Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
File:                     GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft (raw, json)
Hash identifier:          8xhrZ0k2QqJScjFK11fSUmVMeznnW7lSx2P7iMD4Vfw=
Subject key identifier:   2C:DC:FD:AA:1A:2F:A7:7D:27:37:13:42:E0:7F:D5:D6:79:2B:F2:90
Authority key identifier: 19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C
Certificate issuer:       /CN=1954e32570bbfb9af11c2381e81c797c2f40087c
Certificate serial:       019D27A8A0CC3AE31CEF6DC856E5062C7BDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
Manifest number:          1620
Signing time:             Thu 26 Mar 2026 01:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:55 +0000
Files and hashes:         1: 2-D2-rHW0UIzbvcEd6pGsT2RuDs.roa (hash: 84KNwiWzV+MMBwVN2Y5/SzTCA1WubeFW0cIC9K7nDqI=)
                          2: GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl (hash: qA3FEvMyENk+qoJKiDAfmzgnka5NPwWFTU5jX3qkYs4=)
                          3: e6DifeT6RtDWYOqt7WpZKVdgD4s.roa (hash: i9svsXFfDpE9QAUeELGmU1bul00M5b1EL+ypKkGNAdY=)
                          4: gaNunOTwvUuhFdwzla5IoZWHNQc.roa (hash: /xURODuTkS8gAUgCnYs/+ezO6kcHL3XcZ/PxRnhkINI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:a0:cc:3a:e3:1c:ef:6d:c8:56:e5:06:2c:7b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1954e32570bbfb9af11c2381e81c797c2f40087c
        Validity
            Not Before: Mar 26 01:00:55 2026 GMT
            Not After : Mar 27 01:00:55 2026 GMT
        Subject: CN=2cdcfdaa1a2fa77d27371342e07fd5d6792bf290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:0b:6a:29:d5:2b:c6:47:79:cb:37:9e:3c:
                    c3:20:c1:5c:ab:ee:eb:4e:1d:d0:9a:3e:e6:16:1c:
                    62:98:1a:e7:5e:72:08:ea:88:df:f3:3e:e8:ba:b9:
                    34:6c:4e:2c:7e:77:37:e7:63:54:5b:50:ab:ee:40:
                    db:d3:8f:58:10:2f:fe:a4:51:0e:0e:b5:97:8a:14:
                    de:1e:69:84:fc:f6:0e:b5:f5:8b:23:07:48:66:1d:
                    94:d0:2a:cd:d9:46:89:36:24:d5:e4:80:f4:b9:73:
                    e4:15:1e:22:b5:05:2f:28:27:41:bb:f9:39:f0:a0:
                    f3:e3:16:16:bc:1f:7b:1a:0f:0b:a4:7b:a8:1d:be:
                    04:db:5b:52:56:09:a3:ed:38:4e:dc:9b:f4:b6:f7:
                    8d:3d:9d:ac:c8:93:99:b8:9b:94:be:9e:f3:4b:4e:
                    74:04:d2:9c:5d:83:7c:de:45:c5:e0:a3:c9:cf:95:
                    18:99:66:5d:99:e3:1c:f3:fd:46:c0:47:51:bc:0f:
                    8a:81:2e:ca:72:37:e4:a9:ef:57:55:e8:9e:59:fc:
                    02:49:5f:6f:42:d6:7d:a2:8a:22:9b:07:f0:31:05:
                    06:29:3f:56:86:4d:b0:7f:df:c7:5b:19:17:2e:c8:
                    68:7c:bd:3d:49:31:00:82:7b:e0:af:16:1e:e0:2f:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DC:FD:AA:1A:2F:A7:7D:27:37:13:42:E0:7F:D5:D6:79:2B:F2:90
            X509v3 Authority Key Identifier:
                keyid:19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:26:9e:cb:62:b8:8b:66:cd:43:ef:f8:42:4e:5d:d6:07:2a:
         70:b1:57:0a:25:26:09:73:98:7a:36:fd:1f:cf:23:ec:7b:47:
         4c:56:de:47:ce:96:99:44:c3:92:ac:9b:bb:9b:cb:d1:c9:2d:
         54:7a:26:2f:c5:01:31:d5:83:87:60:54:c9:a8:a6:d1:4d:92:
         65:d9:2b:45:34:64:6f:c3:e0:bd:93:e8:14:7d:04:7b:58:d3:
         4d:99:ed:ae:ea:36:99:f9:e4:05:a1:65:6d:b5:8a:1b:5b:13:
         f9:3e:f1:04:e2:e0:59:9f:8e:4e:5a:96:51:14:03:5a:8d:ad:
         b2:fc:12:5a:76:0a:c4:a6:10:72:13:5f:1a:93:48:48:9f:d5:
         5a:1e:3a:80:49:e9:1b:c3:ca:7a:c0:96:8b:0e:d2:be:cb:3d:
         10:e4:b0:ee:36:ba:52:77:e3:4a:11:7f:50:6a:ca:b6:ac:b8:
         5d:d8:f7:81:45:c7:57:21:c5:51:07:0c:1c:85:76:d8:f1:de:
         44:42:b4:52:30:11:ce:cc:32:db:5b:9c:6b:62:23:eb:db:87:
         40:c7:54:e2:9a:15:e9:94:be:ba:ca:2b:85:af:af:d3:10:af:
         75:53:10:95:bb:74:21:c5:9e:cb:ce:9c:ec:56:b6:03:fa:03:
         6a:3d:11:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqKDMOuMc723IVuUGLHvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NTRlMzI1NzBiYmZiOWFmMTFjMjM4MWU4MWM3OTdjMmY0
MDA4N2MwHhcNMjYwMzI2MDEwMDU1WhcNMjYwMzI3MDEwMDU1WjAzMTEwLwYDVQQD
EygyY2RjZmRhYTFhMmZhNzdkMjczNzEzNDJlMDdmZDVkNjc5MmJmMjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSMLainVK8ZHecs3njzDIMFcq+7r
Th3Qmj7mFhximBrnXnII6ojf8z7ourk0bE4sfnc352NUW1Cr7kDb049YEC/+pFEO
DrWXihTeHmmE/PYOtfWLIwdIZh2U0CrN2UaJNiTV5ID0uXPkFR4itQUvKCdBu/k5
8KDz4xYWvB97Gg8LpHuoHb4E21tSVgmj7ThO3Jv0tveNPZ2syJOZuJuUvp7zS050
BNKcXYN83kXF4KPJz5UYmWZdmeMc8/1GwEdRvA+KgS7Kcjfkqe9XVeieWfwCSV9v
QtZ9oooimwfwMQUGKT9Whk2wf9/HWxkXLshofL09STEAgnvgrxYe4C8CpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzc/aoaL6d9JzcTQuB/1dZ5K/KQMB8GA1UdIwQY
MBaAFBlU4yVwu/ua8RwjgegceXwvQAh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ZUakpYQzctNXJ4SENPQjZCeDVmQzlBQ0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81YzdjN2QtNGQyZS00ODNjLTg5Y2Qt
MjY4MTZjYTkyY2EwLzEvR1ZUakpYQzctNXJ4SENPQjZCeDVmQzlBQ0h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81YzdjN2QtNGQyZS00ODNjLTg5Y2QtMjY4MTZjYTkyY2Ew
LzEvR1ZUakpYQzctNXJ4SENPQjZCeDVmQzlBQ0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSaey2K4
i2bNQ+/4Qk5d1gcqcLFXCiUmCXOYejb9H88j7HtHTFbeR86WmUTDkqybu5vL0ckt
VHomL8UBMdWDh2BUyaim0U2SZdkrRTRkb8PgvZPoFH0Ee1jTTZntruo2mfnkBaFl
bbWKG1sT+T7xBOLgWZ+OTlqWURQDWo2tsvwSWnYKxKYQchNfGpNISJ/VWh46gEnp
G8PKesCWiw7Svss9EOSw7ja6UnfjShF/UGrKtqy4Xdj3gUXHVyHFUQcMHIV22PHe
REK0UjARzswy21uca2Ij69uHQMdU4poV6ZS+usorha+v0xCvdVMQlbt0IcWey86c
7Fa2A/oDaj0Rdg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:08 2026 by rpki-client