Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File:                     88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier:          k0M8S7yWkGcibfBOzW1HXFb4p6dLrk5B8YwEJjX16fY=
Subject key identifier:   38:E3:9E:79:14:07:88:3F:FC:E1:68:CF:98:C7:10:0A:35:7F:04:2A
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       41E6AA6FBF0A10D8ADED44062C9EA9112BC4F8AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number:          033D
Signing time:             Mon 27 Apr 2026 03:18:32 +0000
Manifest this update:     Mon 27 Apr 2026 03:13:32 +0000
Manifest next update:     Tue 28 Apr 2026 03:24:32 +0000
Files and hashes:         1: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
                          2: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=)
                          3: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
                          4: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=)
                          5: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: HmT5tXnUGEVWNxw2FmTwbRc4sXD4UmPnTmfrbuURRYg=)
                          6: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
                          7: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: c/O7QOCGP6dZWdMg85nw8EMYpXMSqcsPpnlxKsXEJxg=)
                          8: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=)
                          9: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=)
                          10: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=)
                          11: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
                          12: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=)
                          13: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=)
                          14: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
                          15: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=)
                          16: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
                          17: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=)
                          18: AS41720.asa (hash: 4An44TkWkAj35xBt6Xef84p/tUjH5ZEGoqkH2/CZIMo=)
                          19: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
                          20: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=)
                          21: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 03:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e6:aa:6f:bf:0a:10:d8:ad:ed:44:06:2c:9e:a9:11:2b:c4:f8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Apr 27 03:13:32 2026 GMT
            Not After : Apr 28 03:24:32 2026 GMT
        Subject: CN=38E39E791407883FFCE168CF98C7100A357F042A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:94:3d:cf:3c:71:41:5e:e1:3d:01:ef:96:
                    9f:90:93:1a:88:4f:0d:73:15:75:5d:cd:da:5d:bd:
                    90:bb:9b:a3:f1:9b:60:01:bd:d2:2d:33:17:38:05:
                    be:03:eb:d7:47:00:fd:cc:df:4c:32:ec:6c:28:e4:
                    bd:c4:19:36:96:35:6c:f0:9f:6e:45:1f:26:ec:a3:
                    ff:38:ca:08:9d:d3:aa:f0:ca:79:7b:cb:ad:de:51:
                    41:8f:80:bf:d2:2c:d2:f8:7d:1d:9f:8c:16:01:29:
                    d1:d2:32:03:86:70:67:0f:ba:f8:a0:8f:ab:b5:d2:
                    ca:cb:23:98:2f:c4:e1:70:4f:45:1b:8a:6d:c0:60:
                    c8:36:25:13:34:cd:1e:76:16:84:b6:9d:1c:a2:76:
                    1f:83:a4:b3:ec:ea:4f:ed:94:30:53:f0:80:a4:11:
                    ce:14:bd:55:23:6c:17:8e:1b:24:48:c3:04:a5:1d:
                    9d:32:10:d3:31:5e:2d:2d:f6:dc:e7:11:42:23:03:
                    bc:16:ef:d7:3d:d5:8b:6c:f2:43:7f:d2:ee:66:ff:
                    b9:10:51:fa:48:02:79:01:9f:59:bc:e0:11:9b:9d:
                    14:9d:08:bb:02:4a:e8:4f:f6:e4:fa:f0:36:d3:2d:
                    7b:4d:fc:e1:ba:62:75:42:5b:86:9e:13:dd:c0:69:
                    08:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E3:9E:79:14:07:88:3F:FC:E1:68:CF:98:C7:10:0A:35:7F:04:2A
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:23:0c:46:7b:2a:88:f1:2f:3a:5b:82:c4:5a:d8:61:1a:cd:
         b9:ab:15:0e:ab:43:ca:b9:06:de:be:df:9e:4a:cd:b3:93:bd:
         d3:5e:54:b4:5c:c7:a3:b5:78:ba:95:3d:9e:f2:37:23:27:31:
         d6:6e:48:91:a6:db:d9:fa:57:73:63:aa:b4:44:b2:fb:bc:86:
         3c:73:95:e3:a5:c3:5e:5f:da:94:8f:9c:c4:2c:80:dc:3c:e2:
         53:7d:57:0a:43:7c:b0:da:3a:09:96:2a:52:cb:0b:d2:eb:7a:
         6b:b3:65:45:c0:cb:25:4b:e2:65:5f:95:cf:6f:d4:e9:31:f6:
         c0:dc:13:77:b0:eb:b7:ed:5d:0f:80:29:53:37:66:c9:4f:f2:
         51:18:5d:cb:8b:58:85:8f:74:95:3d:41:2d:1b:bf:3d:2f:c1:
         34:06:12:51:90:6c:53:7f:bb:00:a9:c0:70:67:f3:c1:a7:d7:
         db:a8:83:e6:88:0d:d7:d9:40:54:5f:2d:12:0f:0a:35:92:93:
         1a:4e:2f:87:05:10:62:7d:f0:c9:a2:1d:0e:58:e0:78:81:78:
         4a:c9:4a:de:8f:7f:a0:79:9f:a6:c9:62:72:62:d9:87:0a:03:
         9a:b3:f6:92:7f:24:c0:23:77:2d:8a:c9:d4:f0:76:b6:19:e1:
         e2:9f:de:ff
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQeaqb78KENit7UQGLJ6pESvE+K4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5
N2I2ZjQ5MTAeFw0yNjA0MjcwMzEzMzJaFw0yNjA0MjgwMzI0MzJaMDMxMTAvBgNV
BAMTKDM4RTM5RTc5MTQwNzg4M0ZGQ0UxNjhDRjk4QzcxMDBBMzU3RjA0MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1ZQ9zzxxQV7hPQHvlp+QkxqI
Tw1zFXVdzdpdvZC7m6Pxm2ABvdItMxc4Bb4D69dHAP3M30wy7Gwo5L3EGTaWNWzw
n25FHybso/84ygid06rwynl7y63eUUGPgL/SLNL4fR2fjBYBKdHSMgOGcGcPuvig
j6u10srLI5gvxOFwT0Ubim3AYMg2JRM0zR52FoS2nRyidh+DpLPs6k/tlDBT8ICk
Ec4UvVUjbBeOGyRIwwSlHZ0yENMxXi0t9tznEUIjA7wW79c91Yts8kN/0u5m/7kQ
UfpIAnkBn1m84BGbnRSdCLsCSuhP9uT68DbTLXtN/OG6YnVCW4aeE93AaQhHAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUOOOeeRQHiD/84WjPmMcQCjV/BCowHwYDVR0j
BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz
MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl
MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02
MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB
QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSMMRnsqiPEvOluCxFrY
YRrNuasVDqtDyrkG3r7fnkrNs5O9015UtFzHo7V4upU9nvI3Iycx1m5Ikabb2fpX
c2OqtESy+7yGPHOV46XDXl/alI+cxCyA3DziU31XCkN8sNo6CZYqUssL0ut6a7Nl
RcDLJUviZV+Vz2/U6TH2wNwTd7Drt+1dD4ApUzdmyU/yURhdy4tYhY90lT1BLRu/
PS/BNAYSUZBsU3+7AKnAcGfzwafX26iD5ogN19lAVF8tEg8KNZKTGk4vhwUQYn3w
yaIdDljgeIF4SslK3o9/oHmfpslicmLZhwoDmrP2kn8kwCN3LYrJ1PB2thnh4p/e
/w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:53:01 2026 by rpki-client