Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File:                     CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier:          18TXCNHxKK3JjnZ/ipxytEmgwCSTlo09cVYUf3Pay1s=
Subject key identifier:   FB:3B:2D:F4:D3:83:C5:1D:12:3B:65:F8:BA:33:E7:55:C2:8E:FA:28
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer:       /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial:       4E993E6CC4B2BF484D07DC7C5A59436BE44F777B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number:          065B
Signing time:             Wed 25 Mar 2026 02:29:39 +0000
Manifest this update:     Wed 25 Mar 2026 02:24:39 +0000
Manifest next update:     Thu 26 Mar 2026 05:06:39 +0000
Files and hashes:         1: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=)
                          2: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
                          3: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
                          4: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
                          5: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: gCbw4t50he127cuIH8e7X9edy5RGT/dSqPZYrNWwgUg=)
                          6: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=)
                          7: 34352e382e3137332e302f32342d3234203d3e20323032363733.roa (hash: d7fBecaPyrVjM4P3S3kg+4o4EIrWILvQcE2M5oWoSkI=)
                          8: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: UYRhWU2YtAQySXQJqSHhc8PkHnSqANYorHfiKIAiPmA=)
                          9: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
                          10: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: Q3PPUlB/JvHRLRIa7IieyrUl/m1wHR8wutqNN0xNel0=)
                          11: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: VWSY4HeuMQXRmX19cd0yY2n2InrehHeHluR3wmd9WS4=)
                          12: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
                          13: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=)
                          14: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: 5EJNV4UhdWOuwnTNcgbmbjrtx0zc2Gwd0NznlniRrK0=)
                          15: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
                          16: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=)
                          17: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=)
                          18: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: rZD8rahYSCJKmrmYmBTS/7vmJS9IDa+dMQdQnVTzzLc=)
                          19: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
                          20: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=)
                          21: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=)
                          22: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
                          23: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=)
                          24: 36322e3132322e3138362e302f32342d3234203d3e203239383032.roa (hash: SD0OyEqKiwHB09Gm8Gi0D14YZmXhWcWzdEUhhoCRMcE=)
                          25: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=)
                          26: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
                          27: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
                          28: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=)
                          29: 322e35382e38352e302f32342d3234203d3e20383334.roa (hash: tlmvzJ4yU5noW/rrvRUB30jWwtpRp8Or9JFg8aJLA6I=)
                          30: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
                          31: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: gPOJ5OYy4C3HcRMZFW4SHF49vn1yyv2a5aCn7ZHuj8I=)
                          32: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
                          33: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
                          34: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=)
                          35: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=)
                          36: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
                          37: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=)
                          38: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: rPMAE/Emhe8ab0enxKSEB8g0vJLbwLIQWJGIysDgBSk=)
                          39: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=)
                          40: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: aPdRk0yj6WHAWMnGbb2l+kFCRQlNzfB9p5fiHofDu7s=)
                          41: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
                          42: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=)
                          43: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
                          44: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=)
                          45: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: 5DUJVA+pSWGfl0obwZfoWi9lZoQLdECnA4H9VJT+xbw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:99:3e:6c:c4:b2:bf:48:4d:07:dc:7c:5a:59:43:6b:e4:4f:77:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
        Validity
            Not Before: Mar 25 02:24:39 2026 GMT
            Not After : Mar 26 05:06:39 2026 GMT
        Subject: CN=FB3B2DF4D383C51D123B65F8BA33E755C28EFA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:0d:1b:ec:b8:7f:84:56:d8:0e:8c:58:0c:
                    25:b9:54:ad:bb:10:02:b0:bf:00:8f:80:a4:45:51:
                    df:c3:af:45:7e:5e:d4:d0:4f:f5:5e:28:65:aa:75:
                    bb:50:4f:d5:40:16:1f:a0:34:aa:5d:c9:6f:dc:f7:
                    63:c2:c9:96:7b:12:2d:57:6b:69:29:48:59:a7:ec:
                    9d:9d:52:26:5c:9c:2b:d9:4c:16:9f:d4:83:25:f5:
                    b7:91:01:0f:3f:4e:1c:89:55:55:f7:36:cd:91:09:
                    e5:8d:d7:89:37:70:80:42:b0:0b:e0:49:4c:85:fe:
                    41:ee:9f:c5:fa:3b:11:a1:76:6a:99:c5:c7:2c:55:
                    7e:27:68:e9:1a:e0:a6:75:bc:17:93:1b:0d:e1:d4:
                    70:16:2c:3f:4f:4d:14:9d:3f:b5:2c:36:ea:bd:4d:
                    dd:d5:97:ed:9b:63:1f:1a:39:d0:8d:1c:25:e2:f9:
                    80:d1:ca:0d:a7:af:f6:70:16:ed:eb:73:bb:1c:90:
                    7f:ae:2a:79:1a:b6:20:4e:15:cf:4f:07:2b:05:50:
                    b7:f0:3a:b4:67:b4:7a:a2:61:fd:13:3c:26:27:4e:
                    fb:4f:3a:e2:56:9c:ed:48:d5:f8:21:f6:de:0e:52:
                    96:38:a3:59:c5:f5:48:ff:eb:c0:9a:a1:d2:9d:a3:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3B:2D:F4:D3:83:C5:1D:12:3B:65:F8:BA:33:E7:55:C2:8E:FA:28
            X509v3 Authority Key Identifier:
                keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:eb:68:27:12:f5:d0:c0:18:e3:2c:80:6b:9b:a8:f3:60:81:
         c3:75:30:8e:3a:c2:b7:c8:db:13:d7:18:12:a4:ad:62:18:c8:
         6a:cc:b5:82:dd:26:14:a0:e3:4d:b5:6c:42:0d:de:ad:82:21:
         44:97:f5:a6:6e:70:57:a7:01:6e:56:63:9d:59:2b:c1:ce:24:
         4a:4c:60:8b:8e:68:ef:2f:c4:6c:d0:6a:1b:3b:e1:30:e8:41:
         0a:3a:f3:47:c3:46:87:75:61:e9:b3:6e:53:75:46:bc:6f:1e:
         f3:b5:76:80:8c:2b:f1:2c:0b:06:c3:13:f8:68:d7:81:4b:41:
         d1:60:78:10:bc:0e:ae:3f:7c:91:b0:59:94:13:e5:a1:68:57:
         94:a4:a1:0b:8c:b8:99:57:2a:00:32:1d:f8:6d:68:3a:ea:39:
         34:50:cc:43:9e:ac:48:ad:91:ec:26:d9:cb:8f:f9:fe:95:94:
         c5:5e:d9:ce:38:d5:2d:b6:ba:67:64:bb:49:91:47:cb:20:2b:
         66:88:56:46:ef:67:03:26:86:d6:69:9e:cd:1d:cf:c3:5d:59:
         c7:b7:50:2d:a2:2c:ff:93:e3:8c:dd:0b:b9:42:86:7e:50:55:
         b9:a4:6b:58:e3:f0:86:aa:5b:9c:7d:8b:ed:99:55:1e:d0:34:
         7f:04:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 07:39:41 2026 by rpki-client