Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          cBvBs8vk8Pc2hFr6rIzYPGpXcGFCZ45okIXdNBJ/X+M=
Subject key identifier:   E7:A5:AF:FA:2D:E1:92:19:51:72:31:1D:8B:9C:33:06:D3:A9:82:E9
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       01A006CCFDC8A26192020C19C7EC67F1764C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          1254
Signing time:             Sat 15 Aug 2026 19:01:32 +0000
Manifest this update:     Sat 15 Aug 2026 19:01:32 +0000
Manifest next update:     Sun 16 Aug 2026 19:01:32 +0000
Files and hashes:         1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          6: CliNDeoIzFeDMEH3wX5DpgCkBDE.roa (hash: X2wGn+OIgA5q23nvVMID+7z155TCD1qHOkkmj4aaJNY=)
                          7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: /q24veI+9HDcF6g53nhHbV9NU1w32IVBY1/wA0m1cuc=)
                          8: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          10: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:06:cc:fd:c8:a2:61:92:02:0c:19:c7:ec:67:f1:76:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Aug 15 19:01:32 2026 GMT
            Not After : Aug 16 19:01:32 2026 GMT
        Subject: CN=e7a5affa2de192195172311d8b9c3306d3a982e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:01:47:29:b3:4f:26:d2:9f:1a:c1:21:11:
                    41:da:c0:20:04:22:20:f3:c7:21:e6:52:12:f0:d9:
                    8c:80:fc:e1:3f:fd:e1:57:8a:34:04:24:ad:9a:7c:
                    39:db:06:a3:85:ea:78:f6:ca:cf:63:6f:7a:7e:43:
                    aa:e0:58:ed:a4:8d:9d:6c:e1:49:68:51:e1:63:ba:
                    66:a5:a9:aa:42:cd:75:f8:80:49:a4:12:58:80:22:
                    75:94:57:9d:b8:ef:78:f5:54:a0:3e:85:38:95:6b:
                    bb:43:75:08:dd:37:87:7a:46:75:d8:3a:56:65:f5:
                    41:3b:b6:d8:de:25:e8:c3:b7:e9:7e:19:01:b5:a4:
                    b5:4a:85:8e:c3:de:8b:96:62:10:b5:f7:28:bd:0c:
                    27:af:c5:9c:89:5e:29:87:c9:4c:11:53:ea:bc:d4:
                    59:e2:79:eb:29:78:fc:61:03:68:70:8c:30:8e:fc:
                    3d:0f:d8:00:09:02:47:60:fd:f0:96:ab:42:27:85:
                    b9:07:d6:cf:1e:77:2c:f2:73:7b:0e:c3:a2:95:98:
                    09:6c:c0:0a:3a:38:44:fe:8a:82:db:50:6a:d1:4f:
                    08:32:7e:b2:d7:25:f8:9e:93:b2:46:cb:ca:1c:c2:
                    18:78:7e:88:15:3b:ba:59:51:48:10:a2:31:85:2f:
                    ab:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A5:AF:FA:2D:E1:92:19:51:72:31:1D:8B:9C:33:06:D3:A9:82:E9
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d6:aa:74:f6:cb:04:aa:51:cd:e0:c8:26:20:f6:82:b1:9b:
         20:d0:f2:93:0c:c6:17:ad:0e:4b:c7:40:1a:03:35:da:fd:7d:
         ee:d3:8d:be:9b:d4:bb:a2:19:b4:06:5a:2c:00:53:74:40:8e:
         2d:4b:c7:c1:55:c1:bd:95:6d:ba:98:25:ce:86:b7:c8:28:dc:
         d4:b6:57:33:bc:97:23:08:0e:45:70:ae:a8:44:f4:6c:47:dc:
         6e:6d:b7:50:77:1d:ff:5b:62:87:97:78:b3:14:a8:cf:c0:6a:
         f8:d9:ef:11:3e:22:2c:ef:9e:9e:1b:b9:8d:b5:f1:6a:ad:eb:
         1e:b3:30:1a:19:d8:18:9d:cf:2e:51:51:b4:18:79:1e:6c:48:
         e6:c9:3a:bd:15:36:72:71:04:ed:32:d6:78:02:79:b7:86:62:
         b8:94:41:06:fd:62:e0:79:56:11:e6:96:4c:bc:cb:16:a6:63:
         ba:09:58:e0:da:ac:bc:95:ba:c5:3d:d5:fd:ff:54:05:74:6a:
         61:ac:83:e6:26:56:3a:1a:b9:c5:e8:06:16:31:fd:6f:c6:68:
         8f:8f:9f:f0:39:d5:d1:b7:e5:d6:1d:6e:f1:ea:28:d4:da:a0:
         9a:68:4a:ea:30:75:29:80:9a:f1:8d:4d:0b:74:26:74:af:68:
         ff:f0:b2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 05:10:19 2026 by rpki-client