Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
File:                     GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft (raw, json)
Hash identifier:          8rAajxhpWtKCYdzfhKkd3/qSRVxAykchziDdldj4M1g=
Subject key identifier:   28:F1:DC:B1:51:B2:C1:47:20:2D:B9:EA:A4:EF:C7:07:14:03:26:3B
Authority key identifier: 19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C
Certificate issuer:       /CN=1954e32570bbfb9af11c2381e81c797c2f40087c
Certificate serial:       019D3909C46F3F947012EDC288A8737AF0AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
Manifest number:          1629
Signing time:             Sun 29 Mar 2026 10:00:34 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:34 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:34 +0000
Files and hashes:         1: 2-D2-rHW0UIzbvcEd6pGsT2RuDs.roa (hash: 84KNwiWzV+MMBwVN2Y5/SzTCA1WubeFW0cIC9K7nDqI=)
                          2: GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl (hash: N8d2jIzcyHPfFu4FzhMldYQHSZrVGo4rqFJNyjifXoY=)
                          3: e6DifeT6RtDWYOqt7WpZKVdgD4s.roa (hash: i9svsXFfDpE9QAUeELGmU1bul00M5b1EL+ypKkGNAdY=)
                          4: gaNunOTwvUuhFdwzla5IoZWHNQc.roa (hash: /xURODuTkS8gAUgCnYs/+ezO6kcHL3XcZ/PxRnhkINI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:c4:6f:3f:94:70:12:ed:c2:88:a8:73:7a:f0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1954e32570bbfb9af11c2381e81c797c2f40087c
        Validity
            Not Before: Mar 29 10:00:34 2026 GMT
            Not After : Mar 30 10:00:34 2026 GMT
        Subject: CN=28f1dcb151b2c147202db9eaa4efc7071403263b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f1:51:2f:3a:45:ed:ea:3e:30:05:ac:b8:f8:
                    20:66:a4:ac:39:21:58:6d:9d:f2:ea:90:f8:60:fb:
                    95:43:0f:a1:85:36:7b:bf:ee:b0:ae:6d:74:cf:97:
                    5e:44:a2:7d:12:a1:ce:27:43:2b:66:f4:d1:4d:52:
                    d5:68:ef:56:97:0a:96:93:6b:04:f7:e2:10:02:9c:
                    8d:5e:b0:7a:ef:3e:b1:99:5e:af:e3:c8:54:87:61:
                    9b:c1:b1:e5:de:18:27:d5:51:cb:a9:1b:1a:01:80:
                    e6:54:a6:dc:a4:72:76:e7:c4:5d:0a:d0:a6:81:7f:
                    74:5d:1a:dd:3e:f7:34:d4:b9:57:22:32:82:f6:f7:
                    b7:7b:0b:6d:10:de:8f:8b:85:8f:28:12:0b:1d:48:
                    19:93:b4:30:3a:c5:0e:69:68:f1:e4:68:a7:78:46:
                    6b:4f:7f:9f:a8:fd:97:05:da:98:5e:56:ff:f3:48:
                    db:1b:54:12:7e:69:ba:47:6b:61:b4:c2:43:f0:a3:
                    e0:b9:7f:97:26:e7:5b:46:3a:b2:9f:e3:43:d8:e1:
                    9b:2b:c3:9f:7f:56:11:f6:5c:6f:66:7b:ba:f5:79:
                    62:c6:db:4c:8b:85:79:e6:5a:3f:c3:c2:31:d3:cd:
                    6d:e8:dd:47:d1:87:1f:ce:64:41:46:b3:6e:67:5f:
                    6c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F1:DC:B1:51:B2:C1:47:20:2D:B9:EA:A4:EF:C7:07:14:03:26:3B
            X509v3 Authority Key Identifier:
                keyid:19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:40:8f:1d:cc:2f:28:fa:14:1a:87:07:bf:e3:13:dd:92:2c:
         a0:f9:ba:33:16:39:55:2f:f9:19:f9:e0:fc:91:e4:48:1d:21:
         e4:46:3f:bd:f9:b5:de:e6:3e:6b:96:12:7d:91:cb:0b:16:a0:
         cd:a4:ee:d8:53:f9:1c:07:a7:df:de:ba:58:01:e4:75:08:e1:
         64:8d:8e:2f:13:8c:9a:ba:91:07:bf:92:8b:1d:0a:c5:b4:da:
         be:79:b0:fb:db:78:0b:45:7d:28:88:c9:6b:14:21:99:1c:88:
         ec:9f:53:c3:74:fe:d5:49:66:1b:f4:20:da:9b:3f:40:69:2f:
         db:ba:4c:23:53:ed:a7:fc:73:82:2d:2c:70:92:22:60:a1:c3:
         ca:25:cb:66:ac:48:87:e2:f4:e4:26:aa:5d:5e:2a:ed:e2:32:
         48:e9:3d:52:5b:c1:8c:c2:b7:aa:81:50:83:cd:6f:75:c9:a6:
         77:25:30:1e:a8:b0:22:94:aa:5e:43:ef:8a:91:e2:53:f9:9e:
         04:4e:4c:e3:3a:4f:b7:a7:e8:77:e3:98:c1:08:b9:f2:62:5e:
         8f:ba:14:85:64:85:bb:6a:ed:18:f7:36:3d:17:a0:0b:2a:a1:
         d3:84:70:ad:4b:86:0c:c7:eb:f3:dd:7a:7f:21:7d:61:ff:f4:
         e8:3c:17:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CcRvP5RwEu3CiKhzevCrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NTRlMzI1NzBiYmZiOWFmMTFjMjM4MWU4MWM3OTdjMmY0
MDA4N2MwHhcNMjYwMzI5MTAwMDM0WhcNMjYwMzMwMTAwMDM0WjAzMTEwLwYDVQQD
EygyOGYxZGNiMTUxYjJjMTQ3MjAyZGI5ZWFhNGVmYzcwNzE0MDMyNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fFRLzpF7eo+MAWsuPggZqSsOSFY
bZ3y6pD4YPuVQw+hhTZ7v+6wrm10z5deRKJ9EqHOJ0MrZvTRTVLVaO9WlwqWk2sE
9+IQApyNXrB67z6xmV6v48hUh2GbwbHl3hgn1VHLqRsaAYDmVKbcpHJ258RdCtCm
gX90XRrdPvc01LlXIjKC9ve3ewttEN6Pi4WPKBILHUgZk7QwOsUOaWjx5GineEZr
T3+fqP2XBdqYXlb/80jbG1QSfmm6R2thtMJD8KPguX+XJudbRjqyn+ND2OGbK8Of
f1YR9lxvZnu69XlixttMi4V55lo/w8Ix081t6N1H0YcfzmRBRrNuZ19spQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjx3LFRssFHIC256qTvxwcUAyY7MB8GA1UdIwQY
MBaAFBlU4yVwu/ua8RwjgegceXwvQAh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ZUakpYQzctNXJ4SENPQjZCeDVmQzlBQ0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81YzdjN2QtNGQyZS00ODNjLTg5Y2Qt
MjY4MTZjYTkyY2EwLzEvR1ZUakpYQzctNXJ4SENPQjZCeDVmQzlBQ0h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81YzdjN2QtNGQyZS00ODNjLTg5Y2QtMjY4MTZjYTkyY2Ew
LzEvR1ZUakpYQzctNXJ4SENPQjZCeDVmQzlBQ0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUCPHcwv
KPoUGocHv+MT3ZIsoPm6MxY5VS/5Gfng/JHkSB0h5EY/vfm13uY+a5YSfZHLCxag
zaTu2FP5HAen3966WAHkdQjhZI2OLxOMmrqRB7+Six0KxbTavnmw+9t4C0V9KIjJ
axQhmRyI7J9Tw3T+1UlmG/Qg2ps/QGkv27pMI1Ptp/xzgi0scJIiYKHDyiXLZqxI
h+L05CaqXV4q7eIySOk9UlvBjMK3qoFQg81vdcmmdyUwHqiwIpSqXkPvipHiU/me
BE5M4zpPt6fod+OYwQi58mJej7oUhWSFu2rtGPc2PRegCyqh04RwrUuGDMfr8916
fyF9Yf/06DwX0A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:21 2026 by rpki-client