Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
File:                     GBTcobly3pEWdeoi0vvNvgG4MLw.mft (raw, json)
Hash identifier:          OHBblqmCopx8mof87KhBUaSFbLzPcdh/bhRaxNeMSg8=
Subject key identifier:   A5:D1:09:40:88:3E:A2:52:5E:5B:72:F2:AD:F3:6B:29:DD:27:CA:BA
Authority key identifier: 18:14:DC:A1:B9:72:DE:91:16:75:EA:22:D2:FB:CD:BE:01:B8:30:BC
Certificate issuer:       /CN=1814dca1b972de911675ea22d2fbcdbe01b830bc
Certificate serial:       01A0588CBBB8E2329A8BBE6ADE75939462B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
Manifest number:          021D
Signing time:             Mon 31 Aug 2026 16:00:13 +0000
Manifest this update:     Mon 31 Aug 2026 16:00:13 +0000
Manifest next update:     Tue 01 Sep 2026 16:00:13 +0000
Files and hashes:         1: GBTcobly3pEWdeoi0vvNvgG4MLw.crl (hash: 9czGqzhg/6UXJqW6SxL8cXqZip/Sdmcs+sZlfyj+3a4=)
                          2: TJsdk6GlDGwNFsPogQM6Er0LdIs.asa (hash: uIr8DFmzh8tTb+dANLrMQVRmc/br/v70MLXUCo4zCNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 16:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:58:8c:bb:b8:e2:32:9a:8b:be:6a:de:75:93:94:62:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1814dca1b972de911675ea22d2fbcdbe01b830bc
        Validity
            Not Before: Aug 31 16:00:13 2026 GMT
            Not After : Sep  1 16:00:13 2026 GMT
        Subject: CN=a5d10940883ea2525e5b72f2adf36b29dd27caba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:52:fb:4e:00:c5:20:d5:12:a3:ba:6b:c5:b5:
                    b5:eb:90:38:d8:1f:24:a1:ff:3a:1d:47:67:a7:9a:
                    d9:f2:69:62:53:0c:e2:c5:bf:6f:e4:6b:b1:17:8c:
                    8c:d4:9c:0b:b9:39:04:01:22:48:45:0b:ea:72:89:
                    2e:5a:e5:98:6d:1e:31:65:d0:a4:f9:f9:e7:8d:26:
                    9b:61:74:9f:40:6e:19:a3:d7:08:af:87:78:9b:8d:
                    b0:d7:fa:1f:17:a8:86:9c:59:4a:a2:ba:7c:bc:17:
                    7b:c8:95:db:86:b0:51:6c:a1:b7:f0:4d:01:aa:58:
                    e6:4e:39:14:93:ec:d6:6f:0c:82:6b:fe:2d:55:d9:
                    92:8f:47:4d:9c:ba:a3:b6:59:1a:fc:a2:cd:a8:40:
                    58:90:bd:06:e0:d9:5f:04:b9:e7:d0:43:b0:ee:bc:
                    e7:81:00:66:64:4f:6f:db:f6:e2:71:5e:5c:00:42:
                    1e:69:5f:26:8b:f9:0d:09:06:3c:3d:5f:d3:35:e1:
                    67:08:36:01:a3:53:c0:8b:1a:af:79:a0:e4:6c:28:
                    51:ff:cd:06:60:9a:2c:bb:2b:0f:49:a9:c4:dc:cb:
                    99:63:ba:5f:25:d8:44:78:f0:30:b9:d5:e0:08:cb:
                    fc:f8:bb:b0:52:7f:8b:a6:ec:70:a7:86:74:4e:9f:
                    2f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D1:09:40:88:3E:A2:52:5E:5B:72:F2:AD:F3:6B:29:DD:27:CA:BA
            X509v3 Authority Key Identifier:
                keyid:18:14:DC:A1:B9:72:DE:91:16:75:EA:22:D2:FB:CD:BE:01:B8:30:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:71:9a:aa:34:08:59:05:ac:43:dd:b7:81:88:fc:e0:a9:8f:
         c0:62:52:cf:1a:2b:4e:e9:14:92:f2:44:a7:74:2f:2b:a9:2d:
         37:31:9b:54:1a:13:8a:82:e8:41:b1:fe:1c:35:14:d6:dc:87:
         71:13:e7:9e:b4:3e:da:e4:e0:9c:1b:0a:64:91:40:ef:04:27:
         34:60:17:b0:ee:42:d8:3f:72:b0:c0:69:06:8b:1f:86:a1:8b:
         db:1e:d3:cf:34:f5:a7:d3:82:1c:94:ee:c5:35:3c:0c:11:af:
         6c:73:89:d3:85:a7:14:1c:e3:9c:54:db:45:b7:a1:34:52:77:
         30:d7:d3:dc:f7:c5:bd:aa:e3:1d:cc:00:d6:af:4a:e6:1d:50:
         13:24:09:5a:10:c9:54:a7:78:26:42:81:22:19:58:5e:21:40:
         07:22:43:ee:d4:06:aa:d0:28:78:83:be:c6:3f:93:26:b0:f3:
         df:83:e6:91:54:10:00:f3:b0:40:8d:39:c4:e4:96:0e:58:10:
         2e:cb:3c:0c:b8:33:43:04:73:73:d1:12:78:47:fd:0c:f2:65:
         a9:22:0f:a7:66:c4:20:c2:2e:70:1d:da:bf:03:f0:bb:ff:a1:
         ac:5f:49:2e:c1:a1:85:6f:26:6d:4d:a1:af:3c:e7:5b:7c:b6:
         86:75:60:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:20 2026 by rpki-client