Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File:                     88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier:          Wz+wD4iLlcp0/RY/yJIx1p/RoPo5p6bEa/ennkxgVkg=
Subject key identifier:   D5:C4:F5:9A:57:53:D2:49:5F:D2:95:33:AA:73:D3:DF:4C:1F:DD:5D
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       1F05332F6F06242B173138142756A31F0C9BEA74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number:          037E
Signing time:             Sat 13 Jun 2026 00:44:32 +0000
Manifest this update:     Sat 13 Jun 2026 00:39:32 +0000
Manifest next update:     Sun 14 Jun 2026 04:24:32 +0000
Files and hashes:         1: 3138352e3133302e38382e302f32342d3234203d3e203431373230.roa (hash: Q6SwM6coh0lhmv2Gg85VRe+9HM4FBsO6keE2v7Y1R3c=)
                          2: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=)
                          3: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: IWxDGwnCe47DwB/QE0frhiu04YnzGfcmOau8r6CSuq0=)
                          4: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
                          5: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
                          6: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
                          7: 34352e3134362e352e302f32342d3234203d3e203431373230.roa (hash: /A+vKWQmGHFkxgp4vYuvNcELZtcoJ1pL9jVDE0PN8VU=)
                          8: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
                          9: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
                          10: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: c/O7QOCGP6dZWdMg85nw8EMYpXMSqcsPpnlxKsXEJxg=)
                          11: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=)
                          12: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
                          13: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=)
                          14: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=)
                          15: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=)
                          16: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
                          17: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=)
                          18: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=)
                          19: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: 9Tvzz7aVonm6/DKxMW0hmZqWkVNSBP+Az2DfsVxXIiA=)
                          20: AS41720.asa (hash: 4An44TkWkAj35xBt6Xef84p/tUjH5ZEGoqkH2/CZIMo=)
                          21: 3138352e32312e3132392e302f32342d3234203d3e203431373230.roa (hash: X00xehiC09J74nSsF8Ko+/NFcQ+tlis5g8MfH1Xa6kg=)
                          22: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=)
                          23: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=)
                          24: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:05:33:2f:6f:06:24:2b:17:31:38:14:27:56:a3:1f:0c:9b:ea:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Jun 13 00:39:32 2026 GMT
            Not After : Jun 14 04:24:32 2026 GMT
        Subject: CN=D5C4F59A5753D2495FD29533AA73D3DF4C1FDD5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6d:49:17:9f:7e:f4:cb:fd:50:38:f2:4c:e6:
                    5c:4e:53:57:61:94:0a:99:1f:22:f6:fb:83:51:4b:
                    c5:d8:6d:e8:a7:4f:53:99:3d:61:93:e5:05:f2:bf:
                    11:b5:65:5d:6b:9a:06:b1:dc:bf:4b:8b:a1:e4:7d:
                    db:b1:d3:c8:22:2c:ba:4e:46:c6:cc:ae:fe:d3:7f:
                    9c:38:9f:f3:5d:7c:6f:9d:67:83:3b:82:be:77:11:
                    03:0f:cd:bf:68:fc:05:78:84:93:6a:21:9e:24:97:
                    44:93:4d:98:f6:85:62:b0:3e:80:53:7d:48:39:16:
                    6c:39:69:62:9f:fd:16:4d:bf:eb:82:a7:7e:fb:44:
                    34:85:5e:ac:2c:ee:e7:d8:da:2d:cc:a4:d7:1b:69:
                    3e:c9:86:fc:9d:79:86:09:00:ea:0c:b8:74:3c:e7:
                    dd:c2:2c:a1:6b:72:1b:a3:27:88:38:ca:51:c4:fc:
                    73:be:71:82:cc:fc:40:61:9c:fa:0b:28:6d:fc:1d:
                    a6:21:1e:ae:31:6b:a8:eb:e3:19:07:52:85:6d:a1:
                    f5:8d:09:a9:33:e9:6a:cb:aa:b0:77:71:23:4c:d4:
                    98:95:17:12:ab:a1:5b:d1:4a:5d:cb:1d:d8:9f:26:
                    6c:f7:e0:ff:fa:98:7f:95:23:af:1d:73:d8:a8:81:
                    b3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C4:F5:9A:57:53:D2:49:5F:D2:95:33:AA:73:D3:DF:4C:1F:DD:5D
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:42:84:1e:9d:eb:d2:58:ba:41:6a:8b:a2:84:e7:13:f8:79:
         eb:ef:bb:d0:cc:3c:cb:b7:84:43:97:f9:f3:b7:51:22:82:ac:
         90:bf:9a:3d:ab:b6:57:de:ea:4f:5c:60:c2:d7:88:ea:cd:a0:
         ce:a0:ab:d6:1f:fd:a8:39:7d:b4:ae:f6:76:f3:1e:7d:db:1d:
         16:68:ed:04:7e:a7:66:a9:88:34:65:95:64:2d:ce:4e:f4:cf:
         00:e7:9c:4c:1a:35:4b:fb:bb:f6:a9:b7:72:c7:88:a1:1b:53:
         fa:1f:60:4b:20:d3:b0:f8:68:e6:b6:c8:d1:d2:d7:2c:2d:d9:
         d4:34:81:b1:11:c8:f9:ad:9b:6c:5b:da:d8:c9:35:59:8e:d6:
         fd:20:5f:59:62:fa:0f:fc:3a:b7:17:59:da:2b:37:74:4a:f8:
         15:99:6a:71:12:df:80:c7:c4:22:7a:23:94:d3:58:41:97:ec:
         a7:7b:36:1d:d3:16:0a:6d:a0:53:50:d2:a0:3b:0f:de:44:4a:
         44:1c:be:14:2f:f2:c9:19:c1:2d:81:82:3b:56:17:f2:13:5f:
         3d:0d:6c:50:5f:c7:ff:73:a9:96:9d:b1:0d:77:f2:12:26:26:
         b4:46:1b:4f:05:b1:3e:eb:34:a3:97:78:4a:79:1e:f4:0d:fe:
         b3:30:14:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:12:07 2026 by rpki-client