Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
File:                     gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json)
Hash identifier:          gfiJELz5YmAppsLun+Pq904T6qL46LF1ua85baKSMFc=
Subject key identifier:   54:67:7A:48:25:53:2B:C4:80:6D:36:24:38:88:24:EC:D1:6C:CD:2C
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       01A00C29D1E9A5E93D7EE53BFD93099F8A61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
Manifest number:          146C
Signing time:             Sun 16 Aug 2026 20:01:02 +0000
Manifest this update:     Sun 16 Aug 2026 20:01:02 +0000
Manifest next update:     Mon 17 Aug 2026 20:01:02 +0000
Files and hashes:         1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=)
                          2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=)
                          3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=)
                          4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=)
                          5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=)
                          6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=)
                          7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=)
                          8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=)
                          9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=)
                          10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=)
                          11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=)
                          12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=)
                          13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=)
                          14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: l69z8Y322lGN12Wr+gJlvwpGDT8oVQeE3QIcRCLyTXM=)
                          15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=)
                          16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Aug 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:0c:29:d1:e9:a5:e9:3d:7e:e5:3b:fd:93:09:9f:8a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: Aug 16 20:01:02 2026 GMT
            Not After : Aug 17 20:01:02 2026 GMT
        Subject: CN=54677a4825532bc4806d3624388824ecd16ccd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:32:c4:c4:9d:a3:cf:ff:4e:8e:76:a2:82:
                    cd:d5:3f:dc:f1:11:58:54:57:6a:12:4d:b0:ff:52:
                    5f:6e:0c:75:8e:67:67:3a:04:82:d0:cd:38:53:d1:
                    26:69:6f:27:bc:e2:40:fa:a6:87:e6:1c:2a:aa:bc:
                    c0:b6:21:7a:2e:60:22:fa:7d:33:8e:48:73:95:c9:
                    1d:32:e4:92:23:3d:c7:fa:e0:74:56:46:d2:4c:33:
                    c6:c9:b1:9f:9c:c0:6f:d0:a7:53:60:d2:cd:65:e9:
                    a6:e3:d1:75:80:41:ef:6f:f5:a2:c6:55:df:8f:d1:
                    17:fa:b6:87:16:78:25:c1:32:d7:62:62:78:e5:97:
                    00:ac:68:7b:9a:db:51:ac:8b:3c:7f:d6:92:68:87:
                    02:2d:0d:00:8c:2e:6b:6b:90:12:65:b8:2a:c9:22:
                    c1:1a:6a:fd:2b:82:6a:26:2c:34:04:20:5e:c1:3b:
                    59:86:98:1d:0d:65:3b:29:53:67:14:6b:57:fe:52:
                    73:ad:7d:c3:0a:11:20:09:b0:ca:e0:c7:70:f9:9d:
                    a0:0d:6f:08:27:05:97:41:ea:ef:cd:a7:30:52:57:
                    d9:f4:15:cd:c0:84:d9:67:e2:d6:4b:33:88:93:37:
                    36:90:72:72:8f:7e:ba:3c:2a:1d:f1:8a:06:69:dd:
                    4e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:67:7A:48:25:53:2B:C4:80:6D:36:24:38:88:24:EC:D1:6C:CD:2C
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:12:c1:21:6c:c0:74:98:28:ba:be:db:b7:28:ac:ad:3c:b3:
         47:18:42:40:0b:96:80:9f:4b:de:b2:c5:81:b5:27:e0:13:9f:
         42:d0:2f:56:7d:26:aa:fa:e8:0b:26:e1:6f:7a:17:a2:21:e6:
         5e:06:61:1e:60:f4:31:63:51:95:98:83:ba:92:91:4a:a1:0b:
         e0:cb:af:56:99:6a:4a:5b:10:ef:cd:67:99:50:61:ea:bd:49:
         36:3a:62:0b:fd:63:13:47:5e:c8:b8:34:d3:02:2e:af:84:e0:
         ae:76:0d:a4:b3:02:f5:fc:03:e3:37:df:fd:bf:54:50:e4:53:
         d5:9f:08:21:b8:c0:0a:84:1a:52:24:6d:2e:62:38:4a:8f:cb:
         8d:fe:60:e8:0b:2e:5e:52:22:17:65:f0:87:25:64:f0:63:7a:
         c6:99:42:b0:94:dd:0a:26:b9:20:d1:9a:f7:c9:9f:d1:cf:43:
         de:f9:32:1d:47:6c:b1:3d:79:40:54:22:bf:07:b4:a7:4e:b8:
         42:aa:6a:9d:45:d6:15:88:5a:65:c1:0e:e4:b5:38:19:fe:31:
         db:c3:9f:e6:c4:3c:9a:e7:f3:a5:6c:03:49:10:b6:7b:61:f1:
         e7:2c:14:02:e5:9b:85:da:86:be:0f:a2:81:26:e8:69:1d:9f:
         96:66:82:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 02:16:00 2026 by rpki-client