Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
File:                     GBTcobly3pEWdeoi0vvNvgG4MLw.mft (raw, json)
Hash identifier:          F5wxbAA+DkUS/ByqiBKbaDX/K28Z6EkN5SDCgumRxkw=
Subject key identifier:   CE:2B:9C:AB:B7:00:C7:1A:6F:42:C2:3C:3D:BC:06:F7:9A:20:17:3F
Authority key identifier: 18:14:DC:A1:B9:72:DE:91:16:75:EA:22:D2:FB:CD:BE:01:B8:30:BC
Certificate issuer:       /CN=1814dca1b972de911675ea22d2fbcdbe01b830bc
Certificate serial:       01A154413EFE03061BF8BEDD4BCEFC50DB21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
Manifest number:          02A1
Signing time:             Mon 19 Oct 2026 13:02:04 +0000
Manifest this update:     Mon 19 Oct 2026 13:02:04 +0000
Manifest next update:     Tue 20 Oct 2026 13:02:04 +0000
Files and hashes:         1: GBTcobly3pEWdeoi0vvNvgG4MLw.crl (hash: qAkibySR0HPsI6XIrm7mj7sWywKkpqtHQ/5lxdZGkpI=)
                          2: p0LiCr9PbTuHDhW4PJDft6EJddU.asa (hash: 6/kzeXZdN6XECQVEwa6wViAomqtmCJ/c9r7mvZtKuEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 13:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:54:41:3e:fe:03:06:1b:f8:be:dd:4b:ce:fc:50:db:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1814dca1b972de911675ea22d2fbcdbe01b830bc
        Validity
            Not Before: Oct 19 13:02:04 2026 GMT
            Not After : Oct 20 13:02:04 2026 GMT
        Subject: CN=ce2b9cabb700c71a6f42c23c3dbc06f79a20173f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:41:72:5a:de:95:43:a9:29:af:6d:8d:71:
                    b6:00:0a:c5:d3:45:bc:3d:96:f9:fa:16:bb:0f:38:
                    d9:c8:32:1e:ce:91:af:25:dd:a3:64:4c:c9:6b:15:
                    1c:04:f9:0a:22:b0:77:d4:71:58:62:99:67:4c:a7:
                    73:a1:66:ab:ad:3d:ed:e2:99:be:b0:31:fe:6c:0a:
                    49:5d:46:67:6d:99:9d:30:13:81:af:fb:d1:0f:a7:
                    61:e4:78:56:4b:2b:8e:3d:79:26:05:04:a0:f0:7f:
                    04:42:cb:77:73:4c:a0:6f:e5:13:e2:d7:90:4d:9e:
                    62:2e:f6:56:34:c1:09:e1:ba:c6:f8:1a:e3:04:41:
                    8e:98:45:5d:9e:6d:38:a2:e3:98:21:bd:83:6c:5a:
                    5e:02:91:ee:ab:de:c1:e3:87:02:ce:41:a4:78:33:
                    2e:01:4f:12:cd:2d:8a:11:72:20:a8:26:ff:a3:4a:
                    01:89:6d:7e:0d:f8:a0:35:af:92:f5:93:21:f1:6b:
                    66:43:6d:b8:03:20:5c:6c:40:dd:85:5d:b1:02:52:
                    22:6e:39:cc:22:c8:0e:fc:f9:df:f2:5e:31:e7:0a:
                    11:cc:00:ee:5f:51:5f:e6:0a:36:ce:f4:ec:19:ea:
                    11:7f:be:60:60:81:4a:c9:cc:4d:b4:13:7b:de:50:
                    b6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2B:9C:AB:B7:00:C7:1A:6F:42:C2:3C:3D:BC:06:F7:9A:20:17:3F
            X509v3 Authority Key Identifier:
                keyid:18:14:DC:A1:B9:72:DE:91:16:75:EA:22:D2:FB:CD:BE:01:B8:30:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c9:6b:17:6e:94:ba:4c:d8:19:47:af:f3:4d:5c:20:fa:d5:
         7a:6d:7d:a6:a7:c6:15:49:dd:0f:44:f2:f9:df:f7:16:fc:e1:
         cd:10:aa:d3:0c:bb:6a:8f:f0:6f:96:6e:29:22:ce:1e:dd:47:
         df:52:6a:55:dc:f7:20:b2:20:b5:e4:d2:13:fd:5c:e8:98:af:
         21:4a:cf:d8:de:f7:8f:6e:92:b4:70:b2:89:b7:ab:5f:7d:85:
         76:8c:92:61:5f:ce:e1:e4:0f:79:27:7b:1c:44:d4:9f:d7:57:
         b3:c3:99:90:2a:22:92:7b:37:e2:3f:74:88:d4:d4:7b:36:24:
         5a:c6:5a:20:e5:fb:37:97:61:3b:3b:c5:2d:09:c4:a8:5d:8e:
         31:2d:33:97:57:89:71:bd:e7:96:56:5f:e2:bf:99:53:d2:cc:
         47:16:57:c1:5f:fc:62:40:93:7d:0b:8b:96:b5:1a:a7:43:db:
         53:f6:e1:05:be:a6:78:37:00:4c:bd:d2:a3:21:3e:ad:81:dd:
         bb:48:29:85:08:1a:fd:3d:c6:ec:15:23:82:cf:0e:70:98:8c:
         62:b5:b0:8f:7f:41:5c:a0:88:a7:b1:2e:7d:a5:ce:8f:d1:21:
         8b:d6:6f:43:5b:b1:53:f1:05:1b:38:f3:19:8f:e1:7f:14:a6:
         98:2b:df:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFUQT7+AwYb+L7dS878UNshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTRkY2ExYjk3MmRlOTExNjc1ZWEyMmQyZmJjZGJlMDFi
ODMwYmMwHhcNMjYxMDE5MTMwMjA0WhcNMjYxMDIwMTMwMjA0WjAzMTEwLwYDVQQD
EyhjZTJiOWNhYmI3MDBjNzFhNmY0MmMyM2MzZGJjMDZmNzlhMjAxNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPBBclrelUOpKa9tjXG2AArF00W8
PZb5+ha7DzjZyDIezpGvJd2jZEzJaxUcBPkKIrB31HFYYplnTKdzoWarrT3t4pm+
sDH+bApJXUZnbZmdMBOBr/vRD6dh5HhWSyuOPXkmBQSg8H8EQst3c0ygb+UT4teQ
TZ5iLvZWNMEJ4brG+BrjBEGOmEVdnm04ouOYIb2DbFpeApHuq97B44cCzkGkeDMu
AU8SzS2KEXIgqCb/o0oBiW1+DfigNa+S9ZMh8WtmQ224AyBcbEDdhV2xAlIibjnM
IsgO/Pnf8l4x5woRzADuX1Ff5go2zvTsGeoRf75gYIFKycxNtBN73lC2lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4rnKu3AMcab0LCPD28BveaIBc/MB8GA1UdIwQY
MBaAFBgU3KG5ct6RFnXqItL7zb4BuDC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JUY29ibHkzcEVXZGVvaTB2dk52Z0c0TUx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yZGVhZmItMDEzNS00NjQ1LWIwZDkt
MWUwOGFiYmI3NDhjLzEvR0JUY29ibHkzcEVXZGVvaTB2dk52Z0c0TUx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yZGVhZmItMDEzNS00NjQ1LWIwZDktMWUwOGFiYmI3NDhj
LzEvR0JUY29ibHkzcEVXZGVvaTB2dk52Z0c0TUx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8lrF26U
ukzYGUev801cIPrVem19pqfGFUndD0Ty+d/3FvzhzRCq0wy7ao/wb5ZuKSLOHt1H
31JqVdz3ILIgteTSE/1c6JivIUrP2N73j26StHCyiberX32FdoySYV/O4eQPeSd7
HETUn9dXs8OZkCoikns34j90iNTUezYkWsZaIOX7N5dhOzvFLQnEqF2OMS0zl1eJ
cb3nllZf4r+ZU9LMRxZXwV/8YkCTfQuLlrUap0PbU/bhBb6meDcATL3SoyE+rYHd
u0gphQga/T3G7BUjgs8OcJiMYrWwj39BXKCIp7EufaXOj9Ehi9ZvQ1uxU/EFGzjz
GY/hfxSmmCvfmQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:57:03 2026 by rpki-client