Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
File:                     088IhJGKUCOe9wUY7p_ATxquGSk.mft (raw, json)
Hash identifier:          SU+Vk5JeQ+/ltBs4+NjhRAPmfz5B9jfY8uXjoUUtOsE=
Subject key identifier:   85:8C:34:80:C1:55:C1:5D:C5:AF:03:BD:F9:65:BC:90:10:3B:2C:E7
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       01A0E964461D7EAD48D073314E577CA42C75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
Manifest number:          17BB
Signing time:             Mon 28 Sep 2026 19:00:57 +0000
Manifest this update:     Mon 28 Sep 2026 19:00:57 +0000
Manifest next update:     Tue 29 Sep 2026 19:00:57 +0000
Files and hashes:         1: 088IhJGKUCOe9wUY7p_ATxquGSk.crl (hash: OoV1fv+k0hASkCz5z0wR8URHOjESGSF+xy7kI4P055Y=)
                          2: 3yqY5SvToLfZgepFACwyBjL-zFo.roa (hash: wPLqiTKB4xGPpL698mzeVXK6/QJjhoff1a4PO54Mt18=)
                          3: 60GOELdjS90NT3HQ_TIoDBw9jEk.roa (hash: IW0Ztpf+iEizLk7FQFYzJWbHIwryvkyhellMGX52v2I=)
                          4: 9EtuXpMLZ6sQQPEORkpOUuNq7kA.roa (hash: jJcZdafCJvTzptVALUPjvYgNWN2W1aePSl9m2ANl5Pk=)
                          5: 9gkVLjQzq4u9eTX55rvk0NRZzEY.roa (hash: hZcBmw4SfsEaoWkS6rx82VJEEjBl8KNeB0BbircjJCI=)
                          6: 9iqwdaCRzSRIxnzSgyEccwLudSU.roa (hash: vtDO+B+GX5SlLOFMYIE8Ci1O1zFTg8MXYIybeCYQQE4=)
                          7: EPOhWTjQpLzPcBO7BYqjeZiYFJw.roa (hash: bc4Sd0aCrqJSOCs197z9kn5B8gNucSjgK118PHdGWsM=)
                          8: J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa (hash: FKxKvjF1JzeJzc8Sp0aqMCubfckNp685W71oTKnizHk=)
                          9: JPRtkRaGLX8Sd_ysZrubpWz0xYM.roa (hash: /tEAJ46NXYsM46R5h8KTQIDrS2PgaLQ7LUufmgioS5U=)
                          10: Mtto9APSXeMK6qSvjzFfOWYViWU.roa (hash: xlt+l3cYtMOdub3uBqf8YZQOdlMClw7bBDgXn7x4j6s=)
                          11: NS5ldcKq1LzOVk57QBl78tAnglo.roa (hash: NLCMAf6L81UDBfmrt98wVbe31nVEYXW+pY5vNtXwIxQ=)
                          12: NzAk-80nwPdjRSk-yqn0f6awD3I.roa (hash: B2xJIZWaHgJcCEl3z4yTLYWzhZNQ3HmrXXt9vIP7yqE=)
                          13: OUXOVX4ZwYpcYII06RIHHPvCyC8.roa (hash: H+nyalyzD20UhvUg0p3R08LevNAe9HuM/dHZvBKthbE=)
                          14: OzhFXyA00__fB9uqQwmcQCQoW60.roa (hash: YreChcYbjgaAA/VikyB8vGg4JvPSy0BjCfmeSLJ9984=)
                          15: U3F62El3OIEqW3KXZWmF_5bSigk.roa (hash: vh0hdNyMtsy8yAJ2NzDkEticxSoHEnjSNclAx2pivbQ=)
                          16: VkulKwUg_3D5a5C_XMguFPuuovs.roa (hash: ukZGSfogs8eOKOJ2IJp59rkqPs02ZF4OPCzRv9uqSZ8=)
                          17: VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa (hash: 6a+0n7mpiIWJEPucvAzN+o4GClMdMMmNiUmB8fyQrBA=)
                          18: WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa (hash: yw4nxSJREFGrZikTrUVlUy5RTgIv56y0p0rAhpqXE4c=)
                          19: WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa (hash: ZDOH3SbLFKGU8X90UiFNgo5Q8Khx3+l4WVcSKcUyYEE=)
                          20: Xix1gQ4ef2uHYJ4159fOPL3UDI0.roa (hash: zJlLvJZCYRH3Ky1xrz93dPbSl17QsTeAJvFBEc1Z8LA=)
                          21: aoxpvJQp55z0b_A4747Hb-Vn3dc.roa (hash: KFOKBPs3AJlg/zbLl0vaUoAtOtEGw1Vqk5M7i3lMUY8=)
                          22: dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa (hash: PugPXuIpHhuRLO5S2LsWJizw062WbL+JSrm19YubtaQ=)
                          23: dhGTZrzAMxCoHl02uEnVYrcP8uY.roa (hash: frqEXDNzuadrbN8XUuh3gnDUTuujf4zMJynToQhVp5o=)
                          24: ef0q43f7LAeuo-FDNR4YuVz3rVk.roa (hash: ynkAymfoAKqGAiHb/45NVf5BEsff36expTSHfTcbGpM=)
                          25: fDBBivGd09DklPLRXv-2xMOMQEU.roa (hash: UvvC0PLHqkR9m8HGTqV3Lx3SdupKGUhgBV//jb/1IQA=)
                          26: hX2Lx3ZRXJhz5te91S_u82NAyqI.roa (hash: Z9Aqux701iyj0hKmcrZefV63BZnWhUv9h+YQa7uyK+o=)
                          27: lAmmWkGs5LyT9RfeItAfnxG8bbk.roa (hash: RNfEw57sbZCxkqzkR0v73gb4yT9D3HTLUkHXy1rWdGw=)
                          28: n-Y7var7zwzFMfuvLacvdqsoTk4.roa (hash: jYJTpN60GnROWfT9uULFABE6OlzcikzLuwW0K2UstEw=)
                          29: nKoWcXFyd6Av2A5Pn3r0sx81sxg.roa (hash: NmzglX/esYoeaUFk+87SAqti3jusy2njG3Was6QTtak=)
                          30: pGdakkFya_8KFAcwcCfw9mQMsfM.roa (hash: 7HU/UMagkX6Kk/cYXVxJtnGPyAPxvkR9i/Ymcq1RhFU=)
                          31: p_i5f8sUouD8T2guoP56z8DfSZQ.roa (hash: xamhxEmVDEB79em0Q1NxLo3vFtG79lojzbnDtwExQao=)
                          32: pxR405YISr-FctI8NX7Q4bD6gEU.roa (hash: XtQdAGk7qomly3oH9IhnMKYdpq/Ak4fYbIVYvmRiWfg=)
                          33: qVYl2gaC1o0QPGWKC8uPavjq7q4.roa (hash: N5USX4HmmcxvOGVDo+fCpGoOKoXPYdIuEyuWXJTwzwQ=)
                          34: rEJ3nr5rpLR9k-3rueCVtCAovZM.roa (hash: MPpvJzK37AFcgAzt3XzDw1Rx/WuVzYs9n0C6B0TdB+4=)
                          35: ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa (hash: F0kCXnimtG8KC6nSV0eR4+hm5V66V2fgM8EiOJj/7S0=)
                          36: vZjxFUtUFk_VcZ6DkCLGhoqIVgs.roa (hash: qFpiFefYJJaQqMk+axueFNG7oyxnU+z9sgqEjIpr44k=)
                          37: vngFOmM8F-I34UP1XtfkKo4AgEQ.roa (hash: 1Ru4gPZOefQrxrqA1R4SUrRycdaiRzteoC+xNeY+cK4=)
                          38: wAY5XuB45x4wJW7P8rfB4j4exyw.roa (hash: EyRdGq3OnE9JKFrNRIEE2sn/Nvgcr+BeZbnGqbJfWwQ=)
                          39: xbj5hdRf6FBr1n9agV8FWFcSS-M.roa (hash: FTolabkCiVcY/3NMmDQy622GW30z82c9UqmDuGHFc2U=)
                          40: y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa (hash: +bgaJGwbwdu0EcyrfjZn/ea+UaB9pY4KH5HlNs3s2VE=)
                          41: ypPsYdz2SbWvNH77QQl1wDRnDA8.roa (hash: ZzKlsMMsjohWKmB/AWbRxRQA46JAwN5yMSWLeFcXstE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:64:46:1d:7e:ad:48:d0:73:31:4e:57:7c:a4:2c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Sep 28 19:00:57 2026 GMT
            Not After : Sep 29 19:00:57 2026 GMT
        Subject: CN=858c3480c155c15dc5af03bdf965bc90103b2ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:f2:4f:6b:6b:b3:9b:df:dd:59:3d:d2:e2:
                    22:78:96:92:87:10:e2:3c:1f:c2:1c:a0:82:81:7b:
                    53:80:25:f9:a7:2c:1a:46:f2:72:99:e7:e3:13:9b:
                    ed:1f:e2:48:4e:84:fe:f5:8b:b2:57:48:5c:bf:d7:
                    c2:f3:fc:f7:84:f6:27:c5:30:af:b6:08:59:a0:57:
                    77:65:75:ba:5f:19:3f:31:a1:cd:c2:84:d2:c1:da:
                    f3:6d:5d:da:44:31:bf:13:3b:2c:b9:17:73:65:52:
                    14:73:08:2c:14:8f:77:00:82:79:78:2a:da:d0:be:
                    a1:64:08:08:10:32:8a:d2:ff:69:3e:6d:f5:35:67:
                    48:a6:d0:d0:05:47:66:25:2e:4c:39:10:75:39:2a:
                    f3:8f:cc:45:90:ed:51:c4:1a:2f:a7:6a:91:7a:a4:
                    34:90:e1:cc:a2:46:80:de:16:89:5f:9d:dd:28:81:
                    74:32:f8:ed:bf:31:3b:83:d6:d2:65:12:80:ec:e2:
                    d7:bb:03:79:d3:da:a8:2b:92:84:43:52:0e:d0:11:
                    e1:af:78:8d:14:54:48:51:b4:aa:18:14:8d:e6:8a:
                    4f:bd:37:64:45:88:57:ad:de:74:1e:d9:36:2a:42:
                    56:2e:ac:cd:64:a5:f2:9b:61:d7:f1:0e:95:9b:57:
                    f1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8C:34:80:C1:55:C1:5D:C5:AF:03:BD:F9:65:BC:90:10:3B:2C:E7
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:83:cd:ec:77:f4:6b:ce:84:df:b7:22:0a:2e:c4:15:1b:56:
         45:70:b0:40:7a:8f:92:3c:69:04:26:96:f1:55:b0:50:5a:e6:
         e1:18:97:8a:f8:2d:5e:ab:21:98:d0:c6:d8:a1:ca:fb:fd:be:
         05:58:0d:ba:67:ec:ef:08:a2:da:d9:50:f7:51:4f:3b:d7:fd:
         14:00:1c:3a:b9:1f:25:95:c1:66:4e:be:31:65:53:78:a2:48:
         73:ee:e3:06:f5:c3:e8:55:38:3c:5a:bc:41:94:22:fc:99:d3:
         8f:dd:a7:5c:4f:c0:32:92:b1:97:14:36:d3:8a:3c:9a:82:2e:
         67:bc:2f:4a:8b:0c:25:57:41:5a:d1:ad:cb:a0:c0:42:38:7b:
         44:58:a0:f4:62:44:df:63:17:c2:0e:a4:fa:f1:05:92:05:f1:
         27:98:b8:34:b0:6c:96:bd:76:2e:19:5e:2e:a4:dc:7c:99:77:
         0a:98:18:50:61:fd:27:a9:cf:11:35:d3:15:2a:9d:da:8b:17:
         60:99:74:47:32:f1:c1:71:30:8a:b2:92:2a:f9:4a:d3:02:db:
         37:e6:5a:ca:74:1c:1f:2c:13:55:02:e7:49:c8:e8:2b:7a:c1:
         2f:fb:9a:8e:20:f0:6b:d4:7e:75:53:d3:cf:ef:c2:a4:b3:2b:
         0d:89:ea:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----