Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
File:                     gmvh-3GvSNazGFEKqL35qBXzPbg.mft (raw, json)
Hash identifier:          xLbQSeGwpt3SwclD42qCHzhvxfWU4N/YRGdh5AE58YU=
Subject key identifier:   2F:09:FC:7D:99:4F:F5:02:48:99:CC:DD:61:E6:D5:3F:24:B9:82:B9
Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
Certificate issuer:       /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Certificate serial:       019F818BD09B895CAD2D48791A318E83ABCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
Manifest number:          10A0
Signing time:             Mon 20 Jul 2026 22:00:51 +0000
Manifest this update:     Mon 20 Jul 2026 22:00:51 +0000
Manifest next update:     Tue 21 Jul 2026 22:00:51 +0000
Files and hashes:         1: 1-isnrQ8snSIPPwIDiDVV93nn4E8.roa (hash: bQydRDw0VhrSCGRxw/q+aTFsXheHwlRCh29TsQhUeU8=)
                          2: IBjrT12h9uh658TR8nuTuZxNjP8.roa (hash: nGshKyZqegXSaSxuCpupfiIxPjDON3MIXoFDuxe9ZpA=)
                          3: Q8f2hwrgBcmwsGttOqQFOmmvrlA.roa (hash: Qf6hBMn0KyYWulfvD0KflJ8dBoq43tVk6EkzMqEGRmM=)
                          4: gmvh-3GvSNazGFEKqL35qBXzPbg.crl (hash: LVzvmvivXmM6QQgChe/EDD7pPjF1L32Z0u1vVjeJgeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:8b:d0:9b:89:5c:ad:2d:48:79:1a:31:8e:83:ab:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
        Validity
            Not Before: Jul 20 22:00:51 2026 GMT
            Not After : Jul 21 22:00:51 2026 GMT
        Subject: CN=2f09fc7d994ff5024899ccdd61e6d53f24b982b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:66:b2:51:2a:49:c5:db:84:a5:5f:71:4c:
                    58:a0:12:6f:09:eb:95:ac:64:42:9b:d7:48:e4:19:
                    62:31:6b:e5:95:14:13:ff:67:f3:da:f7:a1:90:bb:
                    2c:c6:d0:0b:e5:9d:5d:fb:3b:c7:57:f4:2d:43:0b:
                    1b:61:a7:fd:28:e7:b3:57:86:c6:fb:f8:08:7f:79:
                    18:a0:54:1c:fa:b0:f5:88:d2:0e:2e:61:cb:ac:d6:
                    80:84:5b:f1:48:3d:f2:a9:4a:1a:47:08:41:a4:0a:
                    04:83:a0:c2:c5:3d:d1:08:74:92:b2:76:1a:b3:fe:
                    d3:b9:5e:78:e1:30:62:a3:d9:c5:05:d1:ac:26:6f:
                    a9:a9:02:f8:8c:f8:c6:f4:1c:3c:43:f2:1a:f4:3b:
                    18:81:4f:c9:8d:fe:1f:fb:4f:b0:fc:76:70:f9:3f:
                    ad:de:0e:a2:5a:c2:0f:cd:33:9e:4b:fc:56:03:66:
                    a0:50:cc:89:7f:17:e1:fa:fa:e7:7f:6e:87:7a:85:
                    cf:c3:02:63:a3:f3:36:28:b5:66:3d:e7:b2:62:4a:
                    b4:98:cb:79:89:2d:5b:d7:82:b0:60:ab:56:fc:2a:
                    aa:18:23:2f:b6:36:61:54:32:b4:27:1b:d5:60:60:
                    d8:61:d5:81:9c:86:71:08:a1:b4:08:f5:00:a1:d4:
                    ec:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:09:FC:7D:99:4F:F5:02:48:99:CC:DD:61:E6:D5:3F:24:B9:82:B9
            X509v3 Authority Key Identifier:
                keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d9:b1:c7:1f:50:eb:eb:f2:fb:c7:e1:83:dc:b1:ad:65:90:
         c0:f1:7a:4a:e5:87:0c:f0:c0:43:82:25:a3:58:b6:2d:b5:95:
         16:08:3b:af:fa:d8:b6:34:63:28:6a:59:1b:0e:9a:a8:26:9e:
         51:13:d9:a6:9c:b8:1e:a5:ab:eb:17:fa:30:d4:5b:8a:9a:9c:
         ba:95:42:8e:69:be:c9:6b:9c:2d:8c:51:14:46:e2:21:22:fd:
         69:c9:60:c0:0a:3a:74:e8:47:7b:c5:4e:4b:09:0f:28:e0:f5:
         8f:0c:ec:96:20:34:42:75:ce:5b:94:56:ac:8a:e7:dc:82:7a:
         bb:3c:6b:30:ef:19:b1:02:6a:3a:ab:cc:84:fb:ed:94:dc:2c:
         8d:55:2d:c4:66:dd:6a:48:51:e7:8c:b8:b5:e5:dc:9c:4a:d3:
         f7:a5:e1:96:16:30:b1:94:eb:9b:47:39:23:be:b7:c9:1a:69:
         14:43:42:d4:d4:bd:3e:b3:74:58:e4:c0:67:3e:73:cb:a0:c1:
         67:ac:55:08:39:a6:fe:49:99:92:e3:51:1c:fc:e2:7e:dc:ad:
         cc:d7:fe:53:08:95:ee:4f:3e:d3:81:46:ca:99:f5:7a:bf:89:
         b0:45:12:49:dc:52:94:70:28:11:14:54:85:62:45:85:8f:b4:
         bc:f2:a9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:47:36 2026 by rpki-client