Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File:                     88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier:          Ew0MlUULURa9oZGrSSR52EbQEpdGXnGRDmhv8H54mOQ=
Subject key identifier:   FC:C3:49:F8:F0:7A:D1:D3:93:B4:43:83:09:A3:95:71:34:13:D8:18
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       37ECB609A41F260351234FDF0306AFEEFA6297A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number:          03BA
Signing time:             Sun 26 Jul 2026 16:30:14 +0000
Manifest this update:     Sun 26 Jul 2026 16:25:14 +0000
Manifest next update:     Mon 27 Jul 2026 17:20:14 +0000
Files and hashes:         1: AS41720.asa (hash: MwLliTX8n57WMFW6o6NS6fwel9rD3ohuAmiMMy87fZg=)
                          2: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
                          3: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=)
                          4: 3138352e3133302e38382e302f32342d3234203d3e203431373230.roa (hash: Q6SwM6coh0lhmv2Gg85VRe+9HM4FBsO6keE2v7Y1R3c=)
                          5: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
                          6: 34352e3134362e352e302f32342d3234203d3e203431373230.roa (hash: /A+vKWQmGHFkxgp4vYuvNcELZtcoJ1pL9jVDE0PN8VU=)
                          7: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: ajzQgTxeO1DDGlUG+MtqMIyJkLQuvtgo3XcOej4O1+Q=)
                          8: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: noOpptHyYahGYRczsInCwYjuMyS1afxmOWJs2YpvAT0=)
                          9: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: /uaMgihPC3IleOA8rrRxlWBDKgcrHemqwt+82sssPAU=)
                          10: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
                          11: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=)
                          12: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: ivRYcKVBavH9t8GiJ9N3cjwe45NnnX0wNJoN9vaUIQU=)
                          13: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: I/iO3YAfj293FmGBTRLAPscviIPgQbl+nLgu16ZbM5M=)
                          14: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: 5bbIRsdAjK7srHufZ+Dw+kesoYz11+KIuBbiQq0S3J0=)
                          15: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: gf5b8NhF0zR0RYc46WS4uCNmpBmFubnVS7Fe41WKmKs=)
                          16: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: srrAE4PnG7Smy0Hyw6ZLJcjBNnqLRb+bmWYGj/WYI2E=)
                          17: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=)
                          18: 3138352e32312e3132392e302f32342d3234203d3e203431373230.roa (hash: X00xehiC09J74nSsF8Ko+/NFcQ+tlis5g8MfH1Xa6kg=)
                          19: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: IWxDGwnCe47DwB/QE0frhiu04YnzGfcmOau8r6CSuq0=)
                          20: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
                          21: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
                          22: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
                          23: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
                          24: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: c/O7QOCGP6dZWdMg85nw8EMYpXMSqcsPpnlxKsXEJxg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 17:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ec:b6:09:a4:1f:26:03:51:23:4f:df:03:06:af:ee:fa:62:97:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Jul 26 16:25:14 2026 GMT
            Not After : Jul 27 17:20:14 2026 GMT
        Subject: CN=FCC349F8F07AD1D393B4438309A395713413D818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:a2:d4:86:b0:2b:e8:d9:0c:7d:c8:54:7c:
                    50:db:67:90:84:72:d3:fe:ca:a4:a8:e5:ce:17:26:
                    5d:dc:96:aa:52:64:92:e2:ed:02:92:41:7e:68:7d:
                    33:5f:05:83:31:f7:f4:c1:62:20:32:14:9f:4c:49:
                    4e:4f:76:7e:48:dd:cf:4c:d7:25:2b:d1:a4:d7:c0:
                    71:51:0b:c3:cb:c8:1a:22:f6:8f:61:6e:87:1f:85:
                    4d:82:43:0b:4f:93:44:34:03:ec:9f:11:c5:4d:55:
                    54:11:52:1d:71:00:52:cd:d8:3f:71:09:f7:b1:63:
                    9a:a7:3d:95:22:93:12:8c:3f:d2:71:6e:53:a4:81:
                    b1:e7:6e:6e:fd:40:33:37:16:62:49:84:5e:67:9b:
                    f8:35:ce:27:12:1d:6e:98:83:56:b4:35:54:70:cb:
                    86:53:53:64:f0:f1:9e:bf:9c:b6:39:13:b9:20:24:
                    b3:86:cc:a3:23:46:46:70:30:fa:df:99:6d:ef:62:
                    b6:6b:29:92:0b:36:f2:1f:eb:88:2c:38:3d:6e:68:
                    d9:69:87:d6:c6:96:02:f1:16:56:3d:f7:09:c0:eb:
                    98:0f:c1:2c:ec:1f:5b:e3:14:af:3f:8a:c4:3c:1f:
                    95:4b:e0:b5:bf:94:70:15:99:ca:11:74:e2:11:c8:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C3:49:F8:F0:7A:D1:D3:93:B4:43:83:09:A3:95:71:34:13:D8:18
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:13:80:de:d4:22:9e:68:5e:4f:68:97:42:32:22:b4:86:f0:
         1f:72:8e:25:6a:15:b7:66:90:2d:67:c2:90:93:83:4f:8b:f5:
         cf:17:8e:aa:62:21:ca:c6:85:18:28:28:5d:02:aa:8b:11:57:
         2c:35:cf:65:c6:32:28:bb:0c:57:6c:66:28:87:28:2d:4d:f5:
         14:de:78:72:77:9e:f4:55:49:4b:92:fc:48:f1:6b:35:4e:b0:
         c8:70:ea:be:ab:5d:8f:0c:98:37:f8:96:b0:fb:cc:a6:01:11:
         05:b2:e6:e5:32:78:a6:6a:fb:0f:d2:cc:17:1f:9a:a7:53:35:
         26:f6:2f:0a:53:e3:89:bd:5f:8c:d9:24:e4:97:ce:9d:aa:da:
         1a:45:d9:87:0b:e7:f2:42:d9:6b:46:91:a6:be:d1:49:90:94:
         87:5e:1f:e0:96:61:50:2d:f5:10:f3:a2:28:e7:56:7e:7f:f1:
         9d:42:e8:78:dc:52:b5:b2:e5:3a:64:bd:b1:15:c2:5e:03:3c:
         92:09:9a:d4:4c:b2:3f:c2:7a:b8:37:a3:bd:79:8e:f0:92:93:
         43:66:82:c5:06:28:3d:c6:66:fd:02:3e:3c:8a:26:86:94:35:
         98:44:da:d3:ed:1b:e3:68:d1:ad:46:a3:f6:35:7d:49:36:92:
         5d:70:17:73
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUN+y2CaQfJgNRI0/fAwav7vpil6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5
N2I2ZjQ5MTAeFw0yNjA3MjYxNjI1MTRaFw0yNjA3MjcxNzIwMTRaMDMxMTAvBgNV
BAMTKEZDQzM0OUY4RjA3QUQxRDM5M0I0NDM4MzA5QTM5NTcxMzQxM0Q4MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsbqLUhrAr6NkMfchUfFDbZ5CE
ctP+yqSo5c4XJl3clqpSZJLi7QKSQX5ofTNfBYMx9/TBYiAyFJ9MSU5Pdn5I3c9M
1yUr0aTXwHFRC8PLyBoi9o9hbocfhU2CQwtPk0Q0A+yfEcVNVVQRUh1xAFLN2D9x
CfexY5qnPZUikxKMP9JxblOkgbHnbm79QDM3FmJJhF5nm/g1zicSHW6Yg1a0NVRw
y4ZTU2Tw8Z6/nLY5E7kgJLOGzKMjRkZwMPrfmW3vYrZrKZILNvIf64gsOD1uaNlp
h9bGlgLxFlY99wnA65gPwSzsH1vjFK8/isQ8H5VL4LW/lHAVmcoRdOIRyEZ5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU/MNJ+PB60dOTtEODCaOVcTQT2BgwHwYDVR0j
BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz
MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl
MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02
MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB
QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBOA3tQinmheT2iXQjIi
tIbwH3KOJWoVt2aQLWfCkJODT4v1zxeOqmIhysaFGCgoXQKqixFXLDXPZcYyKLsM
V2xmKIcoLU31FN54cnee9FVJS5L8SPFrNU6wyHDqvqtdjwyYN/iWsPvMpgERBbLm
5TJ4pmr7D9LMFx+ap1M1JvYvClPjib1fjNkk5JfOnaraGkXZhwvn8kLZa0aRpr7R
SZCUh14f4JZhUC31EPOiKOdWfn/xnULoeNxStbLlOmS9sRXCXgM8kgma1EyyP8J6
uDejvXmO8JKTQ2aCxQYoPcZm/QI+PIomhpQ1mETa0+0b42jRrUaj9jV9STaSXXAX
cw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 02:00:48 2026 by rpki-client