Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
File:                     gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json)
Hash identifier:          dUswdDcmr/4LOg6Ixsy7jPWrgHwP8wXrEtaQ5J+6bvY=
Subject key identifier:   6F:5A:94:42:8E:DC:3B:6B:BA:81:12:C9:02:78:05:FC:3D:6D:02:CD
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       01A11B2BC9567AA65740723305D5E1E56431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
Manifest number:          14F9
Signing time:             Thu 08 Oct 2026 11:00:16 +0000
Manifest this update:     Thu 08 Oct 2026 11:00:16 +0000
Manifest next update:     Fri 09 Oct 2026 11:00:16 +0000
Files and hashes:         1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=)
                          2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=)
                          3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=)
                          4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=)
                          5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=)
                          6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=)
                          7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=)
                          8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=)
                          9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=)
                          10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=)
                          11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=)
                          12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=)
                          13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=)
                          14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=)
                          15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: ILGeY1q8ZrVzt7SRB9ERa4E/FZ21iPzmXsQfo4O6u5M=)
                          16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=)
                          17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:2b:c9:56:7a:a6:57:40:72:33:05:d5:e1:e5:64:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: Oct  8 11:00:16 2026 GMT
            Not After : Oct  9 11:00:16 2026 GMT
        Subject: CN=6f5a94428edc3b6bba8112c9027805fc3d6d02cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c1:ef:f9:90:7b:2b:43:53:53:b8:66:38:cd:
                    5e:b1:b4:78:ee:6b:f7:76:3d:d6:6c:7c:ed:b1:fb:
                    0d:6d:ec:a1:ad:5b:7c:30:ed:64:65:77:85:dc:a5:
                    6c:74:0c:7c:2f:c4:63:44:79:6f:4e:7d:09:8f:eb:
                    27:37:99:b2:e8:e5:68:97:b3:61:05:43:d7:0e:0b:
                    1c:f2:41:a4:3a:bb:74:97:16:11:89:b6:24:14:a8:
                    a2:d3:a2:90:20:52:e0:64:06:e3:39:ec:a2:28:e1:
                    7e:e3:96:5e:8f:ab:ec:c1:5c:9d:ac:6f:c8:c5:e7:
                    2c:3f:b5:f4:63:b2:37:27:ae:02:8b:a3:dd:45:39:
                    51:a9:8e:c9:47:df:a5:5a:2c:69:3f:b7:a7:84:8e:
                    f2:45:25:81:f6:fa:9d:7d:a6:7a:57:3b:87:48:60:
                    06:c6:9d:1a:b7:82:4d:5f:3d:b2:1d:dd:1e:6c:99:
                    dc:ab:ac:f8:19:ca:9d:88:61:6a:52:6f:39:1d:6d:
                    81:d6:d6:54:f2:1b:99:1c:b9:29:13:a6:0c:10:12:
                    db:b1:15:08:5a:65:b9:ab:5e:21:f0:6c:5d:ec:ac:
                    49:55:8b:55:91:c1:47:0c:b9:53:4e:3e:65:a0:93:
                    74:10:ca:98:5d:41:b1:4d:41:a9:66:17:f6:9d:32:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5A:94:42:8E:DC:3B:6B:BA:81:12:C9:02:78:05:FC:3D:6D:02:CD
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:15:d4:f6:88:bd:6d:54:1c:46:98:a2:e5:97:fa:c6:b3:6a:
         91:d1:a5:94:d9:42:5d:ec:86:2c:0d:13:94:43:14:82:4f:bd:
         b1:d7:e4:6a:d2:25:10:20:0a:9b:9e:b3:b7:8a:83:9d:57:e9:
         f2:f6:3d:1d:ba:77:3c:b6:a4:12:1c:ed:b6:1d:ef:71:76:e3:
         b4:8c:ce:cb:42:02:c2:20:3d:74:88:4f:2b:22:cf:3b:e1:69:
         7c:8a:a8:0d:56:7f:68:c4:1c:9b:aa:32:c9:58:65:c3:01:cf:
         53:57:8f:4e:c4:14:f1:23:e1:42:45:a0:b3:4d:62:40:14:ed:
         96:49:94:cf:de:ca:27:ad:6f:78:63:66:b4:c6:65:26:62:08:
         00:be:e2:eb:12:0e:6f:e4:fe:de:0f:3c:ca:29:4f:f5:f8:a3:
         26:e8:ae:b4:10:35:63:07:a8:49:84:3a:5b:a4:60:31:aa:95:
         3f:3f:44:9c:db:ea:c2:00:6d:0b:38:f2:1d:7b:c0:09:ce:72:
         4f:01:00:9e:62:8f:88:82:f9:1f:d9:c2:48:b6:15:af:99:30:
         88:3c:fd:2c:2a:b5:ca:26:a9:d2:17:09:dd:33:df:22:d2:eb:
         ce:69:45:7b:b0:7d:db:8e:7e:67:33:05:0e:5d:f2:c0:0e:61:
         f7:88:47:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:56:51 2026 by rpki-client