Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File:                     88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier:          DcC0aP/YLEEPRj0HRAh3n6+qdht1ymjWWTSJdVRC4pg=
Subject key identifier:   26:93:CC:06:02:D5:08:83:C2:BA:AE:B6:37:B5:AC:44:54:F7:0E:6A
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       7DC4B5322CD1869D64333FAD86F308CE219F32B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number:          018B
Signing time:             Sat 14 Jun 2025 15:21:45 +0000
Manifest this update:     Sat 14 Jun 2025 15:16:45 +0000
Manifest next update:     Sun 15 Jun 2025 15:30:45 +0000
Files and hashes:         1: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: WtqgmDwc3f4nCSOQ8ixLkNx8sXt7FaBWfi7I6des1c8=)
                          2: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=)
                          3: AS41720.asa (hash: +RbH8buX1T5kTWMGsS+k2hctRH6+R8V1cu3+Qe3+/Rs=)
                          4: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: sx/iVfyDskrQoK42os+6TyQoUVUvVUXlGN9RH2id0Fo=)
                          5: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: YrKMLBs8xCiL955bvB/8G11UYsLmajFWAxqi9VeJEB4=)
                          6: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=)
                          7: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: GLrga7I6TmqAcqHZCyQLyo7wEkxzFEUlvkIYE9Jlscs=)
                          8: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=)
                          9: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: Wm3IDAOfkV81JSuZK/Na7XnsHjZUJzGcxe64BY1WIhs=)
                          10: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: pyzsZjErsKF/r6TDE4GaASJZY8jmD+uruFgv90V9cVg=)
                          11: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: bYPPd9HcHavTcfcGpM+ulmmDEDFMIVr0C3fR7prPNz4=)
                          12: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=)
                          13: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: iavCedfpEd5k0rIG/kL5F/xxOAMPmZq43N15rLvPbic=)
                          14: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: 5lNL9wmLDlet0KrRB5Z2lMcDOBbA6gqsqoS0zWeKarw=)
                          15: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: oqjFz5lxyWXqgWH6mcCZ5kY8GY7vdU5L5aIOZkwfdwk=)
                          16: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: o5Ji9Nl0S0iVZZtmrV/Dia6lTq3wC3uyRf91AZlTL/E=)
                          17: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=)
                          18: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: ZkXNpKW61UGEN6+3Eq/nkumIj3yuGpDt69ocmobqC/8=)
                          19: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: Qv46t81qHTc4uf1Bxldy1f/G+l9sAnh7axBU+G8+9tQ=)
                          20: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: 9fvE/EKZJ0AUA6jRvgotTKUfh3uMQWCtvLablu7TiLY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c4:b5:32:2c:d1:86:9d:64:33:3f:ad:86:f3:08:ce:21:9f:32:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Jun 14 15:16:45 2025 GMT
            Not After : Jun 15 15:30:45 2025 GMT
        Subject: CN=2693CC0602D50883C2BAAEB637B5AC4454F70E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:0a:39:46:91:e2:3e:94:b8:cd:ea:cc:31:
                    b2:74:8d:a2:a0:28:62:03:ab:8c:71:ca:b8:b6:fb:
                    0c:40:67:8a:a5:59:75:09:d0:44:a8:a8:a6:52:a5:
                    d3:69:60:29:94:05:ac:54:ec:1b:f2:0f:66:63:37:
                    fa:2c:4a:36:e9:08:58:bc:07:2e:f5:f4:73:6b:54:
                    b7:c9:a8:d3:93:f9:d4:72:0d:b9:d0:d6:04:71:4d:
                    a5:87:f2:e4:c1:83:aa:0c:93:c6:00:a1:b1:15:68:
                    32:9b:2b:5d:36:88:f3:ba:37:0b:c8:9f:53:94:af:
                    45:4a:54:cf:3b:c0:21:0e:eb:4c:f0:1c:2a:d2:ea:
                    3c:af:11:63:b4:55:e0:fd:b5:73:3f:19:f2:38:03:
                    39:a1:3a:00:c0:44:95:91:ec:54:7f:89:07:48:d8:
                    29:6f:6e:75:04:b9:4c:f2:98:f7:7f:78:28:4c:43:
                    1c:69:ad:c1:15:22:88:8f:b1:20:30:1e:03:24:6a:
                    95:ee:f5:44:a3:d3:50:17:fd:b3:bb:20:7f:a7:55:
                    a9:6b:bb:04:cb:57:f6:03:30:1f:00:b6:8d:88:9d:
                    a6:a2:c3:81:9e:37:cb:88:f5:54:b5:a3:1d:3a:6e:
                    55:15:18:48:4a:23:1e:be:60:00:42:8d:79:19:55:
                    39:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:93:CC:06:02:D5:08:83:C2:BA:AE:B6:37:B5:AC:44:54:F7:0E:6A
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9b:19:4e:d5:27:5a:b9:ae:6d:e2:9c:e1:3a:ab:90:62:8d:
         65:81:b8:1c:6a:27:65:e5:c5:a2:88:08:bc:bf:1c:2e:07:74:
         9a:8e:ee:ae:48:6a:b5:17:1f:b1:c7:0d:21:10:1f:31:d1:97:
         d3:6c:95:91:2a:a4:d4:cb:5d:e8:47:66:34:0a:c1:96:b1:7d:
         9a:3b:9d:79:b5:dc:d5:4c:23:04:87:44:7f:99:e5:7b:85:f7:
         37:df:d1:18:35:f5:db:3b:df:32:b7:f6:0e:13:fe:1a:20:bf:
         68:14:a8:1e:09:00:5f:1f:41:be:4e:a6:ee:29:9d:da:97:00:
         97:21:db:34:a8:d1:fd:6d:c7:f6:ae:b3:e1:8c:45:24:ca:9f:
         6d:9c:10:39:0a:b9:dc:95:ea:6a:06:f3:08:45:a5:3f:a5:38:
         19:5f:8d:2c:1e:42:26:51:ea:19:09:d5:2d:3a:22:27:4c:e2:
         76:c3:a7:5e:51:9d:02:a1:9f:64:d9:fc:e0:f1:f5:be:75:d2:
         2c:b4:86:94:9e:93:10:88:4c:72:10:a7:79:5a:6d:ee:8f:7b:
         e4:15:b1:5c:a0:70:4e:7c:94:17:fe:61:20:d0:78:e7:d3:c4:
         fc:bf:e6:30:cc:20:f5:62:dd:48:17:15:12:e4:fa:f8:55:eb:
         c2:bb:d4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:59 2025 by rpki-client