Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File:                     3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier:          YBY4FqgwQDcHfinnT609/ZCbzmOJkTw2b+itf2/YoQ0=
Subject key identifier:   11:BD:DE:1C:40:4A:36:BF:B3:B0:D2:75:EC:9F:7C:22:94:35:45:93
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       386C0A53ABA6F930C2E060FA48EFF533876267BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number:          03B2
Signing time:             Tue 28 Jul 2026 20:04:37 +0000
Manifest this update:     Tue 28 Jul 2026 19:59:37 +0000
Manifest next update:     Wed 29 Jul 2026 20:38:37 +0000
Files and hashes:         1: AS14618.roa (hash: DKUxPFg0pBt1pth8vTcqDSDRzTBpEFZE0VArVL/C5Eg=)
                          2: AS212980.roa (hash: Zoz/8g4QJTKbhJZrHf9/7XdXmBbc4ng74YzPeFjoYNk=)
                          3: AS203090.roa (hash: AtZQiXBdWfevJeS9ni8F5oxZwYfsEjJFqy+rO2NW5P0=)
                          4: AS395793.roa (hash: V5JEB7lz8FwA4enu53vGQgB/6Qx37KJCclmB6l2ZUq0=)
                          5: AS152179.roa (hash: vt5DB1ixo866JyLPzLNFh5Xh1R697aDxqXLPd9Dn5/I=)
                          6: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=)
                          7: AS7289.roa (hash: nlMzgT76uLdfe80dgOEnunlVuK0r2y4Nbfy5qu2guI0=)
                          8: AS201002.roa (hash: b8ZITxaPgT55292RXOwDGuMuOURRGinQZs7OnZ+k958=)
                          9: AS214271.roa (hash: Ryxr7X7Ltqo6eG8diqWyYYKBcmlEtpuVl7WOq2jpWd4=)
                          10: AS136725.roa (hash: WZ4AvosT8gdji8l6tC26ep5Hpfq6nkA4zj7eeW+TUmE=)
                          11: AS57043.roa (hash: 5kt0gUPpPlXUEkEZgXCUZ1bMA7kcongFeMkYDKoEOqw=)
                          12: AS397630.roa (hash: fiCi5UsMCspeqdFSwclp5/nVWvZUKOzwdyg8GsO+anM=)
                          13: AS60123.roa (hash: QtgZXfsHBEnogO7UuZmZIr/ZqG9Z8/NgNBqi4sK9HBo=)
                          14: AS209349.roa (hash: fuWxA00hn5w6KkPZVbdz2MgJjspkZh1ySmS7ZUVrwBM=)
                          15: AS399631.roa (hash: 2FOLE3PPvFUhGWQGS93WxJslXGYvOaG2Q0uliqKb9Gc=)
                          16: AS16509.roa (hash: 0/otV+83uR5V5w3O0r70VD3NpuqMLsYdCNV0aTxI6bc=)
                          17: AS214483.roa (hash: 4KtpSOnc/KWvq+zimWh8U+q+OC78oZRQovYOuN+I9XY=)
                          18: AS208545.roa (hash: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=)
                          19: AS7029.roa (hash: EQdsNpFUDlB6ynhRTbcYQBl7UF6yGjIXmjLtDYAN+1w=)
                          20: AS60128.roa (hash: LYwh4MoU7+i8XzsRvFs92IcyFCoJKzZY9vGXelEbElA=)
                          21: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: L5rm0yB8p+oL7K0dupbFhSIBARtVhkJsMjUP+ax1bMY=)
                          22: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=)
                          23: AS154132.roa (hash: IK9ys7laXH9IHaA5dPb4rDiT1VJwl5Xd5xxa+9z16go=)
                          24: AS13347.roa (hash: Vcr6EeUXObLLwMTr/P281IyX4fwZYhwUt1AVEFcBuD4=)
                          25: AS12083.roa (hash: MUe2cqtFEnaNoT3tD8wok4X+5BCnUWDTrUI/cBFsEiI=)
                          26: AS206300.roa (hash: BqXRE4Q1/U0lRDzyBl10U1oPqEdOfFYFOggxrxr8LNw=)
                          27: AS200213.roa (hash: jHsWgHO4WsK8UwfX+EGNaRyozPf8mcg2Dl9LXjUSJHU=)
                          28: AS979.roa (hash: FZzJe2WIOW2H+2QQXXeyLNaDLIbIRMw30pYDhaF+Xg0=)
                          29: AS216138.roa (hash: C7rcV7oiPlI+oPnXML1Ct/QhSn1j0eN8y938N5o2x0c=)
                          30: AS8820.roa (hash: DzCHT9hefZEbLyVKRengSck6pje5aRTj8oUekfaWSLI=)
                          31: AS9009.roa (hash: bsO+KEDdsh042ly3XKZ18x6W8Jx5Y/tMwuWQMMg9A7o=)
                          32: AS212238.roa (hash: 8QbbxMdg2yviZyiGdQsmxsVPnEY5M1tuhT/ztRkuw8w=)
                          33: AS42831.roa (hash: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=)
                          34: AS9304.roa (hash: EE1DBlRc/H98QdRqozXZ0TKkyUsbJZYtI/sa64bHb4U=)
                          35: AS152672.roa (hash: 24CV6i0q0PLEjF37/NGv/norWYAfvb/T4LhYn9c7r4I=)
                          36: AS146914.roa (hash: wL/6sqWHAMYNWdxFrIGU+uAWldn/PzLrLaRAPRjRW7U=)
                          37: AS834.roa (hash: cO1G14RKQjiRxAzQjyNcRVWoGcXRMe6RdU32jJga8Xo=)
                          38: AS61244.roa (hash: rBybT6KNUveYSpFmW0LV7SLnrcp5d5Ac6NXXIFW7N3g=)
                          39: AS25198.roa (hash: mSPNKhB34VowFeLZ/yu0l7j9LylMYSMZ5NZ1O+DEfSs=)
                          40: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=)
                          41: AS197537.roa (hash: JP3hx/IAvQ4SgOvsKr86baQJpbUUMchlqabqd0xftz0=)
                          42: AS214432.roa (hash: ZOZVU0gaB1zLrogTsATuG/tPO3vQAEUVKlSRdlaQ6PY=)
                          43: AS23532.roa (hash: aAn6W1nHAFh7NVqf0hfGrkzonEVGDCr4wgZgQ4dxQnY=)
                          44: AS215748.roa (hash: 3x6iarwKX82be+ibel0x8bpdtYPfZ1tvpFoGL1m1VtU=)
                          45: AS202736.roa (hash: mvaFQ8VzOiSlC6osU1pagjFGEUjuXEDkXWP0QHArhMs=)
                          46: AS198566.roa (hash: dM81vDNDQLttJUOhlNDPOKymQEbrI/dHVK4oQtoyOJ4=)
                          47: AS55201.roa (hash: hHr+QQMrwUqQRqvT6GASepW5HYeplmwByVzCIF+VicQ=)
                          48: AS393942.roa (hash: 8gsUj0D2UZiLTaOYqKFGBwxQkneOMRztzCncZ8vZ7sE=)
                          49: AS151338.roa (hash: +BJQLRRwoI7mKYvkrnOiI851mZkxQTi1mnbnlIrD/ic=)
                          50: AS5650.roa (hash: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=)
                          51: AS20326.roa (hash: bjlCs1cn8SZvrAA+XVOeFzTEEDwkFKKTeVLvOLa+FN0=)
                          52: AS5065.roa (hash: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=)
                          53: AS212027.roa (hash: mwTmCqgr/BINwa+LRLW7yo0HSDw8DAufEvQaH4pf++8=)
                          54: AS153383.roa (hash: vCi6FQYQWKC0ggluWhyMgm6QAvKbEiJEf7VAiTXWA9c=)
                          55: AS8075.roa (hash: 3cTQjOtMW6GJ/xtwZDOiPHB2SP8DZODC+kIloQS9S2s=)
                          56: AS399073.roa (hash: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=)
                          57: AS16276.roa (hash: 5c47yRX8sKbfs5icPJxN831sp6h6MSWbBvEuXw5p5uE=)
                          58: AS3214.roa (hash: jdza9PJ3CeFkyeGfFz9cYPmh+OJHouTGbuicXyr4m1M=)
                          59: AS2914.roa (hash: 2t79Dc48lM1NRGFZZiYzebTrp5NOXQIczJ6i0MsJxLQ=)
                          60: AS197213.roa (hash: BwEtfgP2s9wZPl1Xi45AegD8M76D/wh05QIVKpXbQlY=)
                          61: AS32132.roa (hash: BoBvNY/WJCk2Mc0mHAc39NhaN2in8vZf3gTCPvr2V88=)
                          62: AS205489.roa (hash: AQ4kO9r8zDW3hYAYtmBi2aPfW58MhEmsg0pbqKrUgD0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6c:0a:53:ab:a6:f9:30:c2:e0:60:fa:48:ef:f5:33:87:62:67:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Jul 28 19:59:37 2026 GMT
            Not After : Jul 29 20:38:37 2026 GMT
        Subject: CN=11BDDE1C404A36BFB3B0D275EC9F7C2294354593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:a3:e3:e2:7b:27:4a:5a:73:51:05:11:4e:
                    14:f2:89:be:a1:0f:39:c1:56:cd:9d:7e:9e:c6:d2:
                    85:ea:9a:fe:5d:9f:9e:b9:7f:47:a8:d2:e4:eb:f3:
                    58:36:4d:6e:28:03:0f:1f:97:bd:84:df:94:8b:fa:
                    a5:12:a0:76:cf:d9:f0:8e:e4:0e:d6:1d:77:5f:cf:
                    43:5b:84:7a:11:72:12:34:7b:79:2e:49:32:cf:1a:
                    6c:df:d4:77:1b:b6:39:ec:27:c3:b0:ba:b2:bc:5a:
                    1d:93:9d:fd:5f:47:4b:1a:c4:80:66:78:83:c9:40:
                    4e:c9:6d:fe:ed:63:1d:9c:a2:29:b6:6b:ea:1a:9a:
                    6f:3a:2a:a3:59:a0:6f:c8:f4:0b:96:0a:b6:1a:ea:
                    0b:84:3a:8b:bd:1a:a7:38:85:39:89:40:3b:c6:0d:
                    d8:66:4e:42:e9:a2:a0:1e:e5:43:0b:26:ec:ba:24:
                    ee:f7:fc:23:55:29:52:ab:57:6d:f3:59:55:7b:87:
                    c6:5a:7f:e1:af:52:0b:ac:c4:a8:e8:2f:b5:d0:8c:
                    61:f9:8e:42:ac:32:cd:e1:e6:48:69:68:1c:18:e4:
                    1f:a7:7d:7b:c9:58:e1:d1:54:64:ae:01:fc:b5:f1:
                    76:aa:91:5e:a5:2e:d4:21:e7:ad:33:ee:6f:66:38:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BD:DE:1C:40:4A:36:BF:B3:B0:D2:75:EC:9F:7C:22:94:35:45:93
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c9:86:e6:fb:1c:29:23:ad:e8:2f:66:b9:da:a2:7c:28:b7:
         87:7d:13:53:ca:6d:45:29:72:6b:6f:94:5a:4f:76:03:4a:b0:
         28:5a:8f:23:29:41:2f:b6:f9:7a:ed:05:84:58:95:6c:db:92:
         6d:68:8b:b0:cf:1a:2e:04:1a:77:f9:83:72:5d:d9:86:e0:d1:
         f6:07:a0:3b:c2:54:cb:cc:fc:0f:c9:92:d1:4b:bd:f5:80:ab:
         19:5d:eb:d2:41:f2:6f:0b:38:d2:7e:43:13:8b:3f:8c:6e:2b:
         f5:f5:15:65:eb:63:4c:8c:73:a3:13:f8:c6:83:b7:38:cd:d1:
         61:09:be:1a:cd:74:69:37:04:5e:96:60:d5:bc:95:c0:b4:2c:
         ea:53:53:62:9e:44:d5:49:9a:82:b0:64:57:6e:e8:16:80:68:
         09:45:c0:56:7d:1a:ee:d0:12:33:9c:7a:32:d2:f9:5c:6c:43:
         40:77:91:80:77:e4:57:9d:53:ba:d0:92:0b:f1:a6:d3:ff:0e:
         36:a7:1e:50:68:7a:6d:ff:bc:06:a7:6e:bf:51:c0:c9:83:b7:
         21:58:52:16:b2:25:8c:4f:25:3a:c1:cb:94:30:a4:5f:ca:bd:
         7e:24:8c:74:a7:d0:a0:2f:3c:4a:a3:c9:b2:99:cd:df:ad:fb:
         6b:42:0c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:23 2026 by rpki-client