Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
File:                     088IhJGKUCOe9wUY7p_ATxquGSk.mft (raw, json)
Hash identifier:          3PvI/ZNltgGPLJrawMZFZKeDYfoUTb9nQg0SgARMe70=
Subject key identifier:   99:58:69:08:CE:5A:23:05:9E:17:ED:AC:55:52:10:2A:B6:CA:0E:4F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       019CBDDF7122600C4A62DA47EBA001EEBD03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
Manifest number:          1566
Signing time:             Thu 05 Mar 2026 12:01:03 +0000
Manifest this update:     Thu 05 Mar 2026 12:01:03 +0000
Manifest next update:     Fri 06 Mar 2026 12:01:03 +0000
Files and hashes:         1: 088IhJGKUCOe9wUY7p_ATxquGSk.crl (hash: dtdgfQ6fYE6jXhytfbegXx9xE9WQYuiC3zJ02bZFQRU=)
                          2: 0P-3rcHOACQuATcCi6YZ2CE4KUs.roa (hash: QhfIbf/0f7+LXQU09PxZuXp7pk5C+r/mb2fH3ZziPpo=)
                          3: 1-LNpy_9Mxi9-cSdEi-yilq2_8kc.roa (hash: lfO/LT2x9VGedw1VsT/xMSQrjFJ4WPeZ0phXQ/kch1M=)
                          4: 3yqY5SvToLfZgepFACwyBjL-zFo.roa (hash: wPLqiTKB4xGPpL698mzeVXK6/QJjhoff1a4PO54Mt18=)
                          5: 60GOELdjS90NT3HQ_TIoDBw9jEk.roa (hash: IW0Ztpf+iEizLk7FQFYzJWbHIwryvkyhellMGX52v2I=)
                          6: 8mWxZpiqXYwc3d_MoBh2vXCPi7w.roa (hash: NA3FUqEHCIv+2pO01YQheP5r4xdrvQYz2f0gz7kHjsU=)
                          7: 9iqwdaCRzSRIxnzSgyEccwLudSU.roa (hash: vtDO+B+GX5SlLOFMYIE8Ci1O1zFTg8MXYIybeCYQQE4=)
                          8: Att5HKYI3aC7_aNTZVFUqgSxCe8.roa (hash: rUmjLWfVdd7KMWGUiNf2cjqT7vTRErvaoU9x2sNbGew=)
                          9: EF_U3I32Y5RdvbXqEmBTtMapEa8.roa (hash: sIzDhi/oGDul4JL44c5eU+5E68fjPASfb0dG/ED5Apo=)
                          10: EU_6MN_MJZf3XRvVIUEOVYwgNZo.roa (hash: +IXgSVtEGOzuUxPa9aH2GgJttKlcpQRRHhr1qNoMAVo=)
                          11: J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa (hash: FKxKvjF1JzeJzc8Sp0aqMCubfckNp685W71oTKnizHk=)
                          12: JPRtkRaGLX8Sd_ysZrubpWz0xYM.roa (hash: /tEAJ46NXYsM46R5h8KTQIDrS2PgaLQ7LUufmgioS5U=)
                          13: NzAk-80nwPdjRSk-yqn0f6awD3I.roa (hash: B2xJIZWaHgJcCEl3z4yTLYWzhZNQ3HmrXXt9vIP7yqE=)
                          14: OzhFXyA00__fB9uqQwmcQCQoW60.roa (hash: YreChcYbjgaAA/VikyB8vGg4JvPSy0BjCfmeSLJ9984=)
                          15: PIrMEQyjvVKVeYvRJpXPZ61vDvI.roa (hash: H9cZ2L0KfruHg2t6PS78Ci9ZD3D4RvqB2QYXRdEkt/A=)
                          16: U3F62El3OIEqW3KXZWmF_5bSigk.roa (hash: vh0hdNyMtsy8yAJ2NzDkEticxSoHEnjSNclAx2pivbQ=)
                          17: VkulKwUg_3D5a5C_XMguFPuuovs.roa (hash: ukZGSfogs8eOKOJ2IJp59rkqPs02ZF4OPCzRv9uqSZ8=)
                          18: VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa (hash: 6a+0n7mpiIWJEPucvAzN+o4GClMdMMmNiUmB8fyQrBA=)
                          19: WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa (hash: yw4nxSJREFGrZikTrUVlUy5RTgIv56y0p0rAhpqXE4c=)
                          20: WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa (hash: ZDOH3SbLFKGU8X90UiFNgo5Q8Khx3+l4WVcSKcUyYEE=)
                          21: Xd00ng7nac-i-TetL-P_HvOhmMM.roa (hash: k5l8E0MsOMYmPHet67fQ/9LeL4IxYxuboXrgLM1fIRk=)
                          22: YGaK4456uaQPYysoG6qe_dm8930.roa (hash: hiRyD58SyGyD94TTEyJZ+uJYXj1TMGmD1AQAjMA9d1c=)
                          23: dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa (hash: PugPXuIpHhuRLO5S2LsWJizw062WbL+JSrm19YubtaQ=)
                          24: dhGTZrzAMxCoHl02uEnVYrcP8uY.roa (hash: frqEXDNzuadrbN8XUuh3gnDUTuujf4zMJynToQhVp5o=)
                          25: ef0q43f7LAeuo-FDNR4YuVz3rVk.roa (hash: ynkAymfoAKqGAiHb/45NVf5BEsff36expTSHfTcbGpM=)
                          26: fDBBivGd09DklPLRXv-2xMOMQEU.roa (hash: UvvC0PLHqkR9m8HGTqV3Lx3SdupKGUhgBV//jb/1IQA=)
                          27: hX2Lx3ZRXJhz5te91S_u82NAyqI.roa (hash: Z9Aqux701iyj0hKmcrZefV63BZnWhUv9h+YQa7uyK+o=)
                          28: lAmmWkGs5LyT9RfeItAfnxG8bbk.roa (hash: RNfEw57sbZCxkqzkR0v73gb4yT9D3HTLUkHXy1rWdGw=)
                          29: n-Y7var7zwzFMfuvLacvdqsoTk4.roa (hash: jYJTpN60GnROWfT9uULFABE6OlzcikzLuwW0K2UstEw=)
                          30: pGdakkFya_8KFAcwcCfw9mQMsfM.roa (hash: 7HU/UMagkX6Kk/cYXVxJtnGPyAPxvkR9i/Ymcq1RhFU=)
                          31: p_i5f8sUouD8T2guoP56z8DfSZQ.roa (hash: xamhxEmVDEB79em0Q1NxLo3vFtG79lojzbnDtwExQao=)
                          32: pxR405YISr-FctI8NX7Q4bD6gEU.roa (hash: XtQdAGk7qomly3oH9IhnMKYdpq/Ak4fYbIVYvmRiWfg=)
                          33: qVYl2gaC1o0QPGWKC8uPavjq7q4.roa (hash: N5USX4HmmcxvOGVDo+fCpGoOKoXPYdIuEyuWXJTwzwQ=)
                          34: rEJ3nr5rpLR9k-3rueCVtCAovZM.roa (hash: MPpvJzK37AFcgAzt3XzDw1Rx/WuVzYs9n0C6B0TdB+4=)
                          35: ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa (hash: F0kCXnimtG8KC6nSV0eR4+hm5V66V2fgM8EiOJj/7S0=)
                          36: u4owkfbGQjlZ17TauPKELfGr4-A.roa (hash: Z+tEIRfGIZ+WLPFWkpQEZw9hlIWNtzCNJGfQfR5ByHc=)
                          37: vZjxFUtUFk_VcZ6DkCLGhoqIVgs.roa (hash: qFpiFefYJJaQqMk+axueFNG7oyxnU+z9sgqEjIpr44k=)
                          38: wAY5XuB45x4wJW7P8rfB4j4exyw.roa (hash: EyRdGq3OnE9JKFrNRIEE2sn/Nvgcr+BeZbnGqbJfWwQ=)
                          39: xbj5hdRf6FBr1n9agV8FWFcSS-M.roa (hash: FTolabkCiVcY/3NMmDQy622GW30z82c9UqmDuGHFc2U=)
                          40: y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa (hash: +bgaJGwbwdu0EcyrfjZn/ea+UaB9pY4KH5HlNs3s2VE=)
                          41: ypPsYdz2SbWvNH77QQl1wDRnDA8.roa (hash: ZzKlsMMsjohWKmB/AWbRxRQA46JAwN5yMSWLeFcXstE=)
                          42: zPgdBYPAz3QBjg71o8G3YIE805Y.roa (hash: JgrCSwBTN9wdbX0XnRrlPGBIGb9WM1Yt8KIhYiVQTmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bd:df:71:22:60:0c:4a:62:da:47:eb:a0:01:ee:bd:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Mar  5 12:01:03 2026 GMT
            Not After : Mar  6 12:01:03 2026 GMT
        Subject: CN=99586908ce5a23059e17edac5552102ab6ca0e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:d4:48:b9:bb:35:71:5c:1a:8f:c4:7d:f0:
                    c8:59:4d:72:d8:9c:d5:ce:a1:89:0e:88:42:5a:1b:
                    5b:03:26:10:b8:7d:91:21:ea:a4:1d:15:c4:16:2e:
                    ca:42:22:7a:f3:3e:b4:98:8e:8a:8b:0d:d7:cf:5c:
                    4b:8c:dc:96:fc:5d:9b:6e:a0:d6:74:74:0e:33:3b:
                    9a:34:ea:04:2b:4c:89:b1:ba:fa:25:14:ca:83:d6:
                    45:22:03:be:b0:c2:66:8c:45:35:86:48:4e:18:7c:
                    dd:6e:14:da:fc:f2:4e:3f:e3:68:7e:ee:56:65:9e:
                    24:a3:df:af:16:12:9e:c5:e8:82:1f:0d:45:a4:ae:
                    96:b0:d8:aa:2c:b0:45:a9:60:4b:91:71:14:f9:42:
                    9f:74:c7:3f:8f:54:e6:38:06:ec:e0:71:23:1f:8c:
                    39:e0:cd:f2:fe:03:ba:df:b7:a0:20:84:e3:77:62:
                    68:fc:95:a7:1c:56:59:25:56:6b:65:c3:62:9c:c9:
                    91:f5:05:16:b2:91:2a:3c:42:cb:82:64:d3:f0:38:
                    26:ea:e9:a5:29:1f:33:32:0b:41:6c:57:e3:7f:bf:
                    bb:24:58:c4:91:27:f5:5b:6b:5a:3a:e6:e1:e3:90:
                    3a:15:bd:ea:d3:53:cb:86:cf:b8:d5:2e:9f:96:7c:
                    c7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:58:69:08:CE:5A:23:05:9E:17:ED:AC:55:52:10:2A:B6:CA:0E:4F
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:67:a4:ea:bb:fb:6e:75:9a:86:cd:a3:54:19:dc:d7:b4:92:
         9f:f1:91:8b:2b:32:11:5e:37:fc:75:db:21:d5:c4:2b:3e:f0:
         b7:86:0a:a8:6e:73:d3:33:ac:c6:49:73:b2:00:7a:b3:15:36:
         76:ac:7a:7c:41:5e:d2:ae:44:32:da:46:07:c3:9f:4b:54:12:
         c4:74:f5:42:ee:33:88:51:e3:cb:22:62:40:64:6d:e2:d8:dd:
         bf:c3:f9:db:3e:90:d2:1a:ef:22:a4:ca:37:2a:26:8b:3b:9a:
         29:8a:37:ed:37:59:e8:2e:20:09:d7:95:92:07:cf:e8:0f:64:
         17:8c:cb:55:be:77:c8:4d:22:49:68:ef:6c:69:dc:93:84:14:
         59:f8:14:d5:e4:40:04:64:89:07:19:da:6d:2d:27:14:ba:64:
         f0:1b:9b:08:cc:18:48:d9:f4:d6:88:a5:11:a8:80:80:69:ac:
         f2:92:bf:93:bd:26:b0:12:9a:8f:c9:fb:aa:c3:cd:c4:03:c4:
         4e:ea:33:15:fa:bf:6a:0c:db:12:ff:a9:37:51:0d:7e:ec:e4:
         7d:75:ad:e0:b2:68:bf:25:bb:b5:f5:41:20:d9:54:00:e1:36:
         8d:99:08:f4:ea:86:9e:6a:05:7d:46:90:40:35:24:91:09:6e:
         11:5b:95:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----