Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
File:                     gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json)
Hash identifier:          1ZJ/FwC0QTxxsaZOLstJ/mWdX4QoNTqmej4CkQBDZlQ=
Subject key identifier:   2B:AC:3E:B6:81:DF:8B:EA:E8:86:52:69:5F:E7:F3:13:21:7B:A1:27
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       019E2CCC785AFE57296DB84A2A9F6CC96E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
Manifest number:          1372
Signing time:             Fri 15 May 2026 18:00:57 +0000
Manifest this update:     Fri 15 May 2026 18:00:57 +0000
Manifest next update:     Sat 16 May 2026 18:00:57 +0000
Files and hashes:         1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=)
                          2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=)
                          3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=)
                          4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=)
                          5: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=)
                          6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=)
                          7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=)
                          8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=)
                          9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=)
                          10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=)
                          11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=)
                          12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=)
                          13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=)
                          14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: u4hNI6QMI+G+L81f8T0Qm2kJOdR3J7J2hexI8WkRtn0=)
                          15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=)
                          16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=)
                          17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2c:cc:78:5a:fe:57:29:6d:b8:4a:2a:9f:6c:c9:6e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: May 15 18:00:57 2026 GMT
            Not After : May 16 18:00:57 2026 GMT
        Subject: CN=2bac3eb681df8beae88652695fe7f313217ba127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:9e:7b:14:6e:84:b1:9b:2d:73:0c:a7:6b:
                    ab:a7:61:f9:6e:8b:e6:75:9b:b7:72:3c:5c:22:21:
                    f8:1c:01:06:d5:db:16:9a:27:93:f8:07:54:9e:29:
                    77:9a:bd:45:35:ca:28:36:a2:df:92:ff:6b:a1:09:
                    b4:0b:2f:09:f3:4c:7d:25:b9:23:68:06:55:49:0b:
                    59:16:fc:67:fe:49:cb:87:df:ba:4b:6e:c8:61:54:
                    7e:5f:a3:f6:06:54:3a:fb:81:a9:ee:23:30:28:3a:
                    74:3b:15:00:71:d9:85:c5:0a:98:2c:57:68:ef:ae:
                    4e:bf:9a:8a:10:b6:b8:aa:01:92:50:dc:07:98:54:
                    4f:f7:bb:55:ab:f1:bb:a9:6f:99:4f:a4:a8:4f:fe:
                    70:ac:bd:e2:8c:85:08:d7:90:3b:e2:8c:c2:ee:f2:
                    f4:dc:8c:48:d0:28:42:f7:f1:b8:b7:e5:3f:d8:dd:
                    6b:40:01:78:4a:dd:27:ca:39:52:28:49:fc:c9:6c:
                    14:95:4f:f8:3c:02:ca:b6:ad:0c:a9:69:0c:9b:b9:
                    78:a8:1a:5a:72:8c:34:5f:2d:0a:25:11:f2:3b:05:
                    dd:6a:e7:2c:3d:7e:56:4f:ae:16:54:bb:f7:60:9d:
                    6c:50:4f:b2:ac:a6:44:90:75:f8:b2:77:ef:dc:51:
                    26:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AC:3E:B6:81:DF:8B:EA:E8:86:52:69:5F:E7:F3:13:21:7B:A1:27
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:42:e4:f6:69:0c:98:9b:05:c7:32:33:d9:f4:43:b4:3a:b2:
         7b:d7:60:cb:3e:ad:d3:40:5d:93:12:a2:d6:52:43:07:1b:d2:
         9c:00:0e:fc:33:19:c5:68:db:90:c3:5b:46:e6:00:5a:cd:0f:
         48:64:96:72:ac:4b:e9:e7:c4:e0:6a:09:a4:dd:bc:75:08:d3:
         dc:09:31:0e:b1:01:5a:37:ab:56:ad:66:0b:92:8c:31:2e:7f:
         2b:ae:8a:33:ea:2f:59:ea:e5:54:95:6c:1a:4f:67:76:b0:51:
         90:1b:7e:cd:5a:af:14:5a:46:b6:f8:5b:17:36:f9:fe:b8:86:
         a9:55:c3:e5:1b:e1:87:f4:d4:88:f8:6d:87:7b:51:9d:79:eb:
         24:ac:ff:77:ac:96:15:4f:7f:c6:5a:7b:ca:76:dc:db:92:39:
         b0:f4:5c:74:0b:c0:23:05:9f:03:a2:06:02:90:ac:a6:12:6c:
         be:67:b1:dc:fd:20:24:83:e3:2f:91:05:d2:68:b0:45:1d:ac:
         86:75:fa:13:7d:24:7e:77:3e:f0:bc:89:6b:d7:61:bf:87:e0:
         07:12:cc:48:5c:83:ca:0f:7f:c5:10:5d:dc:98:6a:18:1b:cc:
         57:08:38:d2:33:ce:09:cd:1f:cc:fc:6b:1e:30:87:26:e6:2a:
         8a:c4:e3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:47:22 2026 by rpki-client