Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
File:                     G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft (raw, json)
Hash identifier:          FAl65EvNJI5uioNl5f3J4TntWWV60v7V1b0GKO1SYDg=
Subject key identifier:   0D:C9:D9:B2:37:8A:07:CC:64:F2:3B:D0:41:E5:CF:63:22:7E:BC:35
Authority key identifier: 1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
Certificate issuer:       /CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Certificate serial:       01A13258E72DC09556B7CD70BE3CE68E601E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
Manifest number:          1A31
Signing time:             Mon 12 Oct 2026 23:00:49 +0000
Manifest this update:     Mon 12 Oct 2026 23:00:49 +0000
Manifest next update:     Tue 13 Oct 2026 23:00:49 +0000
Files and hashes:         1: G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl (hash: nicahwfyocwgp96HOxexJDgQjQ1iTLSnCi9/qKqoe14=)
                          2: eIPNgPUYQZlq-n_9mt6Q4q91rPk.roa (hash: DizOEdr2TMu6P8YAoF1vtJ1S55eopXRESZDog/i+PLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:58:e7:2d:c0:95:56:b7:cd:70:be:3c:e6:8e:60:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bebd33d4cd45465efa50faa824fb812c4173a27
        Validity
            Not Before: Oct 12 23:00:49 2026 GMT
            Not After : Oct 13 23:00:49 2026 GMT
        Subject: CN=0dc9d9b2378a07cc64f23bd041e5cf63227ebc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:a4:62:b8:99:6d:05:dc:a9:c1:1f:67:f3:
                    fc:58:e9:51:f9:92:0e:74:66:41:2f:b7:85:4d:cc:
                    e3:ef:0d:45:1d:dd:02:09:56:73:d2:9e:e0:b6:d4:
                    4d:e3:09:0c:4e:13:46:b7:62:0c:a1:f6:a1:c2:38:
                    94:ff:df:35:27:aa:05:1a:ce:ad:0e:dc:c8:96:7f:
                    58:7b:ed:16:a9:4d:0f:2c:6b:dd:a6:dd:ab:9f:fe:
                    95:55:6f:2e:7b:a3:6a:34:93:4f:d7:ca:99:49:44:
                    0e:51:4a:4f:b2:c6:72:22:42:cd:79:7f:ae:58:60:
                    28:0b:51:7e:9d:0c:85:07:98:0f:ff:cd:34:19:6b:
                    0d:3f:68:d8:1f:01:a3:b9:47:34:de:e3:2e:56:89:
                    32:ee:6a:51:40:ef:64:44:e2:ba:91:09:99:0a:0f:
                    35:f7:29:f8:9f:97:c1:b2:b7:05:f0:df:31:e5:d7:
                    83:52:81:a5:c4:58:ca:c2:49:4e:97:73:ca:bc:5b:
                    3e:7f:e1:6d:d4:1a:36:46:d8:13:6f:e9:a4:66:56:
                    16:70:74:57:e5:b1:bd:3e:72:2f:f6:8c:b1:1d:ef:
                    86:41:87:6e:01:d6:30:64:58:ae:f0:7a:6f:60:89:
                    42:83:51:6a:c7:7c:c9:28:54:17:e5:5a:9c:08:6c:
                    f1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C9:D9:B2:37:8A:07:CC:64:F2:3B:D0:41:E5:CF:63:22:7E:BC:35
            X509v3 Authority Key Identifier:
                keyid:1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:79:d0:fe:f5:1b:e8:a1:1d:9c:33:bf:af:ce:1f:56:67:2f:
         b6:ce:3d:81:04:cb:89:8c:1a:2b:58:6c:f3:53:23:44:fa:ad:
         1c:3f:88:08:70:1c:9a:ab:14:06:af:70:f8:bd:64:83:8c:e1:
         9b:41:a7:13:77:c8:2e:53:bf:37:e0:2b:a0:83:3b:f1:cc:e1:
         86:c4:9f:40:7b:25:10:07:2c:6d:e2:45:b6:a4:83:80:94:07:
         6f:2d:d3:8a:0a:e6:cd:d6:6b:74:27:e2:97:c7:1f:97:45:71:
         cf:15:87:19:1a:1e:05:9f:87:35:82:3a:ab:ce:e5:da:72:3d:
         f0:42:cc:1d:22:f2:2f:60:71:72:0b:11:f4:48:38:44:b5:6d:
         5f:d3:5a:1f:46:eb:24:77:8f:f2:dc:0f:26:40:56:aa:51:48:
         e8:db:39:ba:3b:80:cf:6d:bd:59:a7:c5:75:23:60:ee:01:f0:
         2a:f6:b2:dc:ca:77:ae:e4:e5:aa:72:5b:66:4e:c8:bf:45:3b:
         2f:43:32:49:50:d9:0a:9c:22:fc:d7:0a:e0:65:8c:06:a8:5c:
         a0:20:2c:dc:1b:73:f2:30:81:af:ef:76:7e:3b:5f:14:36:a3:
         8a:ca:fc:50:f6:b1:ed:ff:d9:5c:ef:f0:fa:b8:8b:1a:92:b1:
         27:09:ca:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEyWOctwJVWt81wvjzmjmAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWJkMzNkNGNkNDU0NjVlZmE1MGZhYTgyNGZiODEyYzQx
NzNhMjcwHhcNMjYxMDEyMjMwMDQ5WhcNMjYxMDEzMjMwMDQ5WjAzMTEwLwYDVQQD
EygwZGM5ZDliMjM3OGEwN2NjNjRmMjNiZDA0MWU1Y2Y2MzIyN2ViYzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOOkYriZbQXcqcEfZ/P8WOlR+ZIO
dGZBL7eFTczj7w1FHd0CCVZz0p7gttRN4wkMThNGt2IMofahwjiU/981J6oFGs6t
DtzIln9Ye+0WqU0PLGvdpt2rn/6VVW8ue6NqNJNP18qZSUQOUUpPssZyIkLNeX+u
WGAoC1F+nQyFB5gP/800GWsNP2jYHwGjuUc03uMuVoky7mpRQO9kROK6kQmZCg81
9yn4n5fBsrcF8N8x5deDUoGlxFjKwklOl3PKvFs+f+Ft1Bo2RtgTb+mkZlYWcHRX
5bG9PnIv9oyxHe+GQYduAdYwZFiu8HpvYIlCg1Fqx3zJKFQX5VqcCGzxrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3J2bI3igfMZPI70EHlz2Mifrw1MB8GA1UdIwQY
MBaAFBvr0z1M1FRl76UPqoJPuBLEFzonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xZTdiMDItODg5Yi00YTUzLWE1MDkt
OGFiNWViNTU4NDczLzEvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xZTdiMDItODg5Yi00YTUzLWE1MDktOGFiNWViNTU4NDcz
LzEvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXnQ/vUb
6KEdnDO/r84fVmcvts49gQTLiYwaK1hs81MjRPqtHD+ICHAcmqsUBq9w+L1kg4zh
m0GnE3fILlO/N+AroIM78czhhsSfQHslEAcsbeJFtqSDgJQHby3TigrmzdZrdCfi
l8cfl0VxzxWHGRoeBZ+HNYI6q87l2nI98ELMHSLyL2BxcgsR9Eg4RLVtX9NaH0br
JHeP8twPJkBWqlFI6Ns5ujuAz229WafFdSNg7gHwKvay3Mp3ruTlqnJbZk7Iv0U7
L0MySVDZCpwi/NcK4GWMBqhcoCAs3Btz8jCBr+92fjtfFDajisr8UPax7f/ZXO/w
+riLGpKxJwnKMw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:30:06 2026 by rpki-client