Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
File:                     3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json)
Hash identifier:          eQtwRecunlvFjCEkmbLJNIDAQgqy7X2usWrgXejGKRo=
Subject key identifier:   35:CC:1B:F8:70:31:92:25:2D:F8:44:59:91:1E:50:F5:CE:50:7F:E5
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer:       /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial:       6C8408110471BAD3E5B4C7900F2F69D2983958CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
Manifest number:          02A9
Signing time:             Sun 19 Oct 2025 15:52:35 +0000
Manifest this update:     Sun 19 Oct 2025 15:47:35 +0000
Manifest next update:     Mon 20 Oct 2025 19:44:35 +0000
Files and hashes:         1: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: wghHBUAPyTh1k75qu9+3ST+twxsY88XGIADNiAK2tow=)
                          2: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (hash: kj+wMZhCYMt0Z9jhqZmZtaHQjz2obXZ+/J2z1ua51wg=)
                          3: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (hash: OSQQWXQC8Doo46F92DSw83gpWUJg/I3ZjbHjihzygko=)
                          4: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: iEZWpi2Q2HholzCVW0otZLHFtEup7bkJw6cY7Vs6TCg=)
                          5: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: Gh/w94WLUPZNwP3yscIWB0P8fPzMkD8rKLwHE/CiSik=)
                          6: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (hash: /s9FD+BuCvCOu4sZBij0Yh1eY8Nr8NHCtVi0OvPiCyY=)
                          7: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (hash: 37pW5zkUWwecCqjFHAdYxHEZTGOlFK8BvptTevydiHI=)
                          8: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: Wi5+YIc762ypl+B2WINgJse4hzMgAIpn5Ywt7Gts2zw=)
                          9: 326131343a366634343a65663a3a2f34382d3438203d3e20323136303338.roa (hash: QG09fxLJtKa1Y7d6YZoiVLo1F1ttiuWxvVNqxNhuPNo=)
                          10: 326131343a366634353a3a2f33362d3438203d3e203530323234.roa (hash: Cm6iG7rXYSmOBRLZv4C/D104nGz4969UDdr1rCKUD0A=)
                          11: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: +RB/H3yC2Zhqk6dbZnb2AoHhKMIePUOM6t4+sjUxfqU=)
                          12: AS200242.asa (hash: 1AlMG2dsNj+2a3kLp0CpSmy1LKhmLk73ZFr/4CSbD+w=)
                          13: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: m8+D+okBVVmTzlPUuDfmEBZbvua+N+sKP5fs6j2S33Y=)
                          14: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: J9QsdPj5DQDhu5mtlU23kktl0EvwgihwetcbiHJN5aI=)
                          15: 326131343a366634343a353336303a3a2f34342d3438203d3e20323136303338.roa (hash: kV9C6QKeijySZWnfoj92GJUvF6GdpqcT/jUq1YV72FQ=)
                          16: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: FmiBX7ObUBJXMx50BEJxB5rcHYX/1xnmOVK+ALpTHJE=)
                          17: 04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer (hash: WC2xT6FYiM9dJRxOd1eaHqB3GTC9TL6xOPD7Nd7Wdro=)
                          18: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: dC8rQUoWVp/X7YVAzZ2dHrxEZrdm+LkwjO9CaebKOYE=)
                          19: 326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa (hash: mVRk7OX5nwehY6QXOhw6587D02FFEQfLM0VwJdYXtak=)
                          20: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: jzgTEml4YLsCpJ5PWa0CjR2ZyZx1iGCX4c7IWy4h9Uw=)
                          21: 326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa (hash: kN+6glZZqj1lvl+f3cQSjIHuGxniqs1l2hL+N9PCMXg=)
                          22: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (hash: D8dy67lH7mKpFtKbPMaHWGtbJcZylACehWx+4H0irZc=)
                          23: 326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa (hash: JbFcx8NYIQrxy++ssCWok53ycSawtedKXeTKz2IS1/I=)
                          24: 326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa (hash: bY9e62A4gu/86iUTHSumKPvi2hGZoe5ZTShnEctU4SM=)
                          25: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: x7hOPFZjN7RZHBsYqLnDpQUy2G9KH75g5Bkk7YCqeYo=)
                          26: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (hash: 84yN8GMB2a5DXwGkFW2zsyLvfW/TnY6P5ZHEy29emgk=)
                          27: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: ITJiuOJiPhL9zGFnR/kFwwhgRvQux+ehMzGBms69CVM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:84:08:11:04:71:ba:d3:e5:b4:c7:90:0f:2f:69:d2:98:39:58:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
        Validity
            Not Before: Oct 19 15:47:35 2025 GMT
            Not After : Oct 20 19:44:35 2025 GMT
        Subject: CN=35CC1BF8703192252DF84459911E50F5CE507FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:16:80:2d:d6:b1:e9:64:3e:63:d0:f9:f7:1f:
                    62:94:3e:62:d6:75:ac:be:a4:c8:7c:32:3d:ab:be:
                    30:16:b6:44:dc:c8:39:05:25:aa:62:d2:2e:a8:f6:
                    41:33:36:7a:1e:ee:d4:d1:14:7e:e3:e4:35:d3:a7:
                    b8:08:85:f6:45:fc:2e:5f:1c:f7:c7:fd:73:46:bd:
                    d3:a5:cd:01:cb:b3:a5:aa:73:66:28:b0:6b:1c:90:
                    11:0c:1c:1b:d2:07:50:19:86:3c:b2:fd:a0:18:0c:
                    b0:7c:8f:93:da:6e:3c:77:7e:82:ca:5e:e9:7b:19:
                    c4:9e:f7:b7:ef:30:39:89:cf:5f:1b:ca:cb:be:4c:
                    1c:d1:c2:5e:96:69:68:ac:45:3e:3a:bd:6c:c5:cc:
                    da:a4:49:f2:66:a3:b5:3a:65:24:e1:a6:d2:ad:61:
                    83:84:47:0b:b4:bf:14:9c:2b:a1:99:42:7f:07:e3:
                    f7:87:c9:75:84:17:c5:de:6b:f4:7c:78:e9:6d:52:
                    d4:4c:7c:76:c6:b8:f7:aa:a8:ec:84:0f:32:f0:ad:
                    f4:d1:8e:ae:0b:d1:73:73:b8:38:ca:37:b4:a9:20:
                    c9:6f:36:5d:db:a4:27:aa:4a:54:2c:01:fa:66:13:
                    ed:49:22:a2:93:cc:fc:e0:6d:5a:d2:a4:a0:32:61:
                    46:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CC:1B:F8:70:31:92:25:2D:F8:44:59:91:1E:50:F5:CE:50:7F:E5
            X509v3 Authority Key Identifier:
                keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:cf:18:03:ef:bb:9b:65:6d:8d:6b:5b:89:ef:4c:19:a8:d1:
         c8:6b:84:33:71:e2:40:8f:1e:93:aa:5a:ba:b6:d3:74:a9:a8:
         09:13:29:85:58:b1:b1:a9:49:f1:a7:f4:4e:01:10:61:8b:c8:
         5b:28:0c:01:60:2e:b1:7c:6d:73:76:e7:c4:01:48:5b:b6:29:
         dc:77:81:e7:1a:e2:dc:91:dc:b3:4a:19:29:d6:f0:1f:7b:73:
         7e:29:ff:e0:62:3b:40:27:e3:47:3d:de:72:d5:e7:94:45:27:
         16:18:ee:5f:8b:cc:26:8c:d3:47:98:c8:21:8c:50:9c:b4:5f:
         b9:00:ef:6a:e1:56:d7:73:d7:35:a1:3d:11:42:65:c9:dd:6e:
         a8:df:95:3a:f1:dc:3e:d6:19:0b:ea:1b:73:ac:f9:74:0b:89:
         cc:94:b8:2d:a7:fb:e1:d5:d5:ce:4f:23:df:39:34:1e:f6:8c:
         fe:9f:82:12:6e:23:b7:47:1f:e5:15:fc:8b:48:a3:f5:89:50:
         a8:8f:4d:4c:2b:da:c8:0f:5d:32:16:62:1d:f8:e1:de:fa:c1:
         b1:f2:40:17:cb:96:4f:fa:73:57:3a:29:3a:55:38:ff:b1:8b:
         b9:d3:d9:5d:f1:43:2f:61:2f:8b:6d:1f:cd:7f:63:ce:35:ff:
         d5:5d:9b:15
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUbIQIEQRxutPltMeQDy9p0pg5WM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi
YjJhYzMyZTAeFw0yNTEwMTkxNTQ3MzVaFw0yNTEwMjAxOTQ0MzVaMDMxMTAvBgNV
BAMTKDM1Q0MxQkY4NzAzMTkyMjUyREY4NDQ1OTkxMUU1MEY1Q0U1MDdGRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMFoAt1rHpZD5j0Pn3H2KUPmLW
day+pMh8Mj2rvjAWtkTcyDkFJapi0i6o9kEzNnoe7tTRFH7j5DXTp7gIhfZF/C5f
HPfH/XNGvdOlzQHLs6Wqc2YosGsckBEMHBvSB1AZhjyy/aAYDLB8j5Pabjx3foLK
Xul7GcSe97fvMDmJz18bysu+TBzRwl6WaWisRT46vWzFzNqkSfJmo7U6ZSThptKt
YYOERwu0vxScK6GZQn8H4/eHyXWEF8Xea/R8eOltUtRMfHbGuPeqqOyEDzLwrfTR
jq4L0XNzuDjKN7SpIMlvNl3bpCeqSlQsAfpmE+1JIqKTzPzgbVrSpKAyYUZRAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUNcwb+HAxkiUt+ERZkR5Q9c5Qf+UwHwYDVR0j
BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5
YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz
cXd5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1l
Y2RmLTQzZDYtODZlMS1mNmMzOTM1YjliM2QvNC8zRUVFQkI5NDZBOEQyMUQ0MDgz
QzkzREMwOUNFRTU1N0JCMkFDMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQM8YA++7m2VtjWtbie9M
GajRyGuEM3HiQI8ek6paurbTdKmoCRMphVixsalJ8af0TgEQYYvIWygMAWAusXxt
c3bnxAFIW7Yp3HeB5xri3JHcs0oZKdbwH3tzfin/4GI7QCfjRz3ectXnlEUnFhju
X4vMJozTR5jIIYxQnLRfuQDvauFW13PXNaE9EUJlyd1uqN+VOvHcPtYZC+obc6z5
dAuJzJS4Laf74dXVzk8j3zk0HvaM/p+CEm4jt0cf5RX8i0ij9YlQqI9NTCvayA9d
MhZiHfjh3vrBsfJAF8uWT/pzVzopOlU4/7GLudPZXfFDL2Evi20fzX9jzjX/1V2b
FQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:02 2025 by rpki-client