Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File:                     88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier:          8rUPFz2uyTt0iE5jOhQdC4mzieqh1KlPvw6EbDfkhv0=
Subject key identifier:   36:2D:C8:31:66:E2:CE:81:B7:55:D9:B0:02:76:A1:91:68:72:86:75
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       5711E0BF87B6883E955EDD7D1E15954E178338B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number:          03B5
Signing time:             Thu 23 Jul 2026 01:35:06 +0000
Manifest this update:     Thu 23 Jul 2026 01:30:06 +0000
Manifest next update:     Fri 24 Jul 2026 02:54:06 +0000
Files and hashes:         1: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=)
                          2: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: /uaMgihPC3IleOA8rrRxlWBDKgcrHemqwt+82sssPAU=)
                          3: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: IWxDGwnCe47DwB/QE0frhiu04YnzGfcmOau8r6CSuq0=)
                          4: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
                          5: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: noOpptHyYahGYRczsInCwYjuMyS1afxmOWJs2YpvAT0=)
                          6: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
                          7: 3138352e32312e3132392e302f32342d3234203d3e203431373230.roa (hash: X00xehiC09J74nSsF8Ko+/NFcQ+tlis5g8MfH1Xa6kg=)
                          8: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
                          9: AS41720.asa (hash: MwLliTX8n57WMFW6o6NS6fwel9rD3ohuAmiMMy87fZg=)
                          10: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: I/iO3YAfj293FmGBTRLAPscviIPgQbl+nLgu16ZbM5M=)
                          11: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: c/O7QOCGP6dZWdMg85nw8EMYpXMSqcsPpnlxKsXEJxg=)
                          12: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=)
                          13: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
                          14: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: ivRYcKVBavH9t8GiJ9N3cjwe45NnnX0wNJoN9vaUIQU=)
                          15: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: gf5b8NhF0zR0RYc46WS4uCNmpBmFubnVS7Fe41WKmKs=)
                          16: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: 5bbIRsdAjK7srHufZ+Dw+kesoYz11+KIuBbiQq0S3J0=)
                          17: 34352e3134362e352e302f32342d3234203d3e203431373230.roa (hash: /A+vKWQmGHFkxgp4vYuvNcELZtcoJ1pL9jVDE0PN8VU=)
                          18: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=)
                          19: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
                          20: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: srrAE4PnG7Smy0Hyw6ZLJcjBNnqLRb+bmWYGj/WYI2E=)
                          21: 3138352e3133302e38382e302f32342d3234203d3e203431373230.roa (hash: Q6SwM6coh0lhmv2Gg85VRe+9HM4FBsO6keE2v7Y1R3c=)
                          22: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
                          23: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
                          24: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: r7mFh2iePa1r3mFDWy3fYDWa1eYq0A9r/dh1LJHnjok=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 02:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:11:e0:bf:87:b6:88:3e:95:5e:dd:7d:1e:15:95:4e:17:83:38:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Jul 23 01:30:06 2026 GMT
            Not After : Jul 24 02:54:06 2026 GMT
        Subject: CN=362DC83166E2CE81B755D9B00276A19168728675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:78:3a:6e:d9:d3:6e:e2:99:64:fa:a0:5a:f3:
                    d1:83:cc:1b:17:ea:63:f6:f9:48:4a:11:85:69:fc:
                    d6:52:59:68:91:33:b4:ab:79:cd:fd:33:28:fc:9c:
                    a5:6c:45:ef:a5:ed:25:11:dd:be:ce:db:f1:66:c4:
                    26:4c:d5:d3:2f:26:3b:46:95:81:59:92:50:72:42:
                    48:ab:f7:cb:a2:25:7a:ff:22:69:75:87:52:34:99:
                    8b:7e:46:d3:f5:0c:70:41:fa:41:dc:d6:f3:6e:b3:
                    91:37:e1:5c:3c:7b:f8:2f:10:26:15:e6:48:86:30:
                    b5:a7:d0:98:2e:f4:b1:7a:cb:7e:c0:8b:c5:79:92:
                    bd:a8:bd:7f:ae:06:87:3c:59:14:8f:ed:55:7d:f4:
                    01:56:0b:c4:e4:51:7b:72:46:c1:fd:3b:fc:23:f5:
                    44:9f:35:b5:bb:92:9c:0b:65:4f:7c:54:a7:31:e4:
                    af:77:b6:6a:8b:31:8c:ab:eb:93:82:65:ec:1c:82:
                    7d:3f:0f:ab:e8:65:b7:0b:97:ed:a4:e3:df:36:1e:
                    58:c0:bf:5e:db:33:5e:c8:b6:a9:08:25:4c:ac:10:
                    75:ce:23:26:47:3e:aa:cb:89:48:b8:44:f8:22:7b:
                    06:40:82:aa:8f:05:6e:a4:63:23:52:dd:52:6a:c9:
                    1d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2D:C8:31:66:E2:CE:81:B7:55:D9:B0:02:76:A1:91:68:72:86:75
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:6c:d9:e1:0d:d5:fd:cd:33:90:ec:6a:eb:8a:b8:b5:0c:82:
         4f:91:fc:74:12:6c:36:49:c5:47:27:57:f7:27:d1:8e:0f:e4:
         b9:ba:0f:ba:21:a2:4a:bb:19:19:66:87:19:5f:ee:97:94:ac:
         e5:bc:88:66:b2:0e:ee:f9:49:9d:be:2e:4b:cf:1e:16:c2:aa:
         78:57:87:a8:5a:23:bf:43:42:73:02:be:28:3e:cf:4b:04:62:
         e0:36:10:36:67:3e:54:46:e8:1a:07:26:38:ce:c3:bc:1f:90:
         a2:f7:c0:2c:27:bf:60:2c:83:00:5d:ed:6a:b1:e5:ec:3c:78:
         0c:34:71:eb:3a:1c:98:e3:eb:03:f9:aa:e1:a4:36:d0:6d:c0:
         31:f1:e0:07:6d:1e:07:f0:da:27:96:d7:b4:75:23:ab:3e:6f:
         81:c6:fa:cd:9b:8c:43:11:23:87:28:e4:97:78:91:28:0b:8d:
         83:09:71:c2:57:eb:67:46:ca:7d:25:0c:a4:41:1f:9f:be:0d:
         70:ee:f6:2a:fd:1f:fc:65:76:bc:15:75:41:5a:c5:ad:2c:2b:
         67:ab:1c:fd:51:47:61:a9:bc:8d:5c:52:33:0f:9d:56:36:93:
         05:29:f6:e8:fb:8f:72:4d:1a:f7:0e:b5:82:3b:1c:da:81:ea:
         0d:f9:1f:69
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUVxHgv4e2iD6VXt19HhWVTheDOLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5
N2I2ZjQ5MTAeFw0yNjA3MjMwMTMwMDZaFw0yNjA3MjQwMjU0MDZaMDMxMTAvBgNV
BAMTKDM2MkRDODMxNjZFMkNFODFCNzU1RDlCMDAyNzZBMTkxNjg3Mjg2NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDieDpu2dNu4plk+qBa89GDzBsX
6mP2+UhKEYVp/NZSWWiRM7Srec39Myj8nKVsRe+l7SUR3b7O2/FmxCZM1dMvJjtG
lYFZklByQkir98uiJXr/Iml1h1I0mYt+RtP1DHBB+kHc1vNus5E34Vw8e/gvECYV
5kiGMLWn0Jgu9LF6y37Ai8V5kr2ovX+uBoc8WRSP7VV99AFWC8TkUXtyRsH9O/wj
9USfNbW7kpwLZU98VKcx5K93tmqLMYyr65OCZewcgn0/D6voZbcLl+2k4982HljA
v17bM17ItqkIJUysEHXOIyZHPqrLiUi4RPgiewZAgqqPBW6kYyNS3VJqyR29AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUNi3IMWbizoG3VdmwAnahkWhyhnUwHwYDVR0j
BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz
MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl
MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02
MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB
QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGzZ4Q3V/c0zkOxq64q4
tQyCT5H8dBJsNknFRydX9yfRjg/kuboPuiGiSrsZGWaHGV/ul5Ss5byIZrIO7vlJ
nb4uS88eFsKqeFeHqFojv0NCcwK+KD7PSwRi4DYQNmc+VEboGgcmOM7DvB+QovfA
LCe/YCyDAF3tarHl7Dx4DDRx6zocmOPrA/mq4aQ20G3AMfHgB20eB/DaJ5bXtHUj
qz5vgcb6zZuMQxEjhyjkl3iRKAuNgwlxwlfrZ0bKfSUMpEEfn74NcO72Kv0f/GV2
vBV1QVrFrSwrZ6sc/VFHYam8jVxSMw+dVjaTBSn26PuPck0a9w61gjsc2oHqDfkf
aQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:52 2026 by rpki-client