Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          faUUlBhI7Obx0dghrYMexLXezFGze4oFs1/rVoFrKvs=
Subject key identifier:   B1:56:4B:0D:89:06:18:88:81:01:56:25:BF:80:8A:E9:08:F8:F8:85
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       01A0BFFA18A23E7D03175D5A98DDBFD6B6EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          12B8
Signing time:             Sun 20 Sep 2026 18:00:33 +0000
Manifest this update:     Sun 20 Sep 2026 18:00:33 +0000
Manifest next update:     Mon 21 Sep 2026 18:00:33 +0000
Files and hashes:         1: 0V-6Ocf6ckJP0OmiGxbtIBGBZmU.roa (hash: BeQPwwhAk0wYxfBBr2kzYrvOfYh+U9/Tjif4YIzJ0F8=)
                          2: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          3: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          4: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          5: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          6: 957KjKsgQQ-VsvqavE6ngE5UV_E.roa (hash: brbR3ebf55NlnYJGtD6lvlUEhjYCWu8BA/oxkjsOs0I=)
                          7: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=)
                          8: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          9: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: GlQvbJUjxsflgjp/ToMlBbtcjpQIQryh7XiVmsDWU3E=)
                          10: ISsGxHIyrOPNYfVnvYomPgXoioM.roa (hash: Rohi1FBRyCEDtd+NeWD1TRuQbRscn3zM0CYpnIqNU38=)
                          11: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          12: ebH1LH3rtcCFyoMlHWJucoddnKk.roa (hash: w5pFXYTG5xXpiPZ27k95gUc+ufkXKutPUdAJkQwEA8E=)
                          13: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          14: ltlQZdBprIAZtA0AlHcwNThjuJ8.roa (hash: w4tQk9JwHDO4yRlDh9QyPlHelxD0WmS14timwLhZHpI=)
                          15: m6qwRKca6itBiUVdwN1KXUT2lxA.roa (hash: /aV+oJ7nRkyO35tfs9XJfVVL79kGBuqCjU4aDL711gY=)
                          16: uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa (hash: jeR1y8042HqLS1mMvheBMUQZBnBjFCW3QvpduHp+6M0=)
                          17: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:fa:18:a2:3e:7d:03:17:5d:5a:98:dd:bf:d6:b6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Sep 20 18:00:33 2026 GMT
            Not After : Sep 21 18:00:33 2026 GMT
        Subject: CN=b1564b0d8906188881015625bf808ae908f8f885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6c:5f:2f:db:cf:ae:30:ce:41:04:77:25:76:
                    d0:29:d8:cb:56:6a:9d:5d:2b:1f:34:6a:61:b1:98:
                    9a:c3:14:2f:3c:ee:a4:5b:8c:47:3a:73:cb:a6:94:
                    85:9b:75:cf:02:1d:cd:ea:97:d8:2d:f9:1a:02:95:
                    09:d3:d0:33:b6:93:2b:dd:b5:84:9c:ff:7e:76:b2:
                    41:b8:62:bb:43:9b:18:84:5d:aa:15:70:4a:3f:c1:
                    fb:d2:c8:00:e2:44:bc:b6:bb:85:a2:18:b2:b5:2d:
                    17:b9:fe:fd:db:ac:f2:8b:d7:2c:25:25:af:c1:c8:
                    54:40:87:7f:04:eb:83:1d:11:f7:ba:9a:8d:6f:f3:
                    5e:0b:c7:f2:d5:b0:40:58:f4:a6:37:d0:fd:8f:b3:
                    4d:b8:56:99:55:5b:fa:31:8f:c6:6d:f6:bf:e5:32:
                    2d:9d:1c:a6:18:94:ca:46:08:4f:d1:fe:4b:6d:5f:
                    a5:49:6b:09:1b:d0:c8:7c:70:8a:f1:61:54:bd:ba:
                    cb:76:3c:fd:df:c3:e6:3b:b6:6a:02:ac:58:16:d1:
                    b5:57:e4:b0:55:89:b0:dc:a8:57:1e:f5:09:a5:8c:
                    57:4c:8f:41:e9:95:b5:62:65:c2:a3:59:9c:5f:25:
                    06:a7:1f:73:ae:2d:bf:f8:4e:3a:a1:ab:8c:f0:a1:
                    c7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:56:4B:0D:89:06:18:88:81:01:56:25:BF:80:8A:E9:08:F8:F8:85
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f3:7f:7a:c5:9c:be:4c:75:a4:d3:86:29:ea:b5:bd:f6:a8:
         47:cf:17:1f:5d:2d:a9:14:b5:c8:60:b5:b3:37:53:a2:04:2a:
         7b:91:f6:06:1e:e4:72:67:35:0e:5b:15:ea:4c:37:56:0e:05:
         22:77:dd:e0:e6:fe:d1:2c:70:a3:c2:7e:38:ca:86:77:e8:44:
         0b:28:98:15:49:2b:92:71:5a:ec:87:a4:37:88:10:d9:42:cf:
         39:14:8e:91:52:ba:be:71:63:d5:19:5e:98:bb:d4:4d:64:9c:
         fe:fd:5c:51:00:93:bc:fa:a1:21:9e:45:94:62:ab:17:f7:67:
         0c:a7:4b:43:0c:88:40:2a:a6:0a:f2:10:56:24:1b:dc:a8:a2:
         d4:b5:24:c5:bb:9c:15:9a:f4:cb:55:70:50:89:75:87:89:a9:
         8c:ce:16:1f:62:ca:cd:65:e5:69:97:e7:0f:f6:b8:a8:53:e8:
         08:8a:28:ec:b1:2f:bf:06:10:a0:28:39:6e:54:97:84:f9:36:
         4f:7e:ab:4e:d8:a8:bd:51:cd:94:53:90:e4:34:07:b0:59:53:
         99:b8:f2:4b:7d:07:af:79:4e:74:db:3a:fb:28:fc:b9:34:c6:
         ee:d0:1d:1b:69:e0:02:44:cf:0b:2d:3d:77:a8:ea:eb:f1:60:
         ea:fa:ed:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/+hiiPn0DF11amN2/1rbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2
OTczY2YwHhcNMjYwOTIwMTgwMDMzWhcNMjYwOTIxMTgwMDMzWjAzMTEwLwYDVQQD
EyhiMTU2NGIwZDg5MDYxODg4ODEwMTU2MjViZjgwOGFlOTA4ZjhmODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2xfL9vPrjDOQQR3JXbQKdjLVmqd
XSsfNGphsZiawxQvPO6kW4xHOnPLppSFm3XPAh3N6pfYLfkaApUJ09AztpMr3bWE
nP9+drJBuGK7Q5sYhF2qFXBKP8H70sgA4kS8truFohiytS0Xuf7926zyi9csJSWv
wchUQId/BOuDHRH3upqNb/NeC8fy1bBAWPSmN9D9j7NNuFaZVVv6MY/Gbfa/5TIt
nRymGJTKRghP0f5LbV+lSWsJG9DIfHCK8WFUvbrLdjz938PmO7ZqAqxYFtG1V+Sw
VYmw3KhXHvUJpYxXTI9B6ZW1YmXCo1mcXyUGpx9zri2/+E46oauM8KHHcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFWSw2JBhiIgQFWJb+AiukI+PiFMB8GA1UdIwQY
MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It
MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh
LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfN/esWc
vkx1pNOGKeq1vfaoR88XH10tqRS1yGC1szdTogQqe5H2Bh7kcmc1DlsV6kw3Vg4F
Infd4Ob+0Sxwo8J+OMqGd+hECyiYFUkrknFa7IekN4gQ2ULPORSOkVK6vnFj1Rle
mLvUTWSc/v1cUQCTvPqhIZ5FlGKrF/dnDKdLQwyIQCqmCvIQViQb3Kii1LUkxbuc
FZr0y1VwUIl1h4mpjM4WH2LKzWXlaZfnD/a4qFPoCIoo7LEvvwYQoCg5blSXhPk2
T36rTtiovVHNlFOQ5DQHsFlTmbjyS30Hr3lOdNs6+yj8uTTG7tAdG2ngAkTPCy09
d6jq6/Fg6vrtnw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:54:01 2026 by rpki-client