Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File:                     CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier:          I5oGpUvmEn/bMT2Bga/5Dz0QYk5cn8CVLNDOunQgUvo=
Subject key identifier:   3D:B8:5E:7E:04:5C:AE:6A:74:42:1A:0E:89:56:F3:23:F0:CD:00:CD
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer:       /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial:       5B9EF276ECDDAAC4A7D5F9BB59B88C523E4FE7DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number:          076A
Signing time:             Tue 22 Sep 2026 11:20:47 +0000
Manifest this update:     Tue 22 Sep 2026 11:15:47 +0000
Manifest next update:     Wed 23 Sep 2026 12:49:47 +0000
Files and hashes:         1: 34352e382e3137332e302f32342d3234203d3e20313937313936.roa (hash: 3jTf9ki7y9rdeYaN5lJ4A9BLxW2mRTrdw0puXBgOnH8=)
                          2: 3134362e31392e3231352e302f32342d3234203d3e20323031313331.roa (hash: u4ojb2YE51vFgMkjWXXe4FgVm1kbuMMqef5geHX+2I4=)
                          3: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=)
                          4: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=)
                          5: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=)
                          6: 3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa (hash: Mxn8uOU1SwCqejZhgNenv9gthI4/mGec1zouYkB+GgA=)
                          7: 34352e36362e3134382e302f32342d3234203d3e20313337383937.roa (hash: e52/ZEZkONe0FdPltQje0PDwVIXr7SAsT9P6KKB1QMg=)
                          8: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: 39Ecrxd/FkCAGTvy7OXLB4dzwM2Ae3nIKwg+e1og5Lc=)
                          9: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: ZeyolARCBdnsWHMtggmGQcHiKd280GfS1/j3/Bp8NX4=)
                          10: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: xRyiB3ChV+qWD4AOCnBpX/RqJJ1utt7QL0J57OGXM8o=)
                          11: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
                          12: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: AtBxdbDSCGMlhk1DR/UjZZkrH6SVbsoHhpopN+8q4gI=)
                          13: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
                          14: 3138352e3231322e3131332e302f32342d3234203d3e20343032303732.roa (hash: aBhrQSVCfQIV8eOjrP1uZjYlErCjol/H24f32qPxiRo=)
                          15: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=)
                          16: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: Aze0H1EmJtfCr2E388tFbkXXQhKMmQb0+wnPTMjfsF4=)
                          17: 322e35382e38352e302f32342d3234203d3e20323139343034.roa (hash: vCQpjnTOrolQw7t5figQISIQa92sU85HD6XFROhjJtI=)
                          18: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=)
                          19: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
                          20: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
                          21: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: yycXD37CweWcSXqvIiIHSQ/Otu/gODYxcJV0XE2Z5fg=)
                          22: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: pS/eZrVME59ud2VP8KwPxGWBL24h8w3UQ9ffY1z+hqM=)
                          23: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: MdfTVQ7HqQE/BTej48Bfu9Pqv6K4PX/zinQBHh0QPbw=)
                          24: 3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa (hash: C+TxIzF6QDeooBljKtU5g8jHCoJKYteQs88g8gs89EQ=)
                          25: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=)
                          26: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=)
                          27: 36322e3132322e3138362e302f32342d3234203d3e20343032383636.roa (hash: Gi/MFaHQEM/Dn6eXagj6hZsyESLpGovppu9NGfn557s=)
                          28: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
                          29: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
                          30: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: WeteA5qOGTmhboj/I1IbXUTAA6Vr+NpjXoqkx1UDFSQ=)
                          31: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=)
                          32: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
                          33: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=)
                          34: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: M/VDbD6X7IWmHx3gMi6h9miP6a1jez1ttIkf8txe0i8=)
                          35: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
                          36: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=)
                          37: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=)
                          38: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: VnT6f7eup0/WhMwv7EXnvyzWk35rQ2W/LJCTBqUDvJk=)
                          39: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: kMNRAnqn2ex5ku/KO9MIvv7GjcuVg1AMPoliCEdigOQ=)
                          40: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: ckCO7TR7+FOS8cfzD18uh07ljhtm2G97mBL23DKu09I=)
                          41: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: OQXHvkMUYk1QDZhR0DoeAz0QI4bv3B7tsWGIo840D3k=)
                          42: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
                          43: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9e:f2:76:ec:dd:aa:c4:a7:d5:f9:bb:59:b8:8c:52:3e:4f:e7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
        Validity
            Not Before: Sep 22 11:15:47 2026 GMT
            Not After : Sep 23 12:49:47 2026 GMT
        Subject: CN=3DB85E7E045CAE6A74421A0E8956F323F0CD00CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:48:df:b5:60:7e:59:8e:4b:15:3b:9e:b3:
                    d8:6b:21:e9:43:a7:80:7b:83:73:e3:6b:88:a6:1d:
                    9e:46:70:55:0a:73:86:e1:05:86:c2:5a:a4:66:32:
                    89:81:1c:a6:d1:6f:ff:33:e3:32:7f:15:17:82:49:
                    3d:f3:10:a3:3f:49:73:bf:50:4b:d2:a5:1f:e4:be:
                    b9:34:c8:26:5e:8d:1c:2e:60:a4:93:37:41:1d:e4:
                    0c:f6:12:5b:5e:fa:01:0d:d2:b9:7d:4a:81:44:96:
                    5f:79:45:8a:2a:df:36:e4:42:40:49:f8:98:16:84:
                    e7:1b:84:3e:45:c8:c6:32:de:37:1b:21:a3:a4:74:
                    0f:6c:4f:ff:72:da:0e:cd:69:48:00:f7:a4:92:eb:
                    0e:56:42:ee:82:d6:c6:ed:61:66:c3:cf:bf:51:d2:
                    99:c9:6d:e0:20:97:4d:88:93:fd:1b:a9:f6:cd:36:
                    26:fb:2f:23:47:01:79:d1:5c:b3:37:85:32:05:6d:
                    94:19:6a:82:d8:8a:d7:cb:62:ce:72:2b:c4:ea:58:
                    fb:59:10:5b:77:24:d7:58:d5:60:e0:ce:78:b5:45:
                    64:47:54:ab:ae:32:71:13:43:4c:d8:8e:42:b6:e6:
                    bf:82:28:c5:27:e3:b7:cc:d5:7a:9b:eb:3f:44:ef:
                    48:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B8:5E:7E:04:5C:AE:6A:74:42:1A:0E:89:56:F3:23:F0:CD:00:CD
            X509v3 Authority Key Identifier:
                keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ad:ee:63:87:65:ea:31:c4:0a:f6:e2:f8:08:64:1d:b3:f3:
         6e:e9:40:72:65:67:de:b0:37:55:f9:b7:ea:58:6d:ab:7b:1f:
         74:8f:63:e7:de:06:bb:99:81:df:e3:9e:18:56:3d:24:72:80:
         89:3b:bd:5b:84:b4:75:c5:43:fd:87:44:a6:a1:90:93:e3:71:
         5e:05:32:3a:c0:d0:51:bf:d6:81:dd:10:e7:a1:2c:8a:11:5d:
         d6:f1:fb:ed:d5:98:20:09:e1:54:ca:8c:ca:1a:1a:42:4b:5d:
         dc:5e:2d:e0:7e:c7:d0:7c:87:d6:43:06:bb:72:dc:eb:76:44:
         a1:cf:f2:a6:8e:39:0f:a4:20:96:0a:dc:c4:69:f8:81:a9:b6:
         02:8d:07:0f:74:f6:85:cc:0c:a6:b9:76:4b:45:a4:67:b8:54:
         25:88:0c:54:46:5f:f8:fa:63:17:1d:47:d2:86:b5:4e:80:00:
         2c:64:33:76:dc:b9:05:55:21:79:a4:a4:7a:e2:f1:29:91:8f:
         a1:5a:93:3b:e3:dd:15:7d:c0:1c:e6:2b:68:66:54:27:b4:2a:
         a1:30:2f:f4:48:ec:0a:ba:39:6e:63:2a:11:44:b5:a5:0d:e8:
         e5:f0:26:3a:00:9c:7d:78:64:2d:54:6c:22:43:48:6b:5d:dc:
         7d:9f:67:e1
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUW57yduzdqsSn1fm7WbiMUj5P59wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNjA5MjIxMTE1NDdaFw0yNjA5MjMxMjQ5NDdaMDMxMTAvBgNV
BAMTKDNEQjg1RTdFMDQ1Q0FFNkE3NDQyMUEwRTg5NTZGMzIzRjBDRDAwQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3EjftWB+WY5LFTues9hrIelD
p4B7g3Pja4imHZ5GcFUKc4bhBYbCWqRmMomBHKbRb/8z4zJ/FReCST3zEKM/SXO/
UEvSpR/kvrk0yCZejRwuYKSTN0Ed5Az2Elte+gEN0rl9SoFEll95RYoq3zbkQkBJ
+JgWhOcbhD5FyMYy3jcbIaOkdA9sT/9y2g7NaUgA96SS6w5WQu6C1sbtYWbDz79R
0pnJbeAgl02Ik/0bqfbNNib7LyNHAXnRXLM3hTIFbZQZaoLYitfLYs5yK8TqWPtZ
EFt3JNdY1WDgzni1RWRHVKuuMnETQ0zYjkK25r+CKMUn47fM1Xqb6z9E70gPAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUPbhefgRcrmp0QhoOiVbzI/DNAM0wHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02
ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx
ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoK3uY4dl6jHECvbi+Ahk
HbPzbulAcmVn3rA3Vfm36lhtq3sfdI9j594Gu5mB3+OeGFY9JHKAiTu9W4S0dcVD
/YdEpqGQk+NxXgUyOsDQUb/Wgd0Q56EsihFd1vH77dWYIAnhVMqMyhoaQktd3F4t
4H7H0HyH1kMGu3Lc63ZEoc/ypo45D6QglgrcxGn4gam2Ao0HD3T2hcwMprl2S0Wk
Z7hUJYgMVEZf+PpjFx1H0oa1ToAALGQzdty5BVUheaSkeuLxKZGPoVqTO+PdFX3A
HOYraGZUJ7QqoTAv9EjsCro5bmMqEUS1pQ3o5fAmOgCcfXhkLVRsIkNIa13cfZ9n
4Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:46:10 2026 by rpki-client