Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
File:                     088IhJGKUCOe9wUY7p_ATxquGSk.mft (raw, json)
Hash identifier:          QLqoOuX5+tIAdau/YVt2gOX+jkeDLvo4zATX7dY9Yi8=
Subject key identifier:   5D:9E:2B:49:6B:01:3E:2C:E8:9F:A9:01:4D:C3:83:EB:D3:F2:31:FB
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       01A0D3EF60B104F10F4FA06A26E44FAE9C70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
Manifest number:          17AF
Signing time:             Thu 24 Sep 2026 15:01:15 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:15 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:15 +0000
Files and hashes:         1: 088IhJGKUCOe9wUY7p_ATxquGSk.crl (hash: UaS46y5SZ3wCq6rGfWWtIAptBajLwlADW8BTe5v1yOw=)
                          2: 3yqY5SvToLfZgepFACwyBjL-zFo.roa (hash: wPLqiTKB4xGPpL698mzeVXK6/QJjhoff1a4PO54Mt18=)
                          3: 60GOELdjS90NT3HQ_TIoDBw9jEk.roa (hash: IW0Ztpf+iEizLk7FQFYzJWbHIwryvkyhellMGX52v2I=)
                          4: 9EtuXpMLZ6sQQPEORkpOUuNq7kA.roa (hash: jJcZdafCJvTzptVALUPjvYgNWN2W1aePSl9m2ANl5Pk=)
                          5: 9gkVLjQzq4u9eTX55rvk0NRZzEY.roa (hash: hZcBmw4SfsEaoWkS6rx82VJEEjBl8KNeB0BbircjJCI=)
                          6: 9iqwdaCRzSRIxnzSgyEccwLudSU.roa (hash: vtDO+B+GX5SlLOFMYIE8Ci1O1zFTg8MXYIybeCYQQE4=)
                          7: J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa (hash: FKxKvjF1JzeJzc8Sp0aqMCubfckNp685W71oTKnizHk=)
                          8: JPRtkRaGLX8Sd_ysZrubpWz0xYM.roa (hash: /tEAJ46NXYsM46R5h8KTQIDrS2PgaLQ7LUufmgioS5U=)
                          9: Mtto9APSXeMK6qSvjzFfOWYViWU.roa (hash: xlt+l3cYtMOdub3uBqf8YZQOdlMClw7bBDgXn7x4j6s=)
                          10: NS5ldcKq1LzOVk57QBl78tAnglo.roa (hash: NLCMAf6L81UDBfmrt98wVbe31nVEYXW+pY5vNtXwIxQ=)
                          11: NzAk-80nwPdjRSk-yqn0f6awD3I.roa (hash: B2xJIZWaHgJcCEl3z4yTLYWzhZNQ3HmrXXt9vIP7yqE=)
                          12: OUXOVX4ZwYpcYII06RIHHPvCyC8.roa (hash: H+nyalyzD20UhvUg0p3R08LevNAe9HuM/dHZvBKthbE=)
                          13: OzhFXyA00__fB9uqQwmcQCQoW60.roa (hash: YreChcYbjgaAA/VikyB8vGg4JvPSy0BjCfmeSLJ9984=)
                          14: U3F62El3OIEqW3KXZWmF_5bSigk.roa (hash: vh0hdNyMtsy8yAJ2NzDkEticxSoHEnjSNclAx2pivbQ=)
                          15: VkulKwUg_3D5a5C_XMguFPuuovs.roa (hash: ukZGSfogs8eOKOJ2IJp59rkqPs02ZF4OPCzRv9uqSZ8=)
                          16: VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa (hash: 6a+0n7mpiIWJEPucvAzN+o4GClMdMMmNiUmB8fyQrBA=)
                          17: WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa (hash: yw4nxSJREFGrZikTrUVlUy5RTgIv56y0p0rAhpqXE4c=)
                          18: WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa (hash: ZDOH3SbLFKGU8X90UiFNgo5Q8Khx3+l4WVcSKcUyYEE=)
                          19: Xix1gQ4ef2uHYJ4159fOPL3UDI0.roa (hash: zJlLvJZCYRH3Ky1xrz93dPbSl17QsTeAJvFBEc1Z8LA=)
                          20: aoxpvJQp55z0b_A4747Hb-Vn3dc.roa (hash: KFOKBPs3AJlg/zbLl0vaUoAtOtEGw1Vqk5M7i3lMUY8=)
                          21: dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa (hash: PugPXuIpHhuRLO5S2LsWJizw062WbL+JSrm19YubtaQ=)
                          22: dhGTZrzAMxCoHl02uEnVYrcP8uY.roa (hash: frqEXDNzuadrbN8XUuh3gnDUTuujf4zMJynToQhVp5o=)
                          23: ef0q43f7LAeuo-FDNR4YuVz3rVk.roa (hash: ynkAymfoAKqGAiHb/45NVf5BEsff36expTSHfTcbGpM=)
                          24: f7DP5OjhuftCyOvmozatScfoVqk.roa (hash: A+ooEGsMkGCbGxD0pTPdrwF6n7LaWKxHml5t3531mgg=)
                          25: fDBBivGd09DklPLRXv-2xMOMQEU.roa (hash: UvvC0PLHqkR9m8HGTqV3Lx3SdupKGUhgBV//jb/1IQA=)
                          26: hX2Lx3ZRXJhz5te91S_u82NAyqI.roa (hash: Z9Aqux701iyj0hKmcrZefV63BZnWhUv9h+YQa7uyK+o=)
                          27: lAmmWkGs5LyT9RfeItAfnxG8bbk.roa (hash: RNfEw57sbZCxkqzkR0v73gb4yT9D3HTLUkHXy1rWdGw=)
                          28: n-Y7var7zwzFMfuvLacvdqsoTk4.roa (hash: jYJTpN60GnROWfT9uULFABE6OlzcikzLuwW0K2UstEw=)
                          29: pGdakkFya_8KFAcwcCfw9mQMsfM.roa (hash: 7HU/UMagkX6Kk/cYXVxJtnGPyAPxvkR9i/Ymcq1RhFU=)
                          30: p_i5f8sUouD8T2guoP56z8DfSZQ.roa (hash: xamhxEmVDEB79em0Q1NxLo3vFtG79lojzbnDtwExQao=)
                          31: pxR405YISr-FctI8NX7Q4bD6gEU.roa (hash: XtQdAGk7qomly3oH9IhnMKYdpq/Ak4fYbIVYvmRiWfg=)
                          32: qVYl2gaC1o0QPGWKC8uPavjq7q4.roa (hash: N5USX4HmmcxvOGVDo+fCpGoOKoXPYdIuEyuWXJTwzwQ=)
                          33: rEJ3nr5rpLR9k-3rueCVtCAovZM.roa (hash: MPpvJzK37AFcgAzt3XzDw1Rx/WuVzYs9n0C6B0TdB+4=)
                          34: ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa (hash: F0kCXnimtG8KC6nSV0eR4+hm5V66V2fgM8EiOJj/7S0=)
                          35: vZjxFUtUFk_VcZ6DkCLGhoqIVgs.roa (hash: qFpiFefYJJaQqMk+axueFNG7oyxnU+z9sgqEjIpr44k=)
                          36: vngFOmM8F-I34UP1XtfkKo4AgEQ.roa (hash: 1Ru4gPZOefQrxrqA1R4SUrRycdaiRzteoC+xNeY+cK4=)
                          37: wAY5XuB45x4wJW7P8rfB4j4exyw.roa (hash: EyRdGq3OnE9JKFrNRIEE2sn/Nvgcr+BeZbnGqbJfWwQ=)
                          38: xbj5hdRf6FBr1n9agV8FWFcSS-M.roa (hash: FTolabkCiVcY/3NMmDQy622GW30z82c9UqmDuGHFc2U=)
                          39: y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa (hash: +bgaJGwbwdu0EcyrfjZn/ea+UaB9pY4KH5HlNs3s2VE=)
                          40: ypPsYdz2SbWvNH77QQl1wDRnDA8.roa (hash: ZzKlsMMsjohWKmB/AWbRxRQA46JAwN5yMSWLeFcXstE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:60:b1:04:f1:0f:4f:a0:6a:26:e4:4f:ae:9c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Sep 24 15:01:15 2026 GMT
            Not After : Sep 25 15:01:15 2026 GMT
        Subject: CN=5d9e2b496b013e2ce89fa9014dc383ebd3f231fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:b7:45:4a:30:8a:d6:f6:1a:99:ca:9a:f2:
                    27:0a:89:66:7b:2b:23:22:89:53:d7:39:3a:95:19:
                    77:e8:ad:6a:6f:32:ab:cf:8b:d1:c1:d4:0f:83:b5:
                    24:70:c5:ee:e3:b8:05:61:a3:6b:e1:e2:7c:e9:27:
                    4f:62:64:69:f2:2a:65:d1:cb:3a:a5:f3:b4:4b:76:
                    dc:7a:6e:ec:f7:59:a0:9e:f7:fb:84:f2:d4:41:d8:
                    ff:1d:66:21:a1:d1:c2:5a:55:4d:fa:72:5f:74:6d:
                    23:9c:58:ec:b6:8e:74:ff:2e:1e:fb:54:aa:95:90:
                    25:c4:1c:a5:19:0f:ce:dd:06:12:1e:1f:4c:71:54:
                    35:5b:ac:10:7d:22:44:76:0c:5d:a7:10:ae:e4:63:
                    be:a9:4b:88:b6:83:b0:65:d4:67:06:55:b9:a6:41:
                    f4:b5:0e:a1:99:75:53:a8:42:41:b9:b4:37:ee:ec:
                    ef:e5:ec:e3:39:41:93:dd:b8:ec:26:81:a5:fd:c2:
                    48:3f:d4:bd:d0:41:49:59:c6:1f:92:b8:7f:a1:8f:
                    11:97:db:be:91:07:a5:ac:b7:c4:4b:4a:ca:db:f8:
                    1e:45:1e:a9:2c:89:96:64:f8:f9:61:03:4a:ab:9f:
                    12:bf:5a:84:ea:9d:5d:e1:d2:cd:b6:f3:60:d1:d0:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9E:2B:49:6B:01:3E:2C:E8:9F:A9:01:4D:C3:83:EB:D3:F2:31:FB
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8b:07:0e:40:b4:19:66:ef:2b:19:8d:48:c3:fe:ea:02:00:
         2a:02:ae:7b:78:93:12:95:39:9d:4b:fa:46:01:12:ee:5f:e7:
         ca:5f:ec:30:72:95:21:33:b0:b4:ef:14:0b:3b:4c:8c:58:13:
         b6:d0:88:dc:79:41:e8:36:02:0c:a7:cd:46:a7:74:cd:45:3f:
         94:46:62:a0:16:a0:60:b5:86:c4:cf:15:05:b3:80:76:35:77:
         01:78:67:c9:08:11:49:79:57:d1:ad:fd:ef:27:42:b8:70:50:
         5b:bf:3e:da:9f:c0:5c:ae:c9:65:88:9f:62:eb:ed:58:5e:1a:
         bf:70:cf:9d:6c:d9:c8:d1:e9:62:69:6a:50:ef:86:6d:d6:da:
         05:ae:34:d7:30:1b:f3:19:e7:51:65:55:10:07:62:e2:a2:65:
         45:4f:e3:99:5e:00:ad:33:7a:b8:84:d2:98:84:81:1f:0b:a6:
         12:f5:cb:6d:4c:2b:cd:e8:13:57:c9:93:7c:5d:7b:ab:bd:d5:
         b7:7c:c4:4e:b4:ec:18:95:90:d7:d6:c2:25:32:fd:01:93:7f:
         43:3c:df:a4:3f:65:22:8c:47:d8:97:b8:1a:87:96:58:ab:3b:
         f2:0e:8b:86:ce:31:57:09:61:a3:a7:ca:c7:24:78:83:90:31:
         01:96:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----