Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
File:                     088IhJGKUCOe9wUY7p_ATxquGSk.mft (raw, json)
Hash identifier:          SJA/zte87YT59TFzlKs2LIHJn8WhosJGBkaxaQzm6WI=
Subject key identifier:   62:9D:7C:31:EA:AA:1E:F1:F2:12:EC:8B:07:E2:5F:FB:FA:BA:74:76
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       019F92B605971BDA06A511B1956EB7335407
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
Manifest number:          1701
Signing time:             Fri 24 Jul 2026 06:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:30 +0000
Files and hashes:         1: 088IhJGKUCOe9wUY7p_ATxquGSk.crl (hash: pk2Gu4DNTfqvkF6oKLhB3TAmXnTpJgxwcInppac5DZM=)
                          2: 3yqY5SvToLfZgepFACwyBjL-zFo.roa (hash: wPLqiTKB4xGPpL698mzeVXK6/QJjhoff1a4PO54Mt18=)
                          3: 60GOELdjS90NT3HQ_TIoDBw9jEk.roa (hash: IW0Ztpf+iEizLk7FQFYzJWbHIwryvkyhellMGX52v2I=)
                          4: 8mWxZpiqXYwc3d_MoBh2vXCPi7w.roa (hash: NA3FUqEHCIv+2pO01YQheP5r4xdrvQYz2f0gz7kHjsU=)
                          5: 9EtuXpMLZ6sQQPEORkpOUuNq7kA.roa (hash: jJcZdafCJvTzptVALUPjvYgNWN2W1aePSl9m2ANl5Pk=)
                          6: 9gkVLjQzq4u9eTX55rvk0NRZzEY.roa (hash: hZcBmw4SfsEaoWkS6rx82VJEEjBl8KNeB0BbircjJCI=)
                          7: 9iqwdaCRzSRIxnzSgyEccwLudSU.roa (hash: vtDO+B+GX5SlLOFMYIE8Ci1O1zFTg8MXYIybeCYQQE4=)
                          8: EU_6MN_MJZf3XRvVIUEOVYwgNZo.roa (hash: +IXgSVtEGOzuUxPa9aH2GgJttKlcpQRRHhr1qNoMAVo=)
                          9: J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa (hash: FKxKvjF1JzeJzc8Sp0aqMCubfckNp685W71oTKnizHk=)
                          10: JPRtkRaGLX8Sd_ysZrubpWz0xYM.roa (hash: /tEAJ46NXYsM46R5h8KTQIDrS2PgaLQ7LUufmgioS5U=)
                          11: Mtto9APSXeMK6qSvjzFfOWYViWU.roa (hash: xlt+l3cYtMOdub3uBqf8YZQOdlMClw7bBDgXn7x4j6s=)
                          12: NS5ldcKq1LzOVk57QBl78tAnglo.roa (hash: NLCMAf6L81UDBfmrt98wVbe31nVEYXW+pY5vNtXwIxQ=)
                          13: NzAk-80nwPdjRSk-yqn0f6awD3I.roa (hash: B2xJIZWaHgJcCEl3z4yTLYWzhZNQ3HmrXXt9vIP7yqE=)
                          14: OUXOVX4ZwYpcYII06RIHHPvCyC8.roa (hash: H+nyalyzD20UhvUg0p3R08LevNAe9HuM/dHZvBKthbE=)
                          15: OzhFXyA00__fB9uqQwmcQCQoW60.roa (hash: YreChcYbjgaAA/VikyB8vGg4JvPSy0BjCfmeSLJ9984=)
                          16: Pt0g1cDZrNAna_HmJa7FdYBFHVQ.roa (hash: 3nbeebiCdKVabOkCTyjek3G0hTm2ELIk8OypLJ98YYY=)
                          17: U3F62El3OIEqW3KXZWmF_5bSigk.roa (hash: vh0hdNyMtsy8yAJ2NzDkEticxSoHEnjSNclAx2pivbQ=)
                          18: VkulKwUg_3D5a5C_XMguFPuuovs.roa (hash: ukZGSfogs8eOKOJ2IJp59rkqPs02ZF4OPCzRv9uqSZ8=)
                          19: VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa (hash: 6a+0n7mpiIWJEPucvAzN+o4GClMdMMmNiUmB8fyQrBA=)
                          20: WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa (hash: yw4nxSJREFGrZikTrUVlUy5RTgIv56y0p0rAhpqXE4c=)
                          21: WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa (hash: ZDOH3SbLFKGU8X90UiFNgo5Q8Khx3+l4WVcSKcUyYEE=)
                          22: Xix1gQ4ef2uHYJ4159fOPL3UDI0.roa (hash: zJlLvJZCYRH3Ky1xrz93dPbSl17QsTeAJvFBEc1Z8LA=)
                          23: dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa (hash: PugPXuIpHhuRLO5S2LsWJizw062WbL+JSrm19YubtaQ=)
                          24: dhGTZrzAMxCoHl02uEnVYrcP8uY.roa (hash: frqEXDNzuadrbN8XUuh3gnDUTuujf4zMJynToQhVp5o=)
                          25: ef0q43f7LAeuo-FDNR4YuVz3rVk.roa (hash: ynkAymfoAKqGAiHb/45NVf5BEsff36expTSHfTcbGpM=)
                          26: fDBBivGd09DklPLRXv-2xMOMQEU.roa (hash: UvvC0PLHqkR9m8HGTqV3Lx3SdupKGUhgBV//jb/1IQA=)
                          27: hX2Lx3ZRXJhz5te91S_u82NAyqI.roa (hash: Z9Aqux701iyj0hKmcrZefV63BZnWhUv9h+YQa7uyK+o=)
                          28: izV_z0wbEXeZhhS55-dpEoufx1g.roa (hash: aFKhblp9l65F1faFYsR0QfxtIJjtcnkfJb7Y60QKQik=)
                          29: lAmmWkGs5LyT9RfeItAfnxG8bbk.roa (hash: RNfEw57sbZCxkqzkR0v73gb4yT9D3HTLUkHXy1rWdGw=)
                          30: n-Y7var7zwzFMfuvLacvdqsoTk4.roa (hash: jYJTpN60GnROWfT9uULFABE6OlzcikzLuwW0K2UstEw=)
                          31: pGdakkFya_8KFAcwcCfw9mQMsfM.roa (hash: 7HU/UMagkX6Kk/cYXVxJtnGPyAPxvkR9i/Ymcq1RhFU=)
                          32: p_i5f8sUouD8T2guoP56z8DfSZQ.roa (hash: xamhxEmVDEB79em0Q1NxLo3vFtG79lojzbnDtwExQao=)
                          33: pxR405YISr-FctI8NX7Q4bD6gEU.roa (hash: XtQdAGk7qomly3oH9IhnMKYdpq/Ak4fYbIVYvmRiWfg=)
                          34: qVYl2gaC1o0QPGWKC8uPavjq7q4.roa (hash: N5USX4HmmcxvOGVDo+fCpGoOKoXPYdIuEyuWXJTwzwQ=)
                          35: rEJ3nr5rpLR9k-3rueCVtCAovZM.roa (hash: MPpvJzK37AFcgAzt3XzDw1Rx/WuVzYs9n0C6B0TdB+4=)
                          36: ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa (hash: F0kCXnimtG8KC6nSV0eR4+hm5V66V2fgM8EiOJj/7S0=)
                          37: vZjxFUtUFk_VcZ6DkCLGhoqIVgs.roa (hash: qFpiFefYJJaQqMk+axueFNG7oyxnU+z9sgqEjIpr44k=)
                          38: vngFOmM8F-I34UP1XtfkKo4AgEQ.roa (hash: 1Ru4gPZOefQrxrqA1R4SUrRycdaiRzteoC+xNeY+cK4=)
                          39: wAY5XuB45x4wJW7P8rfB4j4exyw.roa (hash: EyRdGq3OnE9JKFrNRIEE2sn/Nvgcr+BeZbnGqbJfWwQ=)
                          40: xbj5hdRf6FBr1n9agV8FWFcSS-M.roa (hash: FTolabkCiVcY/3NMmDQy622GW30z82c9UqmDuGHFc2U=)
                          41: y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa (hash: +bgaJGwbwdu0EcyrfjZn/ea+UaB9pY4KH5HlNs3s2VE=)
                          42: ypPsYdz2SbWvNH77QQl1wDRnDA8.roa (hash: ZzKlsMMsjohWKmB/AWbRxRQA46JAwN5yMSWLeFcXstE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:05:97:1b:da:06:a5:11:b1:95:6e:b7:33:54:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jul 24 06:00:30 2026 GMT
            Not After : Jul 25 06:00:30 2026 GMT
        Subject: CN=629d7c31eaaa1ef1f212ec8b07e25ffbfaba7476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:22:5f:27:ca:17:63:e5:c7:6a:3a:f7:db:
                    7e:cf:2b:16:5a:94:c9:c2:56:a6:c3:74:51:43:ba:
                    31:2e:05:5c:8b:d6:aa:d9:3a:c7:1f:d5:04:d1:38:
                    8f:3b:4f:c6:d8:01:0d:fb:12:94:36:6a:fe:49:dc:
                    c3:f2:e5:67:7f:0c:f8:45:80:6e:f6:a7:18:46:f7:
                    0e:ad:18:bb:e4:65:08:29:ae:9b:9c:e1:b9:41:14:
                    45:88:2f:18:cf:6d:be:33:f1:51:bf:5f:0c:bd:9c:
                    f8:b0:21:f7:95:9e:bb:3c:c7:82:84:36:85:98:da:
                    8b:e8:78:ab:0a:1f:0f:c0:c9:6f:a4:be:d8:25:0f:
                    09:c3:fd:e0:d3:f3:d3:13:81:6e:74:fe:ad:6e:8d:
                    8d:2e:86:34:a4:7b:72:fe:09:bd:9e:12:2d:31:13:
                    43:25:18:da:5f:97:93:36:38:01:ef:95:9f:97:6f:
                    76:ec:9d:7b:31:ee:f6:11:50:a7:d4:f1:2b:15:b1:
                    84:4f:31:da:b0:a0:43:bd:ad:49:a6:42:96:1f:f6:
                    d6:b0:a8:a8:da:92:00:39:a8:2f:20:0f:94:7e:24:
                    87:33:bb:16:53:ab:6b:b6:6e:41:7e:0b:a3:4f:e8:
                    71:0b:3d:92:b8:52:68:61:1e:7b:94:db:61:5a:87:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9D:7C:31:EA:AA:1E:F1:F2:12:EC:8B:07:E2:5F:FB:FA:BA:74:76
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c2:1e:25:1a:22:c6:95:1f:f7:af:01:be:86:cd:d7:54:37:
         b6:97:a6:01:e1:85:d6:03:cd:2e:2f:21:60:70:c9:11:3a:29:
         32:33:ee:44:23:67:1a:6a:ba:04:5e:6b:8c:b2:8d:c9:dd:5b:
         14:69:b7:61:63:14:d7:8d:d8:ba:04:d6:b4:7b:1e:b3:54:06:
         a3:e1:05:4e:aa:11:16:e3:e4:b9:0d:63:1f:2e:ae:5c:7d:45:
         8e:71:e5:57:85:81:c3:0e:bd:2b:a4:07:f0:fa:49:0e:8e:96:
         a9:5b:44:d8:22:e7:38:d9:5b:b7:8d:5b:4b:62:96:ff:8c:64:
         e5:75:b5:d5:3e:76:e2:7b:6b:ce:20:60:61:15:e3:2a:a9:8a:
         ee:b6:c2:df:4b:f0:19:21:71:8e:ed:e8:f2:fb:b5:93:95:4d:
         13:11:96:1a:4c:32:f1:b6:ca:94:a2:95:d6:78:43:df:67:62:
         c3:2c:7f:97:69:d6:55:bf:01:15:0f:89:dc:35:67:d4:e9:97:
         a5:22:6f:e2:04:e5:fb:46:eb:1b:fa:e1:ff:a3:ce:1a:4c:7d:
         9f:ea:f5:86:f1:ec:16:17:85:39:7c:7c:7d:ab:42:df:3d:46:
         cc:9d:c5:76:a9:c4:69:9a:e5:7f:74:69:07:62:93:41:68:58:
         d1:a1:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:20:26 2026 by rpki-client