Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File:                     88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier:          dL2M/i3lcx3ehe+VmLtfwMm3QUW2C2XbMH6Rld25ZHQ=
Subject key identifier:   D1:D7:04:BD:ED:38:78:72:85:7E:62:BD:91:F7:68:34:96:00:BE:98
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       11F7B263E4815816D6F50D6F94198F9B9448125D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number:          040A
Signing time:             Wed 23 Sep 2026 03:30:55 +0000
Manifest this update:     Wed 23 Sep 2026 03:25:55 +0000
Manifest next update:     Thu 24 Sep 2026 04:34:55 +0000
Files and hashes:         1: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: NdLetm0cLP+FSZxE4wY26q0QdvNPenh12AUoeHqpt8c=)
                          2: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
                          3: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
                          4: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: c/O7QOCGP6dZWdMg85nw8EMYpXMSqcsPpnlxKsXEJxg=)
                          5: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: stUKzxp9FSabLqBbmp/31UHFmp2ltgPOF6jMIp4guIM=)
                          6: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
                          7: 3138352e3133302e38382e302f32342d3234203d3e203431373230.roa (hash: Q6SwM6coh0lhmv2Gg85VRe+9HM4FBsO6keE2v7Y1R3c=)
                          8: AS41720.asa (hash: MwLliTX8n57WMFW6o6NS6fwel9rD3ohuAmiMMy87fZg=)
                          9: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: /uaMgihPC3IleOA8rrRxlWBDKgcrHemqwt+82sssPAU=)
                          10: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
                          11: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: I/iO3YAfj293FmGBTRLAPscviIPgQbl+nLgu16ZbM5M=)
                          12: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=)
                          13: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: gf5b8NhF0zR0RYc46WS4uCNmpBmFubnVS7Fe41WKmKs=)
                          14: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
                          15: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: noOpptHyYahGYRczsInCwYjuMyS1afxmOWJs2YpvAT0=)
                          16: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: 5bbIRsdAjK7srHufZ+Dw+kesoYz11+KIuBbiQq0S3J0=)
                          17: 34352e3134362e352e302f32342d3234203d3e203431373230.roa (hash: /A+vKWQmGHFkxgp4vYuvNcELZtcoJ1pL9jVDE0PN8VU=)
                          18: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
                          19: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: KmE4Ra4RNXxBeAk9rV4T92zm3sto8pmIbD9YJoj2hJY=)
                          20: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: srrAE4PnG7Smy0Hyw6ZLJcjBNnqLRb+bmWYGj/WYI2E=)
                          21: 326130643a623238373a646464643a3a2f34382d3438203d3e20323139333038.roa (hash: lhnf24+d+KsCQOPaVipDtlRXOcDvUPxkqrOPn+C77uU=)
                          22: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: IWxDGwnCe47DwB/QE0frhiu04YnzGfcmOau8r6CSuq0=)
                          23: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: ivRYcKVBavH9t8GiJ9N3cjwe45NnnX0wNJoN9vaUIQU=)
                          24: 3138352e32312e3132392e302f32342d3234203d3e203431373230.roa (hash: X00xehiC09J74nSsF8Ko+/NFcQ+tlis5g8MfH1Xa6kg=)
                          25: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f7:b2:63:e4:81:58:16:d6:f5:0d:6f:94:19:8f:9b:94:48:12:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Sep 23 03:25:55 2026 GMT
            Not After : Sep 24 04:34:55 2026 GMT
        Subject: CN=D1D704BDED387872857E62BD91F768349600BE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:be:8a:85:65:0a:56:94:a2:01:e5:c3:ac:
                    d4:f1:cc:ee:67:b7:69:38:30:64:e4:17:6e:e9:5b:
                    0d:df:68:5a:af:1b:ca:92:92:30:76:01:9e:2e:b7:
                    7c:cc:98:e4:9c:7d:76:da:d4:cb:19:c7:a2:6b:8c:
                    d8:c9:2b:e4:91:d9:69:e5:61:54:7c:c8:6c:d2:fa:
                    f5:09:31:38:96:bd:75:b8:11:22:4f:fb:a8:66:50:
                    1e:53:8c:6c:46:75:cf:14:aa:bd:f2:8d:ef:ae:f0:
                    00:ab:a0:9f:0e:b6:7e:91:a4:90:77:86:17:13:45:
                    d3:43:5c:4b:d8:a2:40:ec:29:15:61:b7:16:2e:9b:
                    5c:52:98:12:4f:c1:3a:9c:c1:ab:63:9e:8d:3f:06:
                    9d:bc:09:b5:87:1d:99:70:3c:d2:26:14:10:8b:a8:
                    90:7d:f9:ae:88:96:09:08:e6:71:fe:25:82:77:6f:
                    e1:a4:90:35:f9:09:d1:8f:44:2d:24:74:ed:99:6f:
                    09:9e:bc:1c:e6:ea:6b:d8:d3:4e:06:93:f3:9b:81:
                    af:2f:d7:94:5a:60:27:3f:5f:7b:33:b3:ff:89:b5:
                    bd:04:95:dd:56:18:3a:e7:55:97:0e:de:7f:d2:52:
                    a5:0f:37:e1:e8:6b:aa:3a:55:53:66:b2:cf:bc:1c:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D7:04:BD:ED:38:78:72:85:7E:62:BD:91:F7:68:34:96:00:BE:98
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:cc:50:0a:00:59:17:7d:0b:e9:2a:c3:58:8b:94:01:23:f7:
         83:6c:5f:56:55:31:8f:13:1d:f2:85:76:69:dd:ff:41:fb:4d:
         93:f0:db:16:61:b1:23:d4:70:e4:99:f4:e3:b4:5e:5a:fc:72:
         51:fa:15:a7:a0:76:4b:e2:08:72:0f:10:9c:ab:12:eb:52:7c:
         17:13:d2:97:77:1c:2f:c4:67:a4:a2:16:bf:e0:08:c0:84:bc:
         2c:74:22:37:25:06:ac:e4:4e:e3:ac:e4:a7:d0:9b:e4:a7:bc:
         c4:74:7c:49:4c:ea:2a:8e:be:ef:63:c3:ce:cc:05:a6:c1:88:
         21:d0:df:31:1d:15:31:43:b8:26:60:87:e7:a4:ae:98:67:0f:
         31:f6:6a:fe:8c:47:3f:21:ce:d2:93:d1:b2:8d:20:b3:e4:5f:
         8b:33:cb:98:8b:6b:e8:cd:22:ab:32:4f:3d:11:8f:97:96:da:
         24:e7:2a:3b:78:8f:bf:aa:75:cc:de:a6:21:dd:31:a9:ca:b2:
         b5:16:c8:56:0e:f1:b5:0e:e5:5b:e5:14:c7:0f:3b:15:55:f6:
         10:cb:9e:55:1c:a4:22:d1:27:57:fa:06:ac:51:82:36:66:7a:
         07:99:36:d7:72:7f:1a:01:f1:cc:d1:66:9c:32:d4:d2:d1:51:
         0b:18:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:53:53 2026 by rpki-client