Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          bfo5Pa1y5YM/ReLa2nKgPmm+1wXrVfr1ZOSf+HzUaSA=
Subject key identifier:   02:C3:08:3B:56:FA:D0:EC:BD:9D:42:62:E3:20:8D:35:E0:FC:82:AF
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       01A1DE39A1C02969338DD5DDAA7C7F88D501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          1350
Signing time:             Sun 15 Nov 2026 08:01:21 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:21 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:21 +0000
Files and hashes:         1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          5: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=)
                          6: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: aV3FqZ2Wwwj4sVG+SjCuZDyqU3sb03n0di3qX5w6Tm0=)
                          8: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          9: jFJe3jl_QcpRM-Nhwh499UXzHl8.roa (hash: 4ZP7K3NzaQIb5Oo5+GVsX5DHhCL0Z9KsvPv5i497LDk=)
                          10: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          11: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 08:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:a1:c0:29:69:33:8d:d5:dd:aa:7c:7f:88:d5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Nov 15 08:01:21 2026 GMT
            Not After : Nov 16 08:01:21 2026 GMT
        Subject: CN=02c3083b56fad0ecbd9d4262e3208d35e0fc82af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:01:8a:12:77:53:9f:ed:48:f0:ca:ff:85:6b:
                    09:c6:4b:6d:82:12:14:7d:43:70:8e:20:1e:32:4d:
                    8d:92:6c:a9:c5:6a:f8:4f:e2:26:34:41:4f:2a:80:
                    5d:0a:f1:29:8c:2b:91:7c:8e:4b:28:45:21:c7:20:
                    34:ac:e1:38:8a:4a:46:fb:22:44:bc:c8:e2:71:3b:
                    70:50:52:3d:2b:dc:c4:67:e0:f5:d4:fc:da:4a:f4:
                    59:5b:5a:0c:b2:3a:90:c1:09:ad:18:5b:05:cf:7f:
                    36:6e:2f:44:fb:01:98:de:74:86:38:d8:e8:71:f4:
                    2c:bd:84:84:98:f0:e0:33:b2:13:c7:41:dd:0b:b1:
                    e8:57:5d:ec:e9:1c:78:32:b1:71:96:ab:88:02:9f:
                    bd:cd:83:ce:6c:66:3d:e0:b2:3e:37:21:53:43:0c:
                    b0:1a:25:a7:0f:e8:cc:19:79:9a:be:af:8c:46:96:
                    be:30:38:e5:f6:42:1f:38:15:b5:ea:e4:09:cd:59:
                    e9:f3:10:33:9d:66:63:4d:f4:48:5c:6d:c1:6f:57:
                    2d:59:cf:fe:e9:b3:ea:15:11:c3:f6:cb:fd:b2:ae:
                    28:eb:01:eb:34:38:ee:0d:f5:a9:24:6c:44:ce:4a:
                    3a:8b:2a:ed:8c:c0:1c:8f:f5:46:0a:ed:85:a2:6a:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C3:08:3B:56:FA:D0:EC:BD:9D:42:62:E3:20:8D:35:E0:FC:82:AF
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a5:1a:c0:b8:f1:c5:a5:20:03:8d:15:c7:f8:9c:1e:76:e4:
         ad:df:c7:12:cf:b7:ae:ea:62:65:39:ff:dc:2a:63:5e:53:5b:
         61:2b:6d:a8:1a:bc:cd:95:60:85:bb:f3:ac:36:f9:2b:d6:73:
         f5:7f:46:af:32:8d:e2:f7:c7:f3:05:ee:f1:98:f2:6e:61:7a:
         34:28:9a:70:fe:f0:c8:08:29:a4:bf:68:76:a2:bb:19:5f:0a:
         92:70:ae:c5:90:cb:f1:4c:2b:12:82:c9:6d:9e:e2:d7:4e:b3:
         ac:4f:8e:a6:62:06:de:a5:bc:35:f3:e5:d3:dd:80:57:64:af:
         92:42:cf:8c:4f:8d:2d:2e:57:88:af:e9:5c:ec:6f:ce:8a:75:
         3f:5a:d4:ed:f5:06:9e:d2:56:5d:98:c7:da:f7:38:9c:56:c9:
         b5:73:f9:9c:4f:70:35:96:97:45:ca:73:61:02:6f:32:ad:23:
         f8:34:51:5e:7d:88:84:ee:3a:81:3f:3a:f4:2f:b8:96:ac:42:
         78:9a:d1:cc:f3:d4:61:d4:7e:c3:e5:11:12:ac:25:8d:c3:fc:
         1d:6c:bb:e6:a1:05:05:de:17:92:0d:57:0a:0c:63:76:ae:a6:
         f6:91:c4:68:f8:3f:54:b0:37:fe:98:ca:4c:9d:1e:f1:56:6d:
         9c:6f:41:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:37:31 2026 by rpki-client