24: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
                          25: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
                          26: 322e35382e38352e302f32342d3234203d3e20333939343638.roa (hash: DxOq5kGC1UY7gmuJl9GjMiorjvhCP4eEet6VwfLbzJ4=)
                          27: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
                          28: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=)
                          29: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
                          30: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
                          31: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=)
                          32: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
                          33: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: kMNRAnqn2ex5ku/KO9MIvv7GjcuVg1AMPoliCEdigOQ=)
                          34: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=)
                          35: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: Aze0H1EmJtfCr2E388tFbkXXQhKMmQb0+wnPTMjfsF4=)
                          36: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=)
                          37: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
                          38: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=)
                          39: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=)
                          40: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=)
                          41: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=)
                          42: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=)
                          43: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
                          44: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: B81ymwnZiGRae7qwYdgfwxCIBiN1yGZUL+BE/kziL7M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 00:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f9:ab:1f:4c:2e:3f:b0:99:39:50:e8:c6:1a:de:22:6b:1e:dd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
        Validity
            Not Before: Jun  1 21:42:22 2026 GMT
            Not After : Jun  3 00:48:22 2026 GMT
        Subject: CN=7FA81D1CB288D58124D3B8A2202FCA5849CC59FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:35:f2:d7:e9:02:49:76:f5:d5:e1:af:32:96:
                    3b:0a:e4:4d:b3:6c:76:32:53:29:f6:c4:63:35:d5:
                    8f:bf:c2:2d:55:e3:2e:73:4c:5a:7d:fa:4a:38:d3:
                    36:43:cd:01:d8:80:9d:f1:3d:84:05:84:04:bd:7e:
                    97:f5:91:d4:f9:a2:27:a2:01:65:1a:43:69:29:1b:
                    e1:b9:d0:2f:08:9c:d7:3d:0f:63:9a:ba:7b:26:f2:
                    7b:dd:96:a9:b2:cd:bb:4c:30:62:fc:57:2a:1a:94:
                    32:90:5c:21:26:c0:8f:fa:0a:58:7c:ee:6c:20:9c:
                    9a:22:c0:4f:6b:1e:69:3e:3b:b6:47:d0:9c:cf:0c:
                    23:85:47:ca:e9:c4:f0:03:d7:d9:64:2e:64:35:1b:
                    e2:dd:d8:60:ff:35:b1:bd:79:fe:61:d5:1e:af:85:
                    5d:43:b0:c2:cc:ab:6c:55:72:13:c6:0b:69:e2:70:
                    b0:c2:0d:a2:92:4d:8f:7d:ca:6e:59:86:b6:a4:20:
                    6d:90:ea:77:4f:2d:d0:1b:01:1d:13:fa:69:c0:c6:
                    a7:5b:ff:cd:21:36:de:91:d0:47:d1:9f:2c:b9:fa:
                    48:32:c5:1d:4d:da:00:9b:6a:b9:3a:51:29:a7:72:
                    de:53:3c:3f:cb:43:4c:44:c1:5e:29:5b:2e:82:74:
                    ba:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A8:1D:1C:B2:88:D5:81:24:D3:B8:A2:20:2F:CA:58:49:CC:59:FA
            X509v3 Authority Key Identifier:
                keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:49:bb:a3:67:fd:fa:20:47:fb:3e:da:0c:f8:a1:7d:11:06:
         b6:8c:81:c1:c9:14:68:fb:8d:f8:7e:73:3e:59:40:bc:91:1a:
         a2:84:83:dd:f9:a5:72:31:51:6e:9e:d7:f6:31:36:9e:91:76:
         7c:23:43:c7:78:dc:a8:52:a1:f2:90:d9:ce:e3:30:6d:36:4e:
         13:9d:64:38:90:12:da:44:49:67:4d:51:e5:fd:e9:69:3a:a0:
         b0:5d:96:3e:16:54:af:48:dd:22:13:bc:be:dc:da:2f:f5:5b:
         9c:a2:8f:09:6b:a9:24:29:81:be:af:9d:38:9b:ac:ca:eb:f8:
         43:a5:9d:9a:c7:69:76:7a:1a:bf:67:a3:08:21:e5:08:08:13:
         71:21:96:66:cb:8e:66:4c:de:da:b3:a8:be:e8:f0:00:4e:8f:
         b4:c4:4a:d6:37:b4:26:df:36:ec:3b:18:1d:74:af:ce:c9:28:
         42:6e:ed:9e:7c:a6:e2:ba:50:14:4d:ec:cc:df:0f:cc:e5:30:
         b4:8e:fd:de:20:57:20:98:c5:34:de:a7:15:17:97:7d:30:8a:
         66:cc:74:14:29:ca:7f:1a:f7:a9:9a:3b:bb:ee:18:61:3b:38:
         3a:5b:20:d3:fa:f3:ba:cb:1f:b4:21:f1:fc:07:04:ef:1c:45:
         d6:66:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 14:02:12 2026 by rpki-client