Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File:                     3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier:          FhNcpFEdGqqIMirpo/vSh+lqz6g9VYu/FU6LBbKNKmA=
Subject key identifier:   EC:99:52:FA:8D:36:4F:1A:D4:EE:D2:88:A8:2D:7B:D7:A1:30:50:A3
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       25FC1316A26948DE5CDA9C48916F6A1683140F2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number:          022B
Signing time:             Mon 02 Mar 2026 01:53:49 +0000
Manifest this update:     Mon 02 Mar 2026 01:48:49 +0000
Manifest next update:     Tue 03 Mar 2026 04:24:49 +0000
Files and hashes:         1: AS60123.roa (hash: QtgZXfsHBEnogO7UuZmZIr/ZqG9Z8/NgNBqi4sK9HBo=)
                          2: AS152179.roa (hash: CLoHb65khJ/xkZgyKfE4QHe9gx+LzXYYD8aDDeekOmU=)
                          3: AS197537.roa (hash: JP3hx/IAvQ4SgOvsKr86baQJpbUUMchlqabqd0xftz0=)
                          4: AS212238.roa (hash: 0IyslS3CG8KwMKdb6hG7WmS6/jX6BN24to036ny5Oec=)
                          5: AS16276.roa (hash: KW9MPVc+GYoziUSGxGJkc9sN3s6o49VGu2rqobWKOO8=)
                          6: AS42831.roa (hash: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=)
                          7: AS203446.roa (hash: oqoiqzh1+ViDUf4HKID2vR8MgIa8o5lwgPwsNCMr93E=)
                          8: AS2914.roa (hash: 2t79Dc48lM1NRGFZZiYzebTrp5NOXQIczJ6i0MsJxLQ=)
                          9: AS834.roa (hash: dxNb6Pbdc+PmHK7arztg8GBHunYW9hwACiJfMZNr7+w=)
                          10: AS7029.roa (hash: EQdsNpFUDlB6ynhRTbcYQBl7UF6yGjIXmjLtDYAN+1w=)
                          11: AS214025.roa (hash: FogOqjBd/pqOZk2o+FJtKIklp33wwQWO2Dy7T4wwFeA=)
                          12: AS401322.roa (hash: W4cMpPKmxhD6uwt7Rw0QCZ+NWoDsMZpiT0qHt8rao6I=)
                          13: AS25198.roa (hash: CCnsq2vsfk775w/3K3jWx94uGydEOpfDWn7bLZtLzhg=)
                          14: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: SGIsV/bYfO6qOwC7ssJKINK5OtnhfF0vdSuMylh5xlM=)
                          15: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=)
                          16: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=)
                          17: AS202736.roa (hash: mvaFQ8VzOiSlC6osU1pagjFGEUjuXEDkXWP0QHArhMs=)
                          18: AS32132.roa (hash: AnbuErehQXFxV+kWQt2eul6q993RKYVkoz7/H8Ifyq0=)
                          19: AS5650.roa (hash: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=)
                          20: AS399073.roa (hash: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=)
                          21: AS402044.roa (hash: TeXNOXPE0PZ4n/aRbVwNBzdg/LSUcNFTcaTL81QpG7c=)
                          22: AS64267.roa (hash: 9NR5KgAXq7OBNV4qYToFoteMTZc+d/n3KSlEv7KRAOE=)
                          23: AS203090.roa (hash: 95D0Arn7lpyqFL3B8dufB9pDMQUEoH2IzMD4dnhwEvw=)
                          24: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=)
                          25: AS206781.roa (hash: u5AtvuN8DZoybC5jmpdLGiJIsJAgQ1te19Ty/6LaNP8=)
                          26: AS174.roa (hash: L29ZEQDEH3243d+/AQ2LR51XSuJJ5zMoUqLFbIzDgMI=)
                          27: AS214271.roa (hash: Ryxr7X7Ltqo6eG8diqWyYYKBcmlEtpuVl7WOq2jpWd4=)
                          28: AS47690.roa (hash: Vh1Ty7tlH+VOQXMAOOcicLwKUoXs0XqB/ZQhqHasRzU=)
                          29: AS395793.roa (hash: V5JEB7lz8FwA4enu53vGQgB/6Qx37KJCclmB6l2ZUq0=)
                          30: AS20326.roa (hash: bjlCs1cn8SZvrAA+XVOeFzTEEDwkFKKTeVLvOLa+FN0=)
                          31: AS57043.roa (hash: 5kt0gUPpPlXUEkEZgXCUZ1bMA7kcongFeMkYDKoEOqw=)
                          32: AS214483.roa (hash: 6RqqmAQfiH5vxDsevnysTOwpoPe3+DXp3DMdAvOkobQ=)
                          33: AS206216.roa (hash: u7wkYxEC5ndWFvyXiBE7Cp4juVxJvsG5zlBy7AjbcGM=)
                          34: AS60128.roa (hash: LYwh4MoU7+i8XzsRvFs92IcyFCoJKzZY9vGXelEbElA=)
                          35: AS3320.roa (hash: J0gCdn8aWPQr54/0F/uediEv8Z8fjukYJoHGgqTaPFs=)
                          36: AS401856.roa (hash: PcqYuWw+WLjFd7xYMMDLh2PknwsMH4AN2HIAPKmy7hg=)
                          37: AS215607.roa (hash: aEN59Wc1sVi2FLSpwvDtv0eo94DsoVyzU3FjhKwkevc=)
                          38: AS208545.roa (hash: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=)
                          39: AS13347.roa (hash: Vcr6EeUXObLLwMTr/P281IyX4fwZYhwUt1AVEFcBuD4=)
                          40: AS5065.roa (hash: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=)
                          41: AS61244.roa (hash: rBybT6KNUveYSpFmW0LV7SLnrcp5d5Ac6NXXIFW7N3g=)
                          42: AS8820.roa (hash: 37NLowiuT9jy/dagftAxkW62Xv5potfYYsy61mpYIOM=)
                          43: AS54252.roa (hash: LRBKfU3oZxsRDvjiCU60FMM0ioGajI+vpwmOzUPhljM=)
                          44: AS48266.roa (hash: 5XHsHWtEphXEUuyM9GSRd9gYVMapRAebR1SxMatNo3k=)
                          45: AS9009.roa (hash: bsO+KEDdsh042ly3XKZ18x6W8Jx5Y/tMwuWQMMg9A7o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fc:13:16:a2:69:48:de:5c:da:9c:48:91:6f:6a:16:83:14:0f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Mar  2 01:48:49 2026 GMT
            Not After : Mar  3 04:24:49 2026 GMT
        Subject: CN=EC9952FA8D364F1AD4EED288A82D7BD7A13050A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1b:c9:41:c8:51:ef:47:23:09:2f:9b:b6:bc:
                    2c:3e:01:18:16:75:39:8c:e2:1e:9b:7c:09:82:c1:
                    70:39:0b:e6:83:4b:90:f2:84:dc:d9:88:c2:47:1f:
                    b9:2d:48:67:df:74:95:ee:b1:56:48:d7:50:5f:49:
                    46:74:b8:9d:73:a6:fc:7d:13:0f:f4:63:4c:5e:38:
                    30:2a:59:b8:12:a4:72:a7:95:f0:97:94:35:ab:dc:
                    98:cc:05:4a:d7:a5:1e:55:eb:b1:87:ef:21:1a:3a:
                    90:7a:a9:80:5f:cb:cb:c0:d9:65:f7:4b:5d:01:41:
                    82:29:29:5f:8e:20:d5:0f:b8:44:ab:cb:01:d3:fc:
                    11:f3:1f:2b:18:0b:54:07:cf:c0:0c:86:5e:f7:fc:
                    85:e1:9c:10:1d:10:3e:24:62:4e:c2:bb:dd:2a:46:
                    97:18:7a:9c:5c:cb:b7:5a:08:6c:93:7a:60:1c:de:
                    12:a7:69:2a:ad:ee:58:4e:9c:cc:ac:c9:23:75:f5:
                    22:d0:3a:25:4c:14:e5:20:d5:91:b0:6e:16:fc:36:
                    93:69:be:a4:bd:39:e8:dd:ec:fa:13:f3:d4:65:9a:
                    1e:87:41:44:1f:5f:95:94:15:12:f6:08:16:69:1a:
                    01:5e:11:fe:ff:28:ad:3b:14:e6:ea:0f:cf:ec:88:
                    fe:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:99:52:FA:8D:36:4F:1A:D4:EE:D2:88:A8:2D:7B:D7:A1:30:50:A3
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:41:46:c8:cf:18:38:a7:b6:03:31:65:87:53:7e:9b:5e:fb:
         01:13:3e:77:bd:23:38:50:d2:0a:ea:79:9c:18:02:33:2f:18:
         ff:83:af:ba:b2:ac:4b:65:b5:3d:74:e0:ce:67:6e:63:09:6c:
         4b:ff:19:94:1c:03:4a:25:15:23:97:e4:c9:4e:aa:2c:22:c7:
         4b:04:9c:3d:81:2d:3e:df:24:cd:5d:0f:3d:32:66:e6:9e:ac:
         da:fe:7d:79:a6:d8:85:17:6f:35:5b:a7:75:69:c3:64:b7:39:
         bc:23:c3:be:41:85:ef:69:64:69:3b:57:27:d8:a6:b8:10:34:
         65:61:ba:8d:22:f3:fb:4d:24:5d:87:a4:aa:60:a6:be:27:98:
         1a:87:ba:04:4c:83:3b:64:cd:3c:ed:28:d6:a4:01:80:5e:30:
         ec:cf:2f:43:58:42:0a:9f:c8:28:e3:c5:94:27:8a:45:9e:3d:
         4a:59:ea:80:e7:27:ea:fb:28:e0:07:c0:e1:29:84:6f:03:6d:
         f0:c7:81:76:fb:cb:fb:ff:25:90:6f:3b:53:63:81:a5:d9:87:
         53:ab:dd:ea:79:9c:67:02:c7:d0:a0:16:52:6b:65:b4:96:5c:
         6c:62:da:db:3b:9a:89:d9:b2:d9:cf:f7:3e:62:76:f7:69:79:
         ac:ea:d1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:10 2026 by rpki-client