Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          oxn4gDj0SQKbenx1QhmJ84pEwl/3sDCBI21ZKvm0IS0=
Subject key identifier:   F6:22:FA:A7:B9:96:53:09:B0:C5:BF:9F:D0:91:39:2D:8F:62:ED:FB
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       01A075F360188FC3CD54A7BC6D5F0CA065FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          1290
Signing time:             Sun 06 Sep 2026 09:01:19 +0000
Manifest this update:     Sun 06 Sep 2026 09:01:19 +0000
Manifest next update:     Mon 07 Sep 2026 09:01:19 +0000
Files and hashes:         1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          5: 957KjKsgQQ-VsvqavE6ngE5UV_E.roa (hash: brbR3ebf55NlnYJGtD6lvlUEhjYCWu8BA/oxkjsOs0I=)
                          6: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: ij43UZcEgfd9Sruza7PvRA6SvZQFhf6B+M5aDNe5VwM=)
                          8: ISsGxHIyrOPNYfVnvYomPgXoioM.roa (hash: Rohi1FBRyCEDtd+NeWD1TRuQbRscn3zM0CYpnIqNU38=)
                          9: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          10: ebH1LH3rtcCFyoMlHWJucoddnKk.roa (hash: w5pFXYTG5xXpiPZ27k95gUc+ufkXKutPUdAJkQwEA8E=)
                          11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          12: m6qwRKca6itBiUVdwN1KXUT2lxA.roa (hash: /aV+oJ7nRkyO35tfs9XJfVVL79kGBuqCjU4aDL711gY=)
                          13: uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa (hash: jeR1y8042HqLS1mMvheBMUQZBnBjFCW3QvpduHp+6M0=)
                          14: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Sep 2026 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:75:f3:60:18:8f:c3:cd:54:a7:bc:6d:5f:0c:a0:65:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Sep  6 09:01:19 2026 GMT
            Not After : Sep  7 09:01:19 2026 GMT
        Subject: CN=f622faa7b9965309b0c5bf9fd091392d8f62edfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d3:e4:ac:56:47:56:87:7e:81:71:96:dc:4a:
                    15:be:15:9a:9f:81:39:94:f6:87:fd:3c:cf:88:b0:
                    38:bc:72:ed:db:05:ea:9b:b2:ca:1d:2a:ae:d4:82:
                    45:0c:ce:24:83:c0:3b:74:a1:97:e3:6a:e9:ed:60:
                    67:8a:31:a0:23:45:e8:f4:ee:6a:fe:7a:85:11:5e:
                    73:1c:35:c8:de:a9:fb:eb:98:39:03:df:cc:98:30:
                    5c:94:dd:25:2f:79:a2:3f:b3:a0:aa:92:f6:c6:0c:
                    c0:58:95:4d:77:0c:43:46:a1:99:a5:57:23:5e:ce:
                    8d:6d:59:ff:92:5c:34:4b:2e:19:bb:25:32:00:65:
                    c5:ab:aa:f0:e8:2a:a6:52:5c:de:47:6d:e1:92:ba:
                    b6:c8:70:ae:a2:4e:f8:47:dc:9f:05:51:0f:c9:24:
                    18:b1:e1:51:dc:f2:c4:e3:ad:78:50:d8:d4:d3:08:
                    32:42:d0:dd:83:2b:ec:2c:01:a5:85:65:51:63:4c:
                    54:a2:bf:b1:12:96:d2:03:0e:78:91:07:94:73:aa:
                    9e:3e:66:a9:0d:ef:d6:f1:64:6e:90:05:3a:ce:d9:
                    f1:91:10:66:fe:c9:a7:95:6f:4b:da:c7:d7:54:30:
                    7b:88:e8:b9:e5:54:a3:8b:5b:fa:5f:74:27:4a:9c:
                    d6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:22:FA:A7:B9:96:53:09:B0:C5:BF:9F:D0:91:39:2D:8F:62:ED:FB
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:01:7f:f0:06:c3:5a:33:49:ab:de:b1:35:b7:72:3b:23:3f:
         1f:82:b9:7e:1b:7a:6b:12:87:2f:6d:4a:20:21:e5:fa:d3:ea:
         95:e1:dc:b9:a8:ed:1d:56:12:e8:b4:31:f9:2c:b7:c7:5f:27:
         d5:5b:ea:aa:27:34:a3:b8:c3:4b:04:22:da:ed:56:ae:bd:dd:
         9b:df:b3:e8:6f:ab:c2:b3:56:e7:95:0c:fd:77:27:54:ca:23:
         dd:13:0f:89:62:c9:91:a4:03:eb:ba:b6:e9:3c:2f:d4:5c:ab:
         42:e5:3e:6e:ed:52:3a:48:18:17:71:a4:9f:9a:34:61:a6:4e:
         29:f6:87:ed:92:cf:05:4b:d8:95:79:09:77:8c:9b:26:68:62:
         fb:94:1d:5e:e6:38:be:0e:01:69:6d:22:a8:0b:dc:9a:7a:f0:
         61:ec:ab:a4:3b:20:4e:76:55:ba:ea:0d:a1:3e:07:fe:cd:59:
         eb:1d:f9:e7:85:a1:54:ae:5a:3d:34:a9:a3:65:4b:a9:c3:2c:
         4f:64:42:42:d9:9c:13:ca:91:9f:66:70:dc:3c:77:e5:30:17:
         25:b6:37:b6:9d:87:e4:6a:da:8a:a7:dd:b8:fd:10:13:e2:4e:
         3a:36:e5:72:eb:34:4d:ba:94:7e:57:ce:6f:cc:21:18:77:97:
         02:ca:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 12:25:10 2026 by rpki-client