Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          fgwmALDeq0aGuiEJ5xS5BDSlMkT/9AKI9w3Y3yOeIVE=
Subject key identifier:   7E:6E:5A:B2:BC:21:82:FF:4E:9F:32:1A:36:3E:BE:D1:D7:E4:D9:96
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       01A008BAE63819981AB6CDE8A6AA398CB7A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          1255
Signing time:             Sun 16 Aug 2026 04:01:01 +0000
Manifest this update:     Sun 16 Aug 2026 04:01:01 +0000
Manifest next update:     Mon 17 Aug 2026 04:01:01 +0000
Files and hashes:         1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          6: CliNDeoIzFeDMEH3wX5DpgCkBDE.roa (hash: X2wGn+OIgA5q23nvVMID+7z155TCD1qHOkkmj4aaJNY=)
                          7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: +K7SeGkDxjj88qkCvwvv0nVEg87yxqBlw7DU8hjLDs0=)
                          8: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          10: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Aug 2026 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:08:ba:e6:38:19:98:1a:b6:cd:e8:a6:aa:39:8c:b7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Aug 16 04:01:01 2026 GMT
            Not After : Aug 17 04:01:01 2026 GMT
        Subject: CN=7e6e5ab2bc2182ff4e9f321a363ebed1d7e4d996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:b0:27:c0:e9:9e:e0:5e:a5:d4:05:d7:8f:
                    8f:cf:a0:c5:3c:46:1f:1e:e3:78:6e:6d:28:d8:e7:
                    1a:25:5f:f1:be:54:7e:d5:f8:d4:5c:9d:49:21:5f:
                    44:10:f7:6b:2c:e3:74:52:87:cc:61:8e:a7:a5:df:
                    e6:54:af:55:0b:db:9d:1e:cf:c5:91:e6:a6:c3:30:
                    f0:be:5e:6d:4f:d6:49:26:ab:34:f6:d1:b0:6a:c3:
                    d9:2b:88:36:09:37:35:2c:8f:94:d1:4c:e9:0f:47:
                    a8:be:7a:f7:dc:85:9b:f1:8f:f5:10:74:eb:c6:8c:
                    95:d6:d7:01:57:0a:aa:f3:ec:af:4a:68:d5:fe:95:
                    cc:13:be:98:5e:6a:33:0f:0b:29:be:fa:1b:e7:b2:
                    db:f5:d1:99:6f:9a:b7:38:d4:0c:b7:fd:27:b2:a1:
                    9a:a1:17:ed:7c:d0:29:f6:8a:fc:bc:c6:ca:31:79:
                    67:ca:aa:62:57:80:e5:73:1e:d2:63:3e:6b:a3:fd:
                    77:51:f2:e9:a6:2f:a7:89:7e:ef:c2:70:11:a7:0c:
                    6e:e6:28:30:bd:98:5e:62:4b:2e:91:25:a9:f4:78:
                    4d:e9:58:50:ac:00:a7:91:50:8e:e0:30:82:41:98:
                    1f:6a:a0:34:43:eb:04:24:b4:24:0b:66:dc:85:d7:
                    59:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6E:5A:B2:BC:21:82:FF:4E:9F:32:1A:36:3E:BE:D1:D7:E4:D9:96
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c6:60:d8:f8:72:7c:8f:f3:2c:d2:65:83:35:60:1d:9d:00:
         75:fc:05:3b:f8:71:90:e4:14:46:cb:53:0d:8b:d8:78:88:8f:
         9d:59:37:76:f4:fa:44:db:ed:48:13:6d:c5:a3:4f:76:9d:99:
         bd:fa:a0:f2:7b:52:b4:c0:e3:9f:f4:cf:0d:7d:51:0a:78:da:
         9c:8f:68:6d:d2:08:61:91:b6:1b:95:2f:04:82:29:05:55:8b:
         7d:be:62:a5:32:49:ee:9c:11:81:2f:3d:25:05:8c:6d:23:b8:
         b5:98:30:fb:1f:2e:2b:8d:c2:8b:bb:e5:5d:a6:33:7a:e7:40:
         d0:16:f8:29:eb:07:14:6e:8e:e2:18:d2:8b:c5:59:4e:d9:93:
         35:d0:04:63:a8:9e:ba:e8:e4:f2:9f:69:14:88:bf:27:b5:5e:
         85:fe:f4:4d:7d:0d:e3:56:f7:e8:c8:76:c3:57:00:95:97:29:
         82:e6:94:0a:ce:f9:d5:e5:b8:b0:b2:a5:af:ca:2d:f7:c6:44:
         37:75:3e:a4:21:56:26:04:f5:2e:86:09:62:51:6c:96:04:e8:
         47:b5:c0:c7:d6:86:47:2c:e0:dc:36:c7:44:95:02:62:29:c9:
         5b:23:81:fa:59:5f:9f:4f:c9:b6:bf:7c:c4:88:b0:ea:98:77:
         dc:8b:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 10:03:01 2026 by rpki-client