Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File:                     88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier:          2MVb79TJgMS1jBcIhuSt9QMAlh2Ga/DD5BbqxrfFZsc=
Subject key identifier:   5A:F6:E2:8E:76:33:4C:A6:53:C5:18:00:45:F4:22:BB:78:38:D0:03
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       54DF6B59050B1CC48D10D442C4955A1D1A15BFE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number:          02FE
Signing time:             Thu 12 Mar 2026 01:07:29 +0000
Manifest this update:     Thu 12 Mar 2026 01:02:29 +0000
Manifest next update:     Fri 13 Mar 2026 01:21:29 +0000
Files and hashes:         1: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=)
                          2: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=)
                          3: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=)
                          4: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=)
                          5: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=)
                          6: AS41720.asa (hash: 4An44TkWkAj35xBt6Xef84p/tUjH5ZEGoqkH2/CZIMo=)
                          7: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
                          8: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: joUdU+WDMZWtaF6zWR0eJO4NRIEh5tKVrNDvHjxt0/Q=)
                          9: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=)
                          10: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=)
                          11: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
                          12: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
                          13: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=)
                          14: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
                          15: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=)
                          16: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=)
                          17: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
                          18: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
                          19: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=)
                          20: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
                          21: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 01:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:df:6b:59:05:0b:1c:c4:8d:10:d4:42:c4:95:5a:1d:1a:15:bf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Mar 12 01:02:29 2026 GMT
            Not After : Mar 13 01:21:29 2026 GMT
        Subject: CN=5AF6E28E76334CA653C5180045F422BB7838D003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:02:0f:d4:1c:44:8f:2c:dd:bb:f8:cc:2a:
                    47:55:97:84:9f:78:79:81:41:07:d8:00:7a:b1:2e:
                    4e:f2:65:a9:a8:00:16:e0:5c:b9:1b:cf:1f:d0:b0:
                    43:f5:ce:2e:5d:f9:85:0b:be:86:44:da:77:72:ad:
                    7a:38:86:bd:6a:ad:db:66:08:53:c0:5a:b7:14:71:
                    ae:50:e7:e4:dd:bd:17:a6:3e:c6:1f:f4:87:a8:d4:
                    45:a0:b9:00:fa:c2:95:27:5a:98:67:27:e8:f2:6e:
                    4a:44:05:d9:81:1f:65:a1:d0:97:66:0b:3a:73:50:
                    cc:ba:58:15:3c:02:6a:38:e2:34:f9:2c:d9:5b:bb:
                    54:8f:24:b0:9d:52:b7:91:a3:10:7c:ad:5a:44:5e:
                    86:84:c1:be:17:22:91:32:27:df:e6:95:2d:54:29:
                    8b:11:de:04:45:c5:e6:8a:77:4d:d8:e4:36:2a:a3:
                    a7:58:37:62:1d:f8:0d:a1:47:7d:6d:9c:58:6a:9b:
                    8d:f3:98:46:40:e0:0f:0e:85:56:d7:d6:84:ae:6a:
                    bf:a7:6c:69:11:6b:c4:83:49:98:20:37:08:1c:b0:
                    06:d2:43:e6:b0:13:d0:9f:80:a1:64:d2:74:4e:69:
                    6d:15:88:53:fe:c6:2e:7e:85:90:fd:71:9b:82:39:
                    45:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F6:E2:8E:76:33:4C:A6:53:C5:18:00:45:F4:22:BB:78:38:D0:03
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b0:2c:9b:3c:07:32:7b:72:49:33:d6:5d:89:98:51:e0:30:
         66:04:25:4d:3f:a3:e8:14:9c:f2:97:94:6d:4f:22:28:71:73:
         88:ac:3e:83:e8:15:be:95:5d:88:3d:8c:26:4c:68:e2:9b:1e:
         c4:f8:e7:d2:62:c4:2d:f5:79:b1:9d:09:e2:31:e1:69:60:16:
         11:46:5d:b9:28:9c:c6:ac:bd:f5:d1:78:b8:f3:ff:e7:13:3b:
         9e:55:20:1b:f0:46:95:7d:db:ce:d2:f5:a4:87:b1:c0:0e:f8:
         05:f1:95:31:2d:9e:fa:bf:78:2f:43:d4:cb:4a:60:58:10:1e:
         aa:d9:64:d4:b9:ff:da:64:1e:6e:c8:d6:ff:f1:30:58:8f:42:
         0a:56:3f:fe:18:51:5b:fc:78:11:16:94:4f:49:47:85:26:8d:
         e4:f4:94:91:51:a1:dd:f0:51:83:85:ca:a2:6e:d4:c3:86:d5:
         88:dd:36:99:f5:d3:3a:1c:7f:06:da:e5:82:da:49:f9:5e:31:
         9e:b7:03:70:24:8e:98:67:67:b4:10:9c:6d:3a:fb:ec:ea:89:
         e9:b5:80:9e:94:a2:9a:25:8b:3f:9f:8f:8e:7f:2c:36:d6:1d:
         72:57:12:08:2a:0c:d1:61:f6:f9:26:03:97:69:a8:59:e5:d6:
         55:12:0b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:49:58 2026 by rpki-client