Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
File:                     3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json)
Hash identifier:          1ShYxXm3SXVbh0j9sPUhNlIyip8w6GOH8fwBcpn7deQ=
Subject key identifier:   25:24:81:04:2A:1A:5F:75:93:CC:5A:95:28:E9:31:BA:83:64:F1:E8
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer:       /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial:       65D6B44D13CDBDD2F9965D16B3010BBE81A8B97D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
Manifest number:          03ED
Signing time:             Sat 13 Jun 2026 00:29:58 +0000
Manifest this update:     Sat 13 Jun 2026 00:24:58 +0000
Manifest next update:     Sun 14 Jun 2026 03:15:58 +0000
Files and hashes:         1: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: b+5d2pchfoJ7schvi1XWXcMUTuIuiTMPA8UYS8lBcfk=)
                          2: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: 8lyV9GJsDctzPuhhY06EcR5JClJ90gXieRZjQ1Q40JM=)
                          3: 326131343a366634353a3a2f33362d3438203d3e203530323234.roa (hash: Cm6iG7rXYSmOBRLZv4C/D104nGz4969UDdr1rCKUD0A=)
                          4: 326131343a366634343a353336303a3a2f34342d3438203d3e20323136303338.roa (hash: kV9C6QKeijySZWnfoj92GJUvF6GdpqcT/jUq1YV72FQ=)
                          5: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: NfI0I0c4eK3KdUsJ7rFscK6a/53x3mX7ftUHhc4VWrM=)
                          6: 326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa (hash: mVRk7OX5nwehY6QXOhw6587D02FFEQfLM0VwJdYXtak=)
                          7: 326131343a366634343a353630383a3a2f34382d3438203d3e20323030323432.roa (hash: tIzxcCSG/V5QyAqn4lWVGbnRYKGordkU7LLlPvgkHMc=)
                          8: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: f2ywSV7OATNrqHNKHHsG3dRDUlFFAgXzMnatedeorYM=)
                          9: 326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa (hash: ga3nLrPruxDKXz/HZkq9lRMiU1IAca5YQ8TT+rGp+T4=)
                          10: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (hash: buWW9LxxoX84xDGlXRuc7ac6Vqdjfpe3tuguLo1bU7c=)
                          11: 37372e37332e3131372e302f32342d3234203d3e20323030323432.roa (hash: eQCFDDvBb9p3KuzX9nQDyWev7idoWrZ4UxFS/r5wLgI=)
                          12: 326131343a366634343a343430303a3a2f34302d3438203d3e20323133313336.roa (hash: HawlF8j6AaLKvNQu2aTpKUa6yLzB5NKlnnf7Xm6b/mk=)
                          13: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: J9QsdPj5DQDhu5mtlU23kktl0EvwgihwetcbiHJN5aI=)
                          14: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: YoTkCqxmNOzzLi9iVgmlNr37mRC/kz01BF5FtK0w4Wo=)
                          15: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: 8HPgnPldTlqd1Z363+ppRIxfOmsIQPfiCzU3fi1lkIs=)
                          16: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (hash: E5i+93dh5I/S5MMaZahzwFpc+FrF3/j8/oPFxMb1ofg=)
                          17: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: Wfb1Be/94YdOwhsZcBM1MQm53XT2cW1zoUNNRItseq0=)
                          18: AS200242.asa (hash: MTBOWqmzNf0Vnku8o0Fu5uKujpvtI67QUi2gh/CZB+M=)
                          19: 326131343a366634343a636133303a3a2f34342d3438203d3e20323030333738.roa (hash: FMuCbBdzp6p9ySj22p+fUaROVQxj2tYK0a25mbwUBXo=)
                          20: 0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer (hash: KzweEGcBit/vVvaZNvFhzJwvwu/519nlrv8NpJNpIxU=)
                          21: 326131343a366634343a65663a3a2f34382d3438203d3e20323136303338.roa (hash: QG09fxLJtKa1Y7d6YZoiVLo1F1ttiuWxvVNqxNhuPNo=)
                          22: 326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa (hash: g+1tMLXY3SN1Y/zUSSaWRJc99akoWdOPFvMCxkZrGLU=)
                          23: 326131343a366634343a663030643a3a2f34382d3438203d3e20323037313138.roa (hash: ccOOAjxyylksS3iqkMGCPb0MvRpljc/bOW2a58HaGeg=)
                          24: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: qqmIRQ1+zFE246omwd0NWtUUHG4XG/Hp+LsyXBBl0Ec=)
                          25: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (hash: qTx2l+4Rmw9QcHHVu+RMfEZ9wVvbUUTMbX9wtkxLgYk=)
                          26: D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer (hash: Q2vhZWloe/hFTaW+/yQJuXwBq/8isuRI5XNeSyWobfQ=)
                          27: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (hash: 7HzMy3EQC4VhBpQQuwAgqmxWq4MZqQyb1t+9r/yAxck=)
                          28: 326131343a366634343a3432303a3a2f34342d3438203d3e20323036373531.roa (hash: tAH3E769OlzQWJEjgXPQBoGBF8R2vjgSThIJK0OhT8g=)
                          29: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: AzNZuQSDNxDK1/rRCvh3c7V/RaCmrUuPfTYithuZNhM=)
                          30: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (hash: 9H5bHORS1buGdk6dUDjyuqRIpPDaKxv77H5RNmLlgrw=)
                          31: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (hash: 37pW5zkUWwecCqjFHAdYxHEZTGOlFK8BvptTevydiHI=)
                          32: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: mS5RESR9XXqVKPaYaMF0sfDr7VCVwv8ZCbbv5XYwaoY=)
                          33: 326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa (hash: CR1Da8B3Ve/Ki5AH4lTB+zn6wD6Vb8CX/Tfk65mSnm4=)
                          34: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: nxfnA079w/6dwqMZYs8K0RSnuzNvrK8dfzm7kFfz+1E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d6:b4:4d:13:cd:bd:d2:f9:96:5d:16:b3:01:0b:be:81:a8:b9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
        Validity
            Not Before: Jun 13 00:24:58 2026 GMT
            Not After : Jun 14 03:15:58 2026 GMT
        Subject: CN=252481042A1A5F7593CC5A9528E931BA8364F1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:87:a0:fa:c1:d5:3c:43:3d:c3:d4:72:99:
                    38:a9:4a:1f:39:ce:11:9c:1d:7c:e9:ab:86:5c:74:
                    1f:97:37:b5:9f:b3:27:85:d2:8f:f8:bb:15:c5:fd:
                    d4:0c:05:9b:b1:04:7a:db:d5:9d:14:77:90:66:ac:
                    42:22:59:0f:a9:29:f6:9e:4a:82:14:c6:22:e4:bc:
                    84:e2:41:1c:9d:e6:45:f9:f3:42:37:6f:db:37:01:
                    76:e9:d1:0d:93:55:1e:6b:a0:86:03:4e:29:41:1f:
                    b8:c9:b1:8a:10:0a:c2:41:34:d9:80:82:ad:3c:e8:
                    be:b2:49:70:71:46:ff:1a:44:f3:eb:b5:84:c7:c3:
                    2d:d0:32:66:77:bf:98:ac:1c:20:36:e6:1b:1a:da:
                    b6:1c:b8:7c:29:8e:4a:b1:b6:71:7b:f2:5a:d1:d4:
                    06:b4:d0:84:f9:da:22:23:5e:c0:4a:11:83:0d:dc:
                    65:9c:b7:8a:44:e2:5a:ac:76:03:b5:0e:aa:63:69:
                    74:c8:07:78:49:be:f3:ac:3a:61:51:6f:a9:32:11:
                    08:40:86:4d:ff:35:96:65:4f:88:86:d8:1b:c4:a1:
                    64:9e:7d:ff:81:f4:a1:3b:e9:56:bf:52:b1:9a:94:
                    75:56:47:eb:4a:ab:77:89:b9:07:7b:e3:b5:bd:22:
                    d2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:24:81:04:2A:1A:5F:75:93:CC:5A:95:28:E9:31:BA:83:64:F1:E8
            X509v3 Authority Key Identifier:
                keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1e:51:7d:24:f0:71:b5:93:1a:bb:e0:84:37:b3:ef:5f:1f:
         bd:7b:64:69:f6:54:36:a3:dc:a1:bc:ee:0e:89:c9:35:ac:66:
         2d:b9:7a:fc:16:0f:6d:a9:74:09:fc:5c:ee:f8:4c:e3:eb:59:
         9b:24:2e:db:dd:36:57:56:0d:41:3e:b5:22:d9:73:7b:75:ce:
         94:b2:fa:61:f9:87:a5:ec:80:7d:e1:ac:5b:47:42:69:c9:a1:
         1d:e1:f3:07:7e:5e:b1:e8:12:f6:b2:44:eb:78:06:19:d6:f0:
         73:d7:26:df:58:b7:30:23:a5:b7:c0:34:e1:b0:48:9e:29:a1:
         7e:1a:f0:8e:ab:24:9d:cd:f0:aa:fb:60:2b:ab:e0:71:27:9a:
         82:26:1d:12:25:0e:a5:54:ff:e7:e5:bf:0a:42:fc:f4:7b:35:
         24:df:04:ee:bd:5c:c2:c3:1c:4b:89:35:b6:1a:fd:21:a2:e6:
         a0:7d:c8:59:be:2d:b6:19:e5:49:07:29:70:24:42:57:f6:a5:
         e5:8f:7c:f6:89:48:31:72:4e:12:fc:5d:6a:97:46:80:8d:f0:
         f8:41:f9:1b:98:b6:d7:fc:1c:20:9f:c8:01:c0:a4:ed:0c:27:
         eb:ea:8f:bd:cc:51:82:34:79:9e:1b:49:17:1d:3d:aa:42:d5:
         92:77:a2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:46:34 2026 by rpki-client