Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File:                     CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier:          M/A0XPoR2Fb8M9CHuz1/K6ZZijGciAMjrM2hRs/mkS0=
Subject key identifier:   FF:B8:32:46:7D:57:9A:31:0E:4C:F7:4D:DA:78:10:24:B6:93:F0:06
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer:       /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial:       0644AFAD1DE11EFB35D1EA7F8E0EFA7E5E47F2AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number:          075B
Signing time:             Sun 13 Sep 2026 11:40:15 +0000
Manifest this update:     Sun 13 Sep 2026 11:35:15 +0000
Manifest next update:     Mon 14 Sep 2026 15:11:15 +0000
Files and hashes:         1: 3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa (hash: C+TxIzF6QDeooBljKtU5g8jHCoJKYteQs88g8gs89EQ=)
                          2: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
                          3: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: OQXHvkMUYk1QDZhR0DoeAz0QI4bv3B7tsWGIo840D3k=)
                          4: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
                          5: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
                          6: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: VnT6f7eup0/WhMwv7EXnvyzWk35rQ2W/LJCTBqUDvJk=)
                          7: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: ZeyolARCBdnsWHMtggmGQcHiKd280GfS1/j3/Bp8NX4=)
                          8: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
                          9: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: M/VDbD6X7IWmHx3gMi6h9miP6a1jez1ttIkf8txe0i8=)
                          10: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=)
                          11: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=)
                          12: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: WeteA5qOGTmhboj/I1IbXUTAA6Vr+NpjXoqkx1UDFSQ=)
                          13: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: kMNRAnqn2ex5ku/KO9MIvv7GjcuVg1AMPoliCEdigOQ=)
                          14: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: pS/eZrVME59ud2VP8KwPxGWBL24h8w3UQ9ffY1z+hqM=)
                          15: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: 39Ecrxd/FkCAGTvy7OXLB4dzwM2Ae3nIKwg+e1og5Lc=)
                          16: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: ckCO7TR7+FOS8cfzD18uh07ljhtm2G97mBL23DKu09I=)
                          17: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=)
                          18: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
                          19: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: yycXD37CweWcSXqvIiIHSQ/Otu/gODYxcJV0XE2Z5fg=)
                          20: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=)
                          21: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=)
                          22: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
                          23: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=)
                          24: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=)
                          25: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
                          26: 3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa (hash: Mxn8uOU1SwCqejZhgNenv9gthI4/mGec1zouYkB+GgA=)
                          27: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=)
                          28: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=)
                          29: 38392e3130372e392e302f32342d3234203d3e20343031333632.roa (hash: O4EuDna6+DZ5hJLSQTeSxQHYhzfCZpJHaL73TZQOSFA=)
                          30: 322e35382e38352e302f32342d3234203d3e20323139343034.roa (hash: vCQpjnTOrolQw7t5figQISIQa92sU85HD6XFROhjJtI=)
                          31: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: Aze0H1EmJtfCr2E388tFbkXXQhKMmQb0+wnPTMjfsF4=)
                          32: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=)
                          33: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: eVK1K+tQ9oTn4y/T7CRh+Jw/RqOPqHyoF0zkYiH4qLk=)
                          34: 3134362e31392e3231352e302f32342d3234203d3e20323031313331.roa (hash: u4ojb2YE51vFgMkjWXXe4FgVm1kbuMMqef5geHX+2I4=)
                          35: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
                          36: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: MdfTVQ7HqQE/BTej48Bfu9Pqv6K4PX/zinQBHh0QPbw=)
                          37: 34352e382e3137332e302f32342d3234203d3e20313937313936.roa (hash: 3jTf9ki7y9rdeYaN5lJ4A9BLxW2mRTrdw0puXBgOnH8=)
                          38: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=)
                          39: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
                          40: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: AtBxdbDSCGMlhk1DR/UjZZkrH6SVbsoHhpopN+8q4gI=)
                          41: 34352e36362e3134382e302f32342d3234203d3e20313337383937.roa (hash: e52/ZEZkONe0FdPltQje0PDwVIXr7SAsT9P6KKB1QMg=)
                          42: 38332e3133382e35302e302f32342d3234203d3e20313432323430.roa (hash: RE6cVKl/ZxTSjtbcxfPjhXfNFzHs3F4ofgqTZXW4nes=)
                          43: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Sep 2026 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:44:af:ad:1d:e1:1e:fb:35:d1:ea:7f:8e:0e:fa:7e:5e:47:f2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
        Validity
            Not Before: Sep 13 11:35:15 2026 GMT
            Not After : Sep 14 15:11:15 2026 GMT
        Subject: CN=FFB832467D579A310E4CF74DDA781024B693F006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:94:df:d1:5d:6f:de:10:90:62:0b:bb:1f:
                    4e:bf:2f:90:2e:0a:74:d9:1c:fe:db:23:cb:8f:a6:
                    aa:29:b9:bc:b2:d9:3d:8e:83:8a:4b:c5:0f:16:7a:
                    5e:e0:cb:4f:55:1d:df:4e:7e:08:3f:c9:99:b5:7a:
                    83:96:2b:df:55:ba:1a:43:73:0c:6e:9c:97:71:c2:
                    80:07:dc:c2:56:6f:7e:00:ae:22:eb:0e:6e:1b:d5:
                    7d:3f:76:d0:a2:c3:3b:9e:93:3a:1a:b5:23:a2:1b:
                    5e:2a:32:7a:7a:42:5a:32:bc:dc:bf:cc:4a:c5:6e:
                    ff:cb:a4:a6:d3:9b:5d:f5:6d:f4:73:bb:37:6b:25:
                    92:71:07:97:d5:3a:23:2e:30:12:96:c0:e3:a8:51:
                    ab:5b:cb:d5:94:0a:4f:f0:69:92:e7:48:48:89:9d:
                    2d:a1:43:0c:f7:56:47:d8:3b:48:db:20:eb:21:e7:
                    cb:89:02:af:4d:20:e2:2a:aa:9e:d0:c2:d1:46:a0:
                    35:b0:db:dd:3f:a4:41:0b:74:02:1a:76:97:25:1c:
                    88:63:f1:43:9b:56:9b:73:89:66:9a:99:ae:6b:c9:
                    18:c0:59:0a:d4:e9:08:30:7e:b8:5c:0a:a0:b1:3f:
                    6d:fa:5b:0b:b7:a3:93:1f:f9:02:b7:c4:dc:dd:e8:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B8:32:46:7D:57:9A:31:0E:4C:F7:4D:DA:78:10:24:B6:93:F0:06
            X509v3 Authority Key Identifier:
                keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4d:dd:cd:b2:45:8f:0f:aa:b5:27:25:01:0b:eb:09:4c:20:
         f5:3a:e3:4e:5c:1b:4a:82:81:5c:ff:4b:b1:e1:12:07:4e:19:
         7a:36:95:d7:32:71:aa:af:49:0a:21:4f:e9:42:22:e7:7c:25:
         8f:3d:e0:16:7e:90:8e:46:fd:28:d3:ad:5f:23:20:f2:ca:a2:
         9a:db:60:85:b5:d4:85:2d:bb:0f:b4:57:4b:ef:fc:84:5e:f7:
         12:a1:17:e0:56:78:67:2c:c2:be:2e:27:14:57:2e:52:79:c4:
         2a:b1:b8:88:77:38:40:88:b0:16:52:bb:51:f8:53:c6:9b:fd:
         b9:4b:37:e3:f2:fa:7a:0d:3d:b8:ab:d0:7f:3d:d2:e3:e0:ca:
         e6:8f:25:0f:ce:3d:ac:85:8a:21:9c:60:d3:35:c4:d4:9f:58:
         25:8d:75:f2:a0:9d:5b:fc:4c:00:3c:2f:eb:df:86:7f:94:ab:
         d4:21:0d:81:1a:9d:e3:c9:60:ae:41:4d:57:04:52:2f:34:f3:
         c2:c7:5c:1a:e9:94:4b:95:2b:55:8f:36:ef:06:1a:f5:95:d8:
         16:54:08:4f:4f:90:02:3d:48:a5:dc:d2:a6:9c:0a:6f:23:1f:
         be:85:d0:bf:18:4b:04:9f:ec:47:d7:30:2d:a7:3f:5a:1e:ba:
         13:59:57:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 17:03:51 2026 by rpki-client