Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File:                     3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier:          iIXoQnjxZJ6A9rKvpXI14yhFftDDSrXZtC3/D2wzofE=
Subject key identifier:   23:30:A4:09:7E:EF:A8:D6:61:73:F4:C7:51:27:67:24:0F:10:D5:76
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       5381881C869C02FAA53D1F7942CD3C41DF097ABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number:          02F2
Signing time:             Tue 12 May 2026 10:59:49 +0000
Manifest this update:     Tue 12 May 2026 10:54:49 +0000
Manifest next update:     Wed 13 May 2026 13:47:49 +0000
Files and hashes:         1: AS395793.roa (hash: V5JEB7lz8FwA4enu53vGQgB/6Qx37KJCclmB6l2ZUq0=)
                          2: AS214483.roa (hash: 4KtpSOnc/KWvq+zimWh8U+q+OC78oZRQovYOuN+I9XY=)
                          3: AS399073.roa (hash: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=)
                          4: AS32132.roa (hash: AnbuErehQXFxV+kWQt2eul6q993RKYVkoz7/H8Ifyq0=)
                          5: AS214271.roa (hash: Ryxr7X7Ltqo6eG8diqWyYYKBcmlEtpuVl7WOq2jpWd4=)
                          6: AS197537.roa (hash: JP3hx/IAvQ4SgOvsKr86baQJpbUUMchlqabqd0xftz0=)
                          7: AS834.roa (hash: m+K+Xfhhv+XrktqCyswPqQGS82hLOBQ83vv+kDPZZiA=)
                          8: AS60123.roa (hash: QtgZXfsHBEnogO7UuZmZIr/ZqG9Z8/NgNBqi4sK9HBo=)
                          9: AS200213.roa (hash: jHsWgHO4WsK8UwfX+EGNaRyozPf8mcg2Dl9LXjUSJHU=)
                          10: AS151389.roa (hash: zl1L0GjfclEF/EG3ikjpKhjmIU3PKArvq2Xg/t/v1GM=)
                          11: AS202736.roa (hash: mvaFQ8VzOiSlC6osU1pagjFGEUjuXEDkXWP0QHArhMs=)
                          12: AS47690.roa (hash: JX7G+mBe037OStFqpA0McZ7JKC6vPuvjH2Y/7AsUGXU=)
                          13: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: Li9ixRu2mP2xoNOrOCyB1tGni6lxbVjT1dTyKSLyZd8=)
                          14: AS54252.roa (hash: LRBKfU3oZxsRDvjiCU60FMM0ioGajI+vpwmOzUPhljM=)
                          15: AS42831.roa (hash: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=)
                          16: AS198250.roa (hash: oFY3tW2HzcVvjeKZhCZ9+jaQJmZrb3ie3+zlKHHjWKs=)
                          17: AS209349.roa (hash: fuWxA00hn5w6KkPZVbdz2MgJjspkZh1ySmS7ZUVrwBM=)
                          18: AS201002.roa (hash: b8ZITxaPgT55292RXOwDGuMuOURRGinQZs7OnZ+k958=)
                          19: AS9009.roa (hash: bsO+KEDdsh042ly3XKZ18x6W8Jx5Y/tMwuWQMMg9A7o=)
                          20: AS150293.roa (hash: RbUVZQQsl045XbDOK8gskizWIDXdi9SuNl2zj+UtvmQ=)
                          21: AS203090.roa (hash: AtZQiXBdWfevJeS9ni8F5oxZwYfsEjJFqy+rO2NW5P0=)
                          22: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=)
                          23: AS208545.roa (hash: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=)
                          24: AS153383.roa (hash: vCi6FQYQWKC0ggluWhyMgm6QAvKbEiJEf7VAiTXWA9c=)
                          25: AS64267.roa (hash: 9NR5KgAXq7OBNV4qYToFoteMTZc+d/n3KSlEv7KRAOE=)
                          26: AS3214.roa (hash: jdza9PJ3CeFkyeGfFz9cYPmh+OJHouTGbuicXyr4m1M=)
                          27: AS2914.roa (hash: 2t79Dc48lM1NRGFZZiYzebTrp5NOXQIczJ6i0MsJxLQ=)
                          28: AS61244.roa (hash: rBybT6KNUveYSpFmW0LV7SLnrcp5d5Ac6NXXIFW7N3g=)
                          29: AS5650.roa (hash: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=)
                          30: AS402215.roa (hash: E7PNafFa+agpm5NC5UEd20rvfcVHy6VPwkJO4BZbBYc=)
                          31: AS8820.roa (hash: 37NLowiuT9jy/dagftAxkW62Xv5potfYYsy61mpYIOM=)
                          32: AS57043.roa (hash: 5kt0gUPpPlXUEkEZgXCUZ1bMA7kcongFeMkYDKoEOqw=)
                          33: AS60128.roa (hash: LYwh4MoU7+i8XzsRvFs92IcyFCoJKzZY9vGXelEbElA=)
                          34: AS402214.roa (hash: 9Och+PsUzb/XDZVab7ABAudcg3leLxXD5P7u5nzRY2Q=)
                          35: AS212027.roa (hash: mwTmCqgr/BINwa+LRLW7yo0HSDw8DAufEvQaH4pf++8=)
                          36: AS212980.roa (hash: Zoz/8g4QJTKbhJZrHf9/7XdXmBbc4ng74YzPeFjoYNk=)
                          37: AS20326.roa (hash: bjlCs1cn8SZvrAA+XVOeFzTEEDwkFKKTeVLvOLa+FN0=)
                          38: AS152179.roa (hash: 3s5ZO5zsIBGOTYB/W7LkLPPbBTA+gesfrHvDmlpyA+0=)
                          39: AS16276.roa (hash: EKpXTe4ys8FkDLvAjnRFYuDnQiF1p8xjjP1Ye2+AROI=)
                          40: AS174.roa (hash: YVpjx11K2k0KwX6I8b7c/sGi80aE+WgPV5jxCl19cwg=)
                          41: AS3320.roa (hash: 7KiC6+ZiUCIr0Twuc/O3EcLxGIvxYh8ifHqUangt8nQ=)
                          42: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=)
                          43: AS215748.roa (hash: 3x6iarwKX82be+ibel0x8bpdtYPfZ1tvpFoGL1m1VtU=)
                          44: AS48266.roa (hash: bMUjaV/zrukPHur/enwWknsnzqvOgoiCYnqoXIVR7Rw=)
                          45: AS212238.roa (hash: 0IyslS3CG8KwMKdb6hG7WmS6/jX6BN24to036ny5Oec=)
                          46: AS5065.roa (hash: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=)
                          47: AS7029.roa (hash: EQdsNpFUDlB6ynhRTbcYQBl7UF6yGjIXmjLtDYAN+1w=)
                          48: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=)
                          49: AS151380.roa (hash: DWrw1cQL1rZGcNIo3Oa+sQmgrclneYZFXQz9jD/Enc0=)
                          50: AS13347.roa (hash: Vcr6EeUXObLLwMTr/P281IyX4fwZYhwUt1AVEFcBuD4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:81:88:1c:86:9c:02:fa:a5:3d:1f:79:42:cd:3c:41:df:09:7a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: May 12 10:54:49 2026 GMT
            Not After : May 13 13:47:49 2026 GMT
        Subject: CN=2330A4097EEFA8D66173F4C7512767240F10D576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:30:c9:b2:86:1f:3b:5b:7c:9b:73:ad:6e:
                    fb:d3:f3:01:1d:f6:a6:9c:81:c2:7c:51:dc:bd:b6:
                    3b:f8:3c:50:7f:44:aa:e1:34:0d:24:78:ea:da:85:
                    31:97:57:95:e3:d7:38:ca:8a:34:3a:14:53:e6:3a:
                    cc:95:72:49:ca:28:a8:65:0e:35:51:88:53:32:ab:
                    4e:46:c4:3c:a0:a9:d9:e9:c1:8f:24:1a:13:df:54:
                    ea:1e:b4:fa:b3:18:6a:46:fb:6d:65:84:0b:a3:f9:
                    72:b4:aa:dd:a5:7f:89:64:ff:c4:62:da:5a:9c:dc:
                    ed:05:61:30:6a:a8:bf:d1:4f:a3:df:6b:f0:fa:13:
                    07:c8:6e:57:84:d0:b7:b2:21:0e:4f:1f:a7:db:bc:
                    91:02:d4:bf:7a:72:c6:2d:c7:96:98:ac:a4:07:f5:
                    0c:02:3b:ef:12:66:2a:b9:af:31:f2:62:66:75:d6:
                    ec:ed:6b:10:1e:7f:7b:2b:45:9c:b3:c6:8a:57:91:
                    29:59:bc:c7:a0:f1:79:8e:35:dd:0d:71:ed:f3:b3:
                    70:62:db:5a:67:db:94:c4:91:f6:a9:25:d2:66:26:
                    10:4f:f1:ef:53:f5:c0:26:49:a5:7f:ea:ff:dd:6e:
                    ad:cb:36:89:00:9f:26:30:d0:f7:d4:28:b7:19:a6:
                    de:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:30:A4:09:7E:EF:A8:D6:61:73:F4:C7:51:27:67:24:0F:10:D5:76
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8d:e7:16:b1:b5:72:f1:29:a0:79:fc:73:8b:25:6d:a5:f6:
         89:a1:b0:42:dd:c7:88:3e:64:ac:40:c9:51:07:98:f3:29:7e:
         7d:b9:18:94:9d:98:64:37:10:07:a9:d0:8d:f0:89:3e:9c:40:
         4f:c4:9a:9a:0d:e2:56:03:53:e5:17:34:d3:44:b3:c5:cf:b3:
         fe:ac:db:5d:84:7b:b8:0f:e1:7b:d6:a0:c2:58:a6:39:d9:87:
         78:a6:8b:2b:e9:dc:f9:c0:ec:44:bf:f6:5c:5b:49:bf:27:d2:
         61:6b:44:e2:ec:ea:73:24:c7:02:1a:12:14:a7:b0:23:0e:42:
         75:5f:47:9a:68:c8:26:28:95:a0:6b:30:00:6d:51:fa:6d:2e:
         b3:52:82:2f:95:89:0b:52:e1:25:89:1e:e3:16:a6:cb:24:f4:
         c1:bf:9d:af:63:8e:a5:04:15:26:03:62:b2:11:fe:b1:64:05:
         cc:03:93:13:b1:da:98:77:dc:f7:68:e7:ad:cc:a4:96:b4:e2:
         67:7f:d0:df:56:c1:09:c7:73:f4:da:b3:32:06:a3:8b:94:f0:
         ae:ca:a4:53:f6:3f:37:17:77:23:08:c4:dd:73:72:3a:b1:ab:
         4c:06:7b:e2:33:c7:4f:b6:25:71:0b:94:63:44:cd:f0:b7:f3:
         bb:79:5f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----