Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
File:                     088IhJGKUCOe9wUY7p_ATxquGSk.mft (raw, json)
Hash identifier:          he3l03+vUwm/b0/lCMXH0cihSJAFX/xsfgdKYbF6C94=
Subject key identifier:   9B:86:22:74:81:1B:75:24:28:46:46:A2:66:96:BF:29:31:DC:B8:B1
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       019FABD192E2ED1365247AA9D0EC621B75DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
Manifest number:          170E
Signing time:             Wed 29 Jul 2026 03:01:06 +0000
Manifest this update:     Wed 29 Jul 2026 03:01:06 +0000
Manifest next update:     Thu 30 Jul 2026 03:01:06 +0000
Files and hashes:         1: 088IhJGKUCOe9wUY7p_ATxquGSk.crl (hash: 3WbF4lAwkhsLayqOw/zFjW5KXcbx9FgHC32JO23YGDs=)
                          2: 3yqY5SvToLfZgepFACwyBjL-zFo.roa (hash: wPLqiTKB4xGPpL698mzeVXK6/QJjhoff1a4PO54Mt18=)
                          3: 60GOELdjS90NT3HQ_TIoDBw9jEk.roa (hash: IW0Ztpf+iEizLk7FQFYzJWbHIwryvkyhellMGX52v2I=)
                          4: 8mWxZpiqXYwc3d_MoBh2vXCPi7w.roa (hash: NA3FUqEHCIv+2pO01YQheP5r4xdrvQYz2f0gz7kHjsU=)
                          5: 9EtuXpMLZ6sQQPEORkpOUuNq7kA.roa (hash: jJcZdafCJvTzptVALUPjvYgNWN2W1aePSl9m2ANl5Pk=)
                          6: 9gkVLjQzq4u9eTX55rvk0NRZzEY.roa (hash: hZcBmw4SfsEaoWkS6rx82VJEEjBl8KNeB0BbircjJCI=)
                          7: 9iqwdaCRzSRIxnzSgyEccwLudSU.roa (hash: vtDO+B+GX5SlLOFMYIE8Ci1O1zFTg8MXYIybeCYQQE4=)
                          8: EU_6MN_MJZf3XRvVIUEOVYwgNZo.roa (hash: +IXgSVtEGOzuUxPa9aH2GgJttKlcpQRRHhr1qNoMAVo=)
                          9: J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa (hash: FKxKvjF1JzeJzc8Sp0aqMCubfckNp685W71oTKnizHk=)
                          10: JPRtkRaGLX8Sd_ysZrubpWz0xYM.roa (hash: /tEAJ46NXYsM46R5h8KTQIDrS2PgaLQ7LUufmgioS5U=)
                          11: Mtto9APSXeMK6qSvjzFfOWYViWU.roa (hash: xlt+l3cYtMOdub3uBqf8YZQOdlMClw7bBDgXn7x4j6s=)
                          12: NS5ldcKq1LzOVk57QBl78tAnglo.roa (hash: NLCMAf6L81UDBfmrt98wVbe31nVEYXW+pY5vNtXwIxQ=)
                          13: NzAk-80nwPdjRSk-yqn0f6awD3I.roa (hash: B2xJIZWaHgJcCEl3z4yTLYWzhZNQ3HmrXXt9vIP7yqE=)
                          14: OUXOVX4ZwYpcYII06RIHHPvCyC8.roa (hash: H+nyalyzD20UhvUg0p3R08LevNAe9HuM/dHZvBKthbE=)
                          15: OzhFXyA00__fB9uqQwmcQCQoW60.roa (hash: YreChcYbjgaAA/VikyB8vGg4JvPSy0BjCfmeSLJ9984=)
                          16: Pt0g1cDZrNAna_HmJa7FdYBFHVQ.roa (hash: 3nbeebiCdKVabOkCTyjek3G0hTm2ELIk8OypLJ98YYY=)
                          17: U3F62El3OIEqW3KXZWmF_5bSigk.roa (hash: vh0hdNyMtsy8yAJ2NzDkEticxSoHEnjSNclAx2pivbQ=)
                          18: VkulKwUg_3D5a5C_XMguFPuuovs.roa (hash: ukZGSfogs8eOKOJ2IJp59rkqPs02ZF4OPCzRv9uqSZ8=)
                          19: VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa (hash: 6a+0n7mpiIWJEPucvAzN+o4GClMdMMmNiUmB8fyQrBA=)
                          20: WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa (hash: yw4nxSJREFGrZikTrUVlUy5RTgIv56y0p0rAhpqXE4c=)
                          21: WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa (hash: ZDOH3SbLFKGU8X90UiFNgo5Q8Khx3+l4WVcSKcUyYEE=)
                          22: Xix1gQ4ef2uHYJ4159fOPL3UDI0.roa (hash: zJlLvJZCYRH3Ky1xrz93dPbSl17QsTeAJvFBEc1Z8LA=)
                          23: dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa (hash: PugPXuIpHhuRLO5S2LsWJizw062WbL+JSrm19YubtaQ=)
                          24: dhGTZrzAMxCoHl02uEnVYrcP8uY.roa (hash: frqEXDNzuadrbN8XUuh3gnDUTuujf4zMJynToQhVp5o=)
                          25: ef0q43f7LAeuo-FDNR4YuVz3rVk.roa (hash: ynkAymfoAKqGAiHb/45NVf5BEsff36expTSHfTcbGpM=)
                          26: fDBBivGd09DklPLRXv-2xMOMQEU.roa (hash: UvvC0PLHqkR9m8HGTqV3Lx3SdupKGUhgBV//jb/1IQA=)
                          27: hX2Lx3ZRXJhz5te91S_u82NAyqI.roa (hash: Z9Aqux701iyj0hKmcrZefV63BZnWhUv9h+YQa7uyK+o=)
                          28: izV_z0wbEXeZhhS55-dpEoufx1g.roa (hash: aFKhblp9l65F1faFYsR0QfxtIJjtcnkfJb7Y60QKQik=)
                          29: lAmmWkGs5LyT9RfeItAfnxG8bbk.roa (hash: RNfEw57sbZCxkqzkR0v73gb4yT9D3HTLUkHXy1rWdGw=)
                          30: n-Y7var7zwzFMfuvLacvdqsoTk4.roa (hash: jYJTpN60GnROWfT9uULFABE6OlzcikzLuwW0K2UstEw=)
                          31: pGdakkFya_8KFAcwcCfw9mQMsfM.roa (hash: 7HU/UMagkX6Kk/cYXVxJtnGPyAPxvkR9i/Ymcq1RhFU=)
                          32: p_i5f8sUouD8T2guoP56z8DfSZQ.roa (hash: xamhxEmVDEB79em0Q1NxLo3vFtG79lojzbnDtwExQao=)
                          33: pxR405YISr-FctI8NX7Q4bD6gEU.roa (hash: XtQdAGk7qomly3oH9IhnMKYdpq/Ak4fYbIVYvmRiWfg=)
                          34: qVYl2gaC1o0QPGWKC8uPavjq7q4.roa (hash: N5USX4HmmcxvOGVDo+fCpGoOKoXPYdIuEyuWXJTwzwQ=)
                          35: rEJ3nr5rpLR9k-3rueCVtCAovZM.roa (hash: MPpvJzK37AFcgAzt3XzDw1Rx/WuVzYs9n0C6B0TdB+4=)
                          36: ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa (hash: F0kCXnimtG8KC6nSV0eR4+hm5V66V2fgM8EiOJj/7S0=)
                          37: vZjxFUtUFk_VcZ6DkCLGhoqIVgs.roa (hash: qFpiFefYJJaQqMk+axueFNG7oyxnU+z9sgqEjIpr44k=)
                          38: vngFOmM8F-I34UP1XtfkKo4AgEQ.roa (hash: 1Ru4gPZOefQrxrqA1R4SUrRycdaiRzteoC+xNeY+cK4=)
                          39: wAY5XuB45x4wJW7P8rfB4j4exyw.roa (hash: EyRdGq3OnE9JKFrNRIEE2sn/Nvgcr+BeZbnGqbJfWwQ=)
                          40: xbj5hdRf6FBr1n9agV8FWFcSS-M.roa (hash: FTolabkCiVcY/3NMmDQy622GW30z82c9UqmDuGHFc2U=)
                          41: y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa (hash: +bgaJGwbwdu0EcyrfjZn/ea+UaB9pY4KH5HlNs3s2VE=)
                          42: ypPsYdz2SbWvNH77QQl1wDRnDA8.roa (hash: ZzKlsMMsjohWKmB/AWbRxRQA46JAwN5yMSWLeFcXstE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:92:e2:ed:13:65:24:7a:a9:d0:ec:62:1b:75:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jul 29 03:01:06 2026 GMT
            Not After : Jul 30 03:01:06 2026 GMT
        Subject: CN=9b862274811b7524284646a26696bf2931dcb8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:d9:b3:c9:60:76:d9:61:6d:7c:89:f4:47:
                    54:da:e6:76:91:76:32:f1:a0:15:eb:67:df:a6:a3:
                    5d:e4:a1:3a:b0:33:31:ae:92:22:e7:07:5a:33:2f:
                    80:31:48:4f:11:06:ec:07:9d:41:32:7e:80:cb:af:
                    2c:72:c3:c9:cd:0b:a0:ad:16:50:19:55:a0:fa:32:
                    a5:fa:33:b8:35:93:c3:8b:32:cc:5f:cb:a6:49:34:
                    12:6d:94:97:a8:21:32:c4:e1:db:ae:a3:4c:98:c2:
                    5b:b2:d8:8d:d5:fa:98:77:0a:68:23:31:86:4d:8e:
                    06:db:90:37:23:00:15:60:1d:61:4c:ea:5d:b5:5b:
                    36:26:38:c0:ee:f9:68:b6:36:aa:12:49:02:0c:52:
                    d9:fb:b6:cd:f2:bb:5f:d2:86:dd:1b:3b:0f:c0:87:
                    2c:ff:31:5e:3b:e5:03:f8:4f:9d:4f:25:37:b6:1c:
                    5e:30:ea:72:55:42:e9:b8:29:3e:b4:68:dd:1b:1b:
                    1e:3c:9c:1e:38:18:07:f5:88:f3:aa:82:19:67:fe:
                    2b:ba:7d:0f:51:b7:2c:96:c6:b9:58:da:d3:95:1c:
                    2e:59:9c:4f:a5:f0:3f:54:b2:23:46:32:7e:19:6f:
                    3c:f7:bd:54:e3:26:c4:a9:18:a2:83:ad:6d:32:f7:
                    43:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:86:22:74:81:1B:75:24:28:46:46:A2:66:96:BF:29:31:DC:B8:B1
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f1:54:d3:2c:f5:4d:4e:9d:45:20:b4:c1:ea:40:46:43:d0:
         01:03:f3:d6:8c:74:43:e9:5e:bd:dc:fc:77:46:69:54:dd:20:
         e3:e0:b2:e6:95:a6:da:0a:1c:87:a2:0b:50:7a:b1:7d:4d:78:
         b8:80:72:89:aa:ae:2a:d8:a3:80:f9:28:9a:35:cf:64:fa:61:
         79:c2:85:04:ff:71:f0:ba:ef:ae:52:7e:d1:35:a6:89:7b:2c:
         e4:e8:83:88:40:ac:59:73:0f:c8:a4:f2:db:1a:c5:56:00:8a:
         08:c9:d3:56:3c:10:99:b2:fd:9c:f4:b4:a3:1c:1a:d4:d4:09:
         e3:67:41:9b:1b:d7:9a:1c:ef:7e:82:5d:42:0f:96:e3:4b:03:
         00:76:22:61:bd:98:ab:26:fa:83:58:cb:63:10:09:a3:1e:9f:
         32:da:19:52:b0:ae:ee:04:d6:bb:40:2a:52:cd:19:ce:4c:0a:
         3c:24:a6:5d:d5:46:56:d1:20:ec:c5:fc:19:8d:b7:e5:ab:f6:
         63:e9:1b:19:a5:a6:ca:0b:3c:2f:b6:b1:36:b3:68:00:70:7a:
         12:94:bd:f6:e5:24:8b:cd:11:0a:01:ba:8e:7e:1e:c0:49:7b:
         54:5a:d9:dd:47:77:65:7e:e9:11:3a:59:eb:62:86:36:30:6a:
         a3:8b:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:11:36 2026 by rpki-client