Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File:                     88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier:          eY5y4r8llYAWUqnODibkRlj6hRPlru98CilumZ7Osas=
Subject key identifier:   1D:0F:12:7A:47:EB:DC:CF:8F:95:1E:9D:CF:C5:2D:71:1F:3C:07:4E
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       4728C23360BF975196386373D2AE159A70FB52D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number:          0452
Signing time:             Sat 14 Nov 2026 22:47:08 +0000
Manifest this update:     Sat 14 Nov 2026 22:42:08 +0000
Manifest next update:     Mon 16 Nov 2026 01:31:08 +0000
Files and hashes:         1: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: L9N61GZrgQ5virt2qFxgsc/JOkknEDcdSanMcULWk5s=)
                          2: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: IWxDGwnCe47DwB/QE0frhiu04YnzGfcmOau8r6CSuq0=)
                          3: 352e3137382e3132342e302f32342d3234203d3e203431373230.roa (hash: denS4ShosQEflOOKSOFKHIlQq2P37gUifSSYnpY0oi4=)
                          4: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: 5bbIRsdAjK7srHufZ+Dw+kesoYz11+KIuBbiQq0S3J0=)
                          5: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=)
                          6: 3138352e3133302e38382e302f32342d3234203d3e203431373230.roa (hash: Q6SwM6coh0lhmv2Gg85VRe+9HM4FBsO6keE2v7Y1R3c=)
                          7: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: c/O7QOCGP6dZWdMg85nw8EMYpXMSqcsPpnlxKsXEJxg=)
                          8: 352e3137382e3132352e302f32342d3234203d3e203431373230.roa (hash: 2wW5t36NJMTXW3Jrvo3pMIkucCLejHza7QPvifnreNo=)
                          9: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: ivRYcKVBavH9t8GiJ9N3cjwe45NnnX0wNJoN9vaUIQU=)
                          10: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
                          11: 3138352e32312e3132392e302f32342d3234203d3e203431373230.roa (hash: X00xehiC09J74nSsF8Ko+/NFcQ+tlis5g8MfH1Xa6kg=)
                          12: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: KmE4Ra4RNXxBeAk9rV4T92zm3sto8pmIbD9YJoj2hJY=)
                          13: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: srrAE4PnG7Smy0Hyw6ZLJcjBNnqLRb+bmWYGj/WYI2E=)
                          14: 326130643a623238373a646464643a3a2f34382d3438203d3e20323139333038.roa (hash: lhnf24+d+KsCQOPaVipDtlRXOcDvUPxkqrOPn+C77uU=)
                          15: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: gf5b8NhF0zR0RYc46WS4uCNmpBmFubnVS7Fe41WKmKs=)
                          16: 34352e3134362e352e302f32342d3234203d3e203431373230.roa (hash: /A+vKWQmGHFkxgp4vYuvNcELZtcoJ1pL9jVDE0PN8VU=)
                          17: AS41720.asa (hash: MwLliTX8n57WMFW6o6NS6fwel9rD3ohuAmiMMy87fZg=)
                          18: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: /uaMgihPC3IleOA8rrRxlWBDKgcrHemqwt+82sssPAU=)
                          19: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: I/iO3YAfj293FmGBTRLAPscviIPgQbl+nLgu16ZbM5M=)
                          20: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: KGBdO03qyyafMOxo4U+d/wPS0xbGpENnx76PaW6XZ3w=)
                          21: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
                          22: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: ifGbyk4k2bpgbow5CdzQuCwq86Vy68DDUjPqYUmAwZI=)
                          23: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
                          24: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
                          25: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: qIVbCWoUWEg+tQzWZWbmyLK7nIDIg61oUBuCCXXfkHs=)
                          26: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: noOpptHyYahGYRczsInCwYjuMyS1afxmOWJs2YpvAT0=)
                          27: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: stUKzxp9FSabLqBbmp/31UHFmp2ltgPOF6jMIp4guIM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:28:c2:33:60:bf:97:51:96:38:63:73:d2:ae:15:9a:70:fb:52:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Nov 14 22:42:08 2026 GMT
            Not After : Nov 16 01:31:08 2026 GMT
        Subject: CN=1D0F127A47EBDCCF8F951E9DCFC52D711F3C074E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:47:81:90:cc:7d:3f:29:6c:14:3f:e2:e2:
                    b8:cd:ef:1f:f1:41:64:a1:cf:e1:69:fd:2c:8c:95:
                    e6:47:7e:ad:83:be:56:64:71:7a:e0:94:5b:a3:12:
                    38:79:ae:f8:b4:a9:9d:3c:07:7d:06:ad:e2:9f:cc:
                    4f:82:ae:e6:7d:6a:7c:0b:ed:16:d0:54:a4:b6:e7:
                    97:85:0b:ab:a2:98:76:05:e1:3d:67:ff:74:02:8d:
                    06:17:1e:9a:50:b3:22:a1:a1:56:6f:ad:93:02:2d:
                    9c:b3:6c:ac:36:e0:38:17:a7:20:8c:04:c9:5e:c9:
                    14:ab:f7:45:9a:80:1c:ac:f8:35:ad:33:28:55:23:
                    08:c2:3c:4d:b8:3c:25:bc:fd:ee:a7:8a:b5:2c:5c:
                    50:96:83:b0:e5:c9:7a:4a:11:3d:2c:1f:4c:eb:19:
                    8e:b5:84:a2:4d:c8:37:09:5c:9a:b4:70:b5:c4:34:
                    d6:b2:7c:e2:17:43:73:16:8b:a9:5c:42:7f:24:6f:
                    b4:82:8e:7a:df:97:95:01:ac:7c:f1:cb:06:08:b1:
                    98:59:cd:41:41:11:78:eb:b5:73:7e:6f:12:29:87:
                    bb:cb:1f:f2:7e:af:eb:59:49:f4:31:77:c1:a6:9f:
                    42:bb:b4:92:90:3a:d6:97:2b:a6:20:f9:56:21:39:
                    90:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0F:12:7A:47:EB:DC:CF:8F:95:1E:9D:CF:C5:2D:71:1F:3C:07:4E
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a8:25:b3:39:5e:4c:12:84:05:c3:d9:a0:e5:0a:e8:80:a9:
         8d:f0:c8:fa:bc:92:9f:25:e6:bf:2c:0d:0f:c4:97:d5:ea:9f:
         73:64:b9:a4:c1:ae:46:f2:b0:50:8b:05:c0:35:6d:3a:0e:e5:
         64:eb:5e:09:4f:35:6e:4c:04:4c:2f:6e:cf:6a:a6:78:cb:f9:
         f2:3b:fd:65:2f:ad:ab:47:7c:f6:0f:39:e8:f8:3d:b5:44:97:
         cf:e2:cf:86:1b:62:fe:42:02:d2:fb:a1:3d:31:08:2d:11:5c:
         f1:cc:62:9b:c7:cf:60:11:7d:aa:66:da:fb:1a:63:78:c7:b0:
         a3:0a:b7:31:ab:7d:34:06:c4:70:eb:2a:c1:2c:f6:c0:26:23:
         0d:20:53:47:ac:d9:7a:70:16:dc:66:c8:81:82:4f:76:8a:9c:
         63:54:de:eb:9b:d5:b3:65:5c:1d:ab:1b:f7:ee:8a:bc:f6:5d:
         e0:e4:78:44:a2:7e:ff:e2:3b:df:ff:b9:ef:8b:d9:eb:f9:b9:
         f4:c6:74:cf:cf:d8:de:be:9a:e7:a6:ab:b2:3d:2f:ba:0b:eb:
         86:3b:a9:3c:79:10:d4:44:3e:95:61:17:e0:88:fd:b2:d0:fa:
         f4:35:91:8b:c4:46:e7:bb:66:1f:85:79:4a:1f:a6:79:d3:07:
         e1:e3:3b:d5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIURyjCM2C/l1GWOGNz0q4VmnD7UtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5
N2I2ZjQ5MTAeFw0yNjExMTQyMjQyMDhaFw0yNjExMTYwMTMxMDhaMDMxMTAvBgNV
BAMTKDFEMEYxMjdBNDdFQkRDQ0Y4Rjk1MUU5RENGQzUyRDcxMUYzQzA3NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDHkeBkMx9PylsFD/i4rjN7x/x
QWShz+Fp/SyMleZHfq2DvlZkcXrglFujEjh5rvi0qZ08B30GreKfzE+CruZ9anwL
7RbQVKS255eFC6uimHYF4T1n/3QCjQYXHppQsyKhoVZvrZMCLZyzbKw24DgXpyCM
BMleyRSr90WagBys+DWtMyhVIwjCPE24PCW8/e6nirUsXFCWg7DlyXpKET0sH0zr
GY61hKJNyDcJXJq0cLXENNayfOIXQ3MWi6lcQn8kb7SCjnrfl5UBrHzxywYIsZhZ
zUFBEXjrtXN+bxIph7vLH/J+r+tZSfQxd8Gmn0K7tJKQOtaXK6Yg+VYhOZCvAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUHQ8Sekfr3M+PlR6dz8UtcR88B04wHwYDVR0j
BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz
MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl
MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02
MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB
QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaglszleTBKEBcPZoOUK
6ICpjfDI+rySnyXmvywND8SX1eqfc2S5pMGuRvKwUIsFwDVtOg7lZOteCU81bkwE
TC9uz2qmeMv58jv9ZS+tq0d89g856Pg9tUSXz+LPhhti/kIC0vuhPTEILRFc8cxi
m8fPYBF9qmba+xpjeMewowq3Mat9NAbEcOsqwSz2wCYjDSBTR6zZenAW3GbIgYJP
doqcY1Te65vVs2VcHasb9+6KvPZd4OR4RKJ+/+I73/+574vZ6/m59MZ0z8/Y3r6a
56arsj0vugvrhjupPHkQ1EQ+lWEX4Ij9stD69DWRi8RG57tmH4V5Sh+medMH4eM7
1Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 09:00:02 2026 by rpki-client