Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
File:                     88q2j7sMl5R2WUvfxWwZIEK43t8.mft (raw, json)
Hash identifier:          pXfGON9ATI8rz9DIFDMd30OFCnwOzpSK6wtsTWrCnz8=
Subject key identifier:   E7:84:8E:C0:3E:FA:EF:6B:17:18:34:0E:41:AB:68:EE:64:39:F4:11
Authority key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
Certificate issuer:       /CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Certificate serial:       019F9090DB67C101550BF03B7DE4556C9A22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
Manifest number:          150E
Signing time:             Thu 23 Jul 2026 20:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:40 +0000
Files and hashes:         1: 88q2j7sMl5R2WUvfxWwZIEK43t8.crl (hash: 0+VX79pMr+MHGc/Qn6VQ1H49YpX7UHmkWviZIWnLayE=)
                          2: zRLI_XnW-YoHiodpzhxfbCWkVZo.roa (hash: I8VTCVMtI4awNqhceNYMKEzYn52i5zIhYy/GzccL/RM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:db:67:c1:01:55:0b:f0:3b:7d:e4:55:6c:9a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
        Validity
            Not Before: Jul 23 20:00:40 2026 GMT
            Not After : Jul 24 20:00:40 2026 GMT
        Subject: CN=e7848ec03efaef6b1718340e41ab68ee6439f411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:8e:b9:e9:75:cb:61:42:7a:9b:1d:52:07:
                    df:55:2e:71:14:34:23:5d:98:d7:09:56:8a:c8:39:
                    e4:c4:b6:bd:69:d9:51:f6:15:80:8c:9b:17:46:b1:
                    a3:fb:92:3f:fc:58:8a:2f:46:8b:65:30:10:08:ba:
                    82:32:55:75:c9:bc:31:b0:4a:14:5b:a6:76:99:74:
                    11:3d:b4:40:f2:d1:d0:57:3b:bc:c2:0a:23:bd:9e:
                    99:9f:1f:2f:a2:a1:13:c9:b8:9d:ad:db:d0:0a:55:
                    aa:65:fd:f4:9c:09:60:11:a4:9b:d3:78:32:3c:b7:
                    4d:15:55:70:dd:c4:8a:e5:fe:80:72:66:70:94:cc:
                    85:2a:91:8b:76:b1:bd:9e:d3:12:44:72:26:d8:71:
                    26:e6:ae:9a:e2:ff:e4:4d:c4:a8:70:fe:6c:14:39:
                    64:76:5a:f1:46:77:6c:13:ac:7b:85:2e:0d:4f:42:
                    f5:02:9f:39:05:fc:6f:96:36:72:b9:00:5d:1c:8d:
                    91:8a:3c:36:d5:b9:53:38:c4:5a:7c:84:91:6b:31:
                    96:bf:e1:9f:04:70:7b:fb:ec:d4:d0:67:6c:06:9b:
                    ef:a3:32:b3:70:3f:45:7b:8d:f3:e5:15:ee:c4:0a:
                    7f:d8:d1:aa:ce:f1:cb:00:58:1b:4a:14:5f:57:dc:
                    b3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:84:8E:C0:3E:FA:EF:6B:17:18:34:0E:41:AB:68:EE:64:39:F4:11
            X509v3 Authority Key Identifier:
                keyid:F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4d:38:80:ef:0c:35:b5:7a:73:f2:fa:97:e2:5d:43:74:bb:
         db:b7:6f:fd:d6:e0:16:43:b8:d8:da:1b:5f:3d:8c:c0:ad:8b:
         af:15:a3:0d:e3:24:c3:db:8e:05:6b:9b:82:d5:c6:0d:f9:7e:
         f9:6d:62:e5:2b:20:94:d4:3a:53:f0:1a:0d:8c:f3:48:5c:b5:
         77:10:d1:76:c5:48:58:15:04:d7:c1:ea:ed:77:2b:60:6c:ef:
         0f:bc:67:7a:9b:f5:7e:bb:6e:c9:56:1d:e5:ff:da:85:5d:22:
         9c:c9:b2:73:1b:76:24:49:40:68:98:47:58:1e:c0:7a:16:5b:
         ca:38:77:c3:11:47:c8:58:08:22:19:7d:c0:32:af:fc:ca:a1:
         eb:0c:58:b2:09:3f:98:47:7c:97:44:28:4d:b4:8c:aa:43:a5:
         aa:01:d1:ab:e2:49:4a:69:ba:a4:51:09:29:8f:22:4e:0b:63:
         5b:2a:a4:68:b7:83:e4:d9:fe:a9:83:49:63:f5:3a:f8:2b:f4:
         4a:f5:bc:67:99:a2:36:0a:05:38:07:93:eb:ed:a3:70:75:5e:
         42:53:71:46:9d:4a:b7:54:fc:ed:be:44:58:f7:dd:5b:6e:1f:
         55:29:bd:2e:cd:b9:1f:be:3a:ea:c2:0b:73:c3:3c:c5:be:b7:
         9c:0d:f8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:11 2026 by rpki-client