Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
File:                     1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json)
Hash identifier:          iV76IvX3tlgNPeM4aHuCevUadjanUN8SsHLWxgniwXE=
Subject key identifier:   66:8F:CB:EA:51:92:6B:19:69:D9:8F:8D:B5:69:C7:D3:06:98:13:49
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Certificate issuer:       /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial:       01A08A1F2FD4B38967510B0E305F4923187C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
Manifest number:          1A8D
Signing time:             Thu 10 Sep 2026 07:01:34 +0000
Manifest this update:     Thu 10 Sep 2026 07:01:34 +0000
Manifest next update:     Fri 11 Sep 2026 07:01:34 +0000
Files and hashes:         1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: H8UGTO3WaySVpCTz65tkLR7z4g1zVmMTfFCWvSPQlmw=)
                          2: 1-n7EdeFX20C6cFMyJ6Y5HWVMQU4.roa (hash: suKN0U6xP/FTkPKNJxFCA4VBUPU7v0a/LfB27Kibl1k=)
                          3: 5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa (hash: 6wnMllVhpaDtM68Ah+lycy0EGi1lfhyp8UE1fOfc3rk=)
                          4: 5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa (hash: UIor+BCs9mrPP+0b8Lrn7HV4ATlK3jTAi1j4A256yaM=)
                          5: 6nafakW_FoiGF0x1s1VoLFJqiuw.roa (hash: tSlSVShZ1Ws+SLODMKOJpPu4G+R5CcazLAH7YNSqZ2c=)
                          6: 7Dwg5wFGQqErSuNtav6wSEytWn0.roa (hash: KeyWkMo6tHKMd0UPR13FjorhMTn+dRjqc0BqAQPkOvs=)
                          7: 8KG06O_ShOw-fAgF9hGpdzf3xEY.roa (hash: DVd/NvS4nhNxcSUkNJDTh5SmK4Clg69CxGJbu7seCkM=)
                          8: 9wtyd_oclLUMViGWblNWlEAAOPQ.roa (hash: K2AWf+HALDuM6Uz23jlAWhflFeUexuIRM5RCtHWCEPc=)
                          9: C0VnbFyJGyh-3dXIXN-FVbbzva4.roa (hash: nupbKfiMh1Vbm5eU6VpPOjsRTYtweNUnX1ebsHaK4hQ=)
                          10: CT3vMjevN0fYRTlNcJsck0hB60Y.roa (hash: 85AL/YEBSQNN6+KYNgUrlSLsBbfZxOy5uaLrLJGec+M=)
                          11: GnQ9nonV43lnZNoCG-ecdWqOLDk.roa (hash: 5lmMKt+idSdfaSrOW6fzEjOhALbxhOPcgnKdUuSF0JY=)
                          12: HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa (hash: BGn13AFdqwObLZ5mjHyJ0u9f6CC1n+u2Nsk2L6TLrao=)
                          13: MaRo3qPa_AXa-98seLnNkzlSlLM.roa (hash: ji8JHlcGAHWKEBT5OFXPF3gvRuoRQByWZBo69DobjWw=)
                          14: W-cWYMFcdHDS1yv5jkAVjyp5ho4.asa (hash: QdAC+W0wfurd2BssKpz9U5P9YKTKUM6ZjHzLGg+JdOA=)
                          15: cQJLykBOqMGgV5KV9rcPZr-_U1Y.roa (hash: aOQV+i/NapnfOnLvAQ3Zr9czxxA22kZuub947U3fZRw=)
                          16: cRp-cVmkypbBe3-5hQ3MERFfdvI.roa (hash: af21yk690TVm1yoO9i+WiH3Y6Q+lKgW5WAHD9V6wAgo=)
                          17: fyxZLGtBW9e59RZ3aEwSKlhWT4w.roa (hash: itxLmMXkodUFbwqD5SmQmqHBd8MyF3lpLKdM1WEIZu0=)
                          18: ipuMNUIFJfwrG69f0t1BcA9T-lo.roa (hash: E/49CgkatlS4HbWzI9f4jj29KOBht+FWKi5pYDsrCiU=)
                          19: oOmWYS79EfLZM1YUVX02Dm8sbCI.roa (hash: UMtyOefWK95ZFcwkFudLsDtrliJckAkSIFBXdWfp+zQ=)
                          20: odS4gJ1H-haIP2hfRvP__EIClnA.roa (hash: frbBPZZ05GoX1i3mLnaN+IdXbfyMrpl7+ZrlTRvKVwQ=)
                          21: pHgh0geILg2H9c8tNXl-coocbok.roa (hash: MiAWsYu39mO81MmSrazkuF8uttZJWXsnb0YqEMhZmqc=)
                          22: xLvL2DDHdDsFuu0LWe_ArfxkZOU.roa (hash: jEvpZaWRUr0vww6k+sw/ZzVTbY8rHX3wan18IH9TsyY=)
                          23: yUTvxSoxh0P1X3qi3W3GEmQmupg.roa (hash: YggGVCBvHEr/or8wxjiqlTzxSxsrR2x9hxdT1duIBFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 07:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1f:2f:d4:b3:89:67:51:0b:0e:30:5f:49:23:18:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
        Validity
            Not Before: Sep 10 07:01:34 2026 GMT
            Not After : Sep 11 07:01:34 2026 GMT
        Subject: CN=668fcbea51926b1969d98f8db569c7d306981349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:36:a4:58:2c:c1:b6:e0:9f:3b:c8:13:20:
                    4f:da:2b:fb:56:4d:74:e9:94:1e:23:53:29:35:c5:
                    a9:55:e0:35:50:74:fe:e5:dd:ab:cb:2c:6c:d5:09:
                    a5:fa:e4:c6:10:89:b6:80:4a:25:c3:1e:6d:4a:94:
                    cc:7d:14:3e:2e:fa:44:ba:9d:f5:b8:9b:22:d1:fe:
                    07:a2:7b:72:6f:d1:75:34:43:c7:0f:63:56:6d:cc:
                    12:5b:bf:d1:9d:11:38:df:36:47:13:fe:41:df:41:
                    13:15:3c:7a:c5:74:57:b2:1a:1f:c6:5d:9f:6a:62:
                    a8:37:90:67:38:87:e5:9e:30:84:33:63:d7:9f:9d:
                    f6:09:38:f5:7f:1f:15:7c:4d:fb:d1:bb:bf:bd:dd:
                    42:e4:98:63:37:06:d7:30:fa:aa:3a:05:b5:8c:4c:
                    bf:69:1a:3f:0b:34:6e:e0:7b:1d:3b:2a:e6:8d:32:
                    78:9d:43:a2:a1:e0:46:19:0e:15:db:f4:5d:60:5f:
                    1c:df:4d:de:70:1f:e8:2a:39:d0:62:11:e5:d9:cb:
                    d3:87:34:b7:c5:71:ec:4f:d6:fc:70:3f:0a:6d:63:
                    26:df:40:3b:f4:f8:4f:95:44:1e:62:66:72:ba:97:
                    de:a8:bb:cf:08:d4:df:e7:1a:c4:a1:59:f9:3e:8f:
                    1b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8F:CB:EA:51:92:6B:19:69:D9:8F:8D:B5:69:C7:D3:06:98:13:49
            X509v3 Authority Key Identifier:
                keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b6:c8:2c:19:14:e3:55:23:57:a8:66:8b:30:35:55:9d:21:
         1a:18:98:7d:27:f6:0b:bc:36:16:c1:65:52:f0:04:88:d5:64:
         bd:6c:91:de:cc:dc:df:5d:3f:62:cc:90:23:19:78:4d:3f:ac:
         3d:ef:f3:54:c9:ff:70:b9:b9:eb:25:95:b1:5f:a3:f0:da:e1:
         05:bd:e0:5e:4d:91:50:0d:ae:d1:a7:6d:74:aa:fd:1a:ec:73:
         c5:54:f7:b3:d6:b6:9b:4c:a3:3b:e2:82:5d:e5:dd:5b:ba:27:
         39:de:99:2c:1e:4a:e3:58:06:73:a0:96:77:fe:16:30:cf:1c:
         95:02:36:1f:62:68:d0:05:88:80:a2:db:88:cc:16:a6:0b:f1:
         e3:7f:af:34:da:4a:cc:c3:8c:7e:fb:b9:d6:f8:a1:ff:b4:61:
         74:b3:e1:78:7d:d7:c5:ab:44:f0:28:e8:09:17:2d:73:64:13:
         0a:98:79:b3:82:51:1e:e0:ea:33:40:82:61:e3:cb:21:e6:c7:
         ca:be:19:dd:91:f0:ab:fe:91:8c:15:79:fe:61:ad:92:16:76:
         1f:08:c3:78:bb:c2:be:be:be:b3:49:c5:e5:1b:d4:34:e8:bb:
         16:ec:64:80:3f:b5:be:2f:ce:eb:9a:1a:2c:64:76:f9:78:91:
         de:4f:e4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:20:03 2026 by rpki-client