Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File:                     88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier:          n3IMWEzQQMrhLmyj0g9pfmdwnFdgdwFexFSEmYOmrAY=
Subject key identifier:   9B:F4:14:7B:38:BA:7F:B6:89:76:33:7F:99:10:75:45:9D:81:27:94
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       4EF20BE7079519ABA352CD863C93AF17EE89E531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number:          0237
Signing time:             Sun 19 Oct 2025 05:18:43 +0000
Manifest this update:     Sun 19 Oct 2025 05:13:43 +0000
Manifest next update:     Mon 20 Oct 2025 08:52:43 +0000
Files and hashes:         1: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=)
                          2: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=)
                          3: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: rHhBb1bMQectXohqdqgX13X6ENYXH/z7I15ReI0F4QU=)
                          4: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=)
                          5: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=)
                          6: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=)
                          7: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=)
                          8: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=)
                          9: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: bYPPd9HcHavTcfcGpM+ulmmDEDFMIVr0C3fR7prPNz4=)
                          10: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=)
                          11: AS41720.asa (hash: R9jFblFZaPwUK6Huk1SWnasBO6ka9sffBE6ldnurUoM=)
                          12: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: o5Ji9Nl0S0iVZZtmrV/Dia6lTq3wC3uyRf91AZlTL/E=)
                          13: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=)
                          14: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=)
                          15: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=)
                          16: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=)
                          17: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=)
                          18: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: XkY+CZRB6z8hYjbh5i8XlmIyXGdOxjmUp3N4jZFkIDk=)
                          19: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=)
                          20: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=)
                          21: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: GOCABvoqojF3U9p5UEyXVqmO5f+8/wyeekfdSPGqQRY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f2:0b:e7:07:95:19:ab:a3:52:cd:86:3c:93:af:17:ee:89:e5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Oct 19 05:13:43 2025 GMT
            Not After : Oct 20 08:52:43 2025 GMT
        Subject: CN=9BF4147B38BA7FB68976337F991075459D812794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:53:ef:a8:d5:8d:ae:32:8a:c6:72:5e:5a:
                    3b:42:e0:39:ec:7b:27:92:df:19:24:8f:48:f0:9f:
                    1b:77:bd:4a:b7:a6:ad:a5:a1:a7:14:1b:ff:1b:9d:
                    cc:1e:bb:b5:f0:5d:aa:a2:c0:ca:39:4b:f6:63:63:
                    7e:45:47:88:cb:33:8c:75:39:72:ec:92:7b:2b:e2:
                    22:87:cf:e4:ca:b6:c4:9d:bc:55:04:bb:ab:2e:31:
                    99:52:52:d6:16:78:86:91:1c:1a:c2:6f:57:f5:15:
                    b3:91:05:04:e6:ca:35:56:36:01:bf:6c:d7:79:0c:
                    d4:13:92:fb:75:4c:be:7b:d4:3d:62:cc:1d:88:a6:
                    22:00:f4:12:d6:2b:5c:af:bc:a4:70:ee:a8:6b:87:
                    1c:5a:5f:2d:db:1e:12:6e:32:e7:09:ac:a6:39:ff:
                    89:65:f2:60:6b:f3:c2:ea:69:70:13:35:16:28:e1:
                    10:07:0f:24:51:67:65:bb:c4:8c:ad:e1:0c:c5:a1:
                    a9:54:ee:b3:f7:68:11:88:3e:12:33:f9:46:ed:48:
                    7c:b6:69:69:84:a1:c1:6f:d5:d7:21:02:98:3a:a9:
                    bf:05:c6:f1:e4:e7:0c:9b:26:b1:16:c9:6d:ff:1a:
                    e4:7c:3a:b8:22:69:6a:54:47:45:a8:26:03:c7:16:
                    ef:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F4:14:7B:38:BA:7F:B6:89:76:33:7F:99:10:75:45:9D:81:27:94
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:88:2d:34:d2:e3:2f:89:1f:f8:4b:86:fe:d6:cb:a2:5c:c0:
         fb:f2:30:c5:e5:9e:37:69:2c:39:32:f1:fd:e0:5f:08:ac:9a:
         d4:b1:af:02:db:fa:65:84:b6:e4:5f:24:cc:e7:fb:d5:76:a3:
         d9:98:57:a0:59:38:59:22:84:f7:63:63:dd:eb:74:b1:4b:8b:
         13:4d:34:b2:a1:f2:c0:29:19:61:24:44:83:b2:11:50:74:19:
         54:43:b6:f7:d4:04:45:34:d6:b7:4f:ba:d8:73:d9:09:3e:83:
         19:71:01:b4:f8:10:69:bb:5d:98:bb:20:49:32:e0:ad:c6:59:
         8e:ce:83:f7:d6:a2:9f:1d:42:29:d4:a9:2d:91:57:3a:d6:82:
         7c:f7:d8:3b:1f:c2:16:0c:34:15:70:cf:c9:d4:b4:0d:bd:85:
         d9:09:ac:0e:6f:48:2b:e0:00:fe:ec:a8:bc:0f:3d:1e:c1:56:
         a7:dc:2e:ee:fd:56:52:42:35:81:4d:22:6c:d6:9f:bd:85:47:
         e8:f8:1c:aa:bd:82:46:ec:bb:18:f6:87:5e:3a:d9:a5:fd:45:
         8d:6b:69:e7:c3:f5:16:dd:6c:13:81:f8:ff:22:b8:ad:49:50:
         10:b0:2e:6a:ae:4a:77:7e:db:1f:aa:fd:bf:13:61:e6:89:ab:
         60:b6:e5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:04 2025 by rpki-client