Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
File:                     6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft (raw, json)
Hash identifier:          O+mJERKAwp/duS9EF0q6zS7Pee/EOymrvZRZpshdLaQ=
Subject key identifier:   35:D4:57:41:57:E6:86:C6:09:0B:99:50:17:A1:54:1B:72:75:D3:CD
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Certificate issuer:       /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial:       32C05E980AE36E1E856B0F1A8213BC7EFFE6CCA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
Manifest number:          0233
Signing time:             Fri 17 Apr 2026 10:04:42 +0000
Manifest this update:     Fri 17 Apr 2026 09:59:42 +0000
Manifest next update:     Sat 18 Apr 2026 12:37:42 +0000
Files and hashes:         1: AS215607.roa (hash: nTKCeLfGZyFqUTLkimxf4JuxAV8tNaIFwjuUUwVs+lk=)
                          2: 6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl (hash: Hs3wTos4A6CYG6x4DsC/ZyfESEczPbJLwmpMi7ncC5c=)
                          3: AS401861.roa (hash: PE45ncfjKdLhQju7tyuc1hwwBfTaBAdGs1QVK2aHIr4=)
                          4: AS9304.roa (hash: ZJH0dK0Hy0y0i0/ljmaBZln1mstjXjNLuwhCtAY3yZY=)
                          5: AS63023.roa (hash: fi+yuNt7C9KOpAB7OuHltO3biAsS7kNC3sakusV6F3Y=)
                          6: AS26666.roa (hash: s+m1ONZeSvFwZ+m2eRvW/oPw1uR1mxjheTmm9F+R6hw=)
                          7: AS5650.roa (hash: PTR+fgP2qvXZYtATxFfPwkTxn407sAXJJL4hgWZaxJM=)
                          8: AS198087.roa (hash: KbEXfW1iiD4QKlzNAeXhORdEp87UXgYYT+JBn+IB5Ak=)
                          9: AS211440.roa (hash: zaSD1MOjsHaCPlAiucFkxI728Lwjv0Q0tIFxFsU24WU=)
                          10: AS396356.roa (hash: Ye+NfvA2IBwZl2cJu9dzzx5vhPrKTykIDkAaYtOezg4=)
                          11: AS214432.roa (hash: kQESvOSCu+N2q0COzEc+TAGec+2IVMyD8U41rTN7RDc=)
                          12: AS398465.roa (hash: FBtiyEiaeOZ+oqfkZmElXHlIW86Z0+2GZn62rCppuOk=)
                          13: AS834.roa (hash: 4TS+q3uAlDpV7UWwiD1zIR99fiXwd+PPr7ztCo6zuRM=)
                          14: AS398704.roa (hash: tV7fJBEbUdih2JUzaeuMBZYnnpaFuJH7D78V8Cl5CZE=)
                          15: AS47377.roa (hash: OQL0cZs5RWvoFjz2M63yQuFroA+WBXFRgA/pdv3BbhE=)
                          16: AS4637.roa (hash: atoM19IF+/0V7MTwpf7uojbGZNlNtGH+4rfymwbe5nM=)
                          17: AS198250.roa (hash: zncGgbkm4yqQZuIpPA1JOh15gL+wK5bAyoSgNSn886o=)
                          18: AS212609.roa (hash: h287YNomtskDOPEQA57TiiiZ9+NIMepRK1K0V/gWE/E=)
                          19: AS211415.roa (hash: DKqxOmoH1oUvkd5hwlQHVDc52UoG8tXKaREXCMNwJ3Y=)
                          20: AS39855.roa (hash: RXWUPV6j2RK/vNPXoxmlg4tZKFcDV5/uZ8oTUMD87us=)
                          21: AS46475.roa (hash: 0Jx1Bm8TjjrnaoIk5HVO/GM7e/a42zIYjtAX24Go2Co=)
                          22: AS4766.roa (hash: SbNMCLeXl4A2SwzuRfIdNy02sPzvtKDWEwNXipX8PmI=)
                          23: AS133153.roa (hash: hZKmRRfEum0NePfoQ32/gG7k8ms9Eph2dnxcf7oDMHQ=)
                          24: AS136744.roa (hash: AC6WQ1PDbk7uDzM5gdFZ0y3ykWFIZUkQvTjRiBnnbAE=)
                          25: AS2488.roa (hash: d1ro1rTJNorB0LJ0CEyOGONayK9rYSVfYmwH9mcTFUM=)
                          26: AS29802.roa (hash: UCuw3Z9lVcpw85rKdVSoPkQu7bot6T4TRwxmVZW6VJg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c0:5e:98:0a:e3:6e:1e:85:6b:0f:1a:82:13:bc:7e:ff:e6:cc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
        Validity
            Not Before: Apr 17 09:59:42 2026 GMT
            Not After : Apr 18 12:37:42 2026 GMT
        Subject: CN=35D4574157E686C6090B995017A1541B7275D3CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:0c:f8:3b:1a:52:00:ae:7c:d4:43:e8:c1:
                    42:2c:3a:17:50:18:ea:6d:86:d1:a0:73:a2:cd:ad:
                    1c:84:c6:ab:cf:35:7e:b9:be:12:0c:8d:07:84:98:
                    56:8e:a5:bc:84:52:d9:42:96:48:91:94:86:c1:45:
                    e4:3d:a9:1f:1d:39:68:34:04:47:60:f3:ef:72:4a:
                    0d:99:33:70:60:7b:b6:33:f6:bb:be:5d:58:e7:fa:
                    fe:ef:ab:a6:bc:24:ff:ce:a0:68:42:67:23:e2:fc:
                    c3:c4:44:1b:b6:8e:01:94:00:47:78:8b:b4:da:3d:
                    e4:31:f4:6c:23:77:c3:10:b9:45:dc:bf:97:98:87:
                    d7:b5:3e:0f:d3:58:37:ee:d4:e3:a1:96:68:2a:6a:
                    90:78:67:9b:45:1e:84:6c:a0:46:6b:c6:05:b2:dc:
                    35:0b:ab:7c:8a:d2:12:33:cc:2c:b3:89:42:e0:d7:
                    ec:7c:9a:bd:82:52:bd:3a:9c:83:d6:2c:ca:ce:9d:
                    b2:b4:a6:8b:ef:36:6c:52:c8:b3:5d:ab:90:2b:4e:
                    45:dd:a1:ca:cd:ff:ec:c5:03:40:14:09:07:88:85:
                    50:90:0a:33:eb:a6:eb:4c:2b:6b:2b:6b:ea:60:e7:
                    ef:dd:74:fb:1b:32:0d:ff:27:3d:97:43:c2:ea:95:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D4:57:41:57:E6:86:C6:09:0B:99:50:17:A1:54:1B:72:75:D3:CD
            X509v3 Authority Key Identifier:
                keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2c:ab:a0:23:00:3d:ea:8a:21:2e:4d:13:06:7c:4e:61:e8:
         7d:f9:a8:fc:d0:df:09:2a:52:09:d5:9e:ba:6a:58:93:f9:56:
         85:38:9f:f1:b9:85:2f:cd:53:0b:a0:00:93:1a:77:49:fe:56:
         dd:16:be:71:05:80:6e:e5:6f:81:df:66:47:cb:1c:28:40:58:
         c0:41:14:98:75:bc:c6:55:0c:f8:91:00:df:ac:71:d9:4e:3e:
         15:3c:e7:67:d3:54:3b:d3:ec:df:7a:67:c0:56:97:11:41:44:
         b2:4e:f7:b2:8a:26:9f:8e:02:76:39:f5:9e:aa:0f:a8:a6:70:
         97:83:a0:34:07:81:f7:d2:bf:be:6c:77:25:c8:e4:6a:4d:f9:
         a7:3d:bc:47:74:e2:c7:ac:b6:ed:b7:87:64:22:0e:28:8a:80:
         f7:06:1f:02:01:e8:f6:ca:d0:67:d8:e2:77:a4:ba:50:6a:0c:
         0e:9c:7d:85:8e:94:6c:08:ef:5d:76:86:70:4e:e5:14:6d:b9:
         46:b7:60:c0:c3:45:35:3a:52:a1:8a:91:bd:30:bb:f6:36:de:
         83:ca:8f:b8:84:bf:78:76:8f:ea:1b:18:64:6e:e8:88:70:14:
         95:98:1a:45:2d:74:21:03:ce:45:22:bf:a0:c0:da:45:95:79:
         b8:f4:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:49 2026 by rpki-client