Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File:                     GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier:          k2qvR3KrX1XoHJIzu57UO1a+lxzV84FXwenF4zpxPMM=
Subject key identifier:   BD:E6:0C:D7:21:03:B0:4D:D5:02:4B:A5:3A:6E:B1:6A:DD:A1:1E:A4
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer:       /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial:       019CE66D95CF4E08F9F1543247103F93A4DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number:          102A
Signing time:             Fri 13 Mar 2026 09:01:07 +0000
Manifest this update:     Fri 13 Mar 2026 09:01:07 +0000
Manifest next update:     Sat 14 Mar 2026 09:01:07 +0000
Files and hashes:         1: 22DYdmOvCLM948EoyfkUAxlACZo.roa (hash: kciKnNjBgHwlkB4sn576VFqmz6xPQ5AioU9khsx436M=)
                          2: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: jiz2pEjd/Laq3eR1nonsBeoIJjlorgfXDwv7Yu1g9GQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:6d:95:cf:4e:08:f9:f1:54:32:47:10:3f:93:a4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
        Validity
            Not Before: Mar 13 09:01:07 2026 GMT
            Not After : Mar 14 09:01:07 2026 GMT
        Subject: CN=bde60cd72103b04dd5024ba53a6eb16adda11ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:b7:48:5e:5e:11:58:bf:f1:d9:c6:1e:be:
                    0e:a2:a9:fa:26:71:80:ee:77:14:41:15:b1:54:50:
                    0e:31:e3:2c:f2:9d:ca:3d:0a:ab:9a:e4:c7:c0:ae:
                    0c:a1:76:ab:f7:56:9b:55:90:ad:6b:88:03:c4:67:
                    95:20:0f:d8:3f:89:bb:95:24:75:c0:61:62:af:aa:
                    d8:0a:f5:8d:3d:8f:00:f6:a1:18:24:ea:95:76:82:
                    a3:ef:ff:c1:a4:2a:ce:9f:0c:cd:68:eb:47:3b:30:
                    51:09:b9:be:46:11:2a:bc:31:98:6c:aa:d0:81:59:
                    07:86:c8:e3:a9:bc:c9:22:cc:af:00:05:f5:41:bd:
                    d1:3b:f5:c1:76:c3:91:31:0c:56:e8:95:9a:75:97:
                    c9:03:5d:10:c3:c4:ee:45:89:23:38:fa:59:2b:a5:
                    59:f2:68:ae:e5:99:5e:5a:39:cc:fd:f1:84:bc:8a:
                    b9:15:78:b7:e4:88:da:d8:e0:0c:dc:67:cf:eb:bd:
                    fc:57:4a:03:66:e9:59:1f:85:78:20:6f:43:74:ca:
                    1d:80:dd:bd:88:ca:5c:bf:f1:73:97:11:d6:57:be:
                    a9:24:e7:ed:60:0d:2a:8a:86:81:e5:d9:72:90:cf:
                    b6:b1:8f:2a:7b:f3:b5:e2:c4:0b:66:e7:86:bd:38:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E6:0C:D7:21:03:B0:4D:D5:02:4B:A5:3A:6E:B1:6A:DD:A1:1E:A4
            X509v3 Authority Key Identifier:
                keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ec:2e:a6:fe:57:48:6c:68:a3:3c:6b:3d:b1:2b:cf:dd:d9:
         98:70:2c:f6:1c:05:50:14:2f:e4:dc:6d:a0:9b:04:f8:63:da:
         fa:b9:eb:d9:cd:bf:ef:d7:6d:d9:7c:58:6c:34:2c:b7:b1:65:
         f7:8b:c4:a2:9d:89:02:b0:12:09:40:84:75:83:0c:a5:72:3d:
         5a:ea:ad:40:40:01:5b:22:1c:52:fc:f7:27:eb:99:4f:22:c5:
         31:a6:11:a5:fd:85:74:4c:51:3c:b0:04:76:9b:90:fc:c5:de:
         46:ee:58:96:c8:bf:a4:0b:5d:84:70:69:34:a5:54:4e:04:32:
         df:29:9b:66:de:a8:be:8c:f0:3c:30:a3:3e:01:9d:ed:c0:93:
         e8:9f:c5:37:29:23:f9:b7:40:a7:07:0c:6f:c2:ec:c4:47:c0:
         d9:b2:d3:61:52:16:68:85:50:7c:f5:38:f4:27:1e:3c:dc:da:
         25:6a:cb:b6:de:4c:e0:84:54:5d:0f:be:80:99:11:54:fb:f0:
         85:d8:fd:cc:af:40:6b:f9:ce:36:c4:da:34:45:ad:af:68:b4:
         e8:a2:e5:92:ac:a7:69:76:99:7a:a7:06:c9:a6:18:39:2f:ca:
         1b:af:de:ff:a6:01:35:83:ca:bb:42:1e:e2:32:e2:97:4e:e3:
         90:d4:4b:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmbZXPTgj58VQyRxA/k6TbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZGMwMDkzYzVhZjg5NGNmNTIwYjU5MzZlMzBiMjE1MDkw
ZGU5ZjgwHhcNMjYwMzEzMDkwMTA3WhcNMjYwMzE0MDkwMTA3WjAzMTEwLwYDVQQD
EyhiZGU2MGNkNzIxMDNiMDRkZDUwMjRiYTUzYTZlYjE2YWRkYTExZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuG3SF5eEVi/8dnGHr4Ooqn6JnGA
7ncUQRWxVFAOMeMs8p3KPQqrmuTHwK4MoXar91abVZCta4gDxGeVIA/YP4m7lSR1
wGFir6rYCvWNPY8A9qEYJOqVdoKj7//BpCrOnwzNaOtHOzBRCbm+RhEqvDGYbKrQ
gVkHhsjjqbzJIsyvAAX1Qb3RO/XBdsORMQxW6JWadZfJA10Qw8TuRYkjOPpZK6VZ
8miu5ZleWjnM/fGEvIq5FXi35Ija2OAM3GfP6738V0oDZulZH4V4IG9DdModgN29
iMpcv/FzlxHWV76pJOftYA0qioaB5dlykM+2sY8qe/O14sQLZueGvThJCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3mDNchA7BN1QJLpTpusWrdoR6kMB8GA1UdIwQY
MBaAFBrcAJPFr4lM9SC1k24wshUJDen4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC82YjYwZWQtMGM0Ni00ODczLTkxZmUt
ZjU5NDhjNzE2ZTE2LzEvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC82YjYwZWQtMGM0Ni00ODczLTkxZmUtZjU5NDhjNzE2ZTE2
LzEvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOwupv5X
SGxoozxrPbErz93ZmHAs9hwFUBQv5NxtoJsE+GPa+rnr2c2/79dt2XxYbDQst7Fl
94vEop2JArASCUCEdYMMpXI9WuqtQEABWyIcUvz3J+uZTyLFMaYRpf2FdExRPLAE
dpuQ/MXeRu5Ylsi/pAtdhHBpNKVUTgQy3ymbZt6ovozwPDCjPgGd7cCT6J/FNykj
+bdApwcMb8LsxEfA2bLTYVIWaIVQfPU49CcePNzaJWrLtt5M4IRUXQ++gJkRVPvw
hdj9zK9Aa/nONsTaNEWtr2i06KLlkqynaXaZeqcGyaYYOS/KG6/e/6YBNYPKu0Ie
4jLil07jkNRLMQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 15:58:35 2026 by rpki-client