Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File:                     88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier:          nvk3ZD6mEYECkGCqWY41UtHHSILI/pyBc1sk39ctCI8=
Subject key identifier:   E9:68:A2:2E:04:B8:30:55:15:D3:97:B9:2E:87:B0:C6:18:83:59:C6
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       6520EF805B0FF1EAA0E7935DD8A9FB74B16D573A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number:          01E9
Signing time:             Sat 23 Aug 2025 00:17:46 +0000
Manifest this update:     Sat 23 Aug 2025 00:12:46 +0000
Manifest next update:     Sun 24 Aug 2025 01:26:46 +0000
Files and hashes:         1: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=)
                          2: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=)
                          3: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=)
                          4: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=)
                          5: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=)
                          6: AS41720.asa (hash: +RbH8buX1T5kTWMGsS+k2hctRH6+R8V1cu3+Qe3+/Rs=)
                          7: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=)
                          8: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=)
                          9: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: o5Ji9Nl0S0iVZZtmrV/Dia6lTq3wC3uyRf91AZlTL/E=)
                          10: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=)
                          11: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=)
                          12: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: GOCABvoqojF3U9p5UEyXVqmO5f+8/wyeekfdSPGqQRY=)
                          13: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=)
                          14: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: rHhBb1bMQectXohqdqgX13X6ENYXH/z7I15ReI0F4QU=)
                          15: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: WtqgmDwc3f4nCSOQ8ixLkNx8sXt7FaBWfi7I6des1c8=)
                          16: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: FvdxlxGckVBsdDb++ECn0QA4MqQguk1jRe9N3LP3bHs=)
                          17: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: bYPPd9HcHavTcfcGpM+ulmmDEDFMIVr0C3fR7prPNz4=)
                          18: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=)
                          19: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=)
                          20: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: iavCedfpEd5k0rIG/kL5F/xxOAMPmZq43N15rLvPbic=)
                          21: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:20:ef:80:5b:0f:f1:ea:a0:e7:93:5d:d8:a9:fb:74:b1:6d:57:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Aug 23 00:12:46 2025 GMT
            Not After : Aug 24 01:26:46 2025 GMT
        Subject: CN=E968A22E04B8305515D397B92E87B0C6188359C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:27:e6:a3:5d:f6:62:a3:58:5a:cd:ad:15:c3:
                    ef:9e:4f:f5:0f:dc:c1:2e:24:c7:fc:c1:82:34:c6:
                    00:df:a5:72:ea:18:57:fe:e8:85:2f:a5:53:5d:04:
                    97:38:f5:c6:1f:7b:3a:87:4a:82:31:90:c4:39:b4:
                    40:9a:f2:fe:5f:6f:f4:9c:fb:ef:71:1d:cf:bf:af:
                    c9:14:7a:03:df:06:60:fc:2b:70:6c:b6:c1:e5:40:
                    17:2d:20:f2:6a:23:89:b4:00:80:91:e1:cd:40:02:
                    39:23:d6:6d:d9:f6:1f:6b:d0:dd:8c:21:ec:52:f6:
                    58:f3:3c:03:2e:48:23:05:7c:ef:a5:52:8b:7e:aa:
                    a9:4a:f5:52:7b:d1:81:b1:6a:1b:4f:85:34:a0:87:
                    b1:c3:fe:42:ef:e7:30:75:5f:21:69:9d:ed:72:67:
                    11:97:81:13:b6:1a:9e:94:d6:8b:ec:d9:91:bf:06:
                    1e:66:1d:ca:1f:79:ba:21:b2:84:26:e2:ce:a5:df:
                    9d:e6:2b:5e:d7:a2:0e:6b:96:dd:4c:d8:59:ed:0e:
                    eb:70:ef:a5:f2:51:3d:d0:63:6f:a5:87:ee:01:2a:
                    0e:82:7c:3a:37:83:00:fa:51:a7:29:93:4a:7d:42:
                    cc:3a:13:04:9d:e6:f2:a4:fe:55:e3:bc:19:3a:20:
                    0f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:68:A2:2E:04:B8:30:55:15:D3:97:B9:2E:87:B0:C6:18:83:59:C6
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7e:b8:45:61:1e:b1:a2:93:9c:4e:d0:9a:9d:0a:cd:f7:4b:
         c5:3d:9a:a3:85:dd:34:fa:c8:86:30:37:84:f0:59:1e:02:a3:
         b7:7f:fa:3a:c9:ef:a8:50:3d:9f:bf:03:88:fe:7c:0c:83:4b:
         6f:0e:ec:5e:45:71:e4:d0:c3:43:bc:a6:c5:34:6a:73:4b:b9:
         e6:0b:ef:e9:50:46:db:b7:22:80:c1:bb:d3:39:ca:89:ba:9c:
         28:62:fb:20:f2:fd:eb:59:19:9d:7a:ff:b2:68:92:83:9c:67:
         8a:d9:c5:59:a5:99:3e:5f:27:bb:e7:74:c1:fc:fb:ce:8e:a8:
         73:66:a3:51:77:32:4e:7b:51:9d:6d:a6:f1:98:48:e0:09:97:
         05:03:22:3e:4c:e6:86:44:2c:d9:e9:06:c3:34:bb:b1:2c:d1:
         fe:fb:08:ee:9f:23:cb:e3:97:f4:21:32:86:87:db:fa:46:93:
         04:88:9b:c8:fb:42:03:93:06:c1:df:73:3d:b9:b8:6f:8d:01:
         6a:d2:20:39:91:a2:e7:3d:d9:3d:f8:c3:9b:25:38:18:b5:b5:
         46:e1:78:11:77:f5:c7:ef:8d:2d:84:70:af:49:97:68:cc:76:
         26:1b:6e:11:4a:32:7d:00:53:80:93:18:fa:40:11:fb:34:1e:
         b0:c8:5c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:17 2025 by rpki-client