Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
File:                     14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft (raw, json)
Hash identifier:          Iv6a7L7WljMudxxIqqf37JsJwTvTnKK5jlsMhfsoWNc=
Subject key identifier:   97:D9:11:D2:B4:7C:EF:07:93:66:32:03:29:77:C6:99:66:CE:1F:D0
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Certificate issuer:       /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial:       1C5440ADF64F251EC621E70A38437E832899EF90
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
Manifest number:          03A2
Signing time:             Thu 05 Nov 2026 03:49:03 +0000
Manifest this update:     Thu 05 Nov 2026 03:44:03 +0000
Manifest next update:     Fri 06 Nov 2026 06:09:03 +0000
Files and hashes:         1: AS134494.roa (hash: E1VVO8MD7rmAODgWtgcDnLFvI+ZaxTuW88vAsfmg69E=)
                          2: AS25198.roa (hash: J/XZb+D2oyufU4bh/E0TqIiPrhKs9/gWptlzZJN04O0=)
                          3: AS218911.roa (hash: RX1zTBXvR3R1MlOqFj3ZDarG4KSy/9qJ924CvBoyf4Y=)
                          4: AS61622.roa (hash: 0Jg0bvBsiEPDacUkfgQqhtFa5vg0H527IcIuH+gE9Bc=)
                          5: AS212259.roa (hash: zNQq/1t8AWu55ZVEvvRm0lpu7iSCnytRBreY8+7BULE=)
                          6: AS402899.roa (hash: dc1TmYDIAEtLh7U/25T8Ex9cOuo6+g5MvVOQuWVMyUA=)
                          7: AS13335.roa (hash: KtFEDEGPyKAYq//O5Px9Bd9PvLOkmT4efZ8E3NeJOD8=)
                          8: AS219447.roa (hash: /lFsIAuCk7wGH4XvX/1lva0+d1Zgoeqf9a3CiMdcbjo=)
                          9: AS215817.roa (hash: ex8AgMQbjifvZAvVqdxuIG4idrC5V69fp3mXtgPgMt0=)
                          10: AS262287.roa (hash: lS5FBlFFVPnvKGFNoUvqMB19lkvQxwdvV2j/C52AZHI=)
                          11: AS402628.roa (hash: BhjZmTb2jSKhhBGUMzdTXx26j9raY2BFVuX3zr2+trI=)
                          12: AS402671.roa (hash: Hozwap9g/Kr7V/QEVuvwJvZ4McNT8JTZCY5KZ6Br3hw=)
                          13: AS199436.roa (hash: /XDttTZQHNysK5unMGcv+6ZxXx2SkiY6eJJrnZzv4/4=)
                          14: AS215607.roa (hash: z5uopeOdyd7DqG1lapthJjIAlWZSUKvMHZg6YEIn480=)
                          15: AS219427.roa (hash: O2wqdqQ8prsY0Zsg9/X+VDVddrXPO/q8PMv/3v4Stg8=)
                          16: AS275723.roa (hash: t02ogZWuSdS9zpAaeAW5H8TGJmR58B4pTimYNg6FGXk=)
                          17: AS136809.roa (hash: 9uwsvLTfqbGfIDNaKoONOJQ1k0/bY1cfu7U9tf1TM4E=)
                          18: AS199707.roa (hash: sv6ZzdmyG8Y9GDq5Ll+PVRNe8Hn7yePVtrKaa8T3SyE=)
                          19: AS215023.roa (hash: jdCqv2qUKm7D91uKI/rmgleo6syXsEAbm+EoYR/s1eo=)
                          20: AS59245.roa (hash: Eee5bTEZG4H1+Xb40JVwYhhWvR35NAayxhaZcujtWHA=)
                          21: AS152698.roa (hash: 1MfS9vhewfOZdH0oCl0kBDyS6qgDQhAffgFx+TsKOYU=)
                          22: AS154132.roa (hash: Gs9t6sNoph/Not+Mpd0Imw2IMsZkZo1z/IdJDAYNCsQ=)
                          23: AS210000.roa (hash: iiF++j4Xh0hUiUQraSKUnIDrmP2LvsFq1fQB/08xV6U=)
                          24: AS218616.roa (hash: IOFrAAZK/imgxgYm7fdcAUg/2AdKi7V1FTYlt0jyEqs=)
                          25: AS401362.roa (hash: andxbrMdPiuEM+N6D9J68el7cg5BI9uO7VUIoVr06J4=)
                          26: AS23061.roa (hash: g0QZGWEGo4kd5zQPNYvAj+S7Y2QWAhs0HtIeGlze8Q8=)
                          27: AS218641.roa (hash: IjDraJvlfTQvIr4NB1rxy6nxE5nkESYoPk31uCRhN98=)
                          28: AS218729.roa (hash: HG3e0o4EQxGCIK62gH0LdQ7BDfPsTO8ehvbBrNKW8Lo=)
                          29: AS152606.roa (hash: c5b40/9yCFu6l5EkBvZJK9Gg5vL6FoY6ir6ArO0Ugqk=)
                          30: AS219053.roa (hash: MhFLp2f9Qh6rzCRbil2fHVS1XSgAASq3+tljt8hTrn0=)
                          31: AS9304.roa (hash: HOFtg0dAehWbTZuRoeQjk8aEOpyQX+rIPl7w69GXMqo=)
                          32: AS218661.roa (hash: GW68hyNG056/qs9sxqEjpkqWX0B/tzVD/m0eHWoghRA=)
                          33: AS215197.roa (hash: 6ODwCLVlchTTjaCXM7rfFluD5fVJ9X33dpOAnJlPuOg=)
                          34: AS401776.roa (hash: ICT9dX2JxUvWY8EfSrDGuHdIwCmuy53R9M9wnXDMxGQ=)
                          35: AS219057.roa (hash: 9qGSu/GbCHafczAO1ojFiGKDnVUODLivA+5Di44KUXk=)
                          36: AS142146.roa (hash: 7myjmY/+xitRLiUrkrL/yl4tHj7WjFZpxQNplov4OQY=)
                          37: AS393942.roa (hash: KO88tmKeYRWAwmGhbArmnnYDZQkdq7t7xYpm20E/hSM=)
                          38: AS9009.roa (hash: T+KA1sOtllZrpC5RzgpQIFK7BsOz1h0yBA+UYOpMLXw=)
                          39: AS40929.roa (hash: NFPVwkQ+qH/NGlUlMTMzkMTwNqB1QwCWmHUslRedvJg=)
                          40: AS834.roa (hash: t+lPGK/KZtuJTDXhumjqcomw4wfqtW4f2vsmPx4SJS0=)
                          41: AS218968.roa (hash: oXQTZfoVs/PbhZyIoSdbGNdlPZeKqK9yBnDlXs076LM=)
                          42: AS137410.roa (hash: QeMtAFjjvixkbIUlRqO+J/mC/mGymEjULAarVwfLcLw=)
                          43: AS275761.roa (hash: 0qUE/p9BI3NpiIyXK6Aes2Tf0wH347tNc8jYOV2DJRU=)
                          44: AS219075.roa (hash: V0/QzxP2FjctalEyLxbAfkREpWS0DPfR2DGEWIiE6EI=)
                          45: AS218809.roa (hash: PeAHc+FqZJfxtbLo2bdOBcCXbRGP7xCaZgF2Zzn/yvA=)
                          46: AS203156.roa (hash: BAP1HBP/kWKFgW5ydFgFrdRyPlyh0Vi2uOn7NIbH88A=)
                          47: AS151331.roa (hash: KOIDyP+B3v1bNYePZw0W2UPgD2RDFCVVZvkbAyjty6M=)
                          48: AS214716.roa (hash: nt1VZD8yC4GMYciYkaROKM9FC7Dvn7dffTcW1YeiL+I=)
                          49: AS402866.roa (hash: +jqJtU/L7ClkxToyX5vRcKPQSGwoKDBmxSB1mHHWy6w=)
                          50: AS204921.roa (hash: RmRHiFfGuqcrqUxGkm7ZymJy7zhFZWE9xiZy8VXjZQc=)
                          51: AS25369.roa (hash: 4O/x3m+PMMxZNngeka9f4qmAW583yBfzP5UiuPcywTc=)
                          52: AS36530.roa (hash: c5oyfNpSaLAs1++vuJ/bwf616yaSJHvllt9e4SVMKNQ=)
                          53: AS31715.roa (hash: g9CaUmiScItaoKONnctkS0oG7rqYU0+Al0f3vriSx98=)
                          54: AS402857.roa (hash: dNOw39BsQ5OGEYW9II9mcx6dFeTq1EDh2d1kAUGNxpk=)
                          55: AS198969.roa (hash: pBiC3KF6CaqQLThEGA5KIYAcJ9cKNorsb0pVzXo9sU8=)
                          56: AS43878.roa (hash: 5xRAhu4fXkVY33VMFR/P8mlpVdbn15VReY/nqqEPwMg=)
                          57: AS152726.roa (hash: eTZaBugppSMY53f5Wg5tIyj8hKTVIy+Lmh67aJA5P9c=)
                          58: AS219047.roa (hash: Q6E0hWejTEVMcbb7mO5Tr3pIhF9x2NuqotTGoHZdjtY=)
                          59: AS271792.roa (hash: Cak0Qu3AzJfsquMx1zk5cFy6YOHrxCvmoJBh0RNhywc=)
                          60: AS17404.roa (hash: 5jJAHCesE14CYcBVDzk2Hm0Ix7r9wGyXpOKRZoMszYc=)
                          61: AS218853.roa (hash: 9KeEhN+x7TFyaLsgLkDvBgwP64hspbAHJAdC1/4XjIg=)
                          62: AS218580.roa (hash: 6XDtiOkI9H6wVaxO1BBOkrGAk4Z0Rxuyte/dp7K1Xng=)
                          63: 14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl (hash: PLp4FrLevxhK2fXavLTPkLm3sdzNpYe7fytakrXGBvY=)
                          64: AS402265.roa (hash: aT1cLp7A+LDFlhkAgjVPALlTrzlDSg7nMSwxX7ZV0yw=)
                          65: AS147281.roa (hash: Sn3SxAP7aAgJoYWKgZvLvU7q2VItxbqvPSLUe7HE9ok=)
                          66: AS204244.roa (hash: 9o11Dv3XZ6sMYHEXTk/r3OHQTDqVJyWwW5o3ssJ1a0g=)
                          67: AS214483.roa (hash: alVNIIskZFbedg6W2gHfXsDzw+JKPE0aovkIWVPXGu8=)
                          68: AS152179.roa (hash: 10lTltHz6yqfbcGyLtEPmiedQgPOx4DW6ka6gzVQ17s=)
                          69: AS212335.roa (hash: 1oU1IhK+hQD+oH27PJZsjnACGEmPQ3Xrrj2sOQ0Ah/s=)
                          70: AS218869.roa (hash: FaW1gSR+mt5afQMFjN67xrhZ3Y2nfLQ8lXJFIYXo/ms=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 03:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:54:40:ad:f6:4f:25:1e:c6:21:e7:0a:38:43:7e:83:28:99:ef:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
        Validity
            Not Before: Nov  5 03:44:03 2026 GMT
            Not After : Nov  6 06:09:03 2026 GMT
        Subject: CN=97D911D2B47CEF07936632032977C69966CE1FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:76:4f:89:e5:a3:a9:6f:a3:4d:69:7d:cf:a8:
                    3c:74:db:52:18:44:36:ea:26:43:b6:89:f7:18:47:
                    39:07:3c:79:54:80:ea:df:b7:c9:25:76:26:aa:d5:
                    88:b2:33:2e:e8:6e:4c:e8:e3:41:c2:3d:6c:86:9c:
                    24:1b:fb:d1:29:83:24:42:c9:99:4e:1c:28:51:f5:
                    8d:93:30:17:ff:56:7b:db:11:3c:3f:91:4b:0f:7c:
                    f7:ed:38:02:27:ab:e1:7a:03:2f:29:bb:06:1b:0c:
                    4a:31:2a:6c:7b:52:43:46:26:bd:39:9b:97:07:11:
                    46:34:27:fe:34:9a:ab:8f:ca:fb:8b:89:69:28:06:
                    35:1c:ec:c0:82:2e:7c:09:cb:8e:d6:c4:6d:49:bd:
                    18:a7:e3:ef:b4:b6:db:9a:a8:e4:d5:16:f1:dc:86:
                    19:06:f2:86:6f:e7:54:c7:a9:9f:f7:15:e5:32:d8:
                    fe:0d:a7:c8:22:ad:81:64:99:de:59:d5:4e:ba:f1:
                    3a:74:47:2a:eb:ff:15:b3:54:ca:99:26:af:81:56:
                    15:ef:ae:c7:33:6d:2e:17:8b:da:58:89:6c:66:ee:
                    6a:f0:75:f1:d1:7b:68:f5:f2:f4:5d:8d:3a:34:d0:
                    aa:d6:19:4a:52:35:e8:d9:ff:10:1f:37:24:f5:47:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D9:11:D2:B4:7C:EF:07:93:66:32:03:29:77:C6:99:66:CE:1F:D0
            X509v3 Authority Key Identifier:
                keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:48:bc:04:15:79:9e:49:8d:fc:c6:34:54:19:37:c1:bc:d7:
         24:a2:4f:df:f8:be:be:08:c4:d2:63:24:0e:b2:fb:c3:cd:29:
         de:fc:09:ac:f7:31:6d:12:ae:d7:ed:81:bb:d3:bc:6a:c7:d4:
         0a:bd:a7:22:ac:b9:96:ac:f0:f4:9b:f7:61:ec:e9:5b:53:19:
         b7:94:18:56:86:28:89:a2:94:68:60:b1:c0:82:fc:89:0e:50:
         67:6b:1c:b7:ba:18:fe:fd:87:33:6d:7f:4e:22:7a:89:b1:da:
         70:4e:d3:0c:41:a7:cc:4c:40:e4:17:3c:ea:20:a1:9e:7b:70:
         66:a0:36:4d:41:d9:df:dd:37:6f:91:ef:30:f1:36:8d:3e:aa:
         f0:ed:e2:bc:2b:7a:39:04:66:f9:fc:2b:10:56:95:4b:5a:44:
         54:bb:8e:83:a4:50:f0:70:e0:57:7a:41:23:b4:57:19:e4:ff:
         32:6a:f2:ba:f4:d6:ef:2b:1d:63:b8:d6:49:6e:08:07:07:9b:
         42:61:ab:45:e9:a1:08:a7:ac:1c:ec:d6:39:4a:b2:20:06:98:
         bf:52:16:16:3b:2f:f9:30:9c:3f:cc:ab:54:98:d6:9d:4a:2c:
         61:34:4e:0e:cb:4b:a2:43:72:75:4e:5c:27:1d:da:e4:30:7e:
         8b:da:23:75
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUHFRArfZPJR7GIecKOEN+gyiZ75AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC
MzJBODFERjAeFw0yNjExMDUwMzQ0MDNaFw0yNjExMDYwNjA5MDNaMDMxMTAvBgNV
BAMTKDk3RDkxMUQyQjQ3Q0VGMDc5MzY2MzIwMzI5NzdDNjk5NjZDRTFGRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcdk+J5aOpb6NNaX3PqDx021IY
RDbqJkO2ifcYRzkHPHlUgOrft8kldiaq1YiyMy7obkzo40HCPWyGnCQb+9EpgyRC
yZlOHChR9Y2TMBf/VnvbETw/kUsPfPftOAInq+F6Ay8puwYbDEoxKmx7UkNGJr05
m5cHEUY0J/40mquPyvuLiWkoBjUc7MCCLnwJy47WxG1JvRin4++0ttuaqOTVFvHc
hhkG8oZv51THqZ/3FeUy2P4Np8girYFkmd5Z1U668Tp0Ryrr/xWzVMqZJq+BVhXv
rsczbS4Xi9pYiWxm7mrwdfHRe2j18vRdjTo00KrWGUpSNejZ/xAfNyT1R78pAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUl9kR0rR87weTZjIDKXfGmWbOH9AwHwYDVR0j
BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1
NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw
MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3
NUIyMjY1QUIzMkE4MURGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2E3Yzg1ZGVhLTBjYTAtNGM2YS1iYTQ3LWVkYWQ0Yjk0NTc1NC8wLzE0RkZCQzYy
NUQ5OUNBMjI4Njk3QjlGRjc1QjIyNjVBQjMyQTgxREYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOSLwE
FXmeSY38xjRUGTfBvNckok/f+L6+CMTSYyQOsvvDzSne/Ams9zFtEq7X7YG707xq
x9QKvacirLmWrPD0m/dh7OlbUxm3lBhWhiiJopRoYLHAgvyJDlBnaxy3uhj+/Ycz
bX9OInqJsdpwTtMMQafMTEDkFzzqIKGee3BmoDZNQdnf3Tdvke8w8TaNPqrw7eK8
K3o5BGb5/CsQVpVLWkRUu46DpFDwcOBXekEjtFcZ5P8yavK69NbvKx1juNZJbggH
B5tCYatF6aEIp6wc7NY5SrIgBpi/UhYWOy/5MJw/zKtUmNadSixhNE4Oy0uiQ3J1
TlwnHdrkMH6L2iN1
-----END CERTIFICATE-----