Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
File:                     1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json)
Hash identifier:          2B3JjLzFGv6RrZAL9iOC6/bfqbqPM4c/xBtI4bWEX0g=
Subject key identifier:   EC:80:E7:7A:3F:F8:84:1F:9A:A2:53:1F:29:F4:95:8D:4A:D9:5A:DC
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Certificate issuer:       /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial:       01A0CD7EBCC731E8E30CC16096A3B6CD31FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
Manifest number:          1AB0
Signing time:             Wed 23 Sep 2026 09:00:30 +0000
Manifest this update:     Wed 23 Sep 2026 09:00:30 +0000
Manifest next update:     Thu 24 Sep 2026 09:00:30 +0000
Files and hashes:         1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: YuQvJgvlwVgP+Ln/42Ri1VlrSElNwvDqGGB10WtrbAc=)
                          2: 1-n7EdeFX20C6cFMyJ6Y5HWVMQU4.roa (hash: suKN0U6xP/FTkPKNJxFCA4VBUPU7v0a/LfB27Kibl1k=)
                          3: 5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa (hash: 6wnMllVhpaDtM68Ah+lycy0EGi1lfhyp8UE1fOfc3rk=)
                          4: 5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa (hash: UIor+BCs9mrPP+0b8Lrn7HV4ATlK3jTAi1j4A256yaM=)
                          5: 6nafakW_FoiGF0x1s1VoLFJqiuw.roa (hash: tSlSVShZ1Ws+SLODMKOJpPu4G+R5CcazLAH7YNSqZ2c=)
                          6: 7Dwg5wFGQqErSuNtav6wSEytWn0.roa (hash: KeyWkMo6tHKMd0UPR13FjorhMTn+dRjqc0BqAQPkOvs=)
                          7: 8KG06O_ShOw-fAgF9hGpdzf3xEY.roa (hash: DVd/NvS4nhNxcSUkNJDTh5SmK4Clg69CxGJbu7seCkM=)
                          8: 9wtyd_oclLUMViGWblNWlEAAOPQ.roa (hash: K2AWf+HALDuM6Uz23jlAWhflFeUexuIRM5RCtHWCEPc=)
                          9: C0VnbFyJGyh-3dXIXN-FVbbzva4.roa (hash: nupbKfiMh1Vbm5eU6VpPOjsRTYtweNUnX1ebsHaK4hQ=)
                          10: CT3vMjevN0fYRTlNcJsck0hB60Y.roa (hash: 85AL/YEBSQNN6+KYNgUrlSLsBbfZxOy5uaLrLJGec+M=)
                          11: GnQ9nonV43lnZNoCG-ecdWqOLDk.roa (hash: 5lmMKt+idSdfaSrOW6fzEjOhALbxhOPcgnKdUuSF0JY=)
                          12: HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa (hash: BGn13AFdqwObLZ5mjHyJ0u9f6CC1n+u2Nsk2L6TLrao=)
                          13: MaRo3qPa_AXa-98seLnNkzlSlLM.roa (hash: ji8JHlcGAHWKEBT5OFXPF3gvRuoRQByWZBo69DobjWw=)
                          14: W-cWYMFcdHDS1yv5jkAVjyp5ho4.asa (hash: QdAC+W0wfurd2BssKpz9U5P9YKTKUM6ZjHzLGg+JdOA=)
                          15: cQJLykBOqMGgV5KV9rcPZr-_U1Y.roa (hash: aOQV+i/NapnfOnLvAQ3Zr9czxxA22kZuub947U3fZRw=)
                          16: cRp-cVmkypbBe3-5hQ3MERFfdvI.roa (hash: af21yk690TVm1yoO9i+WiH3Y6Q+lKgW5WAHD9V6wAgo=)
                          17: fyxZLGtBW9e59RZ3aEwSKlhWT4w.roa (hash: itxLmMXkodUFbwqD5SmQmqHBd8MyF3lpLKdM1WEIZu0=)
                          18: ipuMNUIFJfwrG69f0t1BcA9T-lo.roa (hash: E/49CgkatlS4HbWzI9f4jj29KOBht+FWKi5pYDsrCiU=)
                          19: oOmWYS79EfLZM1YUVX02Dm8sbCI.roa (hash: UMtyOefWK95ZFcwkFudLsDtrliJckAkSIFBXdWfp+zQ=)
                          20: odS4gJ1H-haIP2hfRvP__EIClnA.roa (hash: frbBPZZ05GoX1i3mLnaN+IdXbfyMrpl7+ZrlTRvKVwQ=)
                          21: pHgh0geILg2H9c8tNXl-coocbok.roa (hash: MiAWsYu39mO81MmSrazkuF8uttZJWXsnb0YqEMhZmqc=)
                          22: sE7fbSG0iBstRHmKf0OX8szEgWs.roa (hash: gYIE1s4jYsTjZWWhfuLuqn/b/Fx6ztxELcEP+vhMzWw=)
                          23: xLvL2DDHdDsFuu0LWe_ArfxkZOU.roa (hash: jEvpZaWRUr0vww6k+sw/ZzVTbY8rHX3wan18IH9TsyY=)
                          24: yUTvxSoxh0P1X3qi3W3GEmQmupg.roa (hash: YggGVCBvHEr/or8wxjiqlTzxSxsrR2x9hxdT1duIBFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:7e:bc:c7:31:e8:e3:0c:c1:60:96:a3:b6:cd:31:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
        Validity
            Not Before: Sep 23 09:00:30 2026 GMT
            Not After : Sep 24 09:00:30 2026 GMT
        Subject: CN=ec80e77a3ff8841f9aa2531f29f4958d4ad95adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:06:14:bc:f3:82:15:67:bd:5b:0f:6f:26:ee:
                    28:ca:06:b9:20:31:0d:11:63:f8:11:c5:d7:07:ae:
                    72:63:be:d6:1c:c8:0e:a6:19:7c:99:38:45:ba:d9:
                    e4:19:20:a0:4d:35:df:0b:fb:e3:fb:be:d5:70:9f:
                    5b:9a:0f:92:ea:36:80:ef:a7:0f:90:61:2b:9c:f2:
                    10:ad:91:23:ed:5f:b6:38:65:ae:da:cb:74:d5:c5:
                    b4:fa:69:9f:e8:1c:5f:bb:be:04:61:3d:a7:0b:50:
                    42:94:7a:c8:48:ec:56:d9:5b:09:0e:c9:75:d1:fa:
                    d8:e8:bb:3d:e3:a7:e9:07:3a:e9:f0:a1:35:33:89:
                    d3:27:f1:58:14:42:e8:09:36:3c:d1:da:14:45:79:
                    91:43:6e:ec:c5:cf:76:bc:08:e2:26:6f:46:5e:14:
                    28:d8:9f:8c:de:43:98:47:d8:4b:22:26:85:a6:a6:
                    3d:4e:dd:d2:ba:9e:b2:ea:d0:1b:af:f9:80:db:1a:
                    1c:ab:ae:9c:04:15:0b:0e:4d:b4:90:76:87:80:78:
                    60:b0:82:dc:05:00:52:6c:28:34:bd:13:bd:fc:eb:
                    9e:ba:84:ec:c0:7d:e7:f9:d5:9c:50:6d:ea:d8:30:
                    fc:95:02:7c:b2:30:69:05:5f:b7:9c:f2:a8:db:22:
                    8b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:80:E7:7A:3F:F8:84:1F:9A:A2:53:1F:29:F4:95:8D:4A:D9:5A:DC
            X509v3 Authority Key Identifier:
                keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bf:36:cc:9f:6c:99:95:cb:2e:61:b4:b9:d5:50:71:07:94:
         eb:dc:99:96:36:77:d7:80:20:75:74:7d:6b:80:eb:b8:c9:1e:
         a3:27:6a:d1:a0:cb:6e:96:5c:87:bd:5a:a1:8a:9a:ee:dc:fc:
         86:5f:bd:b2:65:f3:0b:76:2c:1d:b8:2d:6a:73:fb:dc:92:4f:
         55:06:15:9e:2f:6c:00:7e:4b:cf:54:b5:91:84:1e:e0:0d:f2:
         13:9d:2e:f8:23:7e:e3:07:5b:e1:5f:a8:0a:cb:61:c9:11:d9:
         48:bf:6d:49:b1:79:22:83:a8:f2:52:f6:c9:d0:fc:dc:8e:9f:
         b3:f9:2a:c4:3d:3c:29:9f:ba:76:59:e5:33:92:de:b8:1a:9a:
         07:71:5d:89:27:b8:ca:8e:28:f8:54:74:b6:5a:08:04:aa:90:
         a6:97:5f:17:e0:67:c5:d1:82:e6:91:37:34:1f:e6:fd:f6:8c:
         52:96:32:bf:06:c7:89:86:41:f9:85:13:b8:99:e6:51:28:b1:
         91:b9:81:e5:b4:b5:16:a9:eb:10:2a:af:d0:14:3d:ed:20:17:
         68:98:bb:59:7c:88:94:9f:07:ae:6a:b7:5b:e2:c6:87:58:ad:
         df:2f:84:29:49:0a:f8:78:8c:bd:90:d5:fd:f9:bf:8e:c4:39:
         3d:96:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:34:54 2026 by rpki-client