Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File:                     88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier:          ILXqXJ+yIAom4aE1tgzsRQaSsOqiCLcvaIqVL7do74M=
Subject key identifier:   98:79:17:05:05:9A:F9:B6:4F:BE:77:CF:C4:54:AA:1D:4E:10:9A:69
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       5D6CD92F94619B242588E790907FB212E512FB4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number:          0409
Signing time:             Tue 22 Sep 2026 08:50:55 +0000
Manifest this update:     Tue 22 Sep 2026 08:45:55 +0000
Manifest next update:     Wed 23 Sep 2026 11:26:55 +0000
Files and hashes:         1: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
                          2: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
                          3: 3138352e32312e3132392e302f32342d3234203d3e203431373230.roa (hash: X00xehiC09J74nSsF8Ko+/NFcQ+tlis5g8MfH1Xa6kg=)
                          4: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=)
                          5: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
                          6: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: uQe3kEDYin58sQfRZmzcdjfTwHOw3dLzT2xtd1llwzs=)
                          7: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
                          8: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: noOpptHyYahGYRczsInCwYjuMyS1afxmOWJs2YpvAT0=)
                          9: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
                          10: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
                          11: 34352e3134362e352e302f32342d3234203d3e203431373230.roa (hash: /A+vKWQmGHFkxgp4vYuvNcELZtcoJ1pL9jVDE0PN8VU=)
                          12: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: ivRYcKVBavH9t8GiJ9N3cjwe45NnnX0wNJoN9vaUIQU=)
                          13: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: IWxDGwnCe47DwB/QE0frhiu04YnzGfcmOau8r6CSuq0=)
                          14: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: I/iO3YAfj293FmGBTRLAPscviIPgQbl+nLgu16ZbM5M=)
                          15: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: gf5b8NhF0zR0RYc46WS4uCNmpBmFubnVS7Fe41WKmKs=)
                          16: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: c/O7QOCGP6dZWdMg85nw8EMYpXMSqcsPpnlxKsXEJxg=)
                          17: AS41720.asa (hash: MwLliTX8n57WMFW6o6NS6fwel9rD3ohuAmiMMy87fZg=)
                          18: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: /uaMgihPC3IleOA8rrRxlWBDKgcrHemqwt+82sssPAU=)
                          19: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: srrAE4PnG7Smy0Hyw6ZLJcjBNnqLRb+bmWYGj/WYI2E=)
                          20: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
                          21: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: 5bbIRsdAjK7srHufZ+Dw+kesoYz11+KIuBbiQq0S3J0=)
                          22: 326130643a623238373a646464643a3a2f34382d3438203d3e20323139333038.roa (hash: lhnf24+d+KsCQOPaVipDtlRXOcDvUPxkqrOPn+C77uU=)
                          23: 3138352e3133302e38382e302f32342d3234203d3e203431373230.roa (hash: Q6SwM6coh0lhmv2Gg85VRe+9HM4FBsO6keE2v7Y1R3c=)
                          24: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: KmE4Ra4RNXxBeAk9rV4T92zm3sto8pmIbD9YJoj2hJY=)
                          25: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: stUKzxp9FSabLqBbmp/31UHFmp2ltgPOF6jMIp4guIM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6c:d9:2f:94:61:9b:24:25:88:e7:90:90:7f:b2:12:e5:12:fb:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Sep 22 08:45:55 2026 GMT
            Not After : Sep 23 11:26:55 2026 GMT
        Subject: CN=98791705059AF9B64FBE77CFC454AA1D4E109A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:a9:cc:4c:ea:33:96:15:43:6f:f7:0c:9e:
                    7e:bb:47:0a:03:d8:ea:8f:ae:45:10:f6:0b:69:90:
                    d7:cf:e6:81:ca:76:ea:bf:e0:50:2b:a9:dc:a7:8f:
                    5c:88:ec:32:e2:a3:ab:17:f3:e0:13:d7:e2:03:31:
                    0e:3c:ef:54:b0:cd:c5:cc:e9:32:e3:5b:38:bf:06:
                    b6:da:08:fe:c7:a1:17:0c:77:9d:e2:b1:c5:14:0f:
                    61:ec:fc:a0:ae:18:d2:bf:15:83:cb:83:b0:ff:cc:
                    2e:e2:cb:a2:6b:2d:46:ec:b8:11:89:1d:11:f3:fd:
                    42:cf:c9:2e:b4:1b:2f:67:f2:ed:24:bd:b3:63:aa:
                    0f:09:eb:8e:98:8d:aa:34:14:3e:71:07:25:16:62:
                    0f:48:d1:83:0a:4a:b1:2e:c9:0d:35:39:32:30:25:
                    a1:5e:f3:5c:5c:f3:ac:e5:21:7f:42:df:0f:47:a9:
                    58:34:28:6b:49:98:6e:46:3a:38:fd:88:87:29:31:
                    69:0c:3c:50:02:52:f7:af:72:1e:fd:1c:ca:08:fb:
                    4f:63:fa:30:eb:f6:b9:97:28:01:53:d1:07:9b:98:
                    92:10:18:af:e7:27:e2:b9:32:bb:46:49:27:e5:28:
                    c1:41:08:c2:d8:bf:d9:35:06:89:e4:f4:cb:3d:a9:
                    7b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:79:17:05:05:9A:F9:B6:4F:BE:77:CF:C4:54:AA:1D:4E:10:9A:69
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:51:1a:36:63:2e:aa:30:64:0b:24:e0:84:49:34:17:3b:49:
         a6:99:e5:4a:19:ff:fe:c5:af:fc:71:cb:4b:4a:8a:38:5d:d0:
         95:82:f4:a0:de:6e:ab:45:b9:ff:55:be:d3:f5:a4:74:d4:42:
         1c:26:63:79:f0:12:c3:f6:b4:26:a9:77:e9:91:70:34:ac:39:
         ad:ac:72:ae:a9:7d:f0:06:ad:f6:09:be:8b:6b:10:34:04:8f:
         c3:6a:9c:82:1f:ed:d7:2d:a2:d1:d3:15:30:5f:c3:58:92:82:
         b0:b7:f3:03:af:98:e5:64:c0:4a:c3:9c:09:a2:d8:52:f0:c4:
         92:9e:d8:9a:da:2c:9e:3c:b6:ef:a1:bf:86:92:96:48:6c:f0:
         f1:2d:22:86:52:5e:5f:ef:6d:b1:c5:ba:91:ac:00:44:ce:97:
         b9:4a:ed:2e:7a:87:9c:07:5c:09:67:ec:14:c1:9c:11:db:45:
         a5:60:9a:e8:2b:83:44:0c:07:8e:fc:7b:5c:83:98:26:2a:6c:
         18:ac:9f:de:a7:4d:04:3e:a9:e2:58:d3:ef:92:46:d5:99:35:
         9b:61:84:26:cc:89:ff:2f:dd:bb:5d:f7:f4:5c:7e:27:38:d4:
         d1:b4:08:f6:a1:62:48:d3:69:9e:ba:12:f9:36:8f:22:7c:04:
         9e:c8:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:41:22 2026 by rpki-client