Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
File:                     88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft (raw, json)
Hash identifier:          KjNih20xAvXpPM4rdVP6sDfd/jBZDUjnfxJwaozcMs4=
Subject key identifier:   21:49:9A:5C:3C:96:11:86:46:2F:20:99:66:C4:3C:37:77:79:53:EC
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Certificate issuer:       /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial:       01C5A3FBE3E7141FEC0F9C3CDBC71E56367A0A34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
Manifest number:          D7
Signing time:             Sat 14 Jun 2025 09:57:53 +0000
Manifest this update:     Sat 14 Jun 2025 09:52:53 +0000
Manifest next update:     Sun 15 Jun 2025 12:11:53 +0000
Files and hashes:         1: AS213920.roa (hash: SsXJk+5pb7fa/aEsE0biEpH+yyLPEB4EDES7zyN2qYc=)
                          2: AS395374.roa (hash: Q8VXOgZ/iE9Ft40c254bcr8PhN3HpqaUFCtET4xzn4g=)
                          3: AS214432.roa (hash: C0aiAq6iaZCyR6QFjVMfW/jdqi+7gfg47+EvGQvYlLY=)
                          4: AS214480.roa (hash: +tLlkJX9O7ImnzpbGSEtns1p3+F9hEqv48uYjfvo+AQ=)
                          5: AS212238.roa (hash: bLkgjRELibA0OJ0Lt1NEcLUyWuEVSwJjpL1mBdi+2nw=)
                          6: AS151338.roa (hash: JNvlKTvJ3O/dkgN7ngQ8Pu4bkR1CabRaG3t7fj8as6g=)
                          7: AS208483.roa (hash: PxkJsJcPmC/IQ4JlTHnYUwiqGSWMUsbORj3IUMsLD2g=)
                          8: AS9318.roa (hash: Og69YisFRF1EXwcOiFhduTJ79QHToaeqCFkMcp1zgHg=)
                          9: AS59432.roa (hash: 5qa5JICmf48fZc7jaUQkoITVc16qJyQDbRHC/o62M6U=)
                          10: AS208723.roa (hash: 5GrjtrMyueofALoPzEHgcn/cSCTKc5Atq6JF9hwgKAA=)
                          11: AS21840.roa (hash: sm283FdUZVSS0Bu+ctlY6bDaO1Rj4pqPUu8taC5eTtQ=)
                          12: AS31715.roa (hash: eB4uB4NPX/DsOTm8IJTZVuwEoVKppN/w2j4ggKSRcgA=)
                          13: AS393942.roa (hash: p9GOtVy++A2q5kSjzpq3wZLSb2KORXZijNYbn25PmlU=)
                          14: AS212335.roa (hash: qhYhktIZCmfpLOtkVUngznzfHAdkSzmJyj8dJlRkG6o=)
                          15: AS39521.roa (hash: mnIflMATOx7mU4oL2MvfRF8TZ1mgYnyC25kBCxBwWds=)
                          16: AS47585.roa (hash: +x3+7/pcTExM/b2AtHnI45cYBSOFsWdoKLxc6DnYuB8=)
                          17: AS9304.roa (hash: O0+V1OIsW3V2FS2xNgQspwDWmuQWQ8AfKX1Yuljvp4I=)
                          18: AS5065.roa (hash: gubMEoMisqwsrRn6KyTgtiBHHGdivNxbI3yyeaU7b7A=)
                          19: 88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl (hash: sZMiRPAO/YMHlLCEn93EhkJ9K/tN+7mmRMHwU/6xElY=)
                          20: AS214677.roa (hash: 037N2vQC+VFVM4gEL77rL1zWJJOwaXorKJKnVW7XCS0=)
                          21: AS137517.roa (hash: fGM+FGmMUhYIWL1WeL3N3USPeu6lHRd3Jqd9/L5vVls=)
                          22: AS7979.roa (hash: YfGqN0hexz69isKJBUv02z26yjAxnbOWwIySLNdrspg=)
                          23: AS36231.roa (hash: BGpB3H7Wg9pZ9PnT3MRt0MYMrP/gOmqE9i+JxF7hous=)
                          24: AS400556.roa (hash: 5YV4sAxP0em0ZHou9UzQGu7n5p7UYDsUJiyfGNd7s3w=)
                          25: AS207769.roa (hash: pTEfVdqHW17+XaxTKCHacEQ86NbxdXA2z+W29MPynbE=)
                          26: AS136501.roa (hash: WHoAArKL0txITLsERN8nK9QgIsu59FqOzWoY8PFwGgE=)
                          27: AS137235.roa (hash: PFUVGN+YWaaG+pLEy3vd77vb+rUuoNdy9d7QZAbFXGw=)
                          28: AS22427.roa (hash: WGQlt1HGMAXEzrMT/CJuEE4vErDycmXeLhJC47dGWAs=)
                          29: AS29802.roa (hash: UoV+5ykTEt2+CZHRSl1jhM922nJ2D+Uvu8oWawi9ork=)
                          30: AS834.roa (hash: 5JGPPG5wcUClvVs9AFw4ey24SSiha4Ld3SysO/tnnrA=)
                          31: AS138195.roa (hash: o/PfKQP6n/ZYzwwrd6I8pHU9ioxc8AOGAUqs+SQrbUM=)
                          32: AS399827.roa (hash: GijWsCeMyGdtkGMwgc2EvSrTKqsOUWCgM2lw0sxShnI=)
                          33: AS135402.roa (hash: yZgqSGaYqFhwHdINCswpuX7RDphL/xafzB3sTqmcNog=)
                          34: AS135391.roa (hash: e941zz45uf2DBp6yKVF6A1yjpROs+E0Gbmv6m1XPWHI=)
                          35: AS200950.roa (hash: 66G8p9Gpw1IBQ5DjDvlWjQAcpAOY9CQ987pvw6ahm8c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c5:a3:fb:e3:e7:14:1f:ec:0f:9c:3c:db:c7:1e:56:36:7a:0a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
        Validity
            Not Before: Jun 14 09:52:53 2025 GMT
            Not After : Jun 15 12:11:53 2025 GMT
        Subject: CN=21499A5C3C961186462F209966C43C37777953EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:9d:e8:fe:d0:c5:5a:c4:1b:d1:eb:6c:24:
                    d3:d2:11:38:84:5f:a5:fd:a7:18:c1:b7:02:9f:05:
                    44:7d:77:2f:c9:a2:ef:0b:2d:02:cf:f4:81:78:5d:
                    4c:76:9d:b6:b4:8a:d1:d4:14:ca:95:02:45:36:c4:
                    2b:47:22:05:e5:2d:9f:af:89:5b:95:d5:17:d7:a4:
                    15:06:06:6f:7c:d1:d5:d2:92:4f:87:4c:de:e3:72:
                    4d:4f:ee:fc:dd:8c:0c:08:c8:d5:e4:50:f6:4f:2f:
                    7b:cc:02:4b:51:22:25:dc:f3:2d:3b:da:08:bc:04:
                    39:b6:f3:77:9c:16:8b:9f:00:9d:ec:20:b7:67:85:
                    6d:ca:73:dc:b6:8b:4c:e4:c7:34:9f:09:f6:b1:c3:
                    90:47:dd:70:bf:ad:61:3f:2c:c0:a7:55:fc:10:59:
                    b2:18:77:c4:f9:34:38:b5:a0:38:ba:d9:e5:7c:48:
                    8d:e3:db:2d:42:a7:bc:5d:47:bf:31:ef:1a:e6:61:
                    02:cc:a4:f3:ee:bf:f7:d4:c5:7f:36:27:41:b1:1d:
                    fe:84:e7:8a:03:b8:99:75:be:ff:89:9a:38:c5:ad:
                    53:89:69:1d:1e:22:00:75:83:9d:3a:23:c2:8a:b0:
                    d1:ba:0f:bb:de:d7:0e:4c:c2:4e:4c:e4:21:66:59:
                    a0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:49:9A:5C:3C:96:11:86:46:2F:20:99:66:C4:3C:37:77:79:53:EC
            X509v3 Authority Key Identifier:
                keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f8:a0:81:10:1c:67:9e:85:3f:13:5b:c1:fc:7a:e0:b1:2b:
         a4:5c:93:11:e4:5a:a4:a1:09:2a:1e:7c:fd:8e:1b:fb:7a:de:
         ad:ca:bf:4b:8f:d5:08:ab:8c:46:f8:a3:75:0a:3a:63:9e:16:
         1b:18:22:2d:c1:f0:9b:64:67:fc:c6:61:6d:85:1b:10:73:d5:
         86:7a:ea:97:9b:83:75:d8:af:df:87:e0:f5:0a:df:4f:f7:76:
         e3:91:ba:45:39:99:94:a8:a8:1f:32:37:98:bf:2d:ad:c3:fe:
         6a:b1:4f:3b:64:7a:25:9d:14:fd:c8:5b:41:9d:27:73:16:61:
         b8:66:04:03:66:f6:fe:34:78:02:04:3c:12:53:51:d6:bc:fd:
         37:9e:1f:12:66:f2:85:44:83:b1:07:73:53:74:c9:1e:e4:eb:
         a8:3e:af:78:80:03:9e:4a:d1:e7:ab:38:17:8e:2b:a2:24:d4:
         02:0c:4f:4b:d1:c0:2b:38:4f:6c:f9:d2:e4:65:2a:11:56:63:
         3f:ec:ed:af:50:66:2a:30:08:e4:54:cf:50:3f:73:54:79:d0:
         e2:fe:c7:e5:b1:62:4e:4c:5b:28:db:8a:a5:88:66:cc:41:21:
         dc:bb:f8:28:71:93:5a:6a:25:28:5e:01:c0:a4:e7:1f:18:3d:
         c3:df:58:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:33:40 2025 by rpki-client