Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File:                     3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier:          uzSAooj5UGCuG4Yv1aOaeKnC9+OQ4fe0qVxnz1LbO9I=
Subject key identifier:   6A:3A:9D:D9:1D:47:9F:E5:B5:D0:45:1D:E8:09:E7:5A:6B:A5:AF:58
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       28B4C8461CF9D14D8E6412C5301E26F4481FC664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number:          02A5
Signing time:             Sun 19 Apr 2026 06:27:50 +0000
Manifest this update:     Sun 19 Apr 2026 06:22:50 +0000
Manifest next update:     Mon 20 Apr 2026 09:17:50 +0000
Files and hashes:         1: AS215748.roa (hash: 3x6iarwKX82be+ibel0x8bpdtYPfZ1tvpFoGL1m1VtU=)
                          2: AS203446.roa (hash: oqoiqzh1+ViDUf4HKID2vR8MgIa8o5lwgPwsNCMr93E=)
                          3: AS60128.roa (hash: LYwh4MoU7+i8XzsRvFs92IcyFCoJKzZY9vGXelEbElA=)
                          4: AS13347.roa (hash: Vcr6EeUXObLLwMTr/P281IyX4fwZYhwUt1AVEFcBuD4=)
                          5: AS208545.roa (hash: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=)
                          6: AS8820.roa (hash: 37NLowiuT9jy/dagftAxkW62Xv5potfYYsy61mpYIOM=)
                          7: AS16276.roa (hash: EKpXTe4ys8FkDLvAjnRFYuDnQiF1p8xjjP1Ye2+AROI=)
                          8: AS198250.roa (hash: 0AtrEvqe07hWd8Wqy2rJpr0jaaNWhdxqy23FH66II7Y=)
                          9: AS214483.roa (hash: 4KtpSOnc/KWvq+zimWh8U+q+OC78oZRQovYOuN+I9XY=)
                          10: AS61244.roa (hash: rBybT6KNUveYSpFmW0LV7SLnrcp5d5Ac6NXXIFW7N3g=)
                          11: AS5650.roa (hash: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=)
                          12: AS32132.roa (hash: AnbuErehQXFxV+kWQt2eul6q993RKYVkoz7/H8Ifyq0=)
                          13: AS48266.roa (hash: bMUjaV/zrukPHur/enwWknsnzqvOgoiCYnqoXIVR7Rw=)
                          14: AS174.roa (hash: YVpjx11K2k0KwX6I8b7c/sGi80aE+WgPV5jxCl19cwg=)
                          15: AS150293.roa (hash: QbHrOZo2zwZ+oLE3z31pu5sxkdmzrbc6BP45zBXt6Tg=)
                          16: AS214271.roa (hash: Ryxr7X7Ltqo6eG8diqWyYYKBcmlEtpuVl7WOq2jpWd4=)
                          17: AS395793.roa (hash: V5JEB7lz8FwA4enu53vGQgB/6Qx37KJCclmB6l2ZUq0=)
                          18: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=)
                          19: AS212238.roa (hash: 0IyslS3CG8KwMKdb6hG7WmS6/jX6BN24to036ny5Oec=)
                          20: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=)
                          21: AS402047.roa (hash: kDpEc/Mv6MVbpX0TtNEUs1x0Fql1p3DOMvkh2qSS8pw=)
                          22: AS200213.roa (hash: jHsWgHO4WsK8UwfX+EGNaRyozPf8mcg2Dl9LXjUSJHU=)
                          23: AS54252.roa (hash: LRBKfU3oZxsRDvjiCU60FMM0ioGajI+vpwmOzUPhljM=)
                          24: AS40352.roa (hash: zD0xqd5sXzdGo6EF84+O92Ic0KmkhjIMhSt0sdwuKTc=)
                          25: AS402215.roa (hash: x+hGHtmEAPwvXVRtrD3qC/g1vCDTd7iiThEcyJYSuno=)
                          26: AS212980.roa (hash: Zoz/8g4QJTKbhJZrHf9/7XdXmBbc4ng74YzPeFjoYNk=)
                          27: AS153383.roa (hash: vCi6FQYQWKC0ggluWhyMgm6QAvKbEiJEf7VAiTXWA9c=)
                          28: AS7029.roa (hash: EQdsNpFUDlB6ynhRTbcYQBl7UF6yGjIXmjLtDYAN+1w=)
                          29: AS47690.roa (hash: JX7G+mBe037OStFqpA0McZ7JKC6vPuvjH2Y/7AsUGXU=)
                          30: AS3320.roa (hash: J0gCdn8aWPQr54/0F/uediEv8Z8fjukYJoHGgqTaPFs=)
                          31: AS201002.roa (hash: b8ZITxaPgT55292RXOwDGuMuOURRGinQZs7OnZ+k958=)
                          32: AS402203.roa (hash: P2ee2axKt6czEEyXB/tWt+mY7e8Sl5XgNxOrWS+VRsE=)
                          33: AS203090.roa (hash: AtZQiXBdWfevJeS9ni8F5oxZwYfsEjJFqy+rO2NW5P0=)
                          34: AS64267.roa (hash: 9NR5KgAXq7OBNV4qYToFoteMTZc+d/n3KSlEv7KRAOE=)
                          35: AS2914.roa (hash: 2t79Dc48lM1NRGFZZiYzebTrp5NOXQIczJ6i0MsJxLQ=)
                          36: AS834.roa (hash: XnhyisY9Cq/f8WLormmBvX+5p/m+6AoSQSVrRgqho4U=)
                          37: AS202736.roa (hash: mvaFQ8VzOiSlC6osU1pagjFGEUjuXEDkXWP0QHArhMs=)
                          38: AS60123.roa (hash: QtgZXfsHBEnogO7UuZmZIr/ZqG9Z8/NgNBqi4sK9HBo=)
                          39: AS152179.roa (hash: 3s5ZO5zsIBGOTYB/W7LkLPPbBTA+gesfrHvDmlpyA+0=)
                          40: AS5065.roa (hash: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=)
                          41: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=)
                          42: AS42831.roa (hash: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=)
                          43: AS197537.roa (hash: JP3hx/IAvQ4SgOvsKr86baQJpbUUMchlqabqd0xftz0=)
                          44: AS212027.roa (hash: mwTmCqgr/BINwa+LRLW7yo0HSDw8DAufEvQaH4pf++8=)
                          45: AS399073.roa (hash: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=)
                          46: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: eL1uiuY2rvkrX8kgp/45k67fRPQzhHtmxU3L3wOFe98=)
                          47: AS57043.roa (hash: 5kt0gUPpPlXUEkEZgXCUZ1bMA7kcongFeMkYDKoEOqw=)
                          48: AS20326.roa (hash: bjlCs1cn8SZvrAA+XVOeFzTEEDwkFKKTeVLvOLa+FN0=)
                          49: AS9009.roa (hash: bsO+KEDdsh042ly3XKZ18x6W8Jx5Y/tMwuWQMMg9A7o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b4:c8:46:1c:f9:d1:4d:8e:64:12:c5:30:1e:26:f4:48:1f:c6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Apr 19 06:22:50 2026 GMT
            Not After : Apr 20 09:17:50 2026 GMT
        Subject: CN=6A3A9DD91D479FE5B5D0451DE809E75A6BA5AF58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:6a:89:9f:ad:ed:38:58:a0:17:61:24:4b:
                    ac:0d:f0:8b:cd:5b:bf:b4:65:a0:21:52:8d:10:e4:
                    43:7e:a1:90:a7:68:3e:80:cf:e5:3e:8d:f7:1d:ea:
                    5a:8d:b6:ac:21:c6:02:fe:49:db:2c:3f:da:53:9a:
                    c5:b1:8d:54:3b:58:af:80:f5:47:ec:b0:c6:40:6b:
                    42:cd:f4:a3:89:45:0d:2c:7b:d9:d0:59:d0:95:95:
                    72:c5:54:cf:18:0f:f3:9e:13:93:3b:1a:78:f3:d2:
                    2e:bd:72:68:d6:22:e7:72:0a:3c:04:0b:30:45:5c:
                    6a:59:e4:f7:b0:04:8c:ae:25:31:24:ca:32:6d:ec:
                    87:f5:3d:c3:d0:37:41:3a:72:09:bf:2d:14:be:00:
                    39:08:d6:7a:63:69:79:74:c5:95:46:8c:40:3d:ed:
                    4f:f1:6f:9e:53:e9:b5:bf:c7:6b:87:66:38:6d:f4:
                    5f:0e:b5:ac:cd:87:69:52:3d:c0:55:7a:14:79:1c:
                    1a:7a:92:cb:1b:1f:77:07:f1:72:a9:ec:04:42:1e:
                    d4:dc:02:65:1d:04:5a:eb:8e:97:92:89:51:51:7e:
                    07:ee:5a:34:12:34:72:bb:f0:ec:23:22:fc:41:68:
                    9a:34:b1:69:66:1c:b1:14:ce:aa:f1:24:f7:41:e0:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3A:9D:D9:1D:47:9F:E5:B5:D0:45:1D:E8:09:E7:5A:6B:A5:AF:58
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:13:ab:1b:61:0f:0e:53:1d:f9:07:f7:8f:fd:df:0a:54:89:
         ee:44:88:48:56:96:63:e2:d1:99:d6:f2:cc:20:7d:eb:91:06:
         f9:d5:ff:9b:15:53:ac:fd:ca:cc:70:80:23:8d:85:17:7c:e3:
         dd:78:24:7e:0f:b5:c0:d7:1c:b3:e4:a9:d6:be:42:a6:f6:00:
         66:86:d9:a0:16:66:a9:6a:e7:dd:01:fb:a6:3a:0f:1b:29:80:
         fb:44:9b:2a:a9:85:a0:48:49:9a:22:26:df:e2:c5:4e:eb:a5:
         a2:b8:64:55:8f:80:2b:00:f1:6f:54:d1:62:b5:e1:3c:11:9d:
         59:39:f9:af:89:11:ea:0c:71:40:51:8a:f6:90:dd:04:c3:ed:
         09:a0:e1:ff:2b:da:72:1a:8e:f6:ed:2a:e7:c0:e4:0b:96:5c:
         34:f0:90:60:41:f1:62:e2:ba:12:ee:a8:c4:40:7c:22:3e:0e:
         dd:87:c4:f0:8f:8c:23:95:e5:eb:fa:15:63:bb:51:84:61:77:
         25:5b:07:f6:5c:e1:f4:48:f5:3c:11:15:2e:b6:ec:7e:aa:05:
         1a:a3:7e:ec:2c:05:62:69:66:4a:5a:aa:e2:bb:47:96:c2:30:
         b4:b6:7b:32:03:f3:4f:62:36:b3:28:d4:09:09:64:af:5f:a8:
         79:6c:fb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:15 2026 by rpki-client