Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
File:                     1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json)
Hash identifier:          gK/wmq7KnJg45sg663n1a/tlC/4PZ7fPImQNACK24I0=
Subject key identifier:   2A:07:0E:35:D6:49:CD:07:0D:DC:28:53:DE:91:5D:69:1A:51:F6:28
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Certificate issuer:       /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial:       01A0BE0BC02473B1B594AED1DCDB2D66BACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
Manifest number:          1AA8
Signing time:             Sun 20 Sep 2026 09:00:36 +0000
Manifest this update:     Sun 20 Sep 2026 09:00:36 +0000
Manifest next update:     Mon 21 Sep 2026 09:00:36 +0000
Files and hashes:         1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: gldA4iT/O0RHNBLsm8iGkJ+AEWii8tXvyLfpmKeZsP8=)
                          2: 1-n7EdeFX20C6cFMyJ6Y5HWVMQU4.roa (hash: suKN0U6xP/FTkPKNJxFCA4VBUPU7v0a/LfB27Kibl1k=)
                          3: 5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa (hash: 6wnMllVhpaDtM68Ah+lycy0EGi1lfhyp8UE1fOfc3rk=)
                          4: 5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa (hash: UIor+BCs9mrPP+0b8Lrn7HV4ATlK3jTAi1j4A256yaM=)
                          5: 6nafakW_FoiGF0x1s1VoLFJqiuw.roa (hash: tSlSVShZ1Ws+SLODMKOJpPu4G+R5CcazLAH7YNSqZ2c=)
                          6: 7Dwg5wFGQqErSuNtav6wSEytWn0.roa (hash: KeyWkMo6tHKMd0UPR13FjorhMTn+dRjqc0BqAQPkOvs=)
                          7: 8KG06O_ShOw-fAgF9hGpdzf3xEY.roa (hash: DVd/NvS4nhNxcSUkNJDTh5SmK4Clg69CxGJbu7seCkM=)
                          8: 9wtyd_oclLUMViGWblNWlEAAOPQ.roa (hash: K2AWf+HALDuM6Uz23jlAWhflFeUexuIRM5RCtHWCEPc=)
                          9: C0VnbFyJGyh-3dXIXN-FVbbzva4.roa (hash: nupbKfiMh1Vbm5eU6VpPOjsRTYtweNUnX1ebsHaK4hQ=)
                          10: CT3vMjevN0fYRTlNcJsck0hB60Y.roa (hash: 85AL/YEBSQNN6+KYNgUrlSLsBbfZxOy5uaLrLJGec+M=)
                          11: GnQ9nonV43lnZNoCG-ecdWqOLDk.roa (hash: 5lmMKt+idSdfaSrOW6fzEjOhALbxhOPcgnKdUuSF0JY=)
                          12: HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa (hash: BGn13AFdqwObLZ5mjHyJ0u9f6CC1n+u2Nsk2L6TLrao=)
                          13: MaRo3qPa_AXa-98seLnNkzlSlLM.roa (hash: ji8JHlcGAHWKEBT5OFXPF3gvRuoRQByWZBo69DobjWw=)
                          14: W-cWYMFcdHDS1yv5jkAVjyp5ho4.asa (hash: QdAC+W0wfurd2BssKpz9U5P9YKTKUM6ZjHzLGg+JdOA=)
                          15: cQJLykBOqMGgV5KV9rcPZr-_U1Y.roa (hash: aOQV+i/NapnfOnLvAQ3Zr9czxxA22kZuub947U3fZRw=)
                          16: cRp-cVmkypbBe3-5hQ3MERFfdvI.roa (hash: af21yk690TVm1yoO9i+WiH3Y6Q+lKgW5WAHD9V6wAgo=)
                          17: fyxZLGtBW9e59RZ3aEwSKlhWT4w.roa (hash: itxLmMXkodUFbwqD5SmQmqHBd8MyF3lpLKdM1WEIZu0=)
                          18: ipuMNUIFJfwrG69f0t1BcA9T-lo.roa (hash: E/49CgkatlS4HbWzI9f4jj29KOBht+FWKi5pYDsrCiU=)
                          19: oOmWYS79EfLZM1YUVX02Dm8sbCI.roa (hash: UMtyOefWK95ZFcwkFudLsDtrliJckAkSIFBXdWfp+zQ=)
                          20: odS4gJ1H-haIP2hfRvP__EIClnA.roa (hash: frbBPZZ05GoX1i3mLnaN+IdXbfyMrpl7+ZrlTRvKVwQ=)
                          21: pHgh0geILg2H9c8tNXl-coocbok.roa (hash: MiAWsYu39mO81MmSrazkuF8uttZJWXsnb0YqEMhZmqc=)
                          22: sE7fbSG0iBstRHmKf0OX8szEgWs.roa (hash: gYIE1s4jYsTjZWWhfuLuqn/b/Fx6ztxELcEP+vhMzWw=)
                          23: xLvL2DDHdDsFuu0LWe_ArfxkZOU.roa (hash: jEvpZaWRUr0vww6k+sw/ZzVTbY8rHX3wan18IH9TsyY=)
                          24: yUTvxSoxh0P1X3qi3W3GEmQmupg.roa (hash: YggGVCBvHEr/or8wxjiqlTzxSxsrR2x9hxdT1duIBFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 09:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:0b:c0:24:73:b1:b5:94:ae:d1:dc:db:2d:66:ba:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
        Validity
            Not Before: Sep 20 09:00:36 2026 GMT
            Not After : Sep 21 09:00:36 2026 GMT
        Subject: CN=2a070e35d649cd070ddc2853de915d691a51f628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:fd:bd:52:c1:88:da:26:3f:e3:83:6e:1c:
                    b2:19:7e:4d:0a:3a:73:dc:c8:90:9b:90:3e:5a:10:
                    92:13:d2:b5:a2:4d:93:53:e1:3d:ec:56:53:af:27:
                    9f:1f:a1:68:b2:53:e0:32:a1:ba:6c:6f:97:6f:36:
                    35:c8:cf:d3:6d:81:01:52:ed:84:08:61:3a:27:5e:
                    c8:47:71:e9:e1:62:16:9f:dd:9a:03:bb:31:7f:4c:
                    1f:d7:4b:96:17:f7:55:ee:fd:71:97:91:35:f9:2c:
                    22:62:02:c3:e6:2c:76:30:9e:8f:81:1f:15:4d:95:
                    9e:09:77:90:77:52:08:bb:41:a3:ea:bb:5d:a5:b1:
                    de:37:9e:97:73:e5:ab:de:ac:c7:6f:3d:80:49:70:
                    bf:48:4b:24:cb:d2:da:4c:5c:95:4c:fd:50:35:9d:
                    af:25:3c:bd:27:fd:a3:0b:b6:99:1c:a1:c3:54:12:
                    6c:27:c9:d5:bd:b9:f7:57:db:8b:90:49:34:a7:43:
                    7a:2a:a5:37:db:ae:92:6f:8f:c6:ae:8e:df:25:54:
                    2d:4c:58:a3:bb:08:d7:c7:5c:88:bb:3b:17:c8:7d:
                    31:5d:40:37:ef:48:bd:a4:98:d0:c9:6d:e3:72:8b:
                    6a:5f:36:e8:04:74:ef:1c:2e:71:4e:ca:41:f7:ad:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:07:0E:35:D6:49:CD:07:0D:DC:28:53:DE:91:5D:69:1A:51:F6:28
            X509v3 Authority Key Identifier:
                keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:19:4f:94:87:b4:2c:a7:db:8a:8d:0d:19:73:d7:44:f6:82:
         cb:64:80:9f:db:05:16:9d:97:99:03:50:bf:72:47:da:7e:4d:
         a4:f0:c7:8b:ff:49:a1:24:4f:a4:52:85:3c:d7:b7:97:a5:d1:
         e6:8b:32:4f:99:2a:df:79:aa:e2:9b:50:28:d6:aa:08:81:cf:
         83:47:94:3a:4d:c1:0d:3e:80:6a:76:90:c7:35:72:39:97:ed:
         f9:16:74:40:46:4b:8e:f6:c9:a9:23:a8:d5:f2:06:25:98:3c:
         38:dd:ad:c3:bb:bf:63:2c:46:da:bd:6a:af:e6:59:b8:65:87:
         05:11:45:a3:f5:73:65:f4:0c:01:eb:4c:5b:7d:58:bc:27:52:
         9b:f5:87:d6:2c:a9:cb:13:f8:07:3d:e3:9a:38:4b:5a:b3:f7:
         4d:d8:b8:15:c9:37:b5:d3:74:e7:c9:57:d4:79:a5:84:49:3a:
         69:62:47:ef:07:8b:78:f2:17:df:fb:2a:45:bd:d4:27:98:ba:
         c0:6f:4e:7f:65:46:17:00:00:ca:e8:e0:b1:2e:1c:bf:9b:e3:
         df:ed:2a:f7:6d:0b:d0:a2:e1:f9:25:9e:98:30:a0:4c:bb:66:
         3e:28:95:5a:36:7d:c9:3a:04:b7:6f:94:f4:8d:11:15:15:9c:
         74:cd:98:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:57:16 2026 by rpki-client