Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
File:                     gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json)
Hash identifier:          +UE3j0qR1rK8+asMmlDBjqRnF7DmQtL6J+6sXhQg+3g=
Subject key identifier:   89:F2:E8:D5:0C:1A:10:1F:FF:71:B9:E1:62:D3:19:49:65:E7:AB:DF
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       019E5937E131CB39681EEBEB36CF23557459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
Manifest number:          1389
Signing time:             Sun 24 May 2026 09:01:34 +0000
Manifest this update:     Sun 24 May 2026 09:01:34 +0000
Manifest next update:     Mon 25 May 2026 09:01:34 +0000
Files and hashes:         1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=)
                          2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=)
                          3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=)
                          4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=)
                          5: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=)
                          6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=)
                          7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=)
                          8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=)
                          9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=)
                          10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=)
                          11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=)
                          12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=)
                          13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=)
                          14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: X3qe5uPh+Ms7qLDzIzC7IIQhNC/7/yTqmmO3WblrU0w=)
                          15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=)
                          16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=)
                          17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 May 2026 09:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:59:37:e1:31:cb:39:68:1e:eb:eb:36:cf:23:55:74:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: May 24 09:01:34 2026 GMT
            Not After : May 25 09:01:34 2026 GMT
        Subject: CN=89f2e8d50c1a101fff71b9e162d3194965e7abdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:86:54:b7:8c:74:15:4c:18:06:ff:f8:61:ac:
                    23:c6:04:24:7f:b1:5f:9d:e6:0d:66:8b:30:bb:cb:
                    39:78:b7:9c:ce:54:a1:aa:61:b6:e8:13:07:8d:4f:
                    85:84:10:f6:08:ac:c7:7b:80:b7:81:34:0e:e0:94:
                    03:93:03:cb:cb:1e:07:0e:b8:35:0c:2a:c7:b8:92:
                    cb:37:f6:43:f1:4c:35:25:54:4d:05:57:37:8a:cc:
                    48:38:85:fe:da:e3:7b:0f:72:12:70:14:34:1b:c3:
                    6b:e9:e7:3f:42:df:64:7e:c4:64:5e:ba:2e:52:16:
                    8c:23:0f:4d:05:65:3c:30:95:9d:f8:00:f9:5d:f3:
                    44:b4:55:1c:8b:b7:5f:0d:ee:a5:e6:44:63:0f:78:
                    d5:f7:c7:11:e6:f5:f5:c6:a6:7d:ef:17:4a:56:1e:
                    68:9d:70:1b:35:42:69:ef:ad:f7:d0:58:8c:31:8e:
                    47:5a:92:de:14:c8:9b:d2:af:69:e1:af:0b:27:eb:
                    b2:29:70:a4:8b:26:4d:4d:f4:25:e8:5d:90:87:cd:
                    9a:6b:d6:0e:e2:83:23:7e:15:88:15:d6:7a:c0:1f:
                    84:cf:2f:29:c0:be:b1:32:9f:98:f0:bf:4c:88:32:
                    8b:1d:67:0d:87:3c:85:79:56:e6:ae:53:72:f8:b4:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F2:E8:D5:0C:1A:10:1F:FF:71:B9:E1:62:D3:19:49:65:E7:AB:DF
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b9:21:56:62:34:9b:24:5a:81:80:8f:bc:cc:19:6f:ad:72:
         96:c2:1d:bf:df:3f:62:05:f2:46:89:71:ad:32:0d:72:b7:be:
         83:f7:00:60:b2:c1:94:64:5b:6c:bb:05:e2:83:bc:76:97:cf:
         bc:40:59:13:53:97:97:99:56:93:c1:c5:aa:cf:bb:c8:04:02:
         92:f5:89:d4:2f:24:bb:3f:6c:f3:5a:e0:79:34:0f:8c:c2:5a:
         9e:d4:ee:06:7d:73:70:74:d0:ba:83:7a:b3:8a:a3:02:4f:0f:
         d5:a4:1e:a8:13:e5:d6:9a:1b:98:50:77:75:d4:b6:f1:14:dc:
         de:e3:7b:bb:e1:4c:ac:8b:b8:98:d0:77:82:d2:7f:b9:44:9b:
         dc:b6:88:53:f6:81:1b:f5:e7:0f:dc:4c:6e:cb:92:f2:03:34:
         52:aa:d5:11:c9:56:f7:f8:d9:73:bb:12:a0:b0:63:ef:91:21:
         8c:8d:77:63:29:89:67:92:3b:50:8f:80:7d:7d:37:64:ab:a9:
         8d:f3:cd:e8:59:9c:0a:5e:9e:d0:c7:ff:19:00:26:5a:13:6c:
         a8:46:0e:bf:2a:29:60:20:f1:90:7a:09:f6:cc:5b:24:1a:46:
         1a:55:2b:fc:0b:6c:b7:17:34:37:80:d3:a5:05:9b:43:3b:ff:
         2f:24:86:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5ZN+ExyzloHuvrNs8jVXRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx
MTliZDcwHhcNMjYwNTI0MDkwMTM0WhcNMjYwNTI1MDkwMTM0WjAzMTEwLwYDVQQD
Eyg4OWYyZThkNTBjMWExMDFmZmY3MWI5ZTE2MmQzMTk0OTY1ZTdhYmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4ZUt4x0FUwYBv/4YawjxgQkf7Ff
neYNZoswu8s5eLeczlShqmG26BMHjU+FhBD2CKzHe4C3gTQO4JQDkwPLyx4HDrg1
DCrHuJLLN/ZD8Uw1JVRNBVc3isxIOIX+2uN7D3IScBQ0G8Nr6ec/Qt9kfsRkXrou
UhaMIw9NBWU8MJWd+AD5XfNEtFUci7dfDe6l5kRjD3jV98cR5vX1xqZ97xdKVh5o
nXAbNUJp76330FiMMY5HWpLeFMib0q9p4a8LJ+uyKXCkiyZNTfQl6F2Qh82aa9YO
4oMjfhWIFdZ6wB+Ezy8pwL6xMp+Y8L9MiDKLHWcNhzyFeVbmrlNy+LQYVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIny6NUMGhAf/3G54WLTGUll56vfMB8GA1UdIwQY
MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt
YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3
LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbkhVmI0
myRagYCPvMwZb61ylsIdv98/YgXyRolxrTINcre+g/cAYLLBlGRbbLsF4oO8dpfP
vEBZE1OXl5lWk8HFqs+7yAQCkvWJ1C8kuz9s81rgeTQPjMJantTuBn1zcHTQuoN6
s4qjAk8P1aQeqBPl1pobmFB3ddS28RTc3uN7u+FMrIu4mNB3gtJ/uUSb3LaIU/aB
G/XnD9xMbsuS8gM0UqrVEclW9/jZc7sSoLBj75EhjI13YymJZ5I7UI+AfX03ZKup
jfPN6FmcCl6e0Mf/GQAmWhNsqEYOvyopYCDxkHoJ9sxbJBpGGlUr/Atstxc0N4DT
pQWbQzv/LySGvw==
-----END CERTIFICATE-----
Generated at Sun May 24 18:26:08 2026 by rpki-client