Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File:                     3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier:          CC8QbI79w3ETrHQ+O9iPFy6YmYDShJPAA8gqXZph1C0=
Subject key identifier:   15:08:6E:2F:F6:D1:F4:D9:97:17:2E:C6:14:48:A3:A1:1F:46:6E:2D
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       2E39CDA7F9B7D64FCFB4E34C31ADD23C66E56195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number:          04F7
Signing time:             Wed 04 Nov 2026 12:29:03 +0000
Manifest this update:     Wed 04 Nov 2026 12:24:03 +0000
Manifest next update:     Thu 05 Nov 2026 16:17:03 +0000
Files and hashes:         1: AS5650.roa (hash: hJ59++XEh/bB7KaM3MbLki+q3w5S1Bpq98TiOIgbSpU=)
                          2: AS9009.roa (hash: Uw1SUj3qHKiQ+ByPYk1sxAxNALDfZPF2cAWmoq+ZfXY=)
                          3: AS218965.roa (hash: lX91zUEspkKRCI1oyzM6eOQQpxN2f9FJ+XRFbIpVa+A=)
                          4: AS216138.roa (hash: C7rcV7oiPlI+oPnXML1Ct/QhSn1j0eN8y938N5o2x0c=)
                          5: AS214483.roa (hash: 549KWAruPIwRewMoeCJz2Q7AKkWNgR7Odnymn+SK9QM=)
                          6: AS215748.roa (hash: 3x6iarwKX82be+ibel0x8bpdtYPfZ1tvpFoGL1m1VtU=)
                          7: AS395793.roa (hash: 072Af//FGf2COy0anYSUB24XVoRiWBVL1/HQX0lTH38=)
                          8: AS147281.roa (hash: nd8WE3Tw/fviIpY65PS22BP/+nksCvYOMLXdYRexSzw=)
                          9: AS208545.roa (hash: EXsxDT665iD+A3CM8pHZF0iPzZmKCcnLPW/HZGIm+WY=)
                          10: AS201002.roa (hash: b8ZITxaPgT55292RXOwDGuMuOURRGinQZs7OnZ+k958=)
                          11: AS60128.roa (hash: wa4cIQNPWnzU7hUrUn58xARa+9FlY0wMiBco7gr3ZEw=)
                          12: AS30088.roa (hash: fi5h1XhSVP5bIlglUWEflB5z/S2ablziBGRj7yb+JBE=)
                          13: AS152179.roa (hash: YcViGnpRAt1Q1T/OsNGRarhbBZvtU6D9q0ZOQucaJAw=)
                          14: AS32132.roa (hash: BoBvNY/WJCk2Mc0mHAc39NhaN2in8vZf3gTCPvr2V88=)
                          15: AS218797.roa (hash: 1gI6RSTTZZSgUJ6+NmtPNQIELMhuD7wtkosHo2G6gcY=)
                          16: AS61244.roa (hash: tx+MizKBhdMazdXKX+OUiYPvw9h3S4+md2sq9Qmz5yg=)
                          17: AS42831.roa (hash: BCWrnj/JiU+VUZoOyWOqbE0NUMJ5Sl3BYNdffweZa78=)
                          18: AS134494.roa (hash: ABUD15cGFpmGCJBjlhdrm1BpCd/PGarEvpNGMMcs3qY=)
                          19: AS2914.roa (hash: 2t79Dc48lM1NRGFZZiYzebTrp5NOXQIczJ6i0MsJxLQ=)
                          20: AS12083.roa (hash: MUe2cqtFEnaNoT3tD8wok4X+5BCnUWDTrUI/cBFsEiI=)
                          21: AS399631.roa (hash: 2FOLE3PPvFUhGWQGS93WxJslXGYvOaG2Q0uliqKb9Gc=)
                          22: AS8075.roa (hash: 3cTQjOtMW6GJ/xtwZDOiPHB2SP8DZODC+kIloQS9S2s=)
                          23: AS200213.roa (hash: jHsWgHO4WsK8UwfX+EGNaRyozPf8mcg2Dl9LXjUSJHU=)
                          24: AS402475.roa (hash: LAHRpQwK0oJi5BSDJs5jT+GSmLxnatizBWGDDxvly3Y=)
                          25: AS137409.roa (hash: X6yg0POX/fvoKs44kRzPGZyVPWwkQY4silLD8bs9mA4=)
                          26: AS48529.roa (hash: sJ45dfFVodPhRxdb0JyOxMSCrixBQNlBAeJLRTx5cnI=)
                          27: AS199550.roa (hash: ssNHTzba22P3fSR/hkFMsopCuACVXS1jz2fvBlI58Mw=)
                          28: AS152726.roa (hash: r9e5weORdSj3QpMZ9KPd0qVwsCFWUPGHmEvLzlFSGrE=)
                          29: AS19429.roa (hash: MOJDEFsxIGPKn08kavJSaKsfq/WTlf7gy32ERKiA6Jo=)
                          30: AS402866.roa (hash: ID25UVR/G2cFfypX1E46z5udcU4h2H4GKx7+BhZZq4Q=)
                          31: AS55201.roa (hash: hHr+QQMrwUqQRqvT6GASepW5HYeplmwByVzCIF+VicQ=)
                          32: AS60123.roa (hash: waKSX3kLZPrsyaZzRZJdMv2qcFW94Fi4IaZoXhlRuu4=)
                          33: AS174.roa (hash: emkybcUOP7mXyXUP8EkhnVHXE5wFezPALIrQeEBfrag=)
                          34: AS13347.roa (hash: ePmHeORHlOZbB5pF6OuvLKOgbTni3yT91/Kj8L1N+XE=)
                          35: AS151338.roa (hash: AmYhZvwfJAE0DPXyieEiLJvQUIOvIThQ5FEeciWlPxE=)
                          36: AS218736.roa (hash: ai4Bd+OvDcDIO4ai8D9jf66bCCOqcjZK8QkFC/wskwU=)
                          37: AS207821.roa (hash: HVH5bzvlnFfChyWhTzofZgnvrIitykiU+J2d1wntJrY=)
                          38: AS152606.roa (hash: iGI1Np/M1TBDls+iFTUy6+k8iT/zadCGcsjw/ryRFss=)
                          39: AS197213.roa (hash: m24hawxS+c+IptS6tO7BZTjRFDwOhR1Z2/CpE9EYHf0=)
                          40: AS206300.roa (hash: BqXRE4Q1/U0lRDzyBl10U1oPqEdOfFYFOggxrxr8LNw=)
                          41: AS3214.roa (hash: jdza9PJ3CeFkyeGfFz9cYPmh+OJHouTGbuicXyr4m1M=)
                          42: AS214432.roa (hash: ZOZVU0gaB1zLrogTsATuG/tPO3vQAEUVKlSRdlaQ6PY=)
                          43: AS197537.roa (hash: Vv/geVTG5FCGVmbMBJLxtEM23lz1FomP0ERHUKJVTL0=)
                          44: AS218780.roa (hash: fRh6VVgJDnzXWAcZKV8uyK9gxBpDYm8uiC7ihNT5BnU=)
                          45: AS8820.roa (hash: DzCHT9hefZEbLyVKRengSck6pje5aRTj8oUekfaWSLI=)
                          46: AS219217.roa (hash: fxg/BZj5g7AKYTzjHEQ3dTbX49zcxtqWB630qxBN1Cg=)
                          47: AS399073.roa (hash: WVbCJHWiNZRHGmJNGzgiysG5FC/81As2A7As9yWVYEA=)
                          48: AS199030.roa (hash: +l1jGMTwf7+wGU2Clp1Ezh0EMeN82sJqUUud7mGDeS0=)
                          49: AS20326.roa (hash: hZnA9AJQ8LccJ1+YPDxK01q3EKKoKcwlaINXLkEch4s=)
                          50: AS14618.roa (hash: AVy/MTTJtlfXtFJhySN/YcD3NqU2V9RR9Nz/gM8xuAU=)
                          51: AS153383.roa (hash: vCi6FQYQWKC0ggluWhyMgm6QAvKbEiJEf7VAiTXWA9c=)
                          52: AS16276.roa (hash: 5c47yRX8sKbfs5icPJxN831sp6h6MSWbBvEuXw5p5uE=)
                          53: AS212980.roa (hash: Zoz/8g4QJTKbhJZrHf9/7XdXmBbc4ng74YzPeFjoYNk=)
                          54: AS5065.roa (hash: atPI+WaWV+J+odkHEVuRYBp70O4LKqLtSXvb4R88c1s=)
                          55: AS198566.roa (hash: 4boVHaLlCy7AeN2MW7kaoecmRvvRQ0JrzqUnks5pUGs=)
                          56: AS9304.roa (hash: fL5MH2zhS62XmnHpLWm3BYhgNfOfrVbDJyeiA8Nbdmo=)
                          57: AS212238.roa (hash: N89YlRznWlYXhMwAGglqZH3OEPPtAbjwAeHWAiVsRTQ=)
                          58: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: uIKXWNoUjD+O0OHfRzeJw1X1a9mctxPoZqizVSB4Pxo=)
                          59: AS218799.roa (hash: VzYZMrck7GzcfCRo+kytdpW3DO9KRQOoXVrI20dCG1w=)
                          60: AS23532.roa (hash: aAn6W1nHAFh7NVqf0hfGrkzonEVGDCr4wgZgQ4dxQnY=)
                          61: AS979.roa (hash: FZzJe2WIOW2H+2QQXXeyLNaDLIbIRMw30pYDhaF+Xg0=)
                          62: AS834.roa (hash: tYkRRfhERGiDYB/vUBprSyw/f3Cdfol2zpvojoQdwxI=)
                          63: AS7029.roa (hash: LNpotZy4Xd78zNyYSAPBKx5qCBaXbji0m0T6N0Om+PQ=)
                          64: AS397630.roa (hash: fiCi5UsMCspeqdFSwclp5/nVWvZUKOzwdyg8GsO+anM=)
                          65: AS202736.roa (hash: 7TAfkeSnlmZZjOEwdkgs/It5zMPmWXmgqhW5G50dNbw=)
                          66: AS152672.roa (hash: 24CV6i0q0PLEjF37/NGv/norWYAfvb/T4LhYn9c7r4I=)
                          67: AS16509.roa (hash: TZaso8O1mBIsvh6LRG6GIj/6hyWmaWTZBE1WFlLb3Uw=)
                          68: AS214271.roa (hash: UCHe29xFLtQ1gAzjWXNiHJ8NKs1aDAGPAzVxEhJG8Do=)
                          69: AS274983.roa (hash: zuwMv4yGw69KylZrvgblV7msd/PtImDMbugEiS85suc=)
                          70: AS212027.roa (hash: mwTmCqgr/BINwa+LRLW7yo0HSDw8DAufEvQaH4pf++8=)
                          71: AS57043.roa (hash: yi2TQH7e8B1igP9vlOWRBdOwKO17dHiy8BYSk3P4gjo=)
                          72: AS203090.roa (hash: AtZQiXBdWfevJeS9ni8F5oxZwYfsEjJFqy+rO2NW5P0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 16:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:39:cd:a7:f9:b7:d6:4f:cf:b4:e3:4c:31:ad:d2:3c:66:e5:61:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Nov  4 12:24:03 2026 GMT
            Not After : Nov  5 16:17:03 2026 GMT
        Subject: CN=15086E2FF6D1F4D997172EC61448A3A11F466E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:9b:d0:d5:f2:53:63:9b:00:15:3c:f9:e2:
                    28:40:c6:ee:1c:65:31:c4:52:a2:0f:18:fc:0c:a3:
                    62:59:f2:b5:f1:73:7e:e4:6f:36:97:9f:f7:19:d1:
                    c2:35:30:2b:31:25:16:63:ad:c3:73:83:12:a0:ad:
                    e3:74:a6:8d:a2:d8:d9:e0:9e:5f:d0:f8:05:71:94:
                    2b:cd:7f:c1:df:ee:a4:12:2a:a0:d1:16:30:b6:d7:
                    93:24:de:5b:01:1c:b1:22:12:66:4a:f2:42:5b:bd:
                    64:29:9b:bc:ab:ca:fc:2c:ca:5c:cd:5f:a8:24:35:
                    38:b5:de:80:0f:d2:95:92:2e:45:da:c5:8a:ae:de:
                    8d:ab:be:c1:25:1d:48:ca:c6:8f:7f:23:48:76:4c:
                    ce:03:85:b3:ad:2e:a8:1b:61:80:76:c5:2b:b4:77:
                    6d:87:d2:40:9a:8e:40:b7:1b:b3:3e:a0:84:e9:44:
                    c6:6c:60:81:f6:a3:58:71:1b:85:53:68:7b:72:42:
                    7c:62:07:f5:36:4a:34:4a:ba:db:be:c5:ee:a2:0f:
                    46:ab:de:67:bb:13:1d:1a:30:5e:81:dc:31:25:3c:
                    d5:88:d3:da:7e:c7:53:c3:62:54:58:d0:52:d9:ba:
                    f4:cf:14:d9:05:fd:93:3d:b9:a3:cb:e3:4c:53:6d:
                    00:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:08:6E:2F:F6:D1:F4:D9:97:17:2E:C6:14:48:A3:A1:1F:46:6E:2D
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:4e:b2:b1:76:06:92:ab:eb:3e:3f:75:5d:11:a8:bd:5e:a9:
         6a:0b:c9:37:4b:73:a9:3d:7d:c4:de:3e:57:39:49:ba:b3:33:
         d4:b5:df:a3:3f:8e:10:f6:bb:51:b9:f5:4e:cf:59:5e:25:73:
         71:f5:c7:58:80:80:13:10:ac:3f:92:e6:50:f0:d5:53:eb:9b:
         58:ae:ff:59:a6:72:62:1b:25:4d:d1:f4:5f:65:6e:88:b4:d1:
         c9:ec:c6:a9:fb:d1:ae:8c:56:b7:a5:48:ea:0c:72:11:62:3b:
         a3:19:0f:e8:53:df:85:a9:d8:b8:0c:f4:2b:13:15:52:9a:e5:
         41:b8:d8:a6:c4:bf:7a:19:58:c1:0d:59:ec:17:1d:ab:eb:da:
         62:80:0b:56:83:6e:e4:d4:8c:35:95:3e:c2:55:37:8a:44:18:
         31:a8:70:ef:9c:ca:36:37:46:fc:46:0f:32:6d:b2:94:a7:35:
         e9:03:64:bd:0c:84:74:5e:cd:73:2c:99:83:0c:b2:1f:76:ae:
         9f:a9:92:ce:36:73:64:62:ed:4f:22:f2:8b:78:0d:e4:99:8c:
         7a:ba:e1:60:d6:7c:a7:89:e6:41:69:fd:98:00:6a:c0:55:4f:
         86:29:50:a5:ac:89:fa:5f:92:e7:35:01:2f:7a:71:38:14:53:
         2f:bc:7e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:08:57 2026 by rpki-client