Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
File:                     88q2j7sMl5R2WUvfxWwZIEK43t8.mft (raw, json)
Hash identifier:          AwNZTV72n4yP/4ezUWhaMuTYLB8BJCHLDDJGybI2ZjU=
Subject key identifier:   9D:F6:54:E1:6D:2C:AD:A9:B8:34:EC:4F:67:C5:63:DF:A2:85:85:13
Authority key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
Certificate issuer:       /CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Certificate serial:       019E1BD8C15829D6DEAC4136536A670E243D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
Manifest number:          144D
Signing time:             Tue 12 May 2026 11:00:50 +0000
Manifest this update:     Tue 12 May 2026 11:00:50 +0000
Manifest next update:     Wed 13 May 2026 11:00:50 +0000
Files and hashes:         1: 88q2j7sMl5R2WUvfxWwZIEK43t8.crl (hash: n/8dN25A0GQOmpAa3xu8kX1JY52+U2KWDnIi22YBUCY=)
                          2: zRLI_XnW-YoHiodpzhxfbCWkVZo.roa (hash: I8VTCVMtI4awNqhceNYMKEzYn52i5zIhYy/GzccL/RM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:c1:58:29:d6:de:ac:41:36:53:6a:67:0e:24:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
        Validity
            Not Before: May 12 11:00:50 2026 GMT
            Not After : May 13 11:00:50 2026 GMT
        Subject: CN=9df654e16d2cada9b834ec4f67c563dfa2858513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:83:c4:3a:7a:bc:ad:47:a2:1d:90:62:a9:
                    af:87:77:cc:50:b7:08:9c:5a:ad:2e:c0:91:21:65:
                    0f:f7:05:a8:33:f5:b6:1e:e3:64:5f:6c:4e:f3:23:
                    f4:51:db:d6:e3:93:2b:4e:c2:59:f7:49:67:9d:a6:
                    ab:f8:b1:73:d9:80:bd:00:19:fb:12:a3:64:2a:2a:
                    56:61:6e:f6:80:87:6c:10:97:b7:30:24:a1:f2:73:
                    83:8d:34:1c:86:0f:05:02:0d:8a:a6:14:a4:f1:dd:
                    c6:ce:a0:8b:54:f1:aa:7b:3a:72:08:53:21:b5:92:
                    89:3a:e0:f8:a4:87:3c:22:b3:cf:7c:c6:5d:37:e6:
                    f9:86:34:60:58:ab:6d:37:89:a4:94:78:d8:d4:81:
                    2a:71:1c:4b:50:9b:22:50:e8:2d:b1:e8:3f:f8:f8:
                    d7:12:14:dd:5a:3a:52:d6:e7:ee:63:2f:95:c6:27:
                    67:15:04:d0:8c:08:70:14:58:92:e0:96:6b:e0:59:
                    39:83:17:5e:1c:d0:9a:ed:c9:e0:fd:f7:ed:bf:5e:
                    c3:ba:41:0d:3c:1f:42:34:46:6f:42:eb:29:b6:2a:
                    d5:54:20:e5:16:aa:4a:da:32:f6:86:41:bc:01:aa:
                    80:fe:29:16:c3:23:d5:14:fd:7a:a8:56:9c:cd:1b:
                    cb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F6:54:E1:6D:2C:AD:A9:B8:34:EC:4F:67:C5:63:DF:A2:85:85:13
            X509v3 Authority Key Identifier:
                keyid:F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ca:bf:f9:90:75:9f:7b:ba:c6:6e:2b:ff:4a:22:91:de:ac:
         1d:63:fa:f3:f2:6e:cb:82:b1:9a:6a:33:ba:c2:22:1e:93:d4:
         89:84:2f:a2:cc:a2:3b:9c:32:22:4b:10:f7:32:f6:3c:50:4f:
         98:89:95:65:a9:9b:b6:4a:56:ae:8c:97:d5:47:90:6d:7b:3a:
         59:85:9d:9b:aa:e1:ea:da:ac:44:e6:d5:07:37:ed:29:fa:6c:
         9d:fe:53:c5:be:e8:25:7c:44:38:53:d2:2e:ac:32:c6:bf:d0:
         c1:04:8c:30:93:f6:22:c6:b9:6e:65:af:f3:9f:86:c2:94:fb:
         0b:57:b2:10:04:f1:0c:78:c9:74:03:9a:e8:5f:53:6e:45:c9:
         96:31:17:b4:20:8b:28:35:a8:5a:de:0a:f5:6f:36:0d:72:99:
         80:f4:93:01:76:2f:ff:8c:28:5a:ed:56:7e:80:f7:72:73:68:
         8a:5a:16:ef:25:17:f6:30:95:35:8d:9e:63:8b:f8:62:b3:bc:
         48:a3:99:f1:33:9e:00:88:4c:9f:0e:25:1a:14:52:28:77:bf:
         06:04:3f:7d:2e:ca:fd:5b:c7:64:5d:54:c6:9b:39:73:83:d3:
         f5:92:4d:e4:47:7a:76:5b:1e:89:78:71:b8:94:56:62:ca:ef:
         38:81:d1:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2MFYKdberEE2U2pnDiQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzY2FiNjhmYmIwYzk3OTQ3NjU5NGJkZmM1NmMxOTIwNDJi
OGRlZGYwHhcNMjYwNTEyMTEwMDUwWhcNMjYwNTEzMTEwMDUwWjAzMTEwLwYDVQQD
Eyg5ZGY2NTRlMTZkMmNhZGE5YjgzNGVjNGY2N2M1NjNkZmEyODU4NTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIODxDp6vK1Hoh2QYqmvh3fMULcI
nFqtLsCRIWUP9wWoM/W2HuNkX2xO8yP0UdvW45MrTsJZ90lnnaar+LFz2YC9ABn7
EqNkKipWYW72gIdsEJe3MCSh8nODjTQchg8FAg2KphSk8d3GzqCLVPGqezpyCFMh
tZKJOuD4pIc8IrPPfMZdN+b5hjRgWKttN4mklHjY1IEqcRxLUJsiUOgtseg/+PjX
EhTdWjpS1ufuYy+VxidnFQTQjAhwFFiS4JZr4Fk5gxdeHNCa7cng/fftv17DukEN
PB9CNEZvQusptirVVCDlFqpK2jL2hkG8AaqA/ikWwyPVFP16qFaczRvLnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ32VOFtLK2puDTsT2fFY9+ihYUTMB8GA1UdIwQY
MBaAFPPKto+7DJeUdllL38VsGSBCuN7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9hNDQzMzUtNDE0Zi00NDc5LWE3ZmUt
YWE0YTgxYTJlYjIzLzEvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9hNDQzMzUtNDE0Zi00NDc5LWE3ZmUtYWE0YTgxYTJlYjIz
LzEvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMq/+ZB1
n3u6xm4r/0oikd6sHWP68/Juy4KxmmozusIiHpPUiYQvosyiO5wyIksQ9zL2PFBP
mImVZambtkpWroyX1UeQbXs6WYWdm6rh6tqsRObVBzftKfpsnf5Txb7oJXxEOFPS
Lqwyxr/QwQSMMJP2Isa5bmWv85+GwpT7C1eyEATxDHjJdAOa6F9TbkXJljEXtCCL
KDWoWt4K9W82DXKZgPSTAXYv/4woWu1WfoD3cnNoiloW7yUX9jCVNY2eY4v4YrO8
SKOZ8TOeAIhMnw4lGhRSKHe/BgQ/fS7K/VvHZF1Uxps5c4PT9ZJN5Ed6dlseiXhx
uJRWYsrvOIHRFg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:12:39 2026 by rpki-client