Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
File:                     088IhJGKUCOe9wUY7p_ATxquGSk.mft (raw, json)
Hash identifier:          MWpcZXNbi4a2P589eJh9eJvJ0agbzOGxOh0Szu+5PZQ=
Subject key identifier:   C5:44:6E:83:44:DA:40:3A:4F:24:B6:25:84:87:CF:9B:07:8A:28:BF
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       01A15E5641510A248CCB8A736F2FF60E15B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
Manifest number:          17F9
Signing time:             Wed 21 Oct 2026 12:01:13 +0000
Manifest this update:     Wed 21 Oct 2026 12:01:13 +0000
Manifest next update:     Thu 22 Oct 2026 12:01:13 +0000
Files and hashes:         1: 088IhJGKUCOe9wUY7p_ATxquGSk.crl (hash: tjoYqPBMXY6UGrsD62YacK0l+gmWhTMyBfyfs43gKhk=)
                          2: 3yqY5SvToLfZgepFACwyBjL-zFo.roa (hash: wPLqiTKB4xGPpL698mzeVXK6/QJjhoff1a4PO54Mt18=)
                          3: 60GOELdjS90NT3HQ_TIoDBw9jEk.roa (hash: IW0Ztpf+iEizLk7FQFYzJWbHIwryvkyhellMGX52v2I=)
                          4: 9EtuXpMLZ6sQQPEORkpOUuNq7kA.roa (hash: jJcZdafCJvTzptVALUPjvYgNWN2W1aePSl9m2ANl5Pk=)
                          5: 9gkVLjQzq4u9eTX55rvk0NRZzEY.roa (hash: hZcBmw4SfsEaoWkS6rx82VJEEjBl8KNeB0BbircjJCI=)
                          6: 9iqwdaCRzSRIxnzSgyEccwLudSU.roa (hash: vtDO+B+GX5SlLOFMYIE8Ci1O1zFTg8MXYIybeCYQQE4=)
                          7: EPOhWTjQpLzPcBO7BYqjeZiYFJw.roa (hash: bc4Sd0aCrqJSOCs197z9kn5B8gNucSjgK118PHdGWsM=)
                          8: J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa (hash: FKxKvjF1JzeJzc8Sp0aqMCubfckNp685W71oTKnizHk=)
                          9: JPRtkRaGLX8Sd_ysZrubpWz0xYM.roa (hash: /tEAJ46NXYsM46R5h8KTQIDrS2PgaLQ7LUufmgioS5U=)
                          10: NS5ldcKq1LzOVk57QBl78tAnglo.roa (hash: NLCMAf6L81UDBfmrt98wVbe31nVEYXW+pY5vNtXwIxQ=)
                          11: NzAk-80nwPdjRSk-yqn0f6awD3I.roa (hash: B2xJIZWaHgJcCEl3z4yTLYWzhZNQ3HmrXXt9vIP7yqE=)
                          12: OUXOVX4ZwYpcYII06RIHHPvCyC8.roa (hash: H+nyalyzD20UhvUg0p3R08LevNAe9HuM/dHZvBKthbE=)
                          13: OzhFXyA00__fB9uqQwmcQCQoW60.roa (hash: YreChcYbjgaAA/VikyB8vGg4JvPSy0BjCfmeSLJ9984=)
                          14: U3F62El3OIEqW3KXZWmF_5bSigk.roa (hash: vh0hdNyMtsy8yAJ2NzDkEticxSoHEnjSNclAx2pivbQ=)
                          15: VkulKwUg_3D5a5C_XMguFPuuovs.roa (hash: ukZGSfogs8eOKOJ2IJp59rkqPs02ZF4OPCzRv9uqSZ8=)
                          16: VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa (hash: 6a+0n7mpiIWJEPucvAzN+o4GClMdMMmNiUmB8fyQrBA=)
                          17: WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa (hash: yw4nxSJREFGrZikTrUVlUy5RTgIv56y0p0rAhpqXE4c=)
                          18: WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa (hash: ZDOH3SbLFKGU8X90UiFNgo5Q8Khx3+l4WVcSKcUyYEE=)
                          19: Xix1gQ4ef2uHYJ4159fOPL3UDI0.roa (hash: zJlLvJZCYRH3Ky1xrz93dPbSl17QsTeAJvFBEc1Z8LA=)
                          20: aoxpvJQp55z0b_A4747Hb-Vn3dc.roa (hash: KFOKBPs3AJlg/zbLl0vaUoAtOtEGw1Vqk5M7i3lMUY8=)
                          21: dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa (hash: PugPXuIpHhuRLO5S2LsWJizw062WbL+JSrm19YubtaQ=)
                          22: dhGTZrzAMxCoHl02uEnVYrcP8uY.roa (hash: frqEXDNzuadrbN8XUuh3gnDUTuujf4zMJynToQhVp5o=)
                          23: ef0q43f7LAeuo-FDNR4YuVz3rVk.roa (hash: ynkAymfoAKqGAiHb/45NVf5BEsff36expTSHfTcbGpM=)
                          24: fDBBivGd09DklPLRXv-2xMOMQEU.roa (hash: UvvC0PLHqkR9m8HGTqV3Lx3SdupKGUhgBV//jb/1IQA=)
                          25: hX2Lx3ZRXJhz5te91S_u82NAyqI.roa (hash: Z9Aqux701iyj0hKmcrZefV63BZnWhUv9h+YQa7uyK+o=)
                          26: l9bRnqNItHZs5FPzHX-UwDZIY-Y.roa (hash: GX1IqoI7oBfponz1zyedaP74wEIQFjMmP5j2wGHYX9k=)
                          27: lAmmWkGs5LyT9RfeItAfnxG8bbk.roa (hash: RNfEw57sbZCxkqzkR0v73gb4yT9D3HTLUkHXy1rWdGw=)
                          28: mYkzSPs4bdIDnwVUaRu-Jo2aLYw.roa (hash: TV4eKjR0OJx54wRJw1+R5H+m0UtVD7F7g/PWJoeSbVs=)
                          29: n-Y7var7zwzFMfuvLacvdqsoTk4.roa (hash: jYJTpN60GnROWfT9uULFABE6OlzcikzLuwW0K2UstEw=)
                          30: pGdakkFya_8KFAcwcCfw9mQMsfM.roa (hash: 7HU/UMagkX6Kk/cYXVxJtnGPyAPxvkR9i/Ymcq1RhFU=)
                          31: p_i5f8sUouD8T2guoP56z8DfSZQ.roa (hash: xamhxEmVDEB79em0Q1NxLo3vFtG79lojzbnDtwExQao=)
                          32: pxR405YISr-FctI8NX7Q4bD6gEU.roa (hash: XtQdAGk7qomly3oH9IhnMKYdpq/Ak4fYbIVYvmRiWfg=)
                          33: qVYl2gaC1o0QPGWKC8uPavjq7q4.roa (hash: N5USX4HmmcxvOGVDo+fCpGoOKoXPYdIuEyuWXJTwzwQ=)
                          34: rEJ3nr5rpLR9k-3rueCVtCAovZM.roa (hash: MPpvJzK37AFcgAzt3XzDw1Rx/WuVzYs9n0C6B0TdB+4=)
                          35: ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa (hash: F0kCXnimtG8KC6nSV0eR4+hm5V66V2fgM8EiOJj/7S0=)
                          36: vZjxFUtUFk_VcZ6DkCLGhoqIVgs.roa (hash: qFpiFefYJJaQqMk+axueFNG7oyxnU+z9sgqEjIpr44k=)
                          37: vngFOmM8F-I34UP1XtfkKo4AgEQ.roa (hash: 1Ru4gPZOefQrxrqA1R4SUrRycdaiRzteoC+xNeY+cK4=)
                          38: wAY5XuB45x4wJW7P8rfB4j4exyw.roa (hash: EyRdGq3OnE9JKFrNRIEE2sn/Nvgcr+BeZbnGqbJfWwQ=)
                          39: xbj5hdRf6FBr1n9agV8FWFcSS-M.roa (hash: FTolabkCiVcY/3NMmDQy622GW30z82c9UqmDuGHFc2U=)
                          40: y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa (hash: +bgaJGwbwdu0EcyrfjZn/ea+UaB9pY4KH5HlNs3s2VE=)
                          41: ypPsYdz2SbWvNH77QQl1wDRnDA8.roa (hash: ZzKlsMMsjohWKmB/AWbRxRQA46JAwN5yMSWLeFcXstE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 12:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5e:56:41:51:0a:24:8c:cb:8a:73:6f:2f:f6:0e:15:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Oct 21 12:01:13 2026 GMT
            Not After : Oct 22 12:01:13 2026 GMT
        Subject: CN=c5446e8344da403a4f24b6258487cf9b078a28bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:de:7a:86:c7:2c:02:a6:98:8a:1c:e1:8c:
                    99:72:37:fd:86:1e:fa:c7:ba:2e:7e:4f:11:1b:b3:
                    11:38:12:c6:16:88:d9:bb:04:d3:93:e2:23:59:04:
                    7c:ac:50:4f:34:98:d3:57:50:9d:d0:66:8c:b4:8e:
                    9e:ed:1a:4e:3e:e4:d0:63:6e:03:26:cf:54:34:1e:
                    2a:da:3e:54:c1:ce:4a:a2:22:b1:10:dc:e8:5e:c2:
                    23:f5:9c:56:11:fe:a2:1e:f1:03:f1:eb:68:b8:a5:
                    e9:d7:e1:f9:b2:5a:fa:08:4e:74:ce:10:eb:d2:7b:
                    21:37:3f:69:42:6c:8d:c7:3a:4d:3e:eb:11:cf:5a:
                    50:2e:7e:5b:b2:af:fd:f5:69:0a:f4:53:01:b5:02:
                    1d:6f:00:77:74:15:2e:84:21:22:72:4b:52:43:d9:
                    99:16:bb:f5:c5:1b:23:0b:03:cc:8e:9a:9c:e3:1b:
                    c3:f5:10:ea:ed:16:f7:c6:11:2d:de:cb:ab:b1:cb:
                    85:f8:95:ca:e7:0e:66:49:7c:26:45:be:1b:ec:c2:
                    4c:94:f9:ef:69:8f:54:6f:61:84:19:e1:58:65:63:
                    ae:98:93:bb:21:8c:c0:9a:10:6d:88:31:a1:6e:c5:
                    d3:5f:13:d3:14:e5:ab:09:a1:17:ea:32:f5:e6:62:
                    01:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:44:6E:83:44:DA:40:3A:4F:24:B6:25:84:87:CF:9B:07:8A:28:BF
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9c:06:88:55:f7:0e:fb:ae:ac:00:fe:e2:52:87:4e:37:c7:
         89:f6:89:52:b7:09:71:88:08:6f:fe:04:de:60:ee:ed:2f:62:
         b3:ef:3a:0f:e2:76:6e:3a:3c:d4:dd:54:6d:4a:1b:a4:4b:f8:
         77:29:36:59:31:ac:11:ce:d4:64:0a:f5:5c:05:ff:6a:12:96:
         66:11:b0:f6:83:a1:b0:17:cf:22:13:69:70:78:4d:a3:8d:ad:
         f9:39:b8:25:b3:a0:fb:d7:e9:de:b4:2c:6b:11:85:de:8c:9d:
         86:0d:36:da:2d:71:e8:98:13:1a:89:23:c5:9a:bb:d0:b9:af:
         07:3f:19:01:5b:9a:eb:6c:9c:0f:2c:83:83:3d:27:e5:cd:a8:
         23:0d:84:9e:d2:61:d7:da:90:33:ce:12:04:2a:f2:2d:9a:00:
         f8:3a:00:dc:37:3e:d2:f7:1c:a2:6a:ee:66:32:09:9a:e4:e4:
         4d:a6:0a:34:d5:84:ab:9a:ee:a1:db:0f:3c:8a:e6:69:f4:50:
         82:27:9c:55:5b:2b:00:fe:3b:b0:ed:d3:21:9d:ab:de:3b:f3:
         71:4d:bf:5d:02:f8:6d:25:53:9d:f9:2f:25:4b:54:f2:15:cd:
         d9:6f:36:a8:73:17:38:ca:4f:96:bf:5e:22:4a:4e:49:3d:89:
         7b:55:fc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----