Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
File:                     GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft (raw, json)
Hash identifier:          xCuef457VDAQBYVM4s3FtK5GCYEIVaW4bxlCbuMCN34=
Subject key identifier:   E0:39:61:C6:44:BD:3B:45:51:07:F4:4B:CC:F9:BB:70:D1:E2:C5:29
Authority key identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A
Certificate issuer:       /CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
Certificate serial:       019D378940BD45D0D23A00CD373CECACE59E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
Manifest number:          06AB
Signing time:             Sun 29 Mar 2026 03:00:35 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:35 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:35 +0000
Files and hashes:         1: GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl (hash: mvSWHYmu9+u2ewO/DTXEFmIq24XAycD2ZFlj+jLvLos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:40:bd:45:d0:d2:3a:00:cd:37:3c:ec:ac:e5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
        Validity
            Not Before: Mar 29 03:00:35 2026 GMT
            Not After : Mar 30 03:00:35 2026 GMT
        Subject: CN=e03961c644bd3b455107f44bccf9bb70d1e2c529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:83:c3:a8:49:06:f8:27:f8:01:8f:b3:de:
                    d8:01:73:27:db:68:69:3d:b7:e4:9f:2a:b2:d3:38:
                    23:68:bf:85:3c:08:e4:b9:75:fc:fe:ef:20:d2:29:
                    2b:87:b4:62:8d:e8:fc:62:e6:9e:2f:41:36:45:ba:
                    74:d9:5d:23:f3:a6:f5:66:79:9e:25:ed:7e:32:a8:
                    51:8c:98:80:36:c0:d0:2c:3a:ba:0e:f9:28:28:b8:
                    6a:33:7d:0c:0c:b1:a9:43:7a:59:06:3f:6b:3e:de:
                    4a:24:db:00:9c:ae:24:5b:4e:d2:d4:37:e5:22:45:
                    64:54:ad:c2:f3:1b:cd:7d:b7:39:95:f6:6a:69:39:
                    84:dc:03:cd:51:47:47:3c:30:ae:af:03:c5:dd:56:
                    84:e6:64:61:1c:f0:e7:84:6d:d1:cd:db:e6:78:2a:
                    64:ca:2b:cf:be:da:ce:6f:cf:a0:27:e0:9d:e8:b7:
                    c5:41:33:5c:fd:7c:f8:c9:27:60:4c:36:ef:16:38:
                    59:23:f0:b4:4b:2e:bd:8d:2f:54:d8:e2:80:dc:a0:
                    0c:ef:c2:2f:30:6b:c0:f4:67:90:b4:47:d0:ad:96:
                    26:d2:c9:82:70:39:0d:49:89:8c:a2:c8:3a:19:91:
                    15:f6:72:43:d0:b0:ee:a3:35:73:19:7c:c9:fa:72:
                    68:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:39:61:C6:44:BD:3B:45:51:07:F4:4B:CC:F9:BB:70:D1:E2:C5:29
            X509v3 Authority Key Identifier:
                keyid:19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e9:25:02:57:af:b4:b1:fe:bf:30:4c:2d:22:53:4e:dc:ad:
         8f:db:31:6f:0c:e9:9f:b7:e5:75:18:72:77:5d:48:6d:c5:67:
         97:91:77:37:1a:0d:80:a3:c3:30:a7:e4:2a:ab:ac:c9:07:07:
         13:e8:6c:01:cc:9a:a8:d9:80:91:7a:17:c1:da:0f:c9:f1:4e:
         69:f6:1b:2a:b0:57:45:46:3d:2c:80:78:80:7b:36:20:6f:6e:
         b7:95:47:99:dc:05:85:ff:5f:2d:c5:2f:d6:a3:df:7e:3b:0c:
         07:31:95:f1:f0:ea:8b:b0:ea:a6:0d:d7:2f:fb:a0:49:51:9c:
         8e:39:a0:09:00:7f:bf:23:85:c7:8c:4c:55:47:1b:4e:8d:e8:
         77:d5:c9:b2:4c:96:fe:97:8c:1d:f0:85:b1:be:b8:e5:d5:7e:
         4c:b5:d4:e7:68:04:97:16:e0:54:41:f1:c2:47:10:a3:4e:7a:
         48:bc:03:3a:bc:e1:0a:1d:bc:0b:9d:67:85:97:cc:f9:4d:00:
         ed:81:9d:41:27:79:2c:e5:13:e3:5b:cd:09:2b:a3:1f:b1:13:
         4d:d1:34:07:b6:c1:00:b8:28:9c:ed:42:4e:f3:37:05:6b:9b:
         86:c5:71:03:78:e5:1b:46:0a:8c:bb:7f:49:88:84:19:0c:ca:
         de:fa:45:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iUC9RdDSOgDNNzzsrOWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NWZhODMzMDI1MmEwN2YyNTBlNTFkOGU0NzRiYjM4ZDdk
YzNiOWEwHhcNMjYwMzI5MDMwMDM1WhcNMjYwMzMwMDMwMDM1WjAzMTEwLwYDVQQD
EyhlMDM5NjFjNjQ0YmQzYjQ1NTEwN2Y0NGJjY2Y5YmI3MGQxZTJjNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI6Dw6hJBvgn+AGPs97YAXMn22hp
Pbfknyqy0zgjaL+FPAjkuXX8/u8g0ikrh7Rijej8YuaeL0E2Rbp02V0j86b1Znme
Je1+MqhRjJiANsDQLDq6DvkoKLhqM30MDLGpQ3pZBj9rPt5KJNsAnK4kW07S1Dfl
IkVkVK3C8xvNfbc5lfZqaTmE3APNUUdHPDCurwPF3VaE5mRhHPDnhG3RzdvmeCpk
yivPvtrOb8+gJ+Cd6LfFQTNc/Xz4ySdgTDbvFjhZI/C0Sy69jS9U2OKA3KAM78Iv
MGvA9GeQtEfQrZYm0smCcDkNSYmMosg6GZEV9nJD0LDuozVzGXzJ+nJo9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOA5YcZEvTtFUQf0S8z5u3DR4sUpMB8GA1UdIwQY
MBaAFBlfqDMCUqB/JQ5R2OR0uzjX3DuaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9lOWIwZTAtZjRiNi00NmRhLWFmZjgt
YmU3MDg3ZGJmNTM2LzEvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9lOWIwZTAtZjRiNi00NmRhLWFmZjgtYmU3MDg3ZGJmNTM2
LzEvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+klAlev
tLH+vzBMLSJTTtytj9sxbwzpn7fldRhyd11IbcVnl5F3NxoNgKPDMKfkKqusyQcH
E+hsAcyaqNmAkXoXwdoPyfFOafYbKrBXRUY9LIB4gHs2IG9ut5VHmdwFhf9fLcUv
1qPffjsMBzGV8fDqi7Dqpg3XL/ugSVGcjjmgCQB/vyOFx4xMVUcbTo3od9XJskyW
/peMHfCFsb645dV+TLXU52gElxbgVEHxwkcQo056SLwDOrzhCh28C51nhZfM+U0A
7YGdQSd5LOUT41vNCSujH7ETTdE0B7bBALgonO1CTvM3BWubhsVxA3jlG0YKjLt/
SYiEGQzK3vpF7A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:14 2026 by rpki-client