Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File:                     3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier:          LMoZG5HYNvZh7qzrIqVKN7wndCJUM+r94L5uJ7AM1I8=
Subject key identifier:   36:19:95:53:08:C8:9B:0A:40:6D:40:0E:B5:A0:0C:93:D6:3B:CD:EE
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       7717BB8333F4CAFA1DB96849D687C84417218B57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number:          02A1
Signing time:             Fri 17 Apr 2026 00:34:42 +0000
Manifest this update:     Fri 17 Apr 2026 00:29:42 +0000
Manifest next update:     Sat 18 Apr 2026 03:57:42 +0000
Files and hashes:         1: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=)
                          2: AS395793.roa (hash: V5JEB7lz8FwA4enu53vGQgB/6Qx37KJCclmB6l2ZUq0=)
                          3: AS3320.roa (hash: J0gCdn8aWPQr54/0F/uediEv8Z8fjukYJoHGgqTaPFs=)
                          4: AS152179.roa (hash: 3s5ZO5zsIBGOTYB/W7LkLPPbBTA+gesfrHvDmlpyA+0=)
                          5: AS2914.roa (hash: 2t79Dc48lM1NRGFZZiYzebTrp5NOXQIczJ6i0MsJxLQ=)
                          6: AS198250.roa (hash: 0AtrEvqe07hWd8Wqy2rJpr0jaaNWhdxqy23FH66II7Y=)
                          7: AS7029.roa (hash: EQdsNpFUDlB6ynhRTbcYQBl7UF6yGjIXmjLtDYAN+1w=)
                          8: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=)
                          9: AS48266.roa (hash: bMUjaV/zrukPHur/enwWknsnzqvOgoiCYnqoXIVR7Rw=)
                          10: AS60123.roa (hash: QtgZXfsHBEnogO7UuZmZIr/ZqG9Z8/NgNBqi4sK9HBo=)
                          11: AS402047.roa (hash: kDpEc/Mv6MVbpX0TtNEUs1x0Fql1p3DOMvkh2qSS8pw=)
                          12: AS13347.roa (hash: Vcr6EeUXObLLwMTr/P281IyX4fwZYhwUt1AVEFcBuD4=)
                          13: AS834.roa (hash: YQec9SaUQi0he4uuKZXeoevkx6S2g8WxJv1Pz0ngS4Y=)
                          14: AS20326.roa (hash: bjlCs1cn8SZvrAA+XVOeFzTEEDwkFKKTeVLvOLa+FN0=)
                          15: AS9009.roa (hash: bsO+KEDdsh042ly3XKZ18x6W8Jx5Y/tMwuWQMMg9A7o=)
                          16: AS203446.roa (hash: oqoiqzh1+ViDUf4HKID2vR8MgIa8o5lwgPwsNCMr93E=)
                          17: AS212980.roa (hash: Zoz/8g4QJTKbhJZrHf9/7XdXmBbc4ng74YzPeFjoYNk=)
                          18: AS399073.roa (hash: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=)
                          19: AS47690.roa (hash: JX7G+mBe037OStFqpA0McZ7JKC6vPuvjH2Y/7AsUGXU=)
                          20: AS212027.roa (hash: mwTmCqgr/BINwa+LRLW7yo0HSDw8DAufEvQaH4pf++8=)
                          21: AS42831.roa (hash: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=)
                          22: AS202736.roa (hash: mvaFQ8VzOiSlC6osU1pagjFGEUjuXEDkXWP0QHArhMs=)
                          23: AS208545.roa (hash: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=)
                          24: AS5650.roa (hash: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=)
                          25: AS212238.roa (hash: 0IyslS3CG8KwMKdb6hG7WmS6/jX6BN24to036ny5Oec=)
                          26: AS197537.roa (hash: JP3hx/IAvQ4SgOvsKr86baQJpbUUMchlqabqd0xftz0=)
                          27: AS402203.roa (hash: P2ee2axKt6czEEyXB/tWt+mY7e8Sl5XgNxOrWS+VRsE=)
                          28: AS8820.roa (hash: 37NLowiuT9jy/dagftAxkW62Xv5potfYYsy61mpYIOM=)
                          29: AS40352.roa (hash: zD0xqd5sXzdGo6EF84+O92Ic0KmkhjIMhSt0sdwuKTc=)
                          30: AS61244.roa (hash: rBybT6KNUveYSpFmW0LV7SLnrcp5d5Ac6NXXIFW7N3g=)
                          31: AS60128.roa (hash: LYwh4MoU7+i8XzsRvFs92IcyFCoJKzZY9vGXelEbElA=)
                          32: AS174.roa (hash: YVpjx11K2k0KwX6I8b7c/sGi80aE+WgPV5jxCl19cwg=)
                          33: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: bzY0qcitPlEXEUCA/s782pB5EQLvG6mIhTGwrm7VO7M=)
                          34: AS203090.roa (hash: AtZQiXBdWfevJeS9ni8F5oxZwYfsEjJFqy+rO2NW5P0=)
                          35: AS150293.roa (hash: UDoxj4ucswxE9yggrpn3hSYu0TWTh1J6KYH9ecDwisM=)
                          36: AS215748.roa (hash: 3x6iarwKX82be+ibel0x8bpdtYPfZ1tvpFoGL1m1VtU=)
                          37: AS214271.roa (hash: Ryxr7X7Ltqo6eG8diqWyYYKBcmlEtpuVl7WOq2jpWd4=)
                          38: AS214483.roa (hash: 4KtpSOnc/KWvq+zimWh8U+q+OC78oZRQovYOuN+I9XY=)
                          39: AS153383.roa (hash: vCi6FQYQWKC0ggluWhyMgm6QAvKbEiJEf7VAiTXWA9c=)
                          40: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=)
                          41: AS201002.roa (hash: b8ZITxaPgT55292RXOwDGuMuOURRGinQZs7OnZ+k958=)
                          42: AS200213.roa (hash: jHsWgHO4WsK8UwfX+EGNaRyozPf8mcg2Dl9LXjUSJHU=)
                          43: AS5065.roa (hash: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=)
                          44: AS64267.roa (hash: 9NR5KgAXq7OBNV4qYToFoteMTZc+d/n3KSlEv7KRAOE=)
                          45: AS32132.roa (hash: AnbuErehQXFxV+kWQt2eul6q993RKYVkoz7/H8Ifyq0=)
                          46: AS54252.roa (hash: LRBKfU3oZxsRDvjiCU60FMM0ioGajI+vpwmOzUPhljM=)
                          47: AS402215.roa (hash: x+hGHtmEAPwvXVRtrD3qC/g1vCDTd7iiThEcyJYSuno=)
                          48: AS57043.roa (hash: 5kt0gUPpPlXUEkEZgXCUZ1bMA7kcongFeMkYDKoEOqw=)
                          49: AS16276.roa (hash: EKpXTe4ys8FkDLvAjnRFYuDnQiF1p8xjjP1Ye2+AROI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:17:bb:83:33:f4:ca:fa:1d:b9:68:49:d6:87:c8:44:17:21:8b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Apr 17 00:29:42 2026 GMT
            Not After : Apr 18 03:57:42 2026 GMT
        Subject: CN=3619955308C89B0A406D400EB5A00C93D63BCDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f8:8b:a8:bf:43:6b:ab:32:15:d1:8e:d7:c7:
                    90:c0:8c:d7:82:df:98:5c:e0:a6:a7:f5:fa:e0:e0:
                    7d:7b:be:dc:ca:00:c8:53:80:02:48:ce:90:95:a3:
                    82:14:69:2d:89:62:7d:8d:ae:bf:5b:da:a2:ae:9f:
                    86:cf:8d:ff:de:82:a1:fc:9f:5e:94:b1:90:74:3f:
                    4e:60:fb:01:22:f1:fa:1f:11:96:6e:6a:05:0b:9d:
                    54:d4:69:4a:dd:d7:1c:3b:67:ad:e3:c6:98:45:c5:
                    ca:03:8d:ee:8b:98:e3:d5:95:2d:5c:a1:6a:4a:0d:
                    4e:2c:58:f2:54:7e:5a:ee:16:b0:d4:8a:5f:7f:09:
                    d4:11:93:dc:69:a7:22:5c:56:1c:13:d5:2a:79:01:
                    28:39:dc:d9:a9:72:0b:36:9c:34:05:52:d3:96:ab:
                    d6:29:3d:94:af:d7:aa:c3:ef:17:d3:32:23:72:f5:
                    af:87:d3:8f:9a:06:8e:03:31:fd:4e:47:51:ab:33:
                    37:74:9a:6a:8b:bf:fa:94:b2:62:23:6e:5a:82:29:
                    12:f0:cc:1b:8b:86:a2:00:7b:b5:fb:23:45:c8:ee:
                    6c:85:70:58:7f:82:d4:ff:a9:07:88:13:7b:b6:45:
                    a6:e2:28:dc:82:76:df:bb:af:05:56:5c:65:31:90:
                    7c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:19:95:53:08:C8:9B:0A:40:6D:40:0E:B5:A0:0C:93:D6:3B:CD:EE
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:3f:14:16:11:24:ea:c7:00:ac:bf:c5:a8:30:94:fd:0a:cb:
         1e:c7:f6:43:f5:c4:5b:f2:f2:26:a1:89:e4:87:ea:64:f9:76:
         e2:11:e5:47:70:bc:a8:91:45:85:c5:ee:24:e1:f0:7a:84:c7:
         5d:fb:b4:1d:b5:79:0a:5b:cd:aa:cf:37:79:61:3e:5d:4d:76:
         8d:93:3d:7c:5d:62:62:4c:bb:ee:a2:ff:b7:37:43:94:8f:cb:
         60:cc:47:bd:93:dd:a9:7c:56:27:c3:d5:12:b4:0a:c6:94:38:
         e0:f6:81:17:2d:28:93:97:45:ed:21:5b:d4:3b:b5:27:b4:f0:
         0b:27:d7:28:f6:e0:92:e7:36:bd:45:bf:f0:1e:b1:a4:7d:f1:
         e1:73:fe:6a:1e:82:8c:1d:a3:39:9a:b4:32:ac:24:a6:d6:c8:
         df:74:d2:b9:52:7d:96:2f:08:ce:e9:a1:b0:ff:51:50:25:25:
         47:e9:8d:0e:d4:18:f9:fc:e7:ed:9f:4a:dd:23:64:6f:6f:fb:
         e5:28:ec:03:6c:0b:60:98:8e:2c:d3:8c:71:7e:7c:8e:86:49:
         56:bb:3a:26:27:31:11:54:3f:fd:cd:72:9e:7e:f4:0d:6c:88:
         1c:8d:97:af:82:a6:d5:1d:31:c7:5c:c0:36:ef:01:11:a7:bd:
         9b:8a:63:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----