Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
File:                     1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json)
Hash identifier:          QNovDZy5Of3PRsuJN+jyssqHtGnicthiou/05aEkaQo=
Subject key identifier:   5A:7B:C5:02:32:8A:7E:B0:D5:8C:8F:2A:3D:B9:A5:7B:79:29:84:36
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Certificate issuer:       /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial:       01A0D538AF5AE3117B6E4BC163CA59A7BF59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
Manifest number:          1AB4
Signing time:             Thu 24 Sep 2026 21:00:56 +0000
Manifest this update:     Thu 24 Sep 2026 21:00:56 +0000
Manifest next update:     Fri 25 Sep 2026 21:00:56 +0000
Files and hashes:         1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: len7SO+CPWh8dnHKv7fANuA5CpXFpMP4vxIvWpH/IVo=)
                          2: 1-n7EdeFX20C6cFMyJ6Y5HWVMQU4.roa (hash: suKN0U6xP/FTkPKNJxFCA4VBUPU7v0a/LfB27Kibl1k=)
                          3: 5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa (hash: 6wnMllVhpaDtM68Ah+lycy0EGi1lfhyp8UE1fOfc3rk=)
                          4: 5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa (hash: UIor+BCs9mrPP+0b8Lrn7HV4ATlK3jTAi1j4A256yaM=)
                          5: 6nafakW_FoiGF0x1s1VoLFJqiuw.roa (hash: tSlSVShZ1Ws+SLODMKOJpPu4G+R5CcazLAH7YNSqZ2c=)
                          6: 7Dwg5wFGQqErSuNtav6wSEytWn0.roa (hash: KeyWkMo6tHKMd0UPR13FjorhMTn+dRjqc0BqAQPkOvs=)
                          7: 8KG06O_ShOw-fAgF9hGpdzf3xEY.roa (hash: DVd/NvS4nhNxcSUkNJDTh5SmK4Clg69CxGJbu7seCkM=)
                          8: 9wtyd_oclLUMViGWblNWlEAAOPQ.roa (hash: K2AWf+HALDuM6Uz23jlAWhflFeUexuIRM5RCtHWCEPc=)
                          9: C0VnbFyJGyh-3dXIXN-FVbbzva4.roa (hash: nupbKfiMh1Vbm5eU6VpPOjsRTYtweNUnX1ebsHaK4hQ=)
                          10: CT3vMjevN0fYRTlNcJsck0hB60Y.roa (hash: 85AL/YEBSQNN6+KYNgUrlSLsBbfZxOy5uaLrLJGec+M=)
                          11: GnQ9nonV43lnZNoCG-ecdWqOLDk.roa (hash: 5lmMKt+idSdfaSrOW6fzEjOhALbxhOPcgnKdUuSF0JY=)
                          12: HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa (hash: BGn13AFdqwObLZ5mjHyJ0u9f6CC1n+u2Nsk2L6TLrao=)
                          13: MaRo3qPa_AXa-98seLnNkzlSlLM.roa (hash: ji8JHlcGAHWKEBT5OFXPF3gvRuoRQByWZBo69DobjWw=)
                          14: W-cWYMFcdHDS1yv5jkAVjyp5ho4.asa (hash: QdAC+W0wfurd2BssKpz9U5P9YKTKUM6ZjHzLGg+JdOA=)
                          15: cQJLykBOqMGgV5KV9rcPZr-_U1Y.roa (hash: aOQV+i/NapnfOnLvAQ3Zr9czxxA22kZuub947U3fZRw=)
                          16: cRp-cVmkypbBe3-5hQ3MERFfdvI.roa (hash: af21yk690TVm1yoO9i+WiH3Y6Q+lKgW5WAHD9V6wAgo=)
                          17: fyxZLGtBW9e59RZ3aEwSKlhWT4w.roa (hash: itxLmMXkodUFbwqD5SmQmqHBd8MyF3lpLKdM1WEIZu0=)
                          18: ipuMNUIFJfwrG69f0t1BcA9T-lo.roa (hash: E/49CgkatlS4HbWzI9f4jj29KOBht+FWKi5pYDsrCiU=)
                          19: oOmWYS79EfLZM1YUVX02Dm8sbCI.roa (hash: UMtyOefWK95ZFcwkFudLsDtrliJckAkSIFBXdWfp+zQ=)
                          20: odS4gJ1H-haIP2hfRvP__EIClnA.roa (hash: frbBPZZ05GoX1i3mLnaN+IdXbfyMrpl7+ZrlTRvKVwQ=)
                          21: pHgh0geILg2H9c8tNXl-coocbok.roa (hash: MiAWsYu39mO81MmSrazkuF8uttZJWXsnb0YqEMhZmqc=)
                          22: sE7fbSG0iBstRHmKf0OX8szEgWs.roa (hash: gYIE1s4jYsTjZWWhfuLuqn/b/Fx6ztxELcEP+vhMzWw=)
                          23: xLvL2DDHdDsFuu0LWe_ArfxkZOU.roa (hash: jEvpZaWRUr0vww6k+sw/ZzVTbY8rHX3wan18IH9TsyY=)
                          24: yUTvxSoxh0P1X3qi3W3GEmQmupg.roa (hash: YggGVCBvHEr/or8wxjiqlTzxSxsrR2x9hxdT1duIBFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:38:af:5a:e3:11:7b:6e:4b:c1:63:ca:59:a7:bf:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
        Validity
            Not Before: Sep 24 21:00:56 2026 GMT
            Not After : Sep 25 21:00:56 2026 GMT
        Subject: CN=5a7bc502328a7eb0d58c8f2a3db9a57b79298436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:da:73:bc:53:a8:d7:cb:3c:6b:19:3f:70:
                    16:63:6f:69:b9:e4:6b:dc:6b:48:04:fe:2d:17:49:
                    64:87:ef:8f:4c:44:68:2c:47:4f:a0:a3:13:59:9c:
                    a1:c4:aa:db:a1:28:8d:d8:0b:8f:54:18:2e:36:9a:
                    cb:a7:db:f3:ef:23:16:8b:63:5a:3c:30:3b:ce:5c:
                    44:7c:99:75:6d:6e:35:7d:9d:18:6e:51:da:18:3d:
                    14:0c:a6:66:fe:0e:17:8b:02:c3:86:1b:2a:dc:77:
                    b2:24:b1:49:0c:ca:7f:cf:85:e8:14:d0:34:2f:60:
                    07:3f:f7:74:c1:0a:af:54:15:c3:f2:fc:98:43:c6:
                    0e:f1:24:ab:d1:55:a9:3e:77:c8:62:42:54:93:7c:
                    72:f7:03:0a:99:41:31:f0:d0:b4:56:ae:26:25:46:
                    cd:24:22:66:45:68:52:f0:3f:3a:79:93:d0:07:79:
                    30:78:7b:c2:44:56:b6:38:42:03:a9:90:a7:56:6c:
                    08:6d:bf:f3:f5:03:10:96:99:49:fa:82:cb:29:77:
                    cd:26:5d:43:d3:0c:1d:43:83:8a:59:4a:e3:42:88:
                    13:aa:aa:0e:31:02:47:60:96:7d:2f:05:d8:db:7a:
                    eb:88:0e:98:a2:68:6f:a0:2a:36:02:4d:e1:88:b9:
                    af:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7B:C5:02:32:8A:7E:B0:D5:8C:8F:2A:3D:B9:A5:7B:79:29:84:36
            X509v3 Authority Key Identifier:
                keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c0:3b:71:d3:66:15:da:64:f9:b9:6a:0c:05:d1:26:54:0f:
         17:56:87:46:dc:02:cb:94:bc:7d:ca:a0:6d:0e:87:66:10:ce:
         c6:f2:18:eb:4b:91:19:a9:6b:4b:7c:e8:28:6b:cd:86:8b:70:
         0e:e9:18:4b:19:2d:34:1c:57:e5:3b:ef:d3:9c:b2:8d:63:46:
         a6:c0:f7:a6:f2:0b:94:aa:50:0c:69:f7:2b:e1:03:7a:e7:48:
         1b:0c:e8:71:f3:62:a3:61:06:a0:b0:6d:ab:c4:1f:36:2e:77:
         5d:11:c0:11:8b:e0:62:b9:d4:be:24:67:3d:bd:5c:9c:e1:ea:
         de:16:a4:26:b1:81:16:f6:9d:43:20:41:11:8e:fc:98:d4:54:
         4e:ca:6b:f8:50:3a:75:61:dc:e1:6a:94:7d:55:60:37:aa:1d:
         8b:ec:0e:34:5e:ef:e6:eb:86:e9:17:e9:6c:85:4a:c0:c7:12:
         39:95:56:27:58:a4:19:4f:8f:38:e0:25:9b:88:35:dc:cd:73:
         0a:46:a3:9d:da:8a:e4:33:c0:cc:94:29:12:52:08:21:08:a7:
         39:7a:61:40:07:d7:71:3c:e1:6b:95:a4:4a:6b:92:75:65:11:
         25:9d:5c:35:0c:19:80:aa:9b:a1:89:21:96:aa:7b:00:41:35:
         80:6f:28:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:48:27 2026 by rpki-client