Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          O5yOmL/ibebDh+pdN/nPF2SJZhBMSOhjZx8s34f6B40=
Subject key identifier:   58:6F:BE:41:1D:B6:B0:A3:1B:E1:32:82:6E:2B:CD:31:B3:20:CF:08
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       01A02BB4EF40F0A6B558580A3033CD7DF1D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          1268
Signing time:             Sat 22 Aug 2026 23:01:12 +0000
Manifest this update:     Sat 22 Aug 2026 23:01:12 +0000
Manifest next update:     Sun 23 Aug 2026 23:01:12 +0000
Files and hashes:         1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          5: 957KjKsgQQ-VsvqavE6ngE5UV_E.roa (hash: brbR3ebf55NlnYJGtD6lvlUEhjYCWu8BA/oxkjsOs0I=)
                          6: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: iXFmW0b+7Bmp2+l+xY6QvdOIOKZUFV9cn0VG1QeUC/4=)
                          8: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          10: m6qwRKca6itBiUVdwN1KXUT2lxA.roa (hash: /aV+oJ7nRkyO35tfs9XJfVVL79kGBuqCjU4aDL711gY=)
                          11: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 23:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:2b:b4:ef:40:f0:a6:b5:58:58:0a:30:33:cd:7d:f1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Aug 22 23:01:12 2026 GMT
            Not After : Aug 23 23:01:12 2026 GMT
        Subject: CN=586fbe411db6b0a31be132826e2bcd31b320cf08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:51:f2:fb:1e:31:88:17:f0:a0:24:fe:83:8f:
                    a8:4a:3f:92:9e:27:b0:e9:16:1b:7a:05:85:e4:af:
                    18:4d:a0:7d:9c:70:c0:93:7a:bc:23:e5:c2:8d:34:
                    2c:17:43:4b:a4:2d:b0:99:18:28:95:3d:9d:70:62:
                    06:05:07:f8:6a:1c:03:62:0a:ee:44:c5:c9:51:ed:
                    c4:e8:2f:da:ae:f6:2f:72:a9:2e:8f:2d:7f:10:60:
                    36:56:76:63:bd:06:14:e9:0d:5d:c6:d1:7f:1e:20:
                    1f:24:5d:a6:0c:eb:ad:36:0e:b2:26:1c:ae:cc:b3:
                    d2:81:c5:38:95:a5:be:8d:2d:80:59:f7:df:53:76:
                    c5:4a:a2:85:04:7d:6b:94:dd:6a:c4:61:12:e9:33:
                    07:9b:e1:0c:a6:d1:c8:b1:90:6e:cb:95:1e:c3:e4:
                    84:99:bc:7a:c6:29:07:cb:5b:44:9b:4f:cf:af:a3:
                    d3:dc:f2:15:4f:31:ac:ff:7b:62:c1:ce:87:90:ea:
                    05:c3:00:bb:08:08:2b:d0:b3:26:df:39:ee:d1:77:
                    45:27:b8:be:0c:31:f6:d2:75:f3:ae:1c:f0:14:61:
                    4c:82:8c:6e:11:be:17:f1:b7:d5:84:00:08:18:20:
                    85:f4:3d:97:a4:d0:82:9a:71:d4:a4:d4:66:b9:41:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6F:BE:41:1D:B6:B0:A3:1B:E1:32:82:6E:2B:CD:31:B3:20:CF:08
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6c:e6:36:b0:e4:ec:9d:86:e4:b6:39:14:19:3a:29:f1:34:
         55:f8:a3:78:70:d3:7b:02:de:63:21:9c:fd:c2:f4:cc:a3:81:
         9c:48:64:3f:0f:20:c9:7a:3b:0a:e1:ed:35:5c:0c:2a:a4:21:
         c0:a5:7d:5a:fd:4f:ff:b2:7a:bb:32:2c:02:23:00:56:f3:6e:
         6d:88:a7:f7:ee:ba:a7:e9:72:ce:9d:2e:44:39:ab:a9:62:81:
         97:85:76:ec:9d:3b:b0:b6:42:a3:a8:7d:bb:cc:e7:bd:02:1f:
         fa:66:4a:5c:a5:9d:7e:28:a4:0c:97:7d:79:3b:63:fc:ce:72:
         e5:cb:26:8a:46:8a:1d:11:1f:ac:e8:fd:3f:0b:4c:65:0f:ec:
         2d:93:2d:b7:6e:bf:99:ad:c6:0a:91:a7:6b:ee:6c:30:35:35:
         e8:fd:24:87:cd:75:13:b4:16:08:09:50:3c:ee:45:93:cf:24:
         13:39:8d:88:cc:71:52:11:56:4b:26:de:48:9d:a1:01:9b:d3:
         5e:6b:bc:a8:86:76:d0:bb:3b:3f:31:0c:21:4b:0d:6e:0b:61:
         f5:98:55:33:e3:33:9d:13:37:73:8c:a8:e1:32:7e:3f:fc:6f:
         f6:e3:3d:51:c7:f3:1f:80:e8:35:cf:eb:8b:50:b3:8d:3c:f8:
         92:44:aa:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaArtO9A8Ka1WFgKMDPNffHRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2
OTczY2YwHhcNMjYwODIyMjMwMTEyWhcNMjYwODIzMjMwMTEyWjAzMTEwLwYDVQQD
Eyg1ODZmYmU0MTFkYjZiMGEzMWJlMTMyODI2ZTJiY2QzMWIzMjBjZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplHy+x4xiBfwoCT+g4+oSj+Sniew
6RYbegWF5K8YTaB9nHDAk3q8I+XCjTQsF0NLpC2wmRgolT2dcGIGBQf4ahwDYgru
RMXJUe3E6C/arvYvcqkujy1/EGA2VnZjvQYU6Q1dxtF/HiAfJF2mDOutNg6yJhyu
zLPSgcU4laW+jS2AWfffU3bFSqKFBH1rlN1qxGES6TMHm+EMptHIsZBuy5Uew+SE
mbx6xikHy1tEm0/Pr6PT3PIVTzGs/3tiwc6HkOoFwwC7CAgr0LMm3znu0XdFJ7i+
DDH20nXzrhzwFGFMgoxuEb4X8bfVhAAIGCCF9D2XpNCCmnHUpNRmuUHYVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhvvkEdtrCjG+Eygm4rzTGzIM8IMB8GA1UdIwQY
MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It
MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh
LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWzmNrDk
7J2G5LY5FBk6KfE0VfijeHDTewLeYyGc/cL0zKOBnEhkPw8gyXo7CuHtNVwMKqQh
wKV9Wv1P/7J6uzIsAiMAVvNubYin9+66p+lyzp0uRDmrqWKBl4V27J07sLZCo6h9
u8znvQIf+mZKXKWdfiikDJd9eTtj/M5y5csmikaKHREfrOj9PwtMZQ/sLZMtt26/
ma3GCpGna+5sMDU16P0kh811E7QWCAlQPO5Fk88kEzmNiMxxUhFWSybeSJ2hAZvT
Xmu8qIZ20Ls7PzEMIUsNbgth9ZhVM+MznRM3c4yo4TJ+P/xv9uM9UcfzH4DoNc/r
i1CzjTz4kkSqpg==
-----END CERTIFICATE-----
Generated at Sun Aug 23 07:20:38 2026 by rpki-client