Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File:                     88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier:          oehHaSREO83QUahFJmfLVYOOUBkElG7RjGEONdE0UBA=
Subject key identifier:   36:21:47:94:30:BB:41:32:8A:6B:48:43:74:A5:44:2A:D7:1D:DF:C9
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       044D101718B6CF1D3BD75C3A9FE5AA2FB4488A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number:          03F7
Signing time:             Wed 09 Sep 2026 18:45:42 +0000
Manifest this update:     Wed 09 Sep 2026 18:40:42 +0000
Manifest next update:     Thu 10 Sep 2026 19:49:42 +0000
Files and hashes:         1: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
                          2: 326130643a623238373a646464643a3a2f34382d3438203d3e20323139333038.roa (hash: lhnf24+d+KsCQOPaVipDtlRXOcDvUPxkqrOPn+C77uU=)
                          3: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
                          4: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: KmE4Ra4RNXxBeAk9rV4T92zm3sto8pmIbD9YJoj2hJY=)
                          5: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
                          6: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
                          7: 34352e3134362e352e302f32342d3234203d3e203431373230.roa (hash: /A+vKWQmGHFkxgp4vYuvNcELZtcoJ1pL9jVDE0PN8VU=)
                          8: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
                          9: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: +1iGysyQucPMgeGFPsfnaH5dItK0ns/N5dfVva1FNcQ=)
                          10: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
                          11: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: 5bbIRsdAjK7srHufZ+Dw+kesoYz11+KIuBbiQq0S3J0=)
                          12: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: c/O7QOCGP6dZWdMg85nw8EMYpXMSqcsPpnlxKsXEJxg=)
                          13: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: ivRYcKVBavH9t8GiJ9N3cjwe45NnnX0wNJoN9vaUIQU=)
                          14: 3138352e32312e3132392e302f32342d3234203d3e203431373230.roa (hash: X00xehiC09J74nSsF8Ko+/NFcQ+tlis5g8MfH1Xa6kg=)
                          15: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=)
                          16: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: noOpptHyYahGYRczsInCwYjuMyS1afxmOWJs2YpvAT0=)
                          17: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: IWxDGwnCe47DwB/QE0frhiu04YnzGfcmOau8r6CSuq0=)
                          18: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: /uaMgihPC3IleOA8rrRxlWBDKgcrHemqwt+82sssPAU=)
                          19: AS41720.asa (hash: MwLliTX8n57WMFW6o6NS6fwel9rD3ohuAmiMMy87fZg=)
                          20: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
                          21: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: srrAE4PnG7Smy0Hyw6ZLJcjBNnqLRb+bmWYGj/WYI2E=)
                          22: 3138352e3133302e38382e302f32342d3234203d3e203431373230.roa (hash: Q6SwM6coh0lhmv2Gg85VRe+9HM4FBsO6keE2v7Y1R3c=)
                          23: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: I/iO3YAfj293FmGBTRLAPscviIPgQbl+nLgu16ZbM5M=)
                          24: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: gf5b8NhF0zR0RYc46WS4uCNmpBmFubnVS7Fe41WKmKs=)
                          25: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 19:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4d:10:17:18:b6:cf:1d:3b:d7:5c:3a:9f:e5:aa:2f:b4:48:8a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Sep  9 18:40:42 2026 GMT
            Not After : Sep 10 19:49:42 2026 GMT
        Subject: CN=3621479430BB41328A6B484374A5442AD71DDFC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2d:9c:e6:74:74:66:58:00:be:1e:6d:20:4c:
                    83:60:54:b9:29:34:d1:e8:f2:06:f1:2a:d8:c7:9f:
                    3b:36:7b:be:29:06:f3:de:3a:5b:92:e6:6a:48:65:
                    ad:1b:b7:4e:21:4a:63:1f:7c:56:48:e9:87:71:cd:
                    5d:c3:dc:e7:19:8e:97:42:63:6e:23:11:e2:35:df:
                    0a:b3:65:dd:39:dd:b4:f0:7e:91:90:c2:5f:cf:2d:
                    db:3a:e5:20:51:fd:6c:24:9e:38:82:66:af:9d:ca:
                    42:ad:2c:27:40:df:13:fc:22:c2:cb:cb:89:c8:36:
                    59:b6:5c:17:6f:21:8e:73:9d:84:f5:36:10:f3:b5:
                    30:02:98:58:a4:d4:bf:49:b1:bb:79:b3:6a:c6:5b:
                    06:04:37:4d:fc:36:71:62:13:39:33:e9:4f:21:17:
                    06:9d:45:71:bd:f4:96:5d:44:02:21:04:3c:27:b4:
                    24:4f:34:72:5a:88:4e:11:d4:a3:48:1e:d0:59:a3:
                    41:b8:19:0b:b1:92:a2:7c:b2:94:e3:3d:51:d2:d3:
                    e5:b8:75:04:07:ab:55:c4:d0:fe:24:d4:c9:3c:2a:
                    64:d3:16:bf:88:88:5b:0e:2d:a0:6b:00:b7:5f:6d:
                    2d:8a:aa:97:e2:06:b5:b5:39:86:5a:57:d1:6a:8c:
                    2c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:21:47:94:30:BB:41:32:8A:6B:48:43:74:A5:44:2A:D7:1D:DF:C9
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:97:55:b0:45:ef:9d:4b:75:b9:60:e3:74:ff:c2:a3:52:62:
         4b:3d:e8:19:b7:b7:f9:dd:25:b5:17:87:29:01:6f:28:22:73:
         54:01:6f:aa:06:84:13:cc:4a:47:96:89:cb:91:d5:12:be:c6:
         8e:5b:ec:f2:6a:f9:c6:b1:b7:07:e2:a0:0d:0a:43:70:47:91:
         ec:c7:91:fc:9f:a7:68:55:0a:27:c7:66:0d:18:df:ed:39:21:
         0e:99:43:05:5b:0f:12:f7:02:6b:02:7b:1c:42:bf:9a:14:a8:
         ae:ed:28:a6:df:28:b5:f0:f9:d9:1d:42:9d:64:02:13:a0:07:
         52:bf:a4:d8:b0:31:0c:b9:ef:b8:6f:56:ef:28:d2:73:6c:ad:
         e7:22:bd:98:18:dc:27:0a:f3:de:6a:99:42:a8:d4:22:4d:0f:
         f6:1a:11:09:22:07:01:b9:98:74:9e:ee:64:65:e8:57:3b:7c:
         93:e2:f9:d1:1a:a8:5b:92:86:73:e3:1a:aa:fc:fb:3d:8a:e8:
         8b:59:28:00:70:66:d8:4a:59:82:c4:7e:ba:05:02:b5:4c:40:
         c8:e4:8f:b5:0e:9c:90:ca:e9:b1:7b:bc:a1:5c:35:de:bd:4a:
         5c:6d:f3:6f:2c:ed:ad:92:65:9f:14:f6:4b:5e:dc:49:e0:1b:
         db:2d:cf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:31:10 2026 by rpki-client