Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          olEsHavJFNDcBvhwqxlMPwhAZpttdqVAhC787M7U4+M=
Subject key identifier:   F1:32:7D:32:30:40:3D:FA:3D:9B:5D:0E:DA:EC:16:86:A1:7F:62:55
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       019FBF5839DDADCDCFAEDD9764A407F479D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          122F
Signing time:             Sat 01 Aug 2026 22:00:57 +0000
Manifest this update:     Sat 01 Aug 2026 22:00:57 +0000
Manifest next update:     Sun 02 Aug 2026 22:00:57 +0000
Files and hashes:         1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          6: CliNDeoIzFeDMEH3wX5DpgCkBDE.roa (hash: X2wGn+OIgA5q23nvVMID+7z155TCD1qHOkkmj4aaJNY=)
                          7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: Yxjae+8/4CcedEAHZI614s290ppfOt8rt43KotEF7U0=)
                          8: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          10: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Aug 2026 18:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:bf:58:39:dd:ad:cd:cf:ae:dd:97:64:a4:07:f4:79:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Aug  1 22:00:57 2026 GMT
            Not After : Aug  2 22:00:57 2026 GMT
        Subject: CN=f1327d3230403dfa3d9b5d0edaec1686a17f6255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c0:19:f3:29:f8:09:e8:bc:fc:fe:6d:91:24:
                    bc:df:c9:50:f7:11:c7:07:ed:a9:36:a3:7b:7b:df:
                    be:e0:c6:5c:96:96:2d:67:ab:6d:16:ce:13:65:56:
                    7f:69:6c:ba:8d:7a:0f:a8:14:d7:87:b6:09:5c:40:
                    fe:55:72:09:3f:f7:76:07:81:1a:81:e1:d5:13:50:
                    16:73:93:54:4a:26:b8:34:e4:cb:b9:36:5e:08:be:
                    ab:63:83:90:b4:9a:cf:ed:60:ec:a5:17:49:e9:38:
                    15:e0:4c:ee:98:4b:0a:a2:8c:3d:ac:cf:0e:dd:ce:
                    fb:97:20:d7:df:11:4b:78:96:49:e1:15:e5:69:d7:
                    7b:84:00:28:22:03:48:72:82:57:df:91:bd:ab:76:
                    6a:97:84:5c:3c:c6:30:08:ff:3c:75:75:b4:8d:6d:
                    84:75:4f:ea:5a:ad:90:75:6c:5d:d5:05:5c:48:9d:
                    01:11:d9:c8:4d:a8:7f:e8:21:a7:68:18:bc:65:ef:
                    ee:c3:97:49:3b:f0:e1:31:94:57:3a:a7:5c:7f:14:
                    f0:de:77:f5:34:7f:46:c5:02:1c:70:d9:d5:50:c0:
                    06:8e:82:16:29:8b:94:3e:aa:d7:be:b8:8d:1e:8f:
                    8d:3e:df:72:71:76:1a:d2:3a:b2:29:e3:3a:9d:59:
                    da:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:32:7D:32:30:40:3D:FA:3D:9B:5D:0E:DA:EC:16:86:A1:7F:62:55
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:2a:06:d6:d8:ba:29:6f:5d:1f:58:1c:18:db:dc:f8:58:a8:
         fa:8e:dc:fd:52:49:fd:61:ed:d9:28:fd:c8:81:2f:6d:6b:3e:
         64:4a:52:44:a6:0e:f0:d9:d8:72:d7:7b:e3:d1:97:03:b8:10:
         9f:e4:51:d2:80:e2:1a:07:4f:4a:74:15:10:3b:34:7d:83:bd:
         c5:7b:2f:63:da:e1:bb:f9:28:14:02:da:10:1d:18:7a:76:f8:
         1d:d9:e3:9e:68:fb:ad:7a:d1:dd:fa:bb:79:e5:04:a4:2f:b4:
         f2:43:b8:23:f6:19:91:35:67:33:13:ca:91:34:72:85:52:a6:
         fa:53:ca:18:87:c4:df:2a:8d:92:68:c9:16:e4:5a:ce:27:89:
         0b:8f:7c:20:91:8f:a0:5b:05:94:86:c1:61:12:3f:78:22:ad:
         a3:85:72:00:f7:68:b5:ab:b7:e8:87:d1:f2:45:f9:e8:a4:8d:
         4b:51:06:0c:ef:52:fc:58:e1:10:6f:cd:3c:21:ef:ba:9c:39:
         62:a2:2c:05:3e:76:77:a4:db:96:b5:7a:3f:30:a8:c8:61:f9:
         05:43:77:a4:73:6f:bc:ea:07:3f:94:bc:35:11:9b:84:3e:75:
         08:d7:2e:2a:5d:2e:3e:aa:f0:d8:53:e4:b3:0f:67:23:0c:b1:
         33:76:77:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 02:37:19 2026 by rpki-client