Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          fB1ngr45ClX7QNjQey6y8sZ8k/2UEQbIP1q6xlvXB70=
Subject key identifier:   B3:FB:69:33:50:18:67:13:82:93:9B:35:C2:40:71:34:26:FA:7A:B3
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       019D94733E1AC30E8AEB728C593B2F6ED307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          110E
Signing time:             Thu 16 Apr 2026 04:01:13 +0000
Manifest this update:     Thu 16 Apr 2026 04:01:13 +0000
Manifest next update:     Fri 17 Apr 2026 04:01:13 +0000
Files and hashes:         1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: rlreNxH0ptS3Wfc/D8d/zEE7psPNzU3OqmWTki54gFk=)
                          7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=)
                          9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          10: qOS44k4K1WSKtUKGLEhRxJxPEas.roa (hash: FW03t2tk2X1t0JN65p0CDI9DvEztasvMAKi+nwmwwnw=)
                          11: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:94:73:3e:1a:c3:0e:8a:eb:72:8c:59:3b:2f:6e:d3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Apr 16 04:01:13 2026 GMT
            Not After : Apr 17 04:01:13 2026 GMT
        Subject: CN=b3fb69335018671382939b35c240713426fa7ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:f0:65:12:7b:79:dc:49:1c:90:0b:ef:f9:
                    a1:f4:f3:05:10:ef:57:07:25:ae:a3:91:db:e1:30:
                    2f:0b:4b:96:97:f6:c5:14:48:42:3b:aa:de:37:87:
                    fe:0c:c7:fc:f2:f2:76:77:ca:f0:0d:ba:12:bc:18:
                    4b:27:98:92:b1:b8:4c:7b:06:75:f5:c9:73:ee:fa:
                    5f:c8:f0:b9:6c:5f:d5:0b:1d:c1:5f:5c:64:3d:c1:
                    b8:f1:dc:a9:db:79:a9:60:ed:53:be:a0:8b:96:d8:
                    7a:5d:e4:42:8f:d9:de:06:1f:d7:f7:22:08:10:ac:
                    4f:12:b9:2a:27:89:f3:25:f5:7f:0b:b6:51:ee:5a:
                    ac:ce:16:a8:3d:43:24:ae:7a:20:bd:bd:a8:d3:3c:
                    60:96:e9:23:7e:3f:47:8c:2d:b0:57:b3:8a:72:0f:
                    fb:79:59:33:b5:4d:bd:c6:48:80:b7:76:6e:7c:f6:
                    af:18:cf:9d:c1:bb:d4:4d:de:03:fc:44:8a:67:db:
                    84:fb:77:21:33:87:31:73:18:30:57:a6:ac:ec:0f:
                    72:55:32:ed:be:ea:db:ed:e8:e6:9c:c2:89:4e:23:
                    79:aa:1d:8b:3d:4c:e2:34:93:4d:90:95:8e:9e:41:
                    05:26:e6:64:63:27:4b:18:30:70:a4:9f:d4:05:79:
                    12:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FB:69:33:50:18:67:13:82:93:9B:35:C2:40:71:34:26:FA:7A:B3
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:af:7e:3c:87:9b:8f:f9:5b:73:12:94:f4:13:08:4a:bc:74:
         df:27:2c:ea:c1:73:45:9a:8b:58:f3:78:34:fe:68:06:3e:c8:
         de:c7:1f:b1:1d:1f:3a:bb:f4:84:c8:64:b2:58:d5:fb:8c:7c:
         4e:cb:10:34:5c:ff:b9:22:2a:e3:43:b8:16:d5:d7:6c:82:98:
         de:50:73:36:8f:ac:e3:2f:87:eb:72:0b:62:31:d9:a3:f0:72:
         7a:0f:68:2b:1a:58:9e:73:40:43:28:b2:d8:e3:0b:19:6c:2e:
         9a:2c:ef:be:12:0e:60:28:51:0c:ce:90:56:76:57:04:ac:27:
         1b:d8:0d:62:90:60:a9:37:84:7f:e3:88:08:5d:90:a5:f3:68:
         37:e3:bc:ef:59:08:68:ce:93:2c:b2:75:00:42:f7:b9:5d:e0:
         82:07:a5:63:81:36:10:ff:9c:e7:86:15:ce:66:2b:a7:24:0d:
         fb:8f:23:f8:d9:0f:11:13:c2:79:ee:25:1b:85:3d:f8:f7:19:
         28:2c:b0:e8:21:21:13:42:73:af:fa:3c:ae:7a:9f:61:f8:22:
         b0:6f:4f:19:2f:87:ad:16:2f:d2:32:99:5f:37:36:a9:84:f4:
         2d:15:30:48:5c:5c:b3:1f:05:c2:7d:5c:27:32:98:11:e0:eb:
         0d:2f:b4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 13:43:20 2026 by rpki-client