Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
File:                     GsvdANJ7iovvyGbK83jxkCdoR2k.mft (raw, json)
Hash identifier:          Tzjuo1U+fROGdyF/lV0uPJSsn0wb5E5nrn+aH/Gfsx0=
Subject key identifier:   0B:94:CE:D1:78:37:C2:90:0A:42:0E:10:FE:7B:F9:1D:F1:F5:67:4E
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Certificate issuer:       /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial:       019E1DFE0970D481839FAE349E70DD35D6E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
Manifest number:          0C16
Signing time:             Tue 12 May 2026 21:00:48 +0000
Manifest this update:     Tue 12 May 2026 21:00:48 +0000
Manifest next update:     Wed 13 May 2026 21:00:48 +0000
Files and hashes:         1: 1v1j_9V79CfDRyy5ITVwKULcKzs.roa (hash: IW+E0tn+3P5yQ6WEdmWbMLqIHQmOymBM/uiaqJuBrqM=)
                          2: 8aFsvbvvtoXgKKeiSZDIorn0lcs.roa (hash: wv6uTigREH5R3i/ivV6vqDKvGBKTQpySFX+WLF4afYM=)
                          3: GsvdANJ7iovvyGbK83jxkCdoR2k.crl (hash: zgixV+bSNIYgvGu5w/HAFBmmiBC5h8soJ/UrOvBjgfM=)
                          4: hnLqnAEN_PSEnf5JXcTb3OnKqoo.roa (hash: lSYPnPlDdlQoA0R4XN+dhc2P4+6Eu5g/f7zEImc1gKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:09:70:d4:81:83:9f:ae:34:9e:70:dd:35:d6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
        Validity
            Not Before: May 12 21:00:48 2026 GMT
            Not After : May 13 21:00:48 2026 GMT
        Subject: CN=0b94ced17837c2900a420e10fe7bf91df1f5674e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:83:4f:41:10:dc:21:a4:95:78:f8:b4:0b:
                    52:68:c5:ac:91:69:a9:d7:81:b3:6f:a0:2e:d9:e7:
                    11:8e:2c:a5:99:07:95:15:b6:2b:e9:22:bd:e7:71:
                    c4:48:59:b0:79:78:db:11:22:3e:f1:ba:02:2c:e3:
                    d9:b8:00:01:07:fe:c8:6f:c4:f8:7d:b5:56:81:8b:
                    13:f9:60:1f:20:d2:e3:1d:50:36:aa:01:25:c3:e7:
                    bd:37:3e:cd:95:e5:4c:6f:29:64:d7:35:a1:f7:2f:
                    e7:19:63:c2:66:67:85:3f:ae:dc:8f:8a:92:8b:52:
                    b9:4d:96:f7:cd:9e:09:39:cd:f5:24:23:69:01:6f:
                    f8:06:d5:bd:74:f1:b6:85:98:c7:5b:a5:af:5a:a0:
                    83:80:f8:49:85:07:8d:f3:06:4e:0f:08:a2:62:88:
                    2f:b0:db:44:22:1f:6c:34:69:a5:eb:49:83:1c:de:
                    04:87:25:a5:5e:53:be:f2:66:1f:43:59:e8:10:36:
                    dc:dd:6a:93:e6:56:dd:b0:a6:c5:38:a1:62:36:1d:
                    7e:c9:50:33:6e:77:ff:35:95:5b:0a:87:b9:79:5c:
                    fb:b9:9a:53:cc:1a:d8:e6:6e:b7:6c:1d:f6:17:c9:
                    0e:aa:5b:fa:15:69:56:31:80:64:c9:80:fe:71:4d:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:94:CE:D1:78:37:C2:90:0A:42:0E:10:FE:7B:F9:1D:F1:F5:67:4E
            X509v3 Authority Key Identifier:
                keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:be:e7:58:a8:ec:05:1e:79:ed:86:35:13:71:5e:1b:a9:ff:
         fe:d8:67:ed:3c:1d:ed:50:e6:18:ca:0a:e9:3f:6d:de:44:97:
         69:5d:3f:3c:35:6f:f8:20:f8:fc:c7:91:ec:33:8c:a9:99:d2:
         8d:4c:5e:70:70:cf:2e:ec:e9:03:7d:b2:f6:16:24:7e:7b:73:
         13:b4:19:92:18:66:11:82:67:55:f0:5a:c7:54:36:83:85:19:
         bb:9c:1c:de:15:f8:6a:6b:c1:4a:52:f9:d2:c9:ac:60:97:b7:
         f6:fb:d0:a7:5a:68:e8:d5:f6:d8:99:c1:e5:42:41:24:7e:5c:
         8c:ba:38:ce:3b:31:81:ba:46:63:a9:a8:b7:a0:b3:d6:a4:5b:
         88:7f:6a:d1:e2:fa:fc:3c:2f:66:3b:1e:fc:0b:4f:26:ca:af:
         6f:17:65:ce:85:32:1a:c7:bc:ca:bc:c1:f0:a9:a9:c3:b6:d8:
         48:22:16:8d:fe:b7:52:2a:e2:1c:1c:ae:38:c1:57:88:e7:45:
         95:e7:17:ce:27:f4:06:6c:c3:eb:2e:74:a1:e0:af:06:25:42:
         39:b5:e0:98:3b:90:d9:06:a2:64:68:b2:50:6a:f8:03:e2:d7:
         be:1a:1f:63:f9:d5:5b:17:33:ff:4e:45:9c:43:df:46:a6:70:
         0d:b7:e9:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/glw1IGDn640nnDdNdbmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2JkZDAwZDI3YjhhOGJlZmM4NjZjYWYzNzhmMTkwMjc2
ODQ3NjkwHhcNMjYwNTEyMjEwMDQ4WhcNMjYwNTEzMjEwMDQ4WjAzMTEwLwYDVQQD
EygwYjk0Y2VkMTc4MzdjMjkwMGE0MjBlMTBmZTdiZjkxZGYxZjU2NzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01mDT0EQ3CGklXj4tAtSaMWskWmp
14Gzb6Au2ecRjiylmQeVFbYr6SK953HESFmweXjbESI+8boCLOPZuAABB/7Ib8T4
fbVWgYsT+WAfINLjHVA2qgElw+e9Nz7NleVMbylk1zWh9y/nGWPCZmeFP67cj4qS
i1K5TZb3zZ4JOc31JCNpAW/4BtW9dPG2hZjHW6WvWqCDgPhJhQeN8wZODwiiYogv
sNtEIh9sNGml60mDHN4EhyWlXlO+8mYfQ1noEDbc3WqT5lbdsKbFOKFiNh1+yVAz
bnf/NZVbCoe5eVz7uZpTzBrY5m63bB32F8kOqlv6FWlWMYBkyYD+cU1AhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuUztF4N8KQCkIOEP57+R3x9WdOMB8GA1UdIwQY
MBaAFBrL3QDSe4qL78hmyvN48ZAnaEdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQt
OWY5NTM2YmIyYzM3LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQtOWY5NTM2YmIyYzM3
LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN77nWKjs
BR557YY1E3FeG6n//thn7Twd7VDmGMoK6T9t3kSXaV0/PDVv+CD4/MeR7DOMqZnS
jUxecHDPLuzpA32y9hYkfntzE7QZkhhmEYJnVfBax1Q2g4UZu5wc3hX4amvBSlL5
0smsYJe39vvQp1po6NX22JnB5UJBJH5cjLo4zjsxgbpGY6mot6Cz1qRbiH9q0eL6
/DwvZjse/AtPJsqvbxdlzoUyGse8yrzB8Kmpw7bYSCIWjf63UiriHByuOMFXiOdF
lecXzif0BmzD6y50oeCvBiVCObXgmDuQ2QaiZGiyUGr4A+LXvhofY/nVWxcz/05F
nEPfRqZwDbfpWQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:54:17 2026 by rpki-client