Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
File:                     GvvUSIkW-uz94nr2PPmEUblnL_Y.mft (raw, json)
Hash identifier:          OUgOmTV7n2X0OoPR4wy5eibK0p3fPhydmLkHAatO9BI=
Subject key identifier:   16:2B:1E:BC:B8:0A:EF:D9:D0:3E:B9:D7:85:74:57:D3:9B:17:48:6D
Authority key identifier: 1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
Certificate issuer:       /CN=1afbd4488916faecfde27af63cf98451b9672ff6
Certificate serial:       01A0D1C9A877F5EE72284CE825F562F7A852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
Manifest number:          0215
Signing time:             Thu 24 Sep 2026 05:00:48 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:48 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:48 +0000
Files and hashes:         1: 5mT67kFjlP1wkk9g_jI3qMhMAos.roa (hash: TtmKjHns8FuXUxAAkflnuu+59X1NLHR2HU6aq/7SgEY=)
                          2: GvvUSIkW-uz94nr2PPmEUblnL_Y.crl (hash: LreCdw/mFSY64dFcZg3snuhsNVP3nQXty5lgcB/lHq8=)
                          3: LxeehfG4ABL-Mjofqe-m1zgbRF8.roa (hash: G0fIhVP6EAMZqllSYGxKMKH7WM5clIvSUyRbvtMaMHc=)
                          4: vn4vDZF-5c0j4TjRhix9Sixf1Go.roa (hash: G0+YDc5zCnG7j4HfctLv6EO8Kbainf/ccFE5eEkLePw=)
                          5: zfEcWQPqi-VdMvuQ8qSI2Po_taM.roa (hash: jrPqy9eqPGYuqZqd/WHKMilLyac7mNSPcvUdK8y/DAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:a8:77:f5:ee:72:28:4c:e8:25:f5:62:f7:a8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afbd4488916faecfde27af63cf98451b9672ff6
        Validity
            Not Before: Sep 24 05:00:48 2026 GMT
            Not After : Sep 25 05:00:48 2026 GMT
        Subject: CN=162b1ebcb80aefd9d03eb9d7857457d39b17486d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4e:f6:95:97:fc:48:47:43:59:bb:23:08:53:
                    0f:35:98:a7:0d:d8:26:bf:9e:f2:97:65:9e:ca:00:
                    d0:b4:ce:0e:d7:cb:12:73:1c:a2:b4:00:c5:22:b1:
                    31:ac:ea:30:18:c4:c2:ff:9c:04:1e:06:31:1e:4d:
                    3f:56:4c:85:ae:38:11:7d:cd:c1:40:ea:79:8c:76:
                    78:5b:77:a9:4a:09:53:17:c1:63:00:c6:25:94:a1:
                    39:92:1f:e5:2d:b9:3b:b9:cb:db:73:9f:94:84:ca:
                    5b:cf:dd:47:42:97:c8:38:ac:8f:cd:34:8e:c5:a6:
                    d8:b7:73:9f:a7:a7:a6:5c:e9:58:3a:82:a4:d8:a4:
                    3e:95:21:c3:17:3c:ed:0b:cf:cd:15:9b:2e:81:b9:
                    cf:68:6d:ae:10:d5:5d:be:02:3f:51:a5:2f:c1:86:
                    d4:3b:d3:90:4b:5c:f5:a0:a9:6b:26:4e:30:b7:01:
                    f2:1b:ba:31:d7:f6:88:9b:5f:7e:fb:1a:7d:bb:2f:
                    64:45:55:86:a5:b5:5b:cf:46:6e:6d:d5:37:c0:74:
                    26:3f:05:f4:fb:0e:26:24:87:fa:4a:a4:e2:89:40:
                    b6:89:6c:c9:62:68:55:e1:ac:af:18:88:99:79:5f:
                    90:84:b6:57:d1:a9:77:3e:70:5e:66:0d:54:41:ad:
                    5d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2B:1E:BC:B8:0A:EF:D9:D0:3E:B9:D7:85:74:57:D3:9B:17:48:6D
            X509v3 Authority Key Identifier:
                keyid:1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1a:99:15:bf:4d:54:3d:5e:4d:be:4b:59:34:d1:79:a9:d0:
         ba:80:be:18:68:41:3e:90:35:cf:60:af:a1:13:40:92:16:aa:
         1a:27:d8:98:b4:34:8f:74:6e:a1:9c:5e:a4:16:24:b4:54:68:
         b2:63:78:a9:19:06:bb:35:1c:2b:44:de:b0:89:44:e6:c8:f9:
         d0:fd:43:29:2e:82:7d:86:79:bd:8a:2e:2d:28:2b:85:12:b2:
         7e:34:03:6a:d6:f2:d3:ae:e3:38:f2:c6:9f:d4:90:65:98:4f:
         3b:6d:54:01:a7:7a:d9:b0:11:9c:42:84:8e:99:4e:13:28:11:
         89:4c:0b:2d:f2:7e:12:f3:92:6d:50:d9:0a:d4:b8:58:7e:90:
         e1:25:ee:ee:d3:ee:00:05:34:e0:a8:88:ee:4f:50:df:df:69:
         b2:98:ab:71:ca:d0:5d:42:7f:27:8d:6b:85:1b:44:8d:b4:37:
         65:d4:65:fc:e1:34:bb:bf:92:b3:8a:aa:ad:2d:fb:39:ec:c4:
         e4:e7:37:4c:e6:30:68:e3:f8:5e:f6:38:b9:c1:7f:53:f6:bc:
         1e:64:34:ca:00:fa:c4:68:79:d7:9b:11:fc:c9:20:6c:41:6f:
         68:34:57:45:19:54:0c:b7:53:2b:6e:c2:69:c4:cb:df:75:a2:
         fb:ad:e8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:50:46 2026 by rpki-client