Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
File:                     gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json)
Hash identifier:          7sVtK0QO/Cu2yHd/++3j7NE69zalRgWPxXaU/OMcOAU=
Subject key identifier:   66:66:BB:CE:0B:AA:04:6A:12:EF:30:F5:56:FD:A2:49:36:16:29:52
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       019EAE2FD83E4B2585355CC790DD42B5D564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
Manifest number:          13B5
Signing time:             Tue 09 Jun 2026 21:00:31 +0000
Manifest this update:     Tue 09 Jun 2026 21:00:31 +0000
Manifest next update:     Wed 10 Jun 2026 21:00:31 +0000
Files and hashes:         1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=)
                          2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=)
                          3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=)
                          4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=)
                          5: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=)
                          6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=)
                          7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=)
                          8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=)
                          9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=)
                          10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=)
                          11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=)
                          12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=)
                          13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=)
                          14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: puAgpamdPx04rQqROldhtw2YrqQp5v+e5R20EMHX9kw=)
                          15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=)
                          16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=)
                          17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jun 2026 20:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ae:2f:d8:3e:4b:25:85:35:5c:c7:90:dd:42:b5:d5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: Jun  9 21:00:31 2026 GMT
            Not After : Jun 10 21:00:31 2026 GMT
        Subject: CN=6666bbce0baa046a12ef30f556fda24936162952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:f7:fe:ce:cc:61:1b:20:24:0c:07:2f:36:
                    a4:f7:a4:ec:02:08:1d:3a:6b:fa:38:b2:8a:b6:4e:
                    16:70:e8:3c:8a:05:4e:66:d8:08:11:b5:a2:e0:3d:
                    69:99:3b:41:62:bc:2a:15:e1:4f:39:b3:5d:d9:1b:
                    75:d1:62:8e:18:00:47:b4:e1:88:0d:3b:7e:fa:ad:
                    99:e2:c5:9e:f7:49:5b:6c:75:88:7c:98:3f:ea:bf:
                    ea:cb:32:45:05:78:c1:9f:08:0f:00:18:82:ac:bf:
                    f4:31:b0:c5:73:73:63:96:2f:a8:36:99:0c:a7:db:
                    e3:91:7b:83:a1:17:7f:d6:a9:5a:5d:e1:f7:e0:0c:
                    9b:af:4d:b8:10:92:44:28:72:ff:ea:e6:e1:43:0f:
                    8d:34:84:f9:a1:46:17:91:5c:09:e7:72:ec:5e:24:
                    2e:0a:a5:15:fd:6d:dc:1c:1a:13:d4:38:cb:9b:d3:
                    b8:a0:3f:e9:8e:bd:1a:30:28:12:67:68:2c:32:00:
                    41:13:a0:4c:fd:4f:b8:68:3a:95:cc:2e:93:1f:c9:
                    f1:e5:23:fc:31:1a:1a:6e:1e:5c:6d:bb:6b:a6:4b:
                    a5:83:e4:69:12:e7:a0:ac:59:d0:5b:b8:df:61:6d:
                    cf:32:10:5e:ad:af:5a:85:2a:36:69:43:15:3b:c2:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:66:BB:CE:0B:AA:04:6A:12:EF:30:F5:56:FD:A2:49:36:16:29:52
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3f:d8:1b:d6:fc:7b:a8:bd:62:69:fc:38:0f:f2:f9:a7:2d:
         4a:9b:c0:e8:46:6a:54:32:15:f5:94:f9:ab:7c:2e:15:42:cd:
         b5:2a:cd:48:cc:dd:61:79:9e:05:9f:94:83:dc:be:4f:85:2a:
         56:9e:e7:4f:c8:23:3b:a0:09:97:b7:36:ce:00:de:1b:db:42:
         b8:05:d6:05:b6:21:09:fb:13:33:ca:76:5b:4e:4d:d3:b2:25:
         85:b7:32:92:1b:d3:be:b0:07:23:d0:8e:27:4b:13:22:9e:b8:
         27:3b:6f:37:a9:77:7e:88:c9:5d:30:2c:1f:73:61:3b:86:0f:
         3a:a0:9d:4a:e9:e2:6b:c9:00:bf:be:7a:fb:45:15:16:f7:82:
         c4:5c:21:9f:99:6d:00:a1:d5:a3:29:c8:00:97:1d:00:24:a6:
         66:4b:0a:69:d0:31:16:15:ec:e8:2b:54:3e:de:30:99:86:0a:
         a2:ea:68:6f:21:8a:3b:7f:46:a2:20:92:f6:e0:2c:e3:ae:b8:
         13:8e:5a:12:8b:79:4b:f4:f1:15:37:3e:0e:4b:bd:59:e3:37:
         7c:a7:4c:ba:ce:74:34:78:26:93:c6:22:9a:d3:2f:dd:68:27:
         14:78:5f:6f:b2:b7:bd:09:5f:73:15:34:22:ac:38:d6:99:c2:
         df:af:cb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 00:45:14 2026 by rpki-client