Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
File:                     gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft (raw, json)
Hash identifier:          ang+4tGby3aGR60yncRoWi4CGsRd/HITgICjVIHsiHg=
Subject key identifier:   9D:C8:75:A4:04:F0:FC:A4:D7:24:69:74:AF:5D:02:FC:41:D0:33:DA
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Certificate issuer:       /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial:       019D39E54B0A3308455CE36B3DE07F1F5C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
Manifest number:          104C
Signing time:             Sun 29 Mar 2026 14:00:21 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:21 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:21 +0000
Files and hashes:         1: AOFzHIFEP91V8Omac3aKie9xki8.roa (hash: HMkFQ86ieg8/vv84gq6sItk0FTIJYyGV0fWrEdqsQ4o=)
                          2: COXiBfifc_qmKtRo5iliPytbk6Y.roa (hash: Yk5Ow5nOsEoU8dsAMXQclepMDy3OLtvSY8ZeR+T0oyI=)
                          3: CzK0ougq6DriQml9weFMesSYYgM.roa (hash: tRLuwh0Bv5JNCdg32ICwjGupdf04tX4gLT0oELFtUjQ=)
                          4: gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl (hash: 8wKqe64ieuJEQW6F6vav6YkGcdRbc3xP1qb1CyiyhKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:4b:0a:33:08:45:5c:e3:6b:3d:e0:7f:1f:5c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
        Validity
            Not Before: Mar 29 14:00:21 2026 GMT
            Not After : Mar 30 14:00:21 2026 GMT
        Subject: CN=9dc875a404f0fca4d7246974af5d02fc41d033da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:88:33:b1:4e:2c:4e:21:29:c8:ae:cb:45:
                    91:07:26:ad:1c:5d:12:e7:19:67:62:52:a4:80:ae:
                    4c:f2:3d:09:84:0b:36:34:72:18:b1:78:97:02:4a:
                    83:ac:f1:86:1c:f9:33:49:e0:ac:36:5e:bf:52:01:
                    a2:d2:97:b8:8c:76:b7:db:7e:1c:b1:43:55:af:a4:
                    8a:eb:4a:5b:ec:4b:42:ea:84:05:65:fa:85:43:0b:
                    60:93:3f:21:f0:b1:97:de:5c:7f:8a:0b:06:98:2c:
                    dd:9d:54:9f:03:0a:ab:bf:38:b6:63:7b:4c:dc:f1:
                    77:12:d1:8d:32:70:01:96:4f:0a:bd:38:5c:13:9d:
                    45:4a:57:18:28:c7:ee:5f:0f:dc:c7:02:f2:fc:7b:
                    47:e7:11:b6:f5:37:37:cd:25:06:48:89:a8:a0:9f:
                    7b:23:78:7e:99:99:8f:93:7e:51:cc:d1:86:e1:51:
                    d6:39:f6:b9:5f:52:ec:16:3d:1f:1e:73:10:e3:9e:
                    47:16:c3:c9:ef:14:b8:f3:54:01:a7:e3:b1:c2:a5:
                    4c:cb:30:2b:83:8e:27:92:02:af:a1:9c:b8:94:1b:
                    14:be:6d:ec:d9:39:94:2e:c4:a1:43:07:b2:c0:3d:
                    23:e5:52:96:b6:e7:5e:3d:41:75:9e:5c:28:45:01:
                    58:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C8:75:A4:04:F0:FC:A4:D7:24:69:74:AF:5D:02:FC:41:D0:33:DA
            X509v3 Authority Key Identifier:
                keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f9:c4:a0:ac:38:66:2a:fc:0b:10:27:02:f6:28:96:4a:9e:
         d9:4d:8e:e7:28:83:a0:49:ad:f1:fc:9d:85:6d:b8:27:ff:f7:
         da:b2:eb:44:9c:7d:29:ab:38:44:78:6c:cd:9f:60:7e:00:51:
         37:df:99:9a:a2:2a:e2:b3:53:b6:b0:10:7c:0b:23:dc:c6:cc:
         36:14:53:92:1b:20:8d:cc:21:08:aa:fc:0e:14:cd:9e:1b:c8:
         50:b0:df:89:ae:26:58:b2:b6:cd:78:a0:b3:46:f7:86:3e:4b:
         16:64:bc:64:b4:6b:ec:ba:81:1a:17:c0:e3:39:17:76:37:a0:
         e5:c2:06:ad:9f:75:3f:df:01:a4:c3:c4:02:37:e3:fa:b4:de:
         60:9a:0c:b3:b3:50:cd:59:9d:ed:54:4b:c8:f5:9d:44:e2:40:
         0a:43:02:b1:7d:d3:31:05:78:97:a8:ce:8b:0d:1b:74:6b:bb:
         8c:bb:c1:7e:f7:ed:71:9c:4f:88:68:ab:54:3b:2a:e8:c2:5e:
         71:4e:fa:d0:53:fd:a0:1e:b9:a7:06:f0:5f:24:de:d8:d4:a1:
         35:36:ef:dd:24:bd:47:c7:8f:08:21:e4:7a:8a:22:53:b3:92:
         a6:8a:61:fd:fe:76:63:0d:ed:e5:f7:2c:b5:7f:be:3f:df:69:
         64:63:98:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055UsKMwhFXONrPeB/H1w6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZDdmZTczMTJlZmI0MmJkOGQxZWNkODJhYzc2MTkxZWEy
NmMzNTYwHhcNMjYwMzI5MTQwMDIxWhcNMjYwMzMwMTQwMDIxWjAzMTEwLwYDVQQD
Eyg5ZGM4NzVhNDA0ZjBmY2E0ZDcyNDY5NzRhZjVkMDJmYzQxZDAzM2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzuIM7FOLE4hKciuy0WRByatHF0S
5xlnYlKkgK5M8j0JhAs2NHIYsXiXAkqDrPGGHPkzSeCsNl6/UgGi0pe4jHa3234c
sUNVr6SK60pb7EtC6oQFZfqFQwtgkz8h8LGX3lx/igsGmCzdnVSfAwqrvzi2Y3tM
3PF3EtGNMnABlk8KvThcE51FSlcYKMfuXw/cxwLy/HtH5xG29Tc3zSUGSImooJ97
I3h+mZmPk35RzNGG4VHWOfa5X1LsFj0fHnMQ455HFsPJ7xS481QBp+OxwqVMyzAr
g44nkgKvoZy4lBsUvm3s2TmULsShQweywD0j5VKWtudePUF1nlwoRQFYjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3IdaQE8Pyk1yRpdK9dAvxB0DPaMB8GA1UdIwQY
MBaAFILX/nMS77Qr2NHs2CrHYZHqJsNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYt
MzdiMjFiYWIzYjAwLzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYtMzdiMjFiYWIzYjAw
LzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfnEoKw4
Zir8CxAnAvYolkqe2U2O5yiDoEmt8fydhW24J//32rLrRJx9Kas4RHhszZ9gfgBR
N9+ZmqIq4rNTtrAQfAsj3MbMNhRTkhsgjcwhCKr8DhTNnhvIULDfia4mWLK2zXig
s0b3hj5LFmS8ZLRr7LqBGhfA4zkXdjeg5cIGrZ91P98BpMPEAjfj+rTeYJoMs7NQ
zVmd7VRLyPWdROJACkMCsX3TMQV4l6jOiw0bdGu7jLvBfvftcZxPiGirVDsq6MJe
cU760FP9oB65pwbwXyTe2NShNTbv3SS9R8ePCCHkeooiU7OSpoph/f52Yw3t5fcs
tX++P99pZGOYjw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:44 2026 by rpki-client