Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File:                     CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier:          HVQd6sfRzHqb9zTq+i5Q5ZASEm6Tdmc6QeTlhjydRrs=
Subject key identifier:   D6:2F:91:5C:9E:C5:67:52:1C:32:BE:04:77:E3:A6:78:62:F6:80:7D
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer:       /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial:       7777D9E35706469C2BCCE535E506C6D067386530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number:          0647
Signing time:             Wed 11 Mar 2026 05:40:34 +0000
Manifest this update:     Wed 11 Mar 2026 05:35:34 +0000
Manifest next update:     Thu 12 Mar 2026 06:26:34 +0000
Files and hashes:         1: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
                          2: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=)
                          3: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: UYRhWU2YtAQySXQJqSHhc8PkHnSqANYorHfiKIAiPmA=)
                          4: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=)
                          5: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: Q3PPUlB/JvHRLRIa7IieyrUl/m1wHR8wutqNN0xNel0=)
                          6: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
                          7: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: rPMAE/Emhe8ab0enxKSEB8g0vJLbwLIQWJGIysDgBSk=)
                          8: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: gPOJ5OYy4C3HcRMZFW4SHF49vn1yyv2a5aCn7ZHuj8I=)
                          9: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
                          10: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=)
                          11: 322e35382e38352e302f32342d3234203d3e20383334.roa (hash: tlmvzJ4yU5noW/rrvRUB30jWwtpRp8Or9JFg8aJLA6I=)
                          12: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
                          13: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
                          14: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
                          15: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
                          16: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=)
                          17: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
                          18: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
                          19: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: 5EJNV4UhdWOuwnTNcgbmbjrtx0zc2Gwd0NznlniRrK0=)
                          20: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=)
                          21: 36322e3132322e3138362e302f32342d3234203d3e203239383032.roa (hash: SD0OyEqKiwHB09Gm8Gi0D14YZmXhWcWzdEUhhoCRMcE=)
                          22: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
                          23: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
                          24: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=)
                          25: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=)
                          26: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=)
                          27: 34352e382e3137332e302f32342d3234203d3e20383334.roa (hash: U9x0lOHXeoaAxrubCSXxzIuASm9LMOorSTksQKd5yMc=)
                          28: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: 5DUJVA+pSWGfl0obwZfoWi9lZoQLdECnA4H9VJT+xbw=)
                          29: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: aPdRk0yj6WHAWMnGbb2l+kFCRQlNzfB9p5fiHofDu7s=)
                          30: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: rZD8rahYSCJKmrmYmBTS/7vmJS9IDa+dMQdQnVTzzLc=)
                          31: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=)
                          32: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=)
                          33: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=)
                          34: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=)
                          35: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: Fj1wyGHhk7qZUvVgtXdfNrr+k6tqc7QruYorcR/NWbY=)
                          36: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
                          37: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=)
                          38: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
                          39: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
                          40: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: gCbw4t50he127cuIH8e7X9edy5RGT/dSqPZYrNWwgUg=)
                          41: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
                          42: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=)
                          43: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=)
                          44: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=)
                          45: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:77:d9:e3:57:06:46:9c:2b:cc:e5:35:e5:06:c6:d0:67:38:65:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
        Validity
            Not Before: Mar 11 05:35:34 2026 GMT
            Not After : Mar 12 06:26:34 2026 GMT
        Subject: CN=D62F915C9EC567521C32BE0477E3A67862F6807D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:87:e2:94:20:31:27:f9:a6:cb:fc:ac:f0:
                    93:fd:0f:33:11:01:37:93:de:82:ce:2d:5f:2d:07:
                    6d:bb:44:ea:f5:43:7a:82:31:42:2f:f6:79:3e:a0:
                    a8:5f:35:a0:2f:64:c4:77:a5:76:51:60:8b:22:61:
                    1d:99:e4:42:8b:5c:dd:10:c5:89:e2:83:58:f0:64:
                    27:c0:82:78:f3:65:27:2f:c9:db:67:aa:5d:30:72:
                    f1:62:3e:2e:a2:1a:fc:29:33:ac:3d:b0:d9:07:c9:
                    c3:b5:2b:0e:5e:d4:f8:24:6f:7e:15:9a:e4:0e:a4:
                    0c:b0:db:f5:bd:b9:16:7b:c2:50:d0:ad:7a:90:a5:
                    f8:5f:a3:34:e2:49:3f:90:f0:08:53:7d:2c:f8:67:
                    e7:8d:44:5b:94:b7:f2:76:12:ce:5a:d9:62:bc:79:
                    9b:bd:84:1b:34:55:b3:f2:fc:9f:53:17:30:1a:f3:
                    6a:11:18:77:33:94:36:bd:35:e2:18:c7:29:d7:e1:
                    94:49:45:b2:a0:ba:7a:76:60:9f:b5:e4:db:d4:13:
                    33:ad:a5:56:6e:13:36:bd:10:5f:5b:a8:67:98:9a:
                    72:69:19:52:85:c1:f6:c2:04:62:3f:bf:07:ea:7c:
                    fa:78:a7:ad:8d:2d:26:bd:a9:d0:38:06:5a:d2:a8:
                    d8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2F:91:5C:9E:C5:67:52:1C:32:BE:04:77:E3:A6:78:62:F6:80:7D
            X509v3 Authority Key Identifier:
                keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:09:2f:cc:f8:38:66:06:e6:88:3d:02:da:cd:4e:a0:ad:31:
         77:99:3a:eb:6c:2b:4c:cd:23:27:55:42:81:12:d0:37:a2:9d:
         6f:dd:ab:6f:ea:0e:76:0a:64:7e:23:6d:b3:aa:18:5d:5a:05:
         cf:7f:b2:0b:53:8c:40:21:ad:ee:38:1e:2e:92:b8:c8:d8:40:
         42:99:86:e2:aa:26:de:d5:25:14:86:b3:42:25:59:56:8b:e8:
         be:88:14:e8:32:3b:0f:a4:04:df:33:61:4d:18:6c:c2:e5:6a:
         25:8c:d0:39:17:cf:4e:4b:1f:80:0e:92:c8:94:98:bf:1b:33:
         33:fb:72:c3:fd:6e:50:78:4e:95:9f:e9:e0:0a:a8:2c:26:ce:
         9d:2f:a7:19:4c:8a:ff:a7:6f:fa:3d:91:6b:60:4b:eb:a8:69:
         db:c3:c5:32:89:81:54:e1:77:db:f9:b3:c4:96:ec:05:fd:6e:
         28:d6:05:18:a4:84:6c:8b:39:44:0b:1c:0e:b7:68:7c:1e:4c:
         44:a2:7d:ed:8f:cc:5e:c4:f5:b4:fb:ef:7b:75:fb:dd:0e:d0:
         2d:2c:15:c2:d3:0c:ad:b6:6e:e4:63:e2:7a:92:53:27:64:46:
         d6:0c:60:e2:fa:13:04:4d:1a:c5:7d:d1:7e:92:0f:7d:09:e8:
         7c:b8:67:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 09:14:43 2026 by rpki-client