Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
File:                     399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft (raw, json)
Hash identifier:          z5PpCpCuzUTejCvGktHaQZyAekn7DdVCf/6+lcbTCko=
Subject key identifier:   81:50:61:BD:BB:EE:C2:9E:93:72:FA:36:2C:2D:69:13:89:AC:98:29
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Certificate issuer:       /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial:       2E22AF7652DC54C3D86DF0706CCE488334E2252F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
Manifest number:          04D3
Signing time:             Sun 15 Nov 2026 17:33:02 +0000
Manifest this update:     Sun 15 Nov 2026 17:28:02 +0000
Manifest next update:     Mon 16 Nov 2026 18:09:02 +0000
Files and hashes:         1: AS16509.roa (hash: qrvkrzDFzkDXLs4bolzh2SWARrveXoRCjrunzowu+Cs=)
                          2: AS48209.roa (hash: 5OnSSP6jx7HSTpI+5PaLx/73uhvKGMEleGR1mmws7Zo=)
                          3: AS51355.roa (hash: ofbqMUh7HNjJDuAn4+jaY5MZXUmiFgrP6LMtUecKEsM=)
                          4: AS219216.roa (hash: Q2jPGX8LTx8+LTHRAIXCA6/jskBWkc6IdJRSxykBXXE=)
                          5: AS219262.roa (hash: +XGKoYo1eS5iXjOfKHWdfJpZcrZEbmheOPTrPIkm7tE=)
                          6: AS62082.roa (hash: vnZ3izMrtJ4JH7rfOWOu+uvsXZMZS2hAbU6Xy2ppuF8=)
                          7: AS137410.roa (hash: bG2d0Y6rBovuPJYbnp+z2G010Rgxd2uaBz/LV7L/768=)
                          8: AS395954.roa (hash: qpJnOKlx2JsSV2pN1Y3JKvyzN3SP5RoWp2ky1F3Qg4E=)
                          9: 399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl (hash: 8JAKGLFjGgKgG8hMFjJ+PsYwUzJx90+qRmp3gAg9JDI=)
                          10: AS57227.roa (hash: 7KHxIs4obnuOldiN8Atk2+K9JnvjgXRH8ZEAlKglL40=)
                          11: AS14618.roa (hash: 5z7vZZtrUQ+U90NAyxvPEuD8r6HC0xsEmPaAbIr1MTA=)
                          12: AS273043.roa (hash: J5XmuJxWgaFve963e8mjbZSN9H6IDO/exl7LJq+RNyc=)
                          13: AS218757.roa (hash: +oPJ4BCTREh5NYpXQhLqnbrUHjMt0jZYbNPOQ3NVfEY=)
                          14: AS197842.roa (hash: kIRy3NMl7bs1KiRBnYrlW/JpSPsYhqLQWfrFiCKCODo=)
                          15: AS219284.roa (hash: oG+dHiX3EEp3npIym4relXv/dAxCpflqvXu0Li3xoyQ=)
                          16: AS275027.roa (hash: hc7lV3SPlLR4JWKu94hs1C2OThe5SQE4egldP5iPrbs=)
                          17: AS49847.roa (hash: oHN0M8Xs+8432qtZ2/VKD0jeIPgEbtX3y5tXe/3lm58=)
                          18: AS16276.roa (hash: XEpL174Rvh2ISpYeZU2pqOPe44Msf7I3uvOgSYACewA=)
                          19: AS39578.roa (hash: KQG+PsP6CkwFNYlqS8sCI7gmxa0gZmJgh9tlQ4w0NCw=)
                          20: AS218568.roa (hash: +8pMk5qpcLjdv/XY3bOSI/aMI0w0LR5IeHOSzpYby/I=)
                          21: AS50473.roa (hash: +81VamnKy6OwuCId4BgNcOY9hDQ3csMBlG1VBDxyUgY=)
                          22: AS219225.roa (hash: 4rGeQu3mSJO9gOWVtvrGhgU3z8OfbvdXxoHezpp0GK4=)
                          23: AS48729.roa (hash: 9kOZrIrZDmTB/NO4UExUIWDXxdofMxriEIqF2KMPp4g=)
                          24: AS13335.roa (hash: YDslZ7oke18viDbx+Ygyopq6MWnYQD9W6tgXdPs8HXk=)
                          25: AS17561.roa (hash: mLYt6Cx9Gcna+pWALfJvpv+U9ltKQacHmFjp8tnUm9o=)
                          26: AS219238.roa (hash: H+7ZagIVHvB92CwTn+dJEV2Xcj7HHXXpBeOyTvkHVmE=)
                          27: AS219306.roa (hash: q2Pjpnn3yaiYpPi/4Zb47eMIRzbYBODlAdFhUiCTouk=)
                          28: AS219183.roa (hash: 4UrOLweT+qrf1NMg3fly9j1yLDdaczMTQLgIHVuO3gA=)
                          29: AS136809.roa (hash: SN/6OdU2mOuRoaGRTxpMiFKsTisbLs7ElsiavOBFivY=)
                          30: AS57043.roa (hash: IGqA+P4gyGQj+Ojgf3UYhxfhZx3ja/lPhrS9/OZoZrQ=)
                          31: AS274248.roa (hash: ep5TJicKnOvGyCMwhPzwcPv6wzzYGHwa8EZa5XYi36Q=)
                          32: AS219305.roa (hash: grPtzO+5MgLfLDxJ6U4jx2eXdQv+dBuQzEMRsRB2m0g=)
                          33: AS200213.roa (hash: vw7AuReQ3ydSHwdmWtrfax38S9eK62oy5eEl6eKsLsY=)
                          34: AS328608.roa (hash: VojrNU5/wmmXOe+bt+FcgFVM+KKDaFRlw+ZIf8CNueQ=)
                          35: AS207957.roa (hash: QIn1yLVOZADqV7L9ZlqiDV6QiYAeLGpGg7u89oI4U1Q=)
                          36: AS219020.roa (hash: n7NjCG+aZTB+2pYlfb6hhXC06dmEQ0K4C7QxI9pIzRo=)
                          37: AS218616.roa (hash: 786XTHpeODi5YxrMsPg8SpkZX1v+14LOMca7iXCRa4c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:22:af:76:52:dc:54:c3:d8:6d:f0:70:6c:ce:48:83:34:e2:25:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
        Validity
            Not Before: Nov 15 17:28:02 2026 GMT
            Not After : Nov 16 18:09:02 2026 GMT
        Subject: CN=815061BDBBEEC29E9372FA362C2D691389AC9829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:38:1a:3d:80:67:4e:a7:8e:a0:70:06:bb:0e:
                    3d:15:98:3a:fe:de:6c:c8:ed:93:15:20:3c:f7:6d:
                    27:0d:f0:a7:33:c5:82:22:ce:a7:85:ed:dc:d2:87:
                    c2:e6:ed:51:cb:d5:c2:65:ea:a9:08:98:86:41:6a:
                    7f:f8:8a:a3:28:4b:03:08:70:7c:c4:9e:3e:e0:20:
                    d3:8d:7b:fc:6c:c6:ce:23:55:36:1c:97:34:1e:4a:
                    8f:14:23:35:ff:2d:dd:b2:d1:1f:bb:2e:ed:17:d0:
                    19:7e:73:01:30:75:29:6d:49:46:28:a3:f5:37:94:
                    cf:d8:2d:f6:5f:e8:66:b2:62:a7:53:ea:a6:57:43:
                    e0:5a:fc:51:fe:6d:5b:b0:46:ea:1a:60:4a:84:81:
                    b7:ed:f1:22:dc:b7:d3:58:32:f9:8e:5b:bd:23:0a:
                    19:f8:e1:92:29:06:80:7a:df:da:05:f6:b3:84:6e:
                    d5:ca:2e:d7:71:a4:41:99:c5:3d:87:af:83:bc:01:
                    4d:8d:36:d1:01:35:5e:4e:c1:52:a0:45:1c:25:36:
                    f1:f1:b7:b7:f4:29:38:aa:6e:4a:90:ff:9a:56:a0:
                    b3:e3:41:20:9a:f4:2b:e6:02:33:80:40:77:83:3f:
                    a9:48:2f:c8:c3:91:69:b8:a2:93:6b:a9:0b:9b:5b:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:50:61:BD:BB:EE:C2:9E:93:72:FA:36:2C:2D:69:13:89:AC:98:29
            X509v3 Authority Key Identifier:
                keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a5:37:30:70:34:bc:98:a9:04:b5:88:05:3a:ee:83:44:2f:
         df:18:6d:01:05:07:b1:2f:ad:fa:25:0c:cc:aa:04:3e:89:33:
         bf:af:df:fa:99:a2:c4:d3:e4:5f:bd:71:22:c0:83:55:21:5a:
         09:18:1b:a5:84:2f:58:8c:b3:e5:63:a1:1d:eb:db:c4:c3:2d:
         e7:db:26:d8:66:e7:ec:57:e2:4d:4d:4c:f7:dd:bd:95:5c:7d:
         fd:0f:94:f1:6d:86:47:7a:05:7a:0a:77:37:53:55:db:b3:f5:
         6a:cf:14:fa:5d:64:aa:c0:0a:77:b9:75:e2:82:4a:72:8a:6a:
         9b:05:2a:9e:2d:95:40:b0:7f:75:60:c9:26:77:60:10:c2:47:
         6b:b4:1b:70:da:74:f0:23:8d:87:99:39:fe:5c:ed:f2:f5:25:
         fc:01:80:9e:d0:31:fb:30:fa:f3:19:25:f9:1a:7f:d6:ed:b6:
         3e:4f:f5:c4:a5:db:d7:40:16:93:8e:4d:b0:24:db:29:46:57:
         0c:4e:14:d7:01:7c:a5:7c:73:00:57:aa:84:e3:60:ab:cf:61:
         c4:af:34:86:9a:57:4f:4a:83:a1:19:c2:35:4a:80:a4:da:55:
         17:08:0c:dc:33:14:52:66:9e:98:b3:5e:a5:40:55:05:e7:01:
         2a:43:93:e7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULiKvdlLcVMPYbfBwbM5IgzTiJS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk5YTdiZjJiOTBhYjhjYmZkMjRjYzRmOGJhZGVhNzg3
N2Y4ZTQ5NTAeFw0yNjExMTUxNzI4MDJaFw0yNjExMTYxODA5MDJaMDMxMTAvBgNV
BAMTKDgxNTA2MUJEQkJFRUMyOUU5MzcyRkEzNjJDMkQ2OTEzODlBQzk4MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9OBo9gGdOp46gcAa7Dj0VmDr+
3mzI7ZMVIDz3bScN8KczxYIizqeF7dzSh8Lm7VHL1cJl6qkImIZBan/4iqMoSwMI
cHzEnj7gINONe/xsxs4jVTYclzQeSo8UIzX/Ld2y0R+7Lu0X0Bl+cwEwdSltSUYo
o/U3lM/YLfZf6GayYqdT6qZXQ+Ba/FH+bVuwRuoaYEqEgbft8SLct9NYMvmOW70j
Chn44ZIpBoB639oF9rOEbtXKLtdxpEGZxT2Hr4O8AU2NNtEBNV5OwVKgRRwlNvHx
t7f0KTiqbkqQ/5pWoLPjQSCa9CvmAjOAQHeDP6lIL8jDkWm4opNrqQubW8JVAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUgVBhvbvuwp6Tcvo2LC1pE4msmCkwHwYDVR0j
BBgwFoAUOZp78rkKuMv9JMxPi63qeHf45JUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1
NmI2LzQvMzk5QTdCRjJCOTBBQjhDQkZEMjRDQzRGOEJBREVBNzg3N0Y4RTQ5NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09acDc4cmtLdU12OUpNeFBpNjNxZUhm
NDVKVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03
ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvNC8zOTlBN0JGMkI5MEFCOENCRkQy
NENDNEY4QkFERUE3ODc3RjhFNDk1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaU3MHA0vJipBLWIBTru
g0Qv3xhtAQUHsS+t+iUMzKoEPokzv6/f+pmixNPkX71xIsCDVSFaCRgbpYQvWIyz
5WOhHevbxMMt59sm2Gbn7FfiTU1M9929lVx9/Q+U8W2GR3oFegp3N1NV27P1as8U
+l1kqsAKd7l14oJKcopqmwUqni2VQLB/dWDJJndgEMJHa7QbcNp08CONh5k5/lzt
8vUl/AGAntAx+zD68xkl+Rp/1u22Pk/1xKXb10AWk45NsCTbKUZXDE4U1wF8pXxz
AFeqhONgq89hxK80hppXT0qDoRnCNUqApNpVFwgM3DMUUmaemLNepUBVBecBKkOT
5w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:52:44 2026 by rpki-client