Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          BvooyRdISxybVu2NT1+nKzrmewlrPTnYa+TCbvlOStQ=
Subject key identifier:   B9:49:FF:09:BE:E8:B0:9C:5B:E7:9C:9E:23:DB:43:D0:21:56:E1:4A
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       019EE47A73C11E2A5E38D22369DF946EC484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          11BC
Signing time:             Sat 20 Jun 2026 10:01:30 +0000
Manifest this update:     Sat 20 Jun 2026 10:01:30 +0000
Manifest next update:     Sun 21 Jun 2026 10:01:30 +0000
Files and hashes:         1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: phD+hCXhiWn51lQZsy0q017h0v09tgPu6GVk6tC0Jrs=)
                          7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=)
                          9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          10: qOS44k4K1WSKtUKGLEhRxJxPEas.roa (hash: FW03t2tk2X1t0JN65p0CDI9DvEztasvMAKi+nwmwwnw=)
                          11: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 10:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e4:7a:73:c1:1e:2a:5e:38:d2:23:69:df:94:6e:c4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Jun 20 10:01:30 2026 GMT
            Not After : Jun 21 10:01:30 2026 GMT
        Subject: CN=b949ff09bee8b09c5be79c9e23db43d02156e14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:5d:8c:91:7d:df:4b:30:5a:cc:49:c6:55:
                    51:c0:87:f5:92:ca:e9:9d:10:89:91:76:a7:b6:2e:
                    42:44:5a:8f:a2:e6:c0:7a:8f:c6:94:64:91:a2:95:
                    22:27:9d:ab:c7:ab:cd:7a:c5:42:df:c9:ff:09:c2:
                    b5:0b:4c:6e:34:26:75:b3:c1:80:fe:c6:e0:f5:27:
                    7c:67:30:e0:5d:62:fa:da:65:28:26:81:c5:b4:28:
                    43:42:58:0c:41:a8:09:7e:72:56:a8:91:a7:49:3f:
                    6d:5c:26:d4:e0:6e:99:d1:85:cc:9f:19:f3:88:02:
                    1c:c5:5b:6b:fa:93:d7:f4:4d:d5:a8:e3:1f:11:40:
                    94:17:c8:72:e0:63:4c:9b:44:28:b8:01:17:78:83:
                    5a:7a:24:00:64:a0:5a:ad:3a:50:2e:cd:3c:d5:d9:
                    ab:92:ce:3c:eb:22:2d:81:03:70:7a:51:5a:16:e1:
                    9c:dd:22:95:56:c2:60:65:82:51:ae:5f:ad:4b:b6:
                    3c:df:f9:e5:5e:44:88:84:cb:ff:af:1d:d8:d3:92:
                    f7:86:6c:38:bc:df:33:4b:3b:6a:74:d6:9a:a1:b1:
                    e1:fa:45:25:b9:18:7e:62:9e:40:b5:a5:f0:ef:10:
                    e0:e7:e5:a5:43:1d:09:1a:6e:49:84:96:16:b3:1d:
                    45:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:49:FF:09:BE:E8:B0:9C:5B:E7:9C:9E:23:DB:43:D0:21:56:E1:4A
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:bf:42:b7:38:5f:ac:a8:1c:d6:d4:7f:c1:b9:47:94:ef:13:
         c0:d0:4f:16:a0:4e:09:74:e0:21:1d:08:d2:4d:37:6e:fd:f6:
         bd:a1:b8:d7:25:83:20:c7:46:3e:2d:ef:c2:2b:1d:d4:b2:3f:
         6b:e4:f6:0e:33:0f:a1:c3:b2:db:b6:9a:6d:24:a7:61:c6:33:
         f2:72:7e:ff:46:99:5e:0e:c0:f7:30:c2:3c:78:58:94:01:2f:
         ba:1d:55:78:59:72:87:c9:69:01:4a:ca:5b:4a:26:21:d0:d5:
         b3:c0:3e:3c:7e:4b:a6:08:e6:ce:5c:6d:8b:ec:26:b4:28:40:
         57:4e:ff:12:e0:5f:63:ec:6a:1a:47:a7:76:43:31:d8:67:d2:
         1e:b4:be:d8:6b:b7:09:87:17:06:77:29:e6:94:6a:eb:9c:59:
         79:b4:4a:da:6c:af:3d:1f:e6:bf:5b:82:26:33:e1:b9:13:6e:
         c6:bd:49:bc:da:67:68:de:3e:0e:3d:5d:55:13:72:4c:a2:5a:
         70:b6:55:4c:63:bd:b7:3c:60:bc:38:98:db:85:30:ca:9e:38:
         24:5a:17:99:0d:91:31:75:4f:d5:81:d5:e7:6b:84:18:90:80:
         f8:fb:7f:84:ac:29:f8:ae:7d:b6:bf:38:f9:73:50:c4:f5:d8:
         10:01:49:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 21:30:41 2026 by rpki-client