Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
File:                     088IhJGKUCOe9wUY7p_ATxquGSk.mft (raw, json)
Hash identifier:          XfZdRvygj/qDIi47NbZSnX6NayTTapvc/5+4gKfqs6E=
Subject key identifier:   12:AA:73:95:8C:64:F4:70:81:B5:C2:4D:AA:D6:79:70:3F:D3:00:43
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       019D9A3EC68C7536B44244A8AD9906F5DCBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
Manifest number:          15D9
Signing time:             Fri 17 Apr 2026 07:01:38 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:38 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:38 +0000
Files and hashes:         1: 088IhJGKUCOe9wUY7p_ATxquGSk.crl (hash: 1R3eXdXWIVkQFBNiYjICyBdBLNbSFd065QgiT54ERic=)
                          2: 0P-3rcHOACQuATcCi6YZ2CE4KUs.roa (hash: QhfIbf/0f7+LXQU09PxZuXp7pk5C+r/mb2fH3ZziPpo=)
                          3: 1-LNpy_9Mxi9-cSdEi-yilq2_8kc.roa (hash: lfO/LT2x9VGedw1VsT/xMSQrjFJ4WPeZ0phXQ/kch1M=)
                          4: 3yqY5SvToLfZgepFACwyBjL-zFo.roa (hash: wPLqiTKB4xGPpL698mzeVXK6/QJjhoff1a4PO54Mt18=)
                          5: 60GOELdjS90NT3HQ_TIoDBw9jEk.roa (hash: IW0Ztpf+iEizLk7FQFYzJWbHIwryvkyhellMGX52v2I=)
                          6: 8mWxZpiqXYwc3d_MoBh2vXCPi7w.roa (hash: NA3FUqEHCIv+2pO01YQheP5r4xdrvQYz2f0gz7kHjsU=)
                          7: 9iqwdaCRzSRIxnzSgyEccwLudSU.roa (hash: vtDO+B+GX5SlLOFMYIE8Ci1O1zFTg8MXYIybeCYQQE4=)
                          8: Att5HKYI3aC7_aNTZVFUqgSxCe8.roa (hash: rUmjLWfVdd7KMWGUiNf2cjqT7vTRErvaoU9x2sNbGew=)
                          9: EF_U3I32Y5RdvbXqEmBTtMapEa8.roa (hash: sIzDhi/oGDul4JL44c5eU+5E68fjPASfb0dG/ED5Apo=)
                          10: EU_6MN_MJZf3XRvVIUEOVYwgNZo.roa (hash: +IXgSVtEGOzuUxPa9aH2GgJttKlcpQRRHhr1qNoMAVo=)
                          11: J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa (hash: FKxKvjF1JzeJzc8Sp0aqMCubfckNp685W71oTKnizHk=)
                          12: JPRtkRaGLX8Sd_ysZrubpWz0xYM.roa (hash: /tEAJ46NXYsM46R5h8KTQIDrS2PgaLQ7LUufmgioS5U=)
                          13: NzAk-80nwPdjRSk-yqn0f6awD3I.roa (hash: B2xJIZWaHgJcCEl3z4yTLYWzhZNQ3HmrXXt9vIP7yqE=)
                          14: OzhFXyA00__fB9uqQwmcQCQoW60.roa (hash: YreChcYbjgaAA/VikyB8vGg4JvPSy0BjCfmeSLJ9984=)
                          15: PIrMEQyjvVKVeYvRJpXPZ61vDvI.roa (hash: H9cZ2L0KfruHg2t6PS78Ci9ZD3D4RvqB2QYXRdEkt/A=)
                          16: Q-GYq2m_tr6W_RtM0sCvHlInTxU.roa (hash: 1xrCYD5jiDLXpxJne8P+wvXM1GVUiEeJQXgzUbLbWSM=)
                          17: U3F62El3OIEqW3KXZWmF_5bSigk.roa (hash: vh0hdNyMtsy8yAJ2NzDkEticxSoHEnjSNclAx2pivbQ=)
                          18: VkulKwUg_3D5a5C_XMguFPuuovs.roa (hash: ukZGSfogs8eOKOJ2IJp59rkqPs02ZF4OPCzRv9uqSZ8=)
                          19: VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa (hash: 6a+0n7mpiIWJEPucvAzN+o4GClMdMMmNiUmB8fyQrBA=)
                          20: WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa (hash: yw4nxSJREFGrZikTrUVlUy5RTgIv56y0p0rAhpqXE4c=)
                          21: WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa (hash: ZDOH3SbLFKGU8X90UiFNgo5Q8Khx3+l4WVcSKcUyYEE=)
                          22: Xd00ng7nac-i-TetL-P_HvOhmMM.roa (hash: k5l8E0MsOMYmPHet67fQ/9LeL4IxYxuboXrgLM1fIRk=)
                          23: dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa (hash: PugPXuIpHhuRLO5S2LsWJizw062WbL+JSrm19YubtaQ=)
                          24: dhGTZrzAMxCoHl02uEnVYrcP8uY.roa (hash: frqEXDNzuadrbN8XUuh3gnDUTuujf4zMJynToQhVp5o=)
                          25: ef0q43f7LAeuo-FDNR4YuVz3rVk.roa (hash: ynkAymfoAKqGAiHb/45NVf5BEsff36expTSHfTcbGpM=)
                          26: fDBBivGd09DklPLRXv-2xMOMQEU.roa (hash: UvvC0PLHqkR9m8HGTqV3Lx3SdupKGUhgBV//jb/1IQA=)
                          27: hX2Lx3ZRXJhz5te91S_u82NAyqI.roa (hash: Z9Aqux701iyj0hKmcrZefV63BZnWhUv9h+YQa7uyK+o=)
                          28: lAmmWkGs5LyT9RfeItAfnxG8bbk.roa (hash: RNfEw57sbZCxkqzkR0v73gb4yT9D3HTLUkHXy1rWdGw=)
                          29: n-Y7var7zwzFMfuvLacvdqsoTk4.roa (hash: jYJTpN60GnROWfT9uULFABE6OlzcikzLuwW0K2UstEw=)
                          30: pGdakkFya_8KFAcwcCfw9mQMsfM.roa (hash: 7HU/UMagkX6Kk/cYXVxJtnGPyAPxvkR9i/Ymcq1RhFU=)
                          31: p_i5f8sUouD8T2guoP56z8DfSZQ.roa (hash: xamhxEmVDEB79em0Q1NxLo3vFtG79lojzbnDtwExQao=)
                          32: pxR405YISr-FctI8NX7Q4bD6gEU.roa (hash: XtQdAGk7qomly3oH9IhnMKYdpq/Ak4fYbIVYvmRiWfg=)
                          33: qVYl2gaC1o0QPGWKC8uPavjq7q4.roa (hash: N5USX4HmmcxvOGVDo+fCpGoOKoXPYdIuEyuWXJTwzwQ=)
                          34: rEJ3nr5rpLR9k-3rueCVtCAovZM.roa (hash: MPpvJzK37AFcgAzt3XzDw1Rx/WuVzYs9n0C6B0TdB+4=)
                          35: ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa (hash: F0kCXnimtG8KC6nSV0eR4+hm5V66V2fgM8EiOJj/7S0=)
                          36: u4owkfbGQjlZ17TauPKELfGr4-A.roa (hash: Z+tEIRfGIZ+WLPFWkpQEZw9hlIWNtzCNJGfQfR5ByHc=)
                          37: vZjxFUtUFk_VcZ6DkCLGhoqIVgs.roa (hash: qFpiFefYJJaQqMk+axueFNG7oyxnU+z9sgqEjIpr44k=)
                          38: wAY5XuB45x4wJW7P8rfB4j4exyw.roa (hash: EyRdGq3OnE9JKFrNRIEE2sn/Nvgcr+BeZbnGqbJfWwQ=)
                          39: xbj5hdRf6FBr1n9agV8FWFcSS-M.roa (hash: FTolabkCiVcY/3NMmDQy622GW30z82c9UqmDuGHFc2U=)
                          40: y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa (hash: +bgaJGwbwdu0EcyrfjZn/ea+UaB9pY4KH5HlNs3s2VE=)
                          41: ypPsYdz2SbWvNH77QQl1wDRnDA8.roa (hash: ZzKlsMMsjohWKmB/AWbRxRQA46JAwN5yMSWLeFcXstE=)
                          42: zPgdBYPAz3QBjg71o8G3YIE805Y.roa (hash: JgrCSwBTN9wdbX0XnRrlPGBIGb9WM1Yt8KIhYiVQTmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:c6:8c:75:36:b4:42:44:a8:ad:99:06:f5:dc:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Apr 17 07:01:38 2026 GMT
            Not After : Apr 18 07:01:38 2026 GMT
        Subject: CN=12aa73958c64f47081b5c24daad679703fd30043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:a2:37:07:f5:0c:28:63:b1:71:ea:09:3d:
                    ba:e3:05:b6:fc:33:ef:58:ff:da:a3:6e:af:a4:69:
                    0c:d1:9e:bf:60:17:8c:c2:2d:50:ec:67:c9:e2:5f:
                    05:4a:b6:65:b5:df:e4:5e:d9:77:21:0a:d8:fe:45:
                    78:eb:fa:04:9e:1e:3b:e4:0a:36:33:88:ff:3c:c7:
                    25:3c:9e:95:d3:eb:cb:d8:9f:db:ff:a1:cb:1c:db:
                    a7:29:38:5c:49:c6:56:28:c2:92:40:c8:e4:88:c0:
                    8f:8c:d5:95:88:75:eb:b5:60:af:a5:6e:6e:c8:71:
                    f5:70:08:16:ce:e4:98:1b:d8:56:95:d0:c9:c4:f1:
                    13:c3:f6:1f:16:ad:e3:b2:0a:78:92:40:3d:b2:da:
                    08:95:97:ee:90:55:67:fa:d5:54:33:31:87:c4:9a:
                    a4:71:0d:aa:74:af:fa:00:7e:99:ba:74:92:eb:d2:
                    2b:ae:eb:46:c4:00:40:6e:78:03:72:e9:ea:62:f2:
                    ca:06:19:5a:81:bf:90:98:5e:e4:e0:b9:f7:c7:6e:
                    c4:6c:85:6b:38:59:d9:61:ab:63:20:3f:2a:a6:df:
                    d8:93:c0:ed:f1:ae:3e:65:78:6b:a7:d2:c0:50:33:
                    8f:2c:04:3f:26:5f:c4:c0:00:aa:d8:a1:ee:b1:b2:
                    f8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AA:73:95:8C:64:F4:70:81:B5:C2:4D:AA:D6:79:70:3F:D3:00:43
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:da:7b:2c:13:5f:63:c9:33:b7:87:73:a2:30:d8:f3:8c:6d:
         5b:44:fe:3e:fb:5e:c7:cf:03:b5:be:e8:7e:6f:de:4c:f5:5d:
         ce:fe:78:76:45:23:9d:11:fa:33:ef:cb:5a:36:6a:8e:d0:e4:
         be:f6:05:b4:9d:5c:cc:85:f4:b1:e1:a2:6d:90:43:34:36:66:
         23:eb:52:a3:75:fd:88:af:5b:8e:50:e0:df:ac:b4:f5:0d:de:
         e2:bb:84:80:cb:74:c1:6c:1b:f6:75:e2:66:c1:cb:4a:23:3d:
         5f:30:b6:dd:b5:e2:d3:29:80:f3:09:d2:85:ba:53:69:57:aa:
         81:17:7f:b7:ce:86:cb:83:03:a2:28:18:42:30:90:af:ce:48:
         cb:c5:ab:a6:03:2e:68:05:50:ba:aa:16:18:7c:2c:06:6b:4b:
         b9:9d:21:b3:80:44:ce:6c:85:43:97:81:63:17:1a:03:ad:f1:
         f7:59:e3:42:38:42:53:27:c5:c3:58:e0:b1:85:43:d2:16:0f:
         f8:47:9b:a3:45:f7:91:84:4a:c6:f3:2d:a7:e4:38:45:83:58:
         c0:b5:fa:44:9c:81:38:15:63:29:e5:54:4f:9b:49:ef:55:d8:
         11:21:6f:32:da:76:62:9b:04:36:0b:72:38:51:7d:6b:a5:48:
         c3:95:c7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----