Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
File:                     088IhJGKUCOe9wUY7p_ATxquGSk.mft (raw, json)
Hash identifier:          vwdpMWzOVaYP0y4iiX4fC5GLiFefirQsY8oMjeCTvp4=
Subject key identifier:   D8:F3:38:E6:82:4C:14:BB:CD:33:49:C0:3B:5A:3E:07:F1:0A:C5:37
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       019E1F10B9EBC4A9392257125312C54D491D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
Manifest number:          1620
Signing time:             Wed 13 May 2026 02:00:50 +0000
Manifest this update:     Wed 13 May 2026 02:00:50 +0000
Manifest next update:     Thu 14 May 2026 02:00:50 +0000
Files and hashes:         1: 088IhJGKUCOe9wUY7p_ATxquGSk.crl (hash: hDwMsKU1pNtsutwxzQzJ0dv//Hg3HG7q4iyXulg7W4E=)
                          2: 0P-3rcHOACQuATcCi6YZ2CE4KUs.roa (hash: QhfIbf/0f7+LXQU09PxZuXp7pk5C+r/mb2fH3ZziPpo=)
                          3: 1-LNpy_9Mxi9-cSdEi-yilq2_8kc.roa (hash: lfO/LT2x9VGedw1VsT/xMSQrjFJ4WPeZ0phXQ/kch1M=)
                          4: 3yqY5SvToLfZgepFACwyBjL-zFo.roa (hash: wPLqiTKB4xGPpL698mzeVXK6/QJjhoff1a4PO54Mt18=)
                          5: 60GOELdjS90NT3HQ_TIoDBw9jEk.roa (hash: IW0Ztpf+iEizLk7FQFYzJWbHIwryvkyhellMGX52v2I=)
                          6: 8mWxZpiqXYwc3d_MoBh2vXCPi7w.roa (hash: NA3FUqEHCIv+2pO01YQheP5r4xdrvQYz2f0gz7kHjsU=)
                          7: 9gkVLjQzq4u9eTX55rvk0NRZzEY.roa (hash: hZcBmw4SfsEaoWkS6rx82VJEEjBl8KNeB0BbircjJCI=)
                          8: 9iqwdaCRzSRIxnzSgyEccwLudSU.roa (hash: vtDO+B+GX5SlLOFMYIE8Ci1O1zFTg8MXYIybeCYQQE4=)
                          9: EF_U3I32Y5RdvbXqEmBTtMapEa8.roa (hash: sIzDhi/oGDul4JL44c5eU+5E68fjPASfb0dG/ED5Apo=)
                          10: EU_6MN_MJZf3XRvVIUEOVYwgNZo.roa (hash: +IXgSVtEGOzuUxPa9aH2GgJttKlcpQRRHhr1qNoMAVo=)
                          11: J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa (hash: FKxKvjF1JzeJzc8Sp0aqMCubfckNp685W71oTKnizHk=)
                          12: JPRtkRaGLX8Sd_ysZrubpWz0xYM.roa (hash: /tEAJ46NXYsM46R5h8KTQIDrS2PgaLQ7LUufmgioS5U=)
                          13: NzAk-80nwPdjRSk-yqn0f6awD3I.roa (hash: B2xJIZWaHgJcCEl3z4yTLYWzhZNQ3HmrXXt9vIP7yqE=)
                          14: OzhFXyA00__fB9uqQwmcQCQoW60.roa (hash: YreChcYbjgaAA/VikyB8vGg4JvPSy0BjCfmeSLJ9984=)
                          15: PIrMEQyjvVKVeYvRJpXPZ61vDvI.roa (hash: H9cZ2L0KfruHg2t6PS78Ci9ZD3D4RvqB2QYXRdEkt/A=)
                          16: U3F62El3OIEqW3KXZWmF_5bSigk.roa (hash: vh0hdNyMtsy8yAJ2NzDkEticxSoHEnjSNclAx2pivbQ=)
                          17: VkulKwUg_3D5a5C_XMguFPuuovs.roa (hash: ukZGSfogs8eOKOJ2IJp59rkqPs02ZF4OPCzRv9uqSZ8=)
                          18: VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa (hash: 6a+0n7mpiIWJEPucvAzN+o4GClMdMMmNiUmB8fyQrBA=)
                          19: WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa (hash: yw4nxSJREFGrZikTrUVlUy5RTgIv56y0p0rAhpqXE4c=)
                          20: WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa (hash: ZDOH3SbLFKGU8X90UiFNgo5Q8Khx3+l4WVcSKcUyYEE=)
                          21: dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa (hash: PugPXuIpHhuRLO5S2LsWJizw062WbL+JSrm19YubtaQ=)
                          22: dhGTZrzAMxCoHl02uEnVYrcP8uY.roa (hash: frqEXDNzuadrbN8XUuh3gnDUTuujf4zMJynToQhVp5o=)
                          23: ef0q43f7LAeuo-FDNR4YuVz3rVk.roa (hash: ynkAymfoAKqGAiHb/45NVf5BEsff36expTSHfTcbGpM=)
                          24: fDBBivGd09DklPLRXv-2xMOMQEU.roa (hash: UvvC0PLHqkR9m8HGTqV3Lx3SdupKGUhgBV//jb/1IQA=)
                          25: hX2Lx3ZRXJhz5te91S_u82NAyqI.roa (hash: Z9Aqux701iyj0hKmcrZefV63BZnWhUv9h+YQa7uyK+o=)
                          26: lAmmWkGs5LyT9RfeItAfnxG8bbk.roa (hash: RNfEw57sbZCxkqzkR0v73gb4yT9D3HTLUkHXy1rWdGw=)
                          27: n-Y7var7zwzFMfuvLacvdqsoTk4.roa (hash: jYJTpN60GnROWfT9uULFABE6OlzcikzLuwW0K2UstEw=)
                          28: pGdakkFya_8KFAcwcCfw9mQMsfM.roa (hash: 7HU/UMagkX6Kk/cYXVxJtnGPyAPxvkR9i/Ymcq1RhFU=)
                          29: p_i5f8sUouD8T2guoP56z8DfSZQ.roa (hash: xamhxEmVDEB79em0Q1NxLo3vFtG79lojzbnDtwExQao=)
                          30: pxR405YISr-FctI8NX7Q4bD6gEU.roa (hash: XtQdAGk7qomly3oH9IhnMKYdpq/Ak4fYbIVYvmRiWfg=)
                          31: qVYl2gaC1o0QPGWKC8uPavjq7q4.roa (hash: N5USX4HmmcxvOGVDo+fCpGoOKoXPYdIuEyuWXJTwzwQ=)
                          32: rEJ3nr5rpLR9k-3rueCVtCAovZM.roa (hash: MPpvJzK37AFcgAzt3XzDw1Rx/WuVzYs9n0C6B0TdB+4=)
                          33: ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa (hash: F0kCXnimtG8KC6nSV0eR4+hm5V66V2fgM8EiOJj/7S0=)
                          34: u4owkfbGQjlZ17TauPKELfGr4-A.roa (hash: Z+tEIRfGIZ+WLPFWkpQEZw9hlIWNtzCNJGfQfR5ByHc=)
                          35: vLKvBp7s_vQg80ENAN920xq_l7s.roa (hash: 4umZU4nwWtNJV6IS8ogExdebn9ebjxpA6e0GGD2Bm3U=)
                          36: vZjxFUtUFk_VcZ6DkCLGhoqIVgs.roa (hash: qFpiFefYJJaQqMk+axueFNG7oyxnU+z9sgqEjIpr44k=)
                          37: wAY5XuB45x4wJW7P8rfB4j4exyw.roa (hash: EyRdGq3OnE9JKFrNRIEE2sn/Nvgcr+BeZbnGqbJfWwQ=)
                          38: xbj5hdRf6FBr1n9agV8FWFcSS-M.roa (hash: FTolabkCiVcY/3NMmDQy622GW30z82c9UqmDuGHFc2U=)
                          39: y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa (hash: +bgaJGwbwdu0EcyrfjZn/ea+UaB9pY4KH5HlNs3s2VE=)
                          40: ypPsYdz2SbWvNH77QQl1wDRnDA8.roa (hash: ZzKlsMMsjohWKmB/AWbRxRQA46JAwN5yMSWLeFcXstE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:b9:eb:c4:a9:39:22:57:12:53:12:c5:4d:49:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: May 13 02:00:50 2026 GMT
            Not After : May 14 02:00:50 2026 GMT
        Subject: CN=d8f338e6824c14bbcd3349c03b5a3e07f10ac537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:8e:ab:a3:88:4a:b0:4e:c2:02:ea:62:63:
                    4d:28:9f:20:70:09:17:40:08:ca:6f:03:f8:d5:b3:
                    43:9b:38:83:d5:b5:f5:76:71:6e:8f:5d:f4:26:ac:
                    14:8d:0c:f3:fd:53:ef:0c:38:bb:fe:d6:9e:30:3b:
                    f1:80:cc:0e:8b:03:90:28:a1:ac:13:82:e6:85:87:
                    94:4b:e6:85:7e:39:c3:84:52:1e:ea:06:4e:51:f5:
                    cc:95:99:44:fe:c2:b3:28:88:5d:45:3e:4a:62:92:
                    58:72:e5:b4:f1:0f:c2:f6:66:91:70:67:9c:ff:f7:
                    07:68:97:80:cb:85:0a:28:48:dd:39:6f:c0:9c:48:
                    6f:ed:a7:c3:db:11:42:54:e3:b9:58:a3:38:89:f7:
                    24:c9:c1:14:03:3e:04:18:df:b2:fc:c0:45:f1:6a:
                    6e:25:ea:91:0c:c1:35:47:70:70:96:c1:a8:e7:2f:
                    5d:67:d6:83:44:69:06:ff:4d:bd:19:be:fa:1e:11:
                    dc:68:ce:a6:12:4c:b9:29:d3:97:d7:e5:80:ba:06:
                    e2:07:f4:2a:a9:77:d3:5e:d5:54:79:74:b8:d5:3c:
                    a7:3e:b7:c9:3f:a9:d5:cf:97:bd:cc:0f:21:d8:73:
                    39:f6:a8:b9:5e:e6:10:96:20:c2:52:68:c5:f1:d1:
                    6c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F3:38:E6:82:4C:14:BB:CD:33:49:C0:3B:5A:3E:07:F1:0A:C5:37
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:02:1a:7f:98:82:9a:57:64:53:6e:fc:bf:04:8f:f4:c9:f8:
         4f:4a:4c:60:c9:47:7a:d3:82:f2:b8:b9:aa:1f:50:9f:2a:6b:
         8f:86:47:88:8c:a2:be:a7:c9:20:e7:05:0f:ce:35:6b:80:a2:
         9a:06:34:b4:34:37:02:7e:32:66:9f:80:d2:6d:31:94:3e:86:
         85:66:8e:7a:dc:64:c9:2f:1f:61:56:e1:f4:69:9e:4e:27:70:
         28:5a:fd:76:a8:df:54:70:14:d6:f3:6f:ba:b2:93:2c:06:1d:
         f4:cf:1a:55:f6:f8:56:ac:14:e0:d2:dd:d3:e6:09:e0:a3:94:
         3f:e3:8c:1c:98:c2:81:98:fc:64:4a:02:ce:62:7a:fd:7e:05:
         c9:ec:60:63:5e:b7:d7:81:d0:45:4b:9e:8f:26:a5:f2:70:6f:
         4f:da:3f:de:79:5d:cf:79:50:3b:60:85:ef:ec:05:42:27:d5:
         2f:a3:68:ae:7d:40:81:46:cf:34:14:8b:a4:ef:15:79:7a:e0:
         19:86:37:6d:7d:92:d7:ff:66:fb:50:bf:2a:69:62:9b:46:7f:
         00:7c:f6:f6:32:57:c4:11:ef:62:28:e8:f0:f4:bf:34:36:f7:
         b9:ef:8d:ab:26:cd:6f:58:27:4c:89:c5:bd:d1:22:8f:ea:fc:
         60:80:8f:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fELnrxKk5IlcSUxLFTUkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjYwNTEzMDIwMDUwWhcNMjYwNTE0MDIwMDUwWjAzMTEwLwYDVQQD
EyhkOGYzMzhlNjgyNGMxNGJiY2QzMzQ5YzAzYjVhM2UwN2YxMGFjNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rKOq6OISrBOwgLqYmNNKJ8gcAkX
QAjKbwP41bNDmziD1bX1dnFuj130JqwUjQzz/VPvDDi7/taeMDvxgMwOiwOQKKGs
E4LmhYeUS+aFfjnDhFIe6gZOUfXMlZlE/sKzKIhdRT5KYpJYcuW08Q/C9maRcGec
//cHaJeAy4UKKEjdOW/AnEhv7afD2xFCVOO5WKM4ifckycEUAz4EGN+y/MBF8Wpu
JeqRDME1R3BwlsGo5y9dZ9aDRGkG/029Gb76HhHcaM6mEky5KdOX1+WAugbiB/Qq
qXfTXtVUeXS41TynPrfJP6nVz5e9zA8h2HM59qi5XuYQliDCUmjF8dFsaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjzOOaCTBS7zTNJwDtaPgfxCsU3MB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwIaf5iC
mldkU278vwSP9Mn4T0pMYMlHetOC8ri5qh9Qnyprj4ZHiIyivqfJIOcFD841a4Ci
mgY0tDQ3An4yZp+A0m0xlD6GhWaOetxkyS8fYVbh9GmeTidwKFr9dqjfVHAU1vNv
urKTLAYd9M8aVfb4VqwU4NLd0+YJ4KOUP+OMHJjCgZj8ZEoCzmJ6/X4FyexgY163
14HQRUuejyal8nBvT9o/3nldz3lQO2CF7+wFQifVL6Norn1AgUbPNBSLpO8VeXrg
GYY3bX2S1/9m+1C/Kmlim0Z/AHz29jJXxBHvYijo8PS/NDb3ue+NqybNb1gnTInF
vdEij+r8YICP1A==
-----END CERTIFICATE-----
Generated at Wed May 13 09:21:51 2026 by rpki-client