Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          HkkWe6gwM/yof4I/ahm4DE1xu0FCiwBMRiMTHAvbIT0=
Subject key identifier:   3D:60:47:E0:CE:A7:AE:C4:FA:79:1A:71:0D:A1:1B:F5:A8:0C:D0:80
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       01A098B6267F0E0937BE67D17BC4DEDA4EE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          12A2
Signing time:             Sun 13 Sep 2026 03:01:09 +0000
Manifest this update:     Sun 13 Sep 2026 03:01:09 +0000
Manifest next update:     Mon 14 Sep 2026 03:01:09 +0000
Files and hashes:         1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          5: 957KjKsgQQ-VsvqavE6ngE5UV_E.roa (hash: brbR3ebf55NlnYJGtD6lvlUEhjYCWu8BA/oxkjsOs0I=)
                          6: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: jzNpVmOJijRgbK8QfDpHJxLP2tbF39niG6mjwoSLqAc=)
                          8: ISsGxHIyrOPNYfVnvYomPgXoioM.roa (hash: Rohi1FBRyCEDtd+NeWD1TRuQbRscn3zM0CYpnIqNU38=)
                          9: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          10: ebH1LH3rtcCFyoMlHWJucoddnKk.roa (hash: w5pFXYTG5xXpiPZ27k95gUc+ufkXKutPUdAJkQwEA8E=)
                          11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          12: m6qwRKca6itBiUVdwN1KXUT2lxA.roa (hash: /aV+oJ7nRkyO35tfs9XJfVVL79kGBuqCjU4aDL711gY=)
                          13: uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa (hash: jeR1y8042HqLS1mMvheBMUQZBnBjFCW3QvpduHp+6M0=)
                          14: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Sep 2026 20:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:98:b6:26:7f:0e:09:37:be:67:d1:7b:c4:de:da:4e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Sep 13 03:01:09 2026 GMT
            Not After : Sep 14 03:01:09 2026 GMT
        Subject: CN=3d6047e0cea7aec4fa791a710da11bf5a80cd080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:73:cc:e6:4a:39:0b:68:49:33:eb:0b:be:
                    c3:8b:0c:70:a7:73:7a:33:5d:6b:1d:dc:e6:df:58:
                    80:01:bb:c6:92:32:e5:bc:c4:3c:3a:cc:92:81:5e:
                    c7:53:d6:fb:82:41:1c:ed:eb:b3:fb:36:fb:fd:25:
                    c6:cf:bf:19:62:d8:f2:78:a6:18:11:c3:7d:7f:0d:
                    65:7f:bb:8c:b6:d7:9d:42:31:7e:f5:e0:1e:b4:41:
                    03:67:5a:17:58:0e:53:28:d4:1e:30:f6:47:fc:19:
                    9c:4b:5e:b7:2d:41:8a:f0:b9:9f:b5:3f:86:09:fb:
                    d6:31:80:fc:7c:82:2e:6e:73:82:34:07:44:4a:e3:
                    19:69:96:d8:8a:51:23:c4:78:e7:9d:10:e0:38:a9:
                    ac:97:3a:8f:f1:41:83:16:74:23:83:3c:ea:a8:06:
                    98:1e:ce:0f:2f:79:45:f2:a5:78:8f:ac:c7:a1:49:
                    32:d7:6a:af:34:38:5f:0e:b3:3c:40:70:f6:2d:6e:
                    bf:55:2d:a4:64:a4:37:51:5c:38:6f:25:19:10:59:
                    87:58:7a:ad:c7:0f:76:ce:ec:b0:de:39:e5:00:d6:
                    8d:2e:7d:ad:15:ca:ea:e3:b1:5f:e5:95:0b:c0:e7:
                    be:75:69:da:34:91:0e:8c:ee:02:b9:49:a6:9f:26:
                    e5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:60:47:E0:CE:A7:AE:C4:FA:79:1A:71:0D:A1:1B:F5:A8:0C:D0:80
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7d:56:47:95:64:a4:ed:b3:a4:22:59:9f:cb:29:98:7c:67:
         11:35:8d:39:50:39:4f:d7:78:7a:01:ce:26:71:65:98:6d:b2:
         a5:bd:a8:b8:6e:0d:37:e2:5b:10:1c:ef:0d:85:36:4a:18:46:
         30:c9:f1:08:96:93:e5:78:9e:0d:cc:0b:69:f4:38:de:63:00:
         ef:c8:8e:80:97:22:2a:6a:1c:ef:12:7c:fb:28:3b:9b:6e:70:
         20:42:cc:3e:7c:47:cd:09:f2:c8:a3:69:eb:c9:88:88:44:ef:
         d6:21:80:45:b5:e9:09:6a:c6:c3:a0:e0:16:ea:58:b4:bc:6c:
         ba:26:15:df:9d:dc:ec:d9:98:f5:89:39:f6:ce:f8:78:7f:91:
         cc:27:f7:a8:40:72:23:a4:c5:e2:1c:19:e8:b6:d7:16:ff:ef:
         be:65:51:b7:f9:45:0e:09:24:07:f5:27:0c:24:d3:7a:6b:9c:
         1f:73:4e:2c:8a:9f:4a:b1:84:81:7d:ad:ae:3a:ac:d6:c7:2a:
         86:c0:2a:b5:cd:61:26:ca:b5:26:ad:2e:c7:e1:91:79:1d:23:
         a4:98:16:57:33:23:2b:16:9a:d3:f2:4d:68:f4:c6:49:89:31:
         a8:7d:2b:6a:03:24:13:b6:bf:17:cd:81:fe:60:90:0f:a1:e1:
         b4:17:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 06:24:21 2026 by rpki-client