Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
File:                     GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json)
Hash identifier:          3lB9ZqsL/6loW3DM5o1tJ8Cz9qu6oN/as64dXWPi1Sc=
Subject key identifier:   A3:A3:42:67:EF:2C:C7:68:D5:88:6D:47:B1:52:F0:6C:E0:FF:47:9D
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Certificate issuer:       /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial:       019F33031F9C78B0C5B5783476E63AD4A99C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
Manifest number:          1618
Signing time:             Sun 05 Jul 2026 16:01:10 +0000
Manifest this update:     Sun 05 Jul 2026 16:01:10 +0000
Manifest next update:     Mon 06 Jul 2026 16:01:10 +0000
Files and hashes:         1: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: G8cLZh4PRy9ZN/1lKtPFYr5wEgpwmYXDv3MBsGmTIXA=)
                          2: a1Wzzm6d-RLRzAcChfLkzjD6yj4.roa (hash: u2suJZ9dSTEdpIWAwFWYGCWey0B3AvIkAHlBujdVtCc=)
                          3: bonvg5XaBQcMsNMwCdMc5lDAhv0.roa (hash: ZSoRPjPH88M9xek3/eVzci4XvPHF1Itjvf+UZyNuK0s=)
                          4: h-e8ELzqBHgqs0gO88cD6j4kiUw.roa (hash: IFfM4s3xZcomvpllzauBa/HUt3f3fExXfJyGi7VQ3a0=)
                          5: tgxCEeVuZ-EDQmEz7GRXe-l5ETE.roa (hash: LUh2uL8YOcgSTcCxK3/07PSsvLuQW83QgTZqddE2hIU=)
                          6: y8107xFwU5xNTZHiPZVC-6uA80E.roa (hash: VzBljyrPOFT8EeSOV+zQI6XF+CUR92IpElZIDzHyEnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 Jul 2026 15:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:33:03:1f:9c:78:b0:c5:b5:78:34:76:e6:3a:d4:a9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193743467b4da41c6295e9351153309586ba2399
        Validity
            Not Before: Jul  5 16:01:10 2026 GMT
            Not After : Jul  6 16:01:10 2026 GMT
        Subject: CN=a3a34267ef2cc768d5886d47b152f06ce0ff479d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:db:58:1e:42:d5:90:96:9c:b9:6b:f0:01:
                    1c:42:fe:cc:09:91:37:6e:ef:e8:d1:94:df:98:26:
                    28:5f:fa:4d:78:03:cf:05:eb:3f:a2:91:78:78:b0:
                    92:36:88:d9:dc:42:54:32:33:cb:98:0c:02:6f:01:
                    22:90:4e:0b:0e:2a:f3:4b:81:17:d6:5e:48:20:6c:
                    4f:5f:2b:4a:6c:ea:bd:11:b2:b2:0f:50:7c:ec:75:
                    1c:5f:37:d5:3a:c5:6e:6f:4c:62:b7:a2:68:c9:07:
                    07:b9:e2:37:fd:67:af:ae:01:19:f5:1d:6b:f7:12:
                    51:15:c3:cb:db:a2:ae:9c:e3:98:f2:81:65:6f:94:
                    34:44:e8:b2:68:bc:e6:8d:51:b1:23:57:75:be:96:
                    5b:b1:02:22:4c:93:55:38:6d:3f:26:ac:a2:30:54:
                    7a:fb:d1:72:b8:63:ae:ac:95:ba:9a:62:74:79:ac:
                    45:9f:df:56:ad:13:fc:68:1d:95:c7:eb:b0:45:f5:
                    de:52:66:20:fc:82:9b:6e:ef:7e:13:5a:a9:bc:64:
                    78:c2:b2:00:67:b8:86:b5:58:10:35:d0:f1:f6:35:
                    62:8c:75:69:8e:fe:a5:59:41:7a:43:d1:a1:96:f7:
                    9c:31:db:d9:2e:2c:af:c7:a8:57:90:83:03:26:6b:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A3:42:67:EF:2C:C7:68:D5:88:6D:47:B1:52:F0:6C:E0:FF:47:9D
            X509v3 Authority Key Identifier:
                keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:82:2f:99:a5:e9:54:be:69:17:ba:a6:c5:9a:fb:79:e6:
         89:ec:d0:58:a5:ff:49:29:1d:09:a0:31:f7:a0:59:b3:61:64:
         a2:7f:cf:ce:9d:5a:8d:c5:6c:0b:cc:4e:b8:a2:8b:29:ba:2b:
         b0:e3:20:cf:de:08:12:c5:18:6c:2a:11:5b:1c:5e:9f:29:8b:
         0d:04:1e:e5:d2:45:9f:58:f0:44:eb:87:5a:a0:15:2b:85:b7:
         04:4e:0f:86:69:b8:04:ed:7c:28:53:e1:b4:cc:29:a8:9c:28:
         50:96:20:0a:0f:31:35:b7:d5:c0:f2:ae:25:e8:3b:ed:75:14:
         01:23:3b:19:de:72:67:19:e6:6f:51:2b:ef:e1:ef:a6:ab:d8:
         d4:92:ac:d1:59:dc:cb:10:89:3f:93:e9:42:98:ee:88:f3:9e:
         27:ba:53:78:65:7e:2b:e3:42:b4:74:fe:a5:ca:38:4d:f1:e5:
         6c:b3:65:71:2c:4b:6c:e1:bf:ec:b5:0f:f1:19:e0:3f:73:a1:
         c7:c7:e7:e0:e1:6c:14:fb:de:a7:2e:76:49:17:71:9c:28:5d:
         67:61:5f:30:fc:d3:c6:11:df:62:6c:66:96:dc:84:99:30:65:
         fb:71:32:2f:6e:6b:55:13:b8:6c:41:76:f6:91:08:58:09:a1:
         1a:61:37:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8zAx+ceLDFtXg0duY61KmcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Mzc0MzQ2N2I0ZGE0MWM2Mjk1ZTkzNTExNTMzMDk1ODZi
YTIzOTkwHhcNMjYwNzA1MTYwMTEwWhcNMjYwNzA2MTYwMTEwWjAzMTEwLwYDVQQD
EyhhM2EzNDI2N2VmMmNjNzY4ZDU4ODZkNDdiMTUyZjA2Y2UwZmY0NzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe7bWB5C1ZCWnLlr8AEcQv7MCZE3
bu/o0ZTfmCYoX/pNeAPPBes/opF4eLCSNojZ3EJUMjPLmAwCbwEikE4LDirzS4EX
1l5IIGxPXytKbOq9EbKyD1B87HUcXzfVOsVub0xit6JoyQcHueI3/WevrgEZ9R1r
9xJRFcPL26KunOOY8oFlb5Q0ROiyaLzmjVGxI1d1vpZbsQIiTJNVOG0/JqyiMFR6
+9FyuGOurJW6mmJ0eaxFn99WrRP8aB2Vx+uwRfXeUmYg/IKbbu9+E1qpvGR4wrIA
Z7iGtVgQNdDx9jVijHVpjv6lWUF6Q9GhlvecMdvZLiyvx6hXkIMDJmsrswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOjQmfvLMdo1YhtR7FS8Gzg/0edMB8GA1UdIwQY
MBaAFBk3Q0Z7TaQcYpXpNRFTMJWGuiOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNjcwM2EtMTIyYi00MTE2LWIzMTct
Y2E1ZmNjYmY3YThjLzEvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zNjcwM2EtMTIyYi00MTE2LWIzMTctY2E1ZmNjYmY3YThj
LzEvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3mCL5ml
6VS+aRe6psWa+3nmiezQWKX/SSkdCaAx96BZs2Fkon/Pzp1ajcVsC8xOuKKLKbor
sOMgz94IEsUYbCoRWxxenymLDQQe5dJFn1jwROuHWqAVK4W3BE4Phmm4BO18KFPh
tMwpqJwoUJYgCg8xNbfVwPKuJeg77XUUASM7Gd5yZxnmb1Er7+HvpqvY1JKs0Vnc
yxCJP5PpQpjuiPOeJ7pTeGV+K+NCtHT+pco4TfHlbLNlcSxLbOG/7LUP8RngP3Oh
x8fn4OFsFPvepy52SRdxnChdZ2FfMPzTxhHfYmxmltyEmTBl+3EyL25rVRO4bEF2
9pEIWAmhGmE3gA==
-----END CERTIFICATE-----
Generated at Sun Jul 5 20:03:19 2026 by rpki-client