Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
File:                     gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json)
Hash identifier:          OITU1rr/U7BUpsasjSp3GEh26yj4OO4tv5Q3U3ZbEmo=
Subject key identifier:   56:E3:75:D9:30:14:03:8D:5B:73:ED:06:1C:42:D3:4C:67:45:20:AD
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       019E98F1B309C5F437ECA70F18F0CDDEF7F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
Manifest number:          13AA
Signing time:             Fri 05 Jun 2026 18:00:37 +0000
Manifest this update:     Fri 05 Jun 2026 18:00:37 +0000
Manifest next update:     Sat 06 Jun 2026 18:00:37 +0000
Files and hashes:         1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=)
                          2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=)
                          3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=)
                          4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=)
                          5: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=)
                          6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=)
                          7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=)
                          8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=)
                          9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=)
                          10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=)
                          11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=)
                          12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=)
                          13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=)
                          14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 1Ch0XL1Se/XgilF9VUL3WzYPDlB/Xj6iSvqOw/M1Ii4=)
                          15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=)
                          16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=)
                          17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:98:f1:b3:09:c5:f4:37:ec:a7:0f:18:f0:cd:de:f7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: Jun  5 18:00:37 2026 GMT
            Not After : Jun  6 18:00:37 2026 GMT
        Subject: CN=56e375d93014038d5b73ed061c42d34c674520ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b9:bc:38:a4:d5:09:0b:5e:4f:68:0d:7d:08:
                    69:42:ef:fc:00:f0:06:fe:eb:f7:2d:ef:b1:4a:f7:
                    5d:25:17:b4:ce:0d:fc:bb:ca:bc:e4:36:20:c9:a8:
                    26:f0:ff:b7:72:ef:df:4a:ac:e4:ab:3f:48:f9:8b:
                    08:a5:d2:d5:49:f6:b0:5d:d6:77:d4:f3:23:88:7f:
                    0e:cc:ce:63:d5:58:d1:66:73:64:b9:4e:31:96:8c:
                    11:17:5f:6a:18:92:f0:8e:96:2e:6b:57:19:e6:70:
                    36:ee:0f:8f:02:9b:96:13:a3:57:5c:69:65:1d:ea:
                    8c:7c:9c:ef:d7:30:e0:4e:0d:e3:db:96:ae:e5:f1:
                    b3:dc:83:07:0d:d8:04:3e:b1:b8:01:d6:5d:63:c0:
                    24:f0:9e:d7:3e:01:53:f1:cd:79:e2:76:c0:34:73:
                    a7:8e:3a:15:97:29:28:da:9d:0e:d4:85:10:54:c9:
                    5d:40:c7:db:64:b8:3e:64:d6:4f:c6:3e:39:e4:da:
                    da:44:31:51:8d:56:de:7d:08:ec:cf:fa:98:4d:e2:
                    a3:cc:5a:6a:0e:be:bd:30:3a:b5:68:de:3a:12:a4:
                    90:83:7a:be:c0:0c:e5:a4:25:21:99:c3:23:3e:ff:
                    15:38:10:37:ad:51:0a:25:56:45:a7:02:6f:6d:c9:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E3:75:D9:30:14:03:8D:5B:73:ED:06:1C:42:D3:4C:67:45:20:AD
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5e:55:dc:7f:ae:e1:01:b0:96:26:24:99:e6:c6:6c:ac:82:
         73:2a:34:5f:ad:6c:1e:68:ee:b8:5c:2c:c9:4f:75:40:44:82:
         ab:2b:d7:89:ca:f3:00:02:b2:98:98:a1:05:13:e5:73:0f:19:
         5f:4e:03:b6:a7:0c:eb:5e:ec:f6:2d:f8:69:5c:7a:3b:4b:b5:
         ad:97:e0:25:2d:9d:81:09:17:c3:20:4e:a5:9f:9d:4d:84:2e:
         d0:2c:85:29:a5:7c:87:d2:e4:28:da:a9:8d:6e:d4:53:ae:a9:
         81:8a:d2:7b:05:7d:1f:3a:f6:d0:e8:83:11:e4:a6:1d:3e:e7:
         a3:e0:21:86:0b:9c:ff:60:47:c8:aa:62:f6:94:c5:bc:81:b1:
         0e:2f:df:9c:91:47:68:71:f0:c1:2d:d4:dc:9c:56:99:ed:de:
         98:6b:96:bb:13:3d:db:93:20:8e:8b:5c:78:f6:85:ce:e6:3b:
         f8:7c:fb:b4:ed:36:5e:7d:e5:05:74:d6:34:44:b8:0a:21:ab:
         ec:1f:bd:70:c8:d2:cd:4b:40:87:40:82:91:23:a4:48:59:0f:
         be:8d:ad:52:b1:99:25:7b:2d:63:ff:93:ae:51:b6:94:62:cf:
         ef:42:fe:77:31:3c:c8:c6:80:d1:58:26:b1:5e:9a:dd:cf:9a:
         60:19:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 20:31:15 2026 by rpki-client