Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
File:                     88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft (raw, json)
Hash identifier:          RsJ7oPGxzqBEFJHCM2XmrE0k0HDnSSyPLjyG1WJzsEg=
Subject key identifier:   94:59:E2:94:92:D8:C8:37:D9:4F:EA:A3:BB:36:B6:79:3A:7F:E1:27
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Certificate issuer:       /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial:       713D7432E18885A0729BFE3E4A56BA18D23103C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
Manifest number:          0145
Signing time:             Sat 28 Jun 2025 16:08:24 +0000
Manifest this update:     Sat 28 Jun 2025 16:03:24 +0000
Manifest next update:     Sun 29 Jun 2025 19:49:24 +0000
Files and hashes:         1: AS396856.roa (hash: 2bI3a4zxlo46jXQV1rgKaGIKD8gfwtYXbMTtw0iMmpY=)
                          2: AS214677.roa (hash: n215ZvortJS162eLpQ42gAjG0xcQmhimFd3cJ93I+UA=)
                          3: AS4515.roa (hash: QMHbaun5NbbOHeU6BX4ErVvjvgg/JIETuXEMJ2mLJEc=)
                          4: AS151373.roa (hash: 2eQICw4xsXoBKmbl6FrpwUTwIdvqOjM7d5R3/Tdz5RA=)
                          5: AS138195.roa (hash: o/PfKQP6n/ZYzwwrd6I8pHU9ioxc8AOGAUqs+SQrbUM=)
                          6: AS213920.roa (hash: SsXJk+5pb7fa/aEsE0biEpH+yyLPEB4EDES7zyN2qYc=)
                          7: AS208723.roa (hash: 5GrjtrMyueofALoPzEHgcn/cSCTKc5Atq6JF9hwgKAA=)
                          8: AS5650.roa (hash: qvSRZm3/udDMERRUTB0GcDTFzF+Db12AWsHjTMFyFQo=)
                          9: AS9304.roa (hash: yr+hviMgOLSC0HYudhP45z2m3kS0qNADz9hwp1pRo+A=)
                          10: AS151338.roa (hash: loALYyM7qPPuII2Xycdri+ZZ5z4F1eodCq//XW84Doc=)
                          11: AS42831.roa (hash: QJVEDIUjDFgFv8zoZar1KmbVmj0gidhhGe8FmcG2MpU=)
                          12: AS212335.roa (hash: qhYhktIZCmfpLOtkVUngznzfHAdkSzmJyj8dJlRkG6o=)
                          13: AS61003.roa (hash: J0viIibJYjHkSYywCk+mHE6Ss+6mbrKjIxkpvAjYRtY=)
                          14: AS395374.roa (hash: Q8VXOgZ/iE9Ft40c254bcr8PhN3HpqaUFCtET4xzn4g=)
                          15: AS213606.roa (hash: lHHWWTTzwYLB9vqsFgjn1jDhj3RtXzvqu8GVefEC+Go=)
                          16: AS400556.roa (hash: 5YV4sAxP0em0ZHou9UzQGu7n5p7UYDsUJiyfGNd7s3w=)
                          17: AS44092.roa (hash: xB2ieafpuErFMZZHGTiZgdg5bLoHLkXhyh79xo6RkG8=)
                          18: AS140498.roa (hash: u98RCmzec83+Y0JYyOUF26zn5uGr3HUnU/G1rh166no=)
                          19: AS399827.roa (hash: GijWsCeMyGdtkGMwgc2EvSrTKqsOUWCgM2lw0sxShnI=)
                          20: AS47585.roa (hash: +x3+7/pcTExM/b2AtHnI45cYBSOFsWdoKLxc6DnYuB8=)
                          21: AS36231.roa (hash: BGpB3H7Wg9pZ9PnT3MRt0MYMrP/gOmqE9i+JxF7hous=)
                          22: AS834.roa (hash: 4m2vyHhdu9WTmCkXvjfskTyRAhVfN9O14/SQvMUKZfc=)
                          23: AS21840.roa (hash: sm283FdUZVSS0Bu+ctlY6bDaO1Rj4pqPUu8taC5eTtQ=)
                          24: 88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl (hash: A4AqYD+/koVholvmW0OySoria7tYuJpOQv9rYnMvrSQ=)
                          25: AS31715.roa (hash: eB4uB4NPX/DsOTm8IJTZVuwEoVKppN/w2j4ggKSRcgA=)
                          26: AS152611.roa (hash: sSOaIhP+ZPLpfBh/tmQuH/k+mPKpUrGJJgjtsp5kU60=)
                          27: AS208063.roa (hash: x8KlHpzsvdj9XyamLy3D2TdEt0MMNNMOIu8TFzQSP+4=)
                          28: AS207769.roa (hash: pTEfVdqHW17+XaxTKCHacEQ86NbxdXA2z+W29MPynbE=)
                          29: AS137517.roa (hash: fGM+FGmMUhYIWL1WeL3N3USPeu6lHRd3Jqd9/L5vVls=)
                          30: AS135391.roa (hash: roKn2cELthNOkeGfrKSyc+rcXqASVVcUTxYKHsgm6jA=)
                          31: AS137235.roa (hash: PFUVGN+YWaaG+pLEy3vd77vb+rUuoNdy9d7QZAbFXGw=)
                          32: AS174.roa (hash: HbuBcky4Ze17ASPAYwLD72dwI7ZMmStupcGWqyaAEks=)
                          33: AS200950.roa (hash: 66G8p9Gpw1IBQ5DjDvlWjQAcpAOY9CQ987pvw6ahm8c=)
                          34: AS9318.roa (hash: Og69YisFRF1EXwcOiFhduTJ79QHToaeqCFkMcp1zgHg=)
                          35: AS137897.roa (hash: HS1OTCk2FMLn/MFwVvT58bqUyall/AgtRZhVyd9NSWA=)
                          36: AS59432.roa (hash: 96cSc4avHRHIDQZ7THBJ+gSDNUB21tbKO1yjT/vnzRg=)
                          37: AS10753.roa (hash: KLaImYCpSZ84ynstGBy72ABalN8ftHXf0YjqRkS8DMg=)
                          38: AS58212.roa (hash: qqYiHRfmhIAXcFjMxEEHC5LR4harhE8j/xcImk4fX4M=)
                          39: AS212969.roa (hash: 3beMg2BUYgwWhgAQOlOd/EIEno/PJJacuq7bs9Vc+a8=)
                          40: AS7979.roa (hash: YfGqN0hexz69isKJBUv02z26yjAxnbOWwIySLNdrspg=)
                          41: AS153923.roa (hash: KCTDrh132v4nMymeEPPz1nHUqCGDMU/ESn16m3o7HXs=)
                          42: AS5065.roa (hash: gubMEoMisqwsrRn6KyTgtiBHHGdivNxbI3yyeaU7b7A=)
                          43: AS135402.roa (hash: P0FabAx0US+JVYAholR9ney4X4KnWrPovBcfz7ULtVA=)
                          44: AS39521.roa (hash: 0ajDFded9PDJSDER0HMQrH6a3LRX9Pm42pqvFQXPUnE=)
                          45: AS214939.roa (hash: rM4MT0yS7zBMDHC/ZYa92KRDYudH0NMHla7lrW/lKAU=)
                          46: AS48925.roa (hash: OcucM/8luIFkEj8H98QUSITshbkDJVuNGcNhbRWHtn8=)
                          47: AS136501.roa (hash: GD3cXe7zrKqRKoaHtJfAHtSGkU+DQRaswh9gaDIZtvM=)
                          48: AS198584.roa (hash: iU4Lu8VAmHcFjJmW5CsaiR+2YFnyZbHN1GooUZkqSdw=)
                          49: AS393942.roa (hash: p9GOtVy++A2q5kSjzpq3wZLSb2KORXZijNYbn25PmlU=)
                          50: AS214480.roa (hash: +tLlkJX9O7ImnzpbGSEtns1p3+F9hEqv48uYjfvo+AQ=)
                          51: AS212384.roa (hash: u9lOhgQU6qSdN6WOtNcgN9XezYY3fexj4d/BWwuBI0E=)
                          52: AS212238.roa (hash: cHf31p6kaks1ZNOPG6yERSE+2SnfdMhvBqXjSyDjOPA=)
                          53: AS29802.roa (hash: UoV+5ykTEt2+CZHRSl1jhM922nJ2D+Uvu8oWawi9ork=)
                          54: AS211094.roa (hash: 6O7AUtm8HS7FoPvdIcX+gZ4D+fmV+OtgTY8LxNKgCtw=)
                          55: AS22427.roa (hash: WGQlt1HGMAXEzrMT/CJuEE4vErDycmXeLhJC47dGWAs=)
                          56: AS64267.roa (hash: r/+0HFdvbO88hERyoyOWu8nJZHujmFeucKpFUHPd0YM=)
                          57: AS63023.roa (hash: reY9WlZwBJExFmSZtlVUq+RI7gkOgGnwMQ4D0qpZAeM=)
                          58: AS60894.roa (hash: vlRI+hJUaSbAPY8/23SLxdJW88nN03GoujEULhBvPG4=)
                          59: AS214432.roa (hash: gsLBOI4zyjX/7GZLAFYEHxBIrUYzVRbMSxYSdyn2SUI=)
                          60: AS42960.roa (hash: /MApW0vlmuGSFnxR7j3JFYzrtpjMIFrlumdUhErqh3w=)
                          61: AS214402.roa (hash: h3co/v9KPGAdCPrLvRuEHRaC3jpFFwV09LTrKr6qLBQ=)
                          62: AS7029.roa (hash: u+55G5Rilzt519FRmlY2Qi+AQ5+KWJAP0fMx7NcFdVY=)
                          63: AS208483.roa (hash: PxkJsJcPmC/IQ4JlTHnYUwiqGSWMUsbORj3IUMsLD2g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3d:74:32:e1:88:85:a0:72:9b:fe:3e:4a:56:ba:18:d2:31:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
        Validity
            Not Before: Jun 28 16:03:24 2025 GMT
            Not After : Jun 29 19:49:24 2025 GMT
        Subject: CN=9459E29492D8C837D94FEAA3BB36B6793A7FE127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:f2:48:e4:c4:b8:f5:ab:a2:02:39:36:39:
                    bf:3b:d1:6e:ed:b3:c7:36:92:16:d4:2e:51:20:cc:
                    49:98:5e:29:32:74:b6:e0:01:46:93:c3:9f:11:e6:
                    b6:da:b3:ac:86:1b:67:b3:f1:55:f3:02:c9:59:b1:
                    87:8c:f3:34:e1:61:69:e9:ec:ba:00:07:1a:26:31:
                    ab:0d:a4:8c:d2:33:63:46:73:e3:5b:1d:fa:35:e9:
                    95:10:42:8d:85:27:ed:4b:52:25:60:3f:f9:0a:b6:
                    42:0d:d3:55:10:fe:25:97:93:14:35:b4:63:c5:43:
                    36:2c:b1:4b:05:5f:30:ab:0d:27:43:97:f1:58:92:
                    37:c4:6c:5c:be:2b:cf:e8:ba:5e:4c:e6:7f:ab:1c:
                    ce:4a:f7:e1:e2:1e:3e:f2:b2:79:2d:27:cb:f3:ea:
                    93:50:f5:c7:a6:f8:db:40:fa:8a:80:81:f1:b4:53:
                    52:3a:67:1d:99:95:24:37:de:39:47:1e:ea:e1:24:
                    e7:bc:7c:77:ae:51:98:bb:dc:1a:ea:40:3c:04:6f:
                    a8:67:ef:90:2c:aa:28:ba:fe:27:2e:dd:58:4e:a7:
                    01:3e:91:3e:3b:89:80:cf:ba:d9:53:c7:e5:b3:fd:
                    0d:0f:4c:55:ed:92:8c:4e:51:f5:eb:b4:00:7c:2c:
                    93:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:59:E2:94:92:D8:C8:37:D9:4F:EA:A3:BB:36:B6:79:3A:7F:E1:27
            X509v3 Authority Key Identifier:
                keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a8:e7:d5:ea:7c:7b:04:f6:ec:cc:9c:29:25:7a:5d:f4:d7:
         b1:98:da:2d:b5:a7:e8:c5:97:41:b7:3f:a0:18:32:90:d8:93:
         15:e2:42:f9:ae:e0:e6:1f:e3:5d:04:14:39:57:e1:5a:cd:44:
         ca:aa:84:ea:5b:13:1a:15:ae:e1:e2:86:4a:30:f6:ab:45:f6:
         13:c6:47:1b:13:b9:b5:3b:e5:2e:a7:d5:7d:e0:e5:e8:2a:1d:
         a5:ef:1c:88:18:a5:8f:09:e4:83:38:3e:9c:3b:d9:5b:d9:71:
         d9:cf:08:85:2c:a9:7b:72:12:fb:2f:62:de:c4:62:45:b4:15:
         9d:7d:8e:49:7c:00:bb:32:80:75:58:91:d8:68:6b:33:bb:c5:
         1b:9b:16:ff:bc:bb:2c:47:33:46:4d:15:cd:56:95:98:d0:27:
         7f:8f:f0:fc:e3:95:71:a8:5c:df:76:41:6f:4c:2d:59:b1:b8:
         c2:00:f9:79:01:a8:24:9c:b4:a0:c9:57:10:da:22:8f:c1:53:
         5c:8b:c0:6b:a2:9d:73:0a:cd:2f:8f:1e:46:c1:39:5f:16:7d:
         1e:a1:b8:80:05:5b:08:4d:0f:f9:bb:6c:71:63:b6:98:7e:07:
         18:71:6f:fb:ba:e3:12:86:75:7a:bb:21:e3:9b:95:de:09:7d:
         03:1d:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----