Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          E0TZRVblDQx9UqSs6OqHPSuFJ5mINPGnro+w2MTLZu4=
Subject key identifier:   D0:29:EC:A1:A6:23:5F:69:74:EF:9D:FF:B7:D7:BF:74:D1:0B:C4:6D
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       019F9C9554D28557594AF705B7F445746E42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          121D
Signing time:             Sun 26 Jul 2026 04:00:59 +0000
Manifest this update:     Sun 26 Jul 2026 04:00:59 +0000
Manifest next update:     Mon 27 Jul 2026 04:00:59 +0000
Files and hashes:         1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          6: CliNDeoIzFeDMEH3wX5DpgCkBDE.roa (hash: X2wGn+OIgA5q23nvVMID+7z155TCD1qHOkkmj4aaJNY=)
                          7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: a0js/QTO48g6owCW6fRSBevN0rCO76v0um7JNUTwGc0=)
                          8: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          10: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9c:95:54:d2:85:57:59:4a:f7:05:b7:f4:45:74:6e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Jul 26 04:00:59 2026 GMT
            Not After : Jul 27 04:00:59 2026 GMT
        Subject: CN=d029eca1a6235f6974ef9dffb7d7bf74d10bc46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0f:05:e7:eb:23:c2:eb:9f:b5:9b:82:1e:c7:
                    fe:a1:39:ef:78:df:04:cc:32:57:1a:e3:d4:40:f0:
                    d9:2a:82:2a:11:ea:e8:87:6b:02:d1:1d:7a:37:d4:
                    92:72:54:3b:c2:20:2a:61:27:4a:1d:e5:b6:93:5f:
                    fd:71:80:6c:46:70:d3:8b:a6:7c:f0:41:70:36:ba:
                    94:e3:90:0f:68:86:b0:9a:d5:53:35:28:70:91:54:
                    91:cd:7e:0c:4c:fe:f1:e1:d9:bf:6d:69:3f:41:fd:
                    92:7e:d6:ed:ef:01:92:36:5e:6b:00:8b:b6:6b:7f:
                    2a:9c:d6:75:1b:0a:5e:d8:16:dc:f8:bc:76:af:90:
                    7f:54:d3:a2:7a:9b:03:38:36:42:b8:66:2a:64:55:
                    cf:60:c0:28:21:d1:4f:8a:9a:92:cf:96:f6:1a:df:
                    d2:fa:59:6d:57:47:db:94:fb:b8:58:c4:1a:01:96:
                    b2:b3:7a:97:36:6a:84:15:a2:b6:10:ed:fd:f5:0d:
                    bc:10:e2:ed:75:1c:c9:7f:ed:fc:65:63:02:42:94:
                    d9:96:57:b4:df:f2:46:0d:2f:03:55:3a:a8:e7:7d:
                    ed:a9:94:d8:8f:49:4c:45:2c:ff:b0:92:8e:6b:6f:
                    7b:1f:c3:a9:78:82:c3:b0:26:0f:e2:f8:e4:ba:db:
                    fa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:29:EC:A1:A6:23:5F:69:74:EF:9D:FF:B7:D7:BF:74:D1:0B:C4:6D
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:df:b9:20:ab:bb:27:04:88:e6:5d:c2:bc:bf:bb:32:9e:b0:
         5d:de:9d:4b:38:5d:1d:c8:3d:2d:03:55:b8:d9:7c:00:20:33:
         79:5a:cb:18:f7:4a:81:ef:67:82:78:48:3f:62:ec:3e:7e:96:
         d1:81:f2:1a:21:b6:d6:9c:a7:a1:6d:d1:b6:86:24:da:f4:da:
         ec:cc:86:0f:43:b8:dd:3c:c9:c6:99:cb:7b:e8:78:ac:2b:6c:
         4b:64:35:00:fe:53:b3:31:61:d3:1f:69:dd:8f:40:cc:36:1f:
         64:57:fa:f8:41:b4:0a:34:c4:84:b3:5a:f5:8e:41:c9:5f:2b:
         21:22:ff:04:4d:f9:c2:03:1c:1e:ce:67:8f:3e:bb:03:8f:3b:
         d4:47:07:13:79:10:dd:17:bd:02:d5:20:e8:cd:df:97:70:9f:
         20:ca:e2:60:a9:1a:c6:56:d4:89:b6:d2:20:78:04:49:5f:5a:
         fa:26:af:93:40:f6:58:90:c9:30:b8:ce:59:dc:53:c3:42:ba:
         87:af:3a:21:d5:32:cb:9f:84:46:43:0e:cf:89:eb:88:50:35:
         ee:a9:dd:29:b8:d8:64:06:e7:bb:67:d5:69:68:c7:68:d0:31:
         e7:3d:13:5b:84:5c:15:59:8f:17:26:e5:9c:77:32:f8:35:49:
         0d:25:4c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 06:10:40 2026 by rpki-client