Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
File:                     GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft (raw, json)
Hash identifier:          fOCuqi4IUuaWhMNUpePQZdJmIGBJI+a7jNemBD9LzAY=
Subject key identifier:   9A:67:2D:DF:E0:4B:DE:E3:F7:76:E5:3F:A6:D0:05:FD:65:0F:0D:3E
Authority key identifier: 19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C
Certificate issuer:       /CN=1954e32570bbfb9af11c2381e81c797c2f40087c
Certificate serial:       01A0208C37A6703033BDE13CEDFCE8142B71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
Manifest number:          17AA
Signing time:             Thu 20 Aug 2026 19:00:55 +0000
Manifest this update:     Thu 20 Aug 2026 19:00:55 +0000
Manifest next update:     Fri 21 Aug 2026 19:00:55 +0000
Files and hashes:         1: 2-D2-rHW0UIzbvcEd6pGsT2RuDs.roa (hash: 84KNwiWzV+MMBwVN2Y5/SzTCA1WubeFW0cIC9K7nDqI=)
                          2: GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl (hash: m5IvCVRvRcKylm9GuVBsYMGGZIll6do0Fno8j2SHPdo=)
                          3: e6DifeT6RtDWYOqt7WpZKVdgD4s.roa (hash: i9svsXFfDpE9QAUeELGmU1bul00M5b1EL+ypKkGNAdY=)
                          4: gaNunOTwvUuhFdwzla5IoZWHNQc.roa (hash: /xURODuTkS8gAUgCnYs/+ezO6kcHL3XcZ/PxRnhkINI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:8c:37:a6:70:30:33:bd:e1:3c:ed:fc:e8:14:2b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1954e32570bbfb9af11c2381e81c797c2f40087c
        Validity
            Not Before: Aug 20 19:00:55 2026 GMT
            Not After : Aug 21 19:00:55 2026 GMT
        Subject: CN=9a672ddfe04bdee3f776e53fa6d005fd650f0d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f5:ec:98:69:d9:5b:b6:1c:0f:ce:ec:ee:f7:
                    f3:cc:aa:30:78:4d:bd:7a:62:cc:93:53:10:cb:e4:
                    45:53:6d:96:3b:fc:f2:de:ad:52:96:f9:c5:fd:39:
                    a7:10:7a:6b:61:75:69:89:3c:f3:48:92:72:ec:c3:
                    bb:33:a6:1e:7f:6b:a2:63:b8:60:36:76:46:9f:2a:
                    6c:0a:df:8e:90:fe:2e:0d:78:ea:ac:50:b8:dc:b6:
                    57:d7:84:8e:13:dc:56:24:0b:51:af:a9:ab:ff:f1:
                    33:b0:c3:3f:20:79:12:0e:7d:c3:10:db:d2:af:3d:
                    57:6a:fa:70:32:4a:ea:14:0f:f2:bc:b0:66:73:aa:
                    15:d1:00:f1:72:8a:d3:c3:97:c5:b1:93:c4:96:a1:
                    5f:c7:ad:89:b1:ad:c8:fd:b0:c4:90:e4:51:1e:5f:
                    d9:ad:36:e5:7a:89:6a:ae:72:57:e7:cd:cb:a9:28:
                    c0:70:c4:60:45:88:e1:58:7a:fa:a0:4f:9d:7b:0d:
                    cb:95:3f:54:59:20:b5:84:47:71:6f:8b:26:1d:eb:
                    25:09:15:3f:ba:6e:a5:83:25:65:f1:cb:81:7d:10:
                    61:32:0b:51:02:32:94:70:8c:95:06:fa:85:0a:4e:
                    5b:15:55:5a:29:10:27:66:5e:b6:c4:fc:f8:49:13:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:67:2D:DF:E0:4B:DE:E3:F7:76:E5:3F:A6:D0:05:FD:65:0F:0D:3E
            X509v3 Authority Key Identifier:
                keyid:19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:92:03:90:6d:07:12:e3:d5:90:ce:10:25:6c:b0:bd:6c:52:
         69:4f:08:78:a3:ae:cc:96:b1:ea:d6:59:d7:93:49:53:d0:2d:
         bb:08:27:a1:4d:d0:ad:6d:9d:d8:6f:14:f7:2b:2b:37:ad:bf:
         43:ab:55:d1:e5:19:57:eb:c8:a5:19:2b:0a:56:71:7a:a8:87:
         a7:6a:9c:e5:84:ea:e8:c1:b0:9e:47:2b:8d:88:50:6b:dd:c7:
         14:6b:ea:9d:c7:44:03:0a:7b:9c:15:85:8a:e1:65:02:bb:4e:
         2a:69:53:49:17:a4:91:21:ff:9f:85:dd:88:c8:61:45:21:ef:
         cc:75:f9:63:66:09:76:ef:55:ed:54:29:5e:85:69:97:d7:42:
         41:a0:d5:7f:9f:4a:44:d0:aa:25:c6:47:92:b5:de:b8:f0:fb:
         9a:49:41:7a:3a:38:36:49:a1:26:18:89:d8:ef:67:6a:8e:d7:
         3c:3a:94:66:3b:43:57:f1:89:f2:6a:b9:a1:54:02:31:99:13:
         fa:4c:9f:6a:ac:d8:cf:f2:ea:0b:8b:20:c7:9c:48:78:21:44:
         d3:86:e0:ed:a2:3b:76:cc:cf:c4:3a:60:98:43:b5:20:ed:ca:
         4a:70:2f:c3:9d:83:eb:9c:21:f9:a5:e9:4e:6b:0e:38:2c:22:
         0a:a6:18:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:12 2026 by rpki-client