Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
File:                     GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft (raw, json)
Hash identifier:          utxp+656M9WZ79eIht2NXt8dWz9X5Gfk2LrJ8PUv0QI=
Subject key identifier:   02:59:11:FB:0E:BD:8F:76:49:47:BF:CA:15:87:C2:5B:AA:DC:B6:5D
Authority key identifier: 19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C
Certificate issuer:       /CN=1954e32570bbfb9af11c2381e81c797c2f40087c
Certificate serial:       019E4F22025EBEFDBBC3CE1AC6B7B856DC1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
Manifest number:          16B9
Signing time:             Fri 22 May 2026 10:01:29 +0000
Manifest this update:     Fri 22 May 2026 10:01:29 +0000
Manifest next update:     Sat 23 May 2026 10:01:29 +0000
Files and hashes:         1: 2-D2-rHW0UIzbvcEd6pGsT2RuDs.roa (hash: 84KNwiWzV+MMBwVN2Y5/SzTCA1WubeFW0cIC9K7nDqI=)
                          2: GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl (hash: IPwD5jOL9zqrR6EauGjV5ABUuwa7xsjbdyhi8moRseo=)
                          3: e6DifeT6RtDWYOqt7WpZKVdgD4s.roa (hash: i9svsXFfDpE9QAUeELGmU1bul00M5b1EL+ypKkGNAdY=)
                          4: gaNunOTwvUuhFdwzla5IoZWHNQc.roa (hash: /xURODuTkS8gAUgCnYs/+ezO6kcHL3XcZ/PxRnhkINI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4f:22:02:5e:be:fd:bb:c3:ce:1a:c6:b7:b8:56:dc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1954e32570bbfb9af11c2381e81c797c2f40087c
        Validity
            Not Before: May 22 10:01:29 2026 GMT
            Not After : May 23 10:01:29 2026 GMT
        Subject: CN=025911fb0ebd8f764947bfca1587c25baadcb65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:89:c9:63:1d:0e:78:ef:70:fb:a1:7e:87:
                    f1:01:39:84:a6:c6:e3:ab:65:fc:20:60:08:24:e1:
                    d3:f0:b6:7b:c7:e7:40:79:97:92:85:22:c2:f0:e5:
                    f6:33:d6:1b:33:f5:d3:8e:2c:b7:cc:75:72:a9:0e:
                    d3:e4:5c:3d:5b:7a:bd:6b:d6:3d:1e:08:f0:79:bc:
                    35:7d:5b:b5:69:d9:f5:da:88:dc:47:02:ba:b3:32:
                    89:3e:6e:70:70:22:7e:53:c8:12:f3:e5:c5:b7:b4:
                    f9:03:e7:86:37:27:de:6f:59:df:ab:53:86:ac:93:
                    97:54:78:ec:6b:14:fa:70:c6:af:00:19:da:77:ee:
                    37:34:ae:27:8a:77:fa:55:db:38:a1:8c:da:da:c8:
                    c1:16:c5:93:36:5a:0d:79:7d:5e:2c:a2:62:6b:65:
                    50:27:c7:98:8d:c0:12:5a:bf:dc:77:73:46:48:76:
                    5e:0c:d1:12:ec:4d:10:25:ec:2a:7d:ae:ff:9f:21:
                    8b:4e:b7:db:98:b5:8e:18:a9:60:ee:a4:0a:52:47:
                    8f:1d:0a:58:55:18:7a:46:a8:cc:6d:3b:4a:56:5f:
                    18:8f:5b:88:42:29:7f:95:3a:9c:25:3d:7c:c8:33:
                    5f:81:49:a0:72:b9:aa:71:1c:d7:e5:be:95:6e:59:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:59:11:FB:0E:BD:8F:76:49:47:BF:CA:15:87:C2:5B:AA:DC:B6:5D
            X509v3 Authority Key Identifier:
                keyid:19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:88:6a:91:fe:01:fe:7b:25:5d:ef:7a:e7:b8:0f:12:9f:df:
         a5:40:09:a8:ca:2e:81:c6:b1:85:55:4e:ac:e7:e4:e2:c5:79:
         d3:73:b7:fc:32:58:b2:df:c3:3d:64:8c:41:98:85:13:fd:a5:
         67:7d:bc:6b:43:f5:ab:5d:a0:8d:dd:b1:bf:f7:18:c3:ce:ea:
         b8:87:bb:75:a3:68:ce:fe:86:c0:12:19:2f:f2:da:c8:ed:03:
         60:32:e7:4b:d7:53:6d:68:db:4f:bc:b7:30:a3:c3:fb:c1:67:
         e6:9e:4b:1b:58:05:2d:bd:93:51:f4:c0:29:1c:5b:70:9c:42:
         b3:46:36:a0:a7:15:55:8d:75:2c:a7:e7:03:7c:28:3a:bb:4d:
         5a:47:5d:28:ae:92:a3:3c:73:21:bd:18:2a:d5:dd:81:64:06:
         df:2b:c2:05:ec:38:c1:f0:d4:37:2a:d4:29:c8:49:b2:70:3a:
         40:d9:de:ec:7d:bd:13:33:c0:48:ad:09:34:00:e2:54:8d:fa:
         cb:06:47:fe:26:13:18:fb:30:12:a5:9f:41:81:53:d6:aa:e3:
         e7:2a:31:70:49:67:f6:07:16:49:4b:d7:f4:c5:0b:67:4e:6f:
         c4:8e:a2:c7:12:e9:2d:08:02:8f:8e:2b:e3:51:7d:e3:65:e1:
         74:d8:59:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5PIgJevv27w84axre4VtweMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NTRlMzI1NzBiYmZiOWFmMTFjMjM4MWU4MWM3OTdjMmY0
MDA4N2MwHhcNMjYwNTIyMTAwMTI5WhcNMjYwNTIzMTAwMTI5WjAzMTEwLwYDVQQD
EygwMjU5MTFmYjBlYmQ4Zjc2NDk0N2JmY2ExNTg3YzI1YmFhZGNiNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhuJyWMdDnjvcPuhfofxATmEpsbj
q2X8IGAIJOHT8LZ7x+dAeZeShSLC8OX2M9YbM/XTjiy3zHVyqQ7T5Fw9W3q9a9Y9
Hgjwebw1fVu1adn12ojcRwK6szKJPm5wcCJ+U8gS8+XFt7T5A+eGNyfeb1nfq1OG
rJOXVHjsaxT6cMavABnad+43NK4ninf6Vds4oYza2sjBFsWTNloNeX1eLKJia2VQ
J8eYjcASWr/cd3NGSHZeDNES7E0QJewqfa7/nyGLTrfbmLWOGKlg7qQKUkePHQpY
VRh6RqjMbTtKVl8Yj1uIQil/lTqcJT18yDNfgUmgcrmqcRzX5b6VblkwMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJZEfsOvY92SUe/yhWHwluq3LZdMB8GA1UdIwQY
MBaAFBlU4yVwu/ua8RwjgegceXwvQAh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ZUakpYQzctNXJ4SENPQjZCeDVmQzlBQ0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81YzdjN2QtNGQyZS00ODNjLTg5Y2Qt
MjY4MTZjYTkyY2EwLzEvR1ZUakpYQzctNXJ4SENPQjZCeDVmQzlBQ0h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81YzdjN2QtNGQyZS00ODNjLTg5Y2QtMjY4MTZjYTkyY2Ew
LzEvR1ZUakpYQzctNXJ4SENPQjZCeDVmQzlBQ0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANohqkf4B
/nslXe9657gPEp/fpUAJqMougcaxhVVOrOfk4sV503O3/DJYst/DPWSMQZiFE/2l
Z328a0P1q12gjd2xv/cYw87quIe7daNozv6GwBIZL/LayO0DYDLnS9dTbWjbT7y3
MKPD+8Fn5p5LG1gFLb2TUfTAKRxbcJxCs0Y2oKcVVY11LKfnA3woOrtNWkddKK6S
ozxzIb0YKtXdgWQG3yvCBew4wfDUNyrUKchJsnA6QNne7H29EzPASK0JNADiVI36
ywZH/iYTGPswEqWfQYFT1qrj5yoxcEln9gcWSUvX9MULZ05vxI6ixxLpLQgCj44r
41F942XhdNhZyg==
-----END CERTIFICATE-----
Generated at Fri May 22 15:07:30 2026 by rpki-client