Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/d6f47b-0de7-488f-b13b-d6933442dd73/1/GvTGE18eYwqZsQjUATXQRl48Jhs.mft
File:                     GvTGE18eYwqZsQjUATXQRl48Jhs.mft (raw, json)
Hash identifier:          pDWAmWmUObcMshUQdPqq97ODSQMDuBf2WNZ0rEnST3Y=
Subject key identifier:   D2:54:57:CD:C6:A8:C6:97:9D:D7:EF:ED:E8:99:67:4B:A2:A6:8A:6E
Authority key identifier: 1A:F4:C6:13:5F:1E:63:0A:99:B1:08:D4:01:35:D0:46:5E:3C:26:1B
Certificate issuer:       /CN=1af4c6135f1e630a99b108d40135d0465e3c261b
Certificate serial:       01A14F88288C5DD85D9ECAFE4E49C3E7FC54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvTGE18eYwqZsQjUATXQRl48Jhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/d6f47b-0de7-488f-b13b-d6933442dd73/1/GvTGE18eYwqZsQjUATXQRl48Jhs.mft
Manifest number:          42
Signing time:             Sun 18 Oct 2026 15:01:25 +0000
Manifest this update:     Sun 18 Oct 2026 15:01:25 +0000
Manifest next update:     Mon 19 Oct 2026 15:01:25 +0000
Files and hashes:         1: GvTGE18eYwqZsQjUATXQRl48Jhs.crl (hash: Oq/rJB7WI63H7usTv+CP18dKyiFQYcAf9pbmeHC38RE=)
                          2: ay2UIp46tZ9hRYDuEGY5uWyb-l8.roa (hash: eCK8jBvdoNYy0lUWYvJTD2Zebadp8GqQoqKUuOXFlZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/d6f47b-0de7-488f-b13b-d6933442dd73/1/GvTGE18eYwqZsQjUATXQRl48Jhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/d6f47b-0de7-488f-b13b-d6933442dd73/1/GvTGE18eYwqZsQjUATXQRl48Jhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvTGE18eYwqZsQjUATXQRl48Jhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 15:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4f:88:28:8c:5d:d8:5d:9e:ca:fe:4e:49:c3:e7:fc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af4c6135f1e630a99b108d40135d0465e3c261b
        Validity
            Not Before: Oct 18 15:01:25 2026 GMT
            Not After : Oct 19 15:01:25 2026 GMT
        Subject: CN=d25457cdc6a8c6979dd7efede899674ba2a68a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:21:8f:52:01:88:9e:15:d5:83:cb:c2:2a:
                    1b:ed:c4:ac:b4:17:a7:a3:62:35:e8:34:fb:ee:87:
                    65:f4:45:bb:b3:51:48:8e:81:14:9b:ec:30:d6:d0:
                    b9:8a:b6:9e:2f:72:de:84:92:ed:cf:9f:f7:88:83:
                    d3:ff:59:aa:2f:15:53:05:26:5f:93:83:63:a6:28:
                    a5:5a:7c:1f:9c:f9:df:c3:94:06:0a:75:09:77:6a:
                    fc:6f:95:85:fc:ae:cf:5f:53:1d:54:ec:8f:3a:12:
                    74:06:c5:aa:ee:ed:9e:bc:ab:1c:d3:30:d8:08:5a:
                    2f:d2:f4:30:34:50:79:77:e0:33:3f:58:f8:d3:40:
                    12:db:c8:5e:52:47:4c:1d:d4:e7:81:f5:6b:8e:59:
                    d8:3c:7f:a5:e4:e0:7a:2b:ae:e9:d9:6f:0d:f6:85:
                    ac:bf:da:eb:4d:48:b9:36:1e:b9:f9:65:0b:f2:43:
                    c4:67:28:1e:b0:7b:16:bb:a1:8a:b6:88:ec:5f:57:
                    10:f9:24:75:1d:ec:cf:28:30:38:8f:26:a3:11:60:
                    63:e4:16:33:cd:69:22:1c:31:13:f8:45:6e:9b:c6:
                    ff:c6:4d:0b:43:f1:d5:50:c2:2f:00:83:89:d4:34:
                    c4:75:d7:a7:eb:49:62:36:60:b9:2d:f0:c6:41:96:
                    1e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:54:57:CD:C6:A8:C6:97:9D:D7:EF:ED:E8:99:67:4B:A2:A6:8A:6E
            X509v3 Authority Key Identifier:
                keyid:1A:F4:C6:13:5F:1E:63:0A:99:B1:08:D4:01:35:D0:46:5E:3C:26:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvTGE18eYwqZsQjUATXQRl48Jhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d6f47b-0de7-488f-b13b-d6933442dd73/1/GvTGE18eYwqZsQjUATXQRl48Jhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d6f47b-0de7-488f-b13b-d6933442dd73/1/GvTGE18eYwqZsQjUATXQRl48Jhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a3:be:31:1e:44:2b:1d:04:b7:63:ab:d4:2b:fb:07:60:91:
         15:36:f2:1a:01:b2:83:64:04:31:df:20:f5:51:1c:4d:32:2a:
         66:36:19:6d:78:65:2b:9a:6a:51:cb:ce:51:a8:1d:f1:0b:ea:
         75:ba:85:a0:96:79:29:45:c5:3d:f1:2f:82:f6:ff:ed:31:87:
         61:ed:8e:f7:1a:92:3f:1f:eb:b9:69:27:5f:0a:32:d5:be:50:
         31:d7:c9:15:2a:74:0e:f4:a7:c4:a7:82:10:74:56:38:3d:fa:
         3a:46:24:61:a0:cc:c9:54:71:04:93:4f:3b:86:ea:40:18:a9:
         b6:b8:32:dc:8e:de:dc:77:79:93:ef:d5:4e:b3:c7:06:6f:88:
         1d:24:bf:29:d3:b3:32:f6:44:2c:ad:60:d2:2f:c9:a9:5e:6f:
         70:6b:da:1f:47:58:ea:f6:96:d8:d8:a0:3a:20:16:79:8a:e7:
         f2:8a:30:df:32:a6:53:0e:fd:de:ae:0b:56:81:5f:92:88:86:
         5f:5b:a5:1b:69:8f:09:2b:4e:c9:b1:5c:b4:b5:bb:19:c0:d2:
         cd:4c:d0:bf:6f:33:de:6f:64:20:c3:9c:3f:e4:50:ac:63:97:
         06:d4:43:aa:7d:a3:fc:8c:f0:16:17:3f:2d:00:d4:9e:b6:04:
         58:71:6a:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFPiCiMXdhdnsr+TknD5/xUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZjRjNjEzNWYxZTYzMGE5OWIxMDhkNDAxMzVkMDQ2NWUz
YzI2MWIwHhcNMjYxMDE4MTUwMTI1WhcNMjYxMDE5MTUwMTI1WjAzMTEwLwYDVQQD
EyhkMjU0NTdjZGM2YThjNjk3OWRkN2VmZWRlODk5Njc0YmEyYTY4YTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA018hj1IBiJ4V1YPLwiob7cSstBen
o2I16DT77odl9EW7s1FIjoEUm+ww1tC5iraeL3LehJLtz5/3iIPT/1mqLxVTBSZf
k4NjpiilWnwfnPnfw5QGCnUJd2r8b5WF/K7PX1MdVOyPOhJ0BsWq7u2evKsc0zDY
CFov0vQwNFB5d+AzP1j400AS28heUkdMHdTngfVrjlnYPH+l5OB6K67p2W8N9oWs
v9rrTUi5Nh65+WUL8kPEZygesHsWu6GKtojsX1cQ+SR1HezPKDA4jyajEWBj5BYz
zWkiHDET+EVum8b/xk0LQ/HVUMIvAIOJ1DTEdden60liNmC5LfDGQZYe8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJUV83GqMaXndfv7eiZZ0uipopuMB8GA1UdIwQY
MBaAFBr0xhNfHmMKmbEI1AE10EZePCYbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3ZUR0UxOGVZd3Fac1FqVUFUWFFSbDQ4SmhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kNmY0N2ItMGRlNy00ODhmLWIxM2It
ZDY5MzM0NDJkZDczLzEvR3ZUR0UxOGVZd3Fac1FqVUFUWFFSbDQ4SmhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kNmY0N2ItMGRlNy00ODhmLWIxM2ItZDY5MzM0NDJkZDcz
LzEvR3ZUR0UxOGVZd3Fac1FqVUFUWFFSbDQ4SmhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6O+MR5E
Kx0Et2Or1Cv7B2CRFTbyGgGyg2QEMd8g9VEcTTIqZjYZbXhlK5pqUcvOUagd8Qvq
dbqFoJZ5KUXFPfEvgvb/7TGHYe2O9xqSPx/ruWknXwoy1b5QMdfJFSp0DvSnxKeC
EHRWOD36OkYkYaDMyVRxBJNPO4bqQBiptrgy3I7e3Hd5k+/VTrPHBm+IHSS/KdOz
MvZELK1g0i/JqV5vcGvaH0dY6vaW2NigOiAWeYrn8oow3zKmUw793q4LVoFfkoiG
X1ulG2mPCStOybFctLW7GcDSzUzQv28z3m9kIMOcP+RQrGOXBtRDqn2j/IzwFhc/
LQDUnrYEWHFq0Q==
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:42 2026 by rpki-client