Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
File:                     GsvdANJ7iovvyGbK83jxkCdoR2k.mft (raw, json)
Hash identifier:          2mirP4Q4ZNGwS1wX9AbaTEniCRDXc0xasEf6js/A9KQ=
Subject key identifier:   D4:D7:17:1A:0A:59:F5:23:ED:9F:9B:98:0D:88:38:51:E6:0D:F7:B6
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Certificate issuer:       /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial:       019F419AAA3C77F9EA4A6ABBD6013427DDBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
Manifest number:          0CAD
Signing time:             Wed 08 Jul 2026 12:01:22 +0000
Manifest this update:     Wed 08 Jul 2026 12:01:22 +0000
Manifest next update:     Thu 09 Jul 2026 12:01:22 +0000
Files and hashes:         1: 1v1j_9V79CfDRyy5ITVwKULcKzs.roa (hash: IW+E0tn+3P5yQ6WEdmWbMLqIHQmOymBM/uiaqJuBrqM=)
                          2: 8aFsvbvvtoXgKKeiSZDIorn0lcs.roa (hash: wv6uTigREH5R3i/ivV6vqDKvGBKTQpySFX+WLF4afYM=)
                          3: GsvdANJ7iovvyGbK83jxkCdoR2k.crl (hash: jFEXVa7HFGRkhTaHpMZQgj3VlygF++mKck/tq8dwyyQ=)
                          4: hnLqnAEN_PSEnf5JXcTb3OnKqoo.roa (hash: lSYPnPlDdlQoA0R4XN+dhc2P4+6Eu5g/f7zEImc1gKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 12:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:41:9a:aa:3c:77:f9:ea:4a:6a:bb:d6:01:34:27:dd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
        Validity
            Not Before: Jul  8 12:01:22 2026 GMT
            Not After : Jul  9 12:01:22 2026 GMT
        Subject: CN=d4d7171a0a59f523ed9f9b980d883851e60df7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:e9:76:89:50:bd:3c:74:10:b5:6f:07:cb:
                    49:cd:e0:df:ff:b2:12:30:79:3f:53:36:10:a4:74:
                    22:79:95:62:3a:1c:39:2b:f7:f5:a7:fe:bb:89:83:
                    22:80:22:61:c2:7a:e0:65:41:d7:af:e9:db:44:70:
                    97:3e:5f:e2:2e:2a:57:de:a5:df:89:b1:ef:47:f8:
                    b5:4d:b4:eb:76:54:48:a3:8d:99:52:68:5f:e2:28:
                    8b:e4:a7:01:ed:a0:88:ce:4c:41:ba:bf:f0:ad:3d:
                    40:08:88:93:f0:19:a1:c9:f1:22:7b:c7:58:d5:8f:
                    77:39:42:51:5a:e8:eb:34:d2:4f:f2:5e:bd:7e:3e:
                    a9:87:07:61:e1:bd:b8:fd:23:d8:e8:bd:9a:76:f9:
                    19:62:a0:69:8b:fd:2f:ad:d5:7e:ef:2b:ba:69:27:
                    05:3f:a0:3c:7a:46:86:68:a8:ab:2f:0f:a0:9e:66:
                    b1:8a:fc:e3:9a:39:58:7c:d2:85:00:d3:fa:69:ab:
                    3a:c0:01:ce:cd:1a:95:c0:c3:33:2b:43:39:6f:a4:
                    11:e2:e1:e1:80:02:aa:4a:be:3b:a2:5d:8a:5f:8f:
                    cd:c0:41:8c:7a:92:16:11:ab:9c:33:70:58:e6:aa:
                    72:87:4b:1f:af:f3:84:23:ad:33:69:6f:89:8d:b6:
                    e6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D7:17:1A:0A:59:F5:23:ED:9F:9B:98:0D:88:38:51:E6:0D:F7:B6
            X509v3 Authority Key Identifier:
                keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:86:00:59:be:40:66:35:32:51:38:f2:c9:34:e7:c1:69:
         f6:31:36:7c:3e:82:b1:15:1a:5c:41:c0:4f:80:6e:a5:d5:0c:
         d0:6d:57:3a:35:ce:a4:b6:fb:43:a5:a8:a8:d6:6b:5a:cc:b8:
         f0:5a:21:dc:85:1b:f6:aa:ac:d3:49:60:40:c7:c3:dd:fe:d5:
         48:67:6f:16:0b:7b:61:a5:86:3e:4f:45:5c:ce:f8:80:14:2b:
         ce:c2:71:73:e1:57:69:22:1d:48:c3:b9:d7:52:25:c2:64:76:
         c5:2d:07:5a:4e:ef:d6:5e:d3:85:6f:76:1c:a5:52:89:8c:4d:
         c9:30:1c:45:f2:b0:45:ff:3d:42:ad:5c:e6:79:19:78:b9:fe:
         00:65:18:91:56:68:a3:7c:c9:1e:4e:90:60:94:52:8b:50:59:
         e4:16:39:d7:62:32:6e:b9:60:4c:57:d7:5e:ed:84:82:46:6f:
         97:de:84:89:36:20:d7:d9:63:be:98:da:6e:8b:92:47:1d:25:
         20:6d:c9:ee:d1:34:bf:27:0e:37:24:e4:72:5b:b3:a0:a7:42:
         e1:03:68:68:c8:0d:4c:08:bb:f1:d9:fc:8a:4d:63:1a:bb:15:
         03:1c:a1:9e:ae:58:01:42:0f:f5:72:c8:8a:c9:b2:72:0f:5e:
         70:2e:f0:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9Bmqo8d/nqSmq71gE0J92+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2JkZDAwZDI3YjhhOGJlZmM4NjZjYWYzNzhmMTkwMjc2
ODQ3NjkwHhcNMjYwNzA4MTIwMTIyWhcNMjYwNzA5MTIwMTIyWjAzMTEwLwYDVQQD
EyhkNGQ3MTcxYTBhNTlmNTIzZWQ5ZjliOTgwZDg4Mzg1MWU2MGRmN2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhHpdolQvTx0ELVvB8tJzeDf/7IS
MHk/UzYQpHQieZViOhw5K/f1p/67iYMigCJhwnrgZUHXr+nbRHCXPl/iLipX3qXf
ibHvR/i1TbTrdlRIo42ZUmhf4iiL5KcB7aCIzkxBur/wrT1ACIiT8BmhyfEie8dY
1Y93OUJRWujrNNJP8l69fj6phwdh4b24/SPY6L2advkZYqBpi/0vrdV+7yu6aScF
P6A8ekaGaKirLw+gnmaxivzjmjlYfNKFANP6aas6wAHOzRqVwMMzK0M5b6QR4uHh
gAKqSr47ol2KX4/NwEGMepIWEaucM3BY5qpyh0sfr/OEI60zaW+JjbbmjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTXFxoKWfUj7Z+bmA2IOFHmDfe2MB8GA1UdIwQY
MBaAFBrL3QDSe4qL78hmyvN48ZAnaEdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQt
OWY5NTM2YmIyYzM3LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQtOWY5NTM2YmIyYzM3
LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqqGAFm+
QGY1MlE48sk058Fp9jE2fD6CsRUaXEHAT4BupdUM0G1XOjXOpLb7Q6WoqNZrWsy4
8Foh3IUb9qqs00lgQMfD3f7VSGdvFgt7YaWGPk9FXM74gBQrzsJxc+FXaSIdSMO5
11IlwmR2xS0HWk7v1l7ThW92HKVSiYxNyTAcRfKwRf89Qq1c5nkZeLn+AGUYkVZo
o3zJHk6QYJRSi1BZ5BY512IybrlgTFfXXu2EgkZvl96EiTYg19ljvpjabouSRx0l
IG3J7tE0vycONyTkcluzoKdC4QNoaMgNTAi78dn8ik1jGrsVAxyhnq5YAUIP9XLI
ismycg9ecC7wgQ==
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:38:51 2026 by rpki-client