Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File:                     CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier:          U3eZqz5vpx/yrIaxWMxenkCe+/LQMcmWSrAF7Kgt1aw=
Subject key identifier:   96:A0:4A:B7:3D:47:C6:DF:0C:A0:9E:F0:4A:4C:C6:3D:A1:9D:2D:F2
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer:       /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial:       0E7B7B53E74329356A5BD5604C0EA123A896C3D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number:          0733
Signing time:             Sun 16 Aug 2026 23:51:53 +0000
Manifest this update:     Sun 16 Aug 2026 23:46:53 +0000
Manifest next update:     Tue 18 Aug 2026 03:48:53 +0000
Files and hashes:         1: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=)
                          2: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=)
                          3: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: M/VDbD6X7IWmHx3gMi6h9miP6a1jez1ttIkf8txe0i8=)
                          4: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: MdfTVQ7HqQE/BTej48Bfu9Pqv6K4PX/zinQBHh0QPbw=)
                          5: 3134362e31392e3231352e302f32342d3234203d3e20323031313331.roa (hash: u4ojb2YE51vFgMkjWXXe4FgVm1kbuMMqef5geHX+2I4=)
                          6: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
                          7: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=)
                          8: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
                          9: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: WeteA5qOGTmhboj/I1IbXUTAA6Vr+NpjXoqkx1UDFSQ=)
                          10: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=)
                          11: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
                          12: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
                          13: 3138352e3231322e3131332e302f32342d3234203d3e20343032323135.roa (hash: EDeF9+tsFwuqPWdNzyw3pRsVO1vNfrLgo1kh37eKpdc=)
                          14: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: OQXHvkMUYk1QDZhR0DoeAz0QI4bv3B7tsWGIo840D3k=)
                          15: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: ckCO7TR7+FOS8cfzD18uh07ljhtm2G97mBL23DKu09I=)
                          16: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: yycXD37CweWcSXqvIiIHSQ/Otu/gODYxcJV0XE2Z5fg=)
                          17: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=)
                          18: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
                          19: 34352e382e3137332e302f32342d3234203d3e20313937313936.roa (hash: 3jTf9ki7y9rdeYaN5lJ4A9BLxW2mRTrdw0puXBgOnH8=)
                          20: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: Aze0H1EmJtfCr2E388tFbkXXQhKMmQb0+wnPTMjfsF4=)
                          21: 38332e3133382e35302e302f32342d3234203d3e20313432323430.roa (hash: RE6cVKl/ZxTSjtbcxfPjhXfNFzHs3F4ofgqTZXW4nes=)
                          22: 322e35382e38352e302f32342d3234203d3e20323139343034.roa (hash: vCQpjnTOrolQw7t5figQISIQa92sU85HD6XFROhjJtI=)
                          23: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
                          24: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
                          25: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
                          26: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=)
                          27: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=)
                          28: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=)
                          29: 3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa (hash: Mxn8uOU1SwCqejZhgNenv9gthI4/mGec1zouYkB+GgA=)
                          30: 3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa (hash: C+TxIzF6QDeooBljKtU5g8jHCoJKYteQs88g8gs89EQ=)
                          31: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: pS/eZrVME59ud2VP8KwPxGWBL24h8w3UQ9ffY1z+hqM=)
                          32: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
                          33: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
                          34: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: kMNRAnqn2ex5ku/KO9MIvv7GjcuVg1AMPoliCEdigOQ=)
                          35: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: 4iw5ARYYrLQkeA6HpmNLzLBpRj3H0MjuMp4qxhyA/1k=)
                          36: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
                          37: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
                          38: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=)
                          39: 34352e36362e3134382e302f32342d3234203d3e20313337383937.roa (hash: e52/ZEZkONe0FdPltQje0PDwVIXr7SAsT9P6KKB1QMg=)
                          40: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
                          41: 36322e3132322e3138362e302f32342d3234203d3e20313432323430.roa (hash: hLdkJCCSarM8t8hdJBW5AzHGx76e/uRRevZUWJRwMR0=)
                          42: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=)
                          43: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
                          44: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7b:7b:53:e7:43:29:35:6a:5b:d5:60:4c:0e:a1:23:a8:96:c3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
        Validity
            Not Before: Aug 16 23:46:53 2026 GMT
            Not After : Aug 18 03:48:53 2026 GMT
        Subject: CN=96A04AB73D47C6DF0CA09EF04A4CC63DA19D2DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:97:e2:d1:14:1d:a9:e5:dc:8d:f5:cb:40:
                    2d:09:3b:b9:4b:d1:e0:dd:9c:ce:a3:46:eb:6e:d9:
                    c8:f9:f3:31:e3:3b:19:7e:43:ab:6b:6b:80:62:d4:
                    36:cc:65:91:a1:d5:b6:40:c3:5a:5b:af:aa:57:4f:
                    e5:d8:88:a0:89:fa:e5:cb:3f:25:c3:53:8d:38:97:
                    0c:55:7c:90:c0:5d:3c:1b:df:f0:f6:2f:db:81:4b:
                    39:46:fc:62:28:da:62:98:47:6f:e1:dc:df:b2:8a:
                    bf:7f:49:0c:a4:6a:03:de:6f:3d:42:b1:b6:89:48:
                    c7:25:39:27:5b:dd:29:9e:66:b0:34:ee:8f:8f:a6:
                    48:35:a6:33:59:08:26:1d:4c:3d:14:38:24:11:5c:
                    aa:74:6c:b2:d7:fb:cc:3b:fc:76:bf:fb:6d:f7:76:
                    b4:19:4a:72:97:2d:c3:6c:59:2f:c3:11:87:72:8f:
                    c2:57:5f:53:4a:26:3c:36:82:b6:38:6e:8e:34:63:
                    5b:32:b8:53:b8:30:8a:e4:8c:6d:be:c6:3f:ad:d1:
                    5f:39:91:73:06:c5:f4:5f:c6:5b:63:c2:94:4e:6d:
                    61:8c:a3:51:a2:f8:99:3e:dc:7d:fb:b0:aa:20:ea:
                    02:15:3b:46:0d:e5:ea:a4:33:c8:0f:18:04:fb:b2:
                    e9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A0:4A:B7:3D:47:C6:DF:0C:A0:9E:F0:4A:4C:C6:3D:A1:9D:2D:F2
            X509v3 Authority Key Identifier:
                keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:86:6c:3e:df:87:02:db:cf:dd:56:87:e3:bf:fb:87:ea:6e:
         65:96:63:68:a0:68:d1:52:d8:bf:d4:e5:27:1b:79:a1:ea:b6:
         f6:f1:1b:e5:aa:74:cf:7b:92:69:a1:5d:46:05:c5:08:c8:61:
         2f:ec:37:f0:fc:27:91:ac:77:9f:8b:c2:bf:b5:f8:9e:01:9e:
         d4:ab:43:7d:7e:91:06:77:56:cf:d7:66:a2:10:6b:a9:bf:31:
         a1:40:78:8a:29:6a:5f:f3:3e:11:bb:6e:79:37:73:dd:3e:64:
         6b:1a:31:d8:f7:4d:64:45:fb:23:30:5a:12:10:c2:31:8d:8c:
         4b:77:5e:59:6e:28:0c:db:0e:78:74:51:22:cd:7d:9e:18:01:
         c2:7c:b1:47:56:e7:d6:90:f1:4a:b7:2b:d6:f1:7a:42:ce:de:
         0f:bb:b1:96:76:aa:03:6b:46:a7:87:52:18:5e:76:5a:03:99:
         8d:dc:c0:7f:1f:92:20:db:a1:c7:36:18:2f:5b:6d:52:05:9e:
         70:cf:c5:08:38:f6:de:8e:f4:66:45:26:e6:29:31:4a:96:6e:
         9c:fe:a8:33:80:1d:a2:48:14:aa:66:9d:f8:19:ec:fc:44:f4:
         a9:2b:eb:15:60:75:95:6e:e4:b2:6e:98:94:73:61:a5:6b:81:
         cc:a4:96:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 10:12:24 2026 by rpki-client