Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
File:                     GBTcobly3pEWdeoi0vvNvgG4MLw.mft (raw, json)
Hash identifier:          4ilqBKmQ0YXvN59UXItPOKUhnE0neVzg7exaGTGJ8ag=
Subject key identifier:   99:BF:E9:FB:19:14:F6:5B:FC:C8:BF:3A:B4:4E:62:B1:82:51:72:71
Authority key identifier: 18:14:DC:A1:B9:72:DE:91:16:75:EA:22:D2:FB:CD:BE:01:B8:30:BC
Certificate issuer:       /CN=1814dca1b972de911675ea22d2fbcdbe01b830bc
Certificate serial:       019FA93E71C43B852200E868757082EA0309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
Manifest number:          01C2
Signing time:             Tue 28 Jul 2026 15:01:09 +0000
Manifest this update:     Tue 28 Jul 2026 15:01:09 +0000
Manifest next update:     Wed 29 Jul 2026 15:01:09 +0000
Files and hashes:         1: 78Bae7aoHTLMbMhlJrGznkqgyoo.asa (hash: pXhSIxWL8J5HQ4pm8oLjony7ZOMKZIifVDxS3yNXnWQ=)
                          2: GBTcobly3pEWdeoi0vvNvgG4MLw.crl (hash: 58om5D28lEHs4eijK02qY6NZCfHZqOmbHSkefme5rv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:71:c4:3b:85:22:00:e8:68:75:70:82:ea:03:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1814dca1b972de911675ea22d2fbcdbe01b830bc
        Validity
            Not Before: Jul 28 15:01:09 2026 GMT
            Not After : Jul 29 15:01:09 2026 GMT
        Subject: CN=99bfe9fb1914f65bfcc8bf3ab44e62b182517271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:06:92:a6:1e:fe:d1:f1:d2:27:db:c8:b1:88:
                    90:ce:a0:d0:69:f6:8d:4c:e6:6c:06:56:50:ac:d5:
                    b3:1d:92:76:c8:6f:b6:4e:60:29:29:a8:45:38:9d:
                    fd:04:86:4b:11:77:0b:df:1a:9c:14:f0:27:66:1b:
                    a0:c8:68:fa:5b:a3:f2:e2:fa:e5:be:47:ec:89:5c:
                    0c:30:ae:18:52:44:e8:52:0d:67:c9:cd:9e:ca:01:
                    e7:82:66:b3:98:c2:b9:e0:e4:bf:dd:57:37:f7:54:
                    51:74:2a:8f:94:74:c0:fe:0a:b2:1a:42:d2:dc:0d:
                    98:ab:4f:b7:14:9d:32:88:65:86:47:41:0b:a3:6b:
                    d2:0d:c6:bc:da:75:55:ae:34:05:de:c5:c8:84:cf:
                    2f:04:af:e7:51:1f:47:b4:e0:ce:ee:f3:2f:dd:0e:
                    c4:ff:11:5f:e0:b2:01:50:cc:28:1a:2f:1b:46:1e:
                    1e:dc:ab:7d:31:72:be:d8:7d:58:5c:7c:06:2f:0b:
                    ed:e3:96:a3:2c:82:44:42:22:21:87:67:7e:62:71:
                    40:30:55:d0:72:df:82:c5:03:09:f3:50:a5:b8:c0:
                    cf:e9:2c:0d:e1:f9:f8:15:28:44:75:57:84:1f:a5:
                    17:fb:16:d0:f8:7b:66:a7:dd:3a:82:b6:4b:b1:6f:
                    4a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BF:E9:FB:19:14:F6:5B:FC:C8:BF:3A:B4:4E:62:B1:82:51:72:71
            X509v3 Authority Key Identifier:
                keyid:18:14:DC:A1:B9:72:DE:91:16:75:EA:22:D2:FB:CD:BE:01:B8:30:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9e:95:c4:cc:cc:47:c7:21:a4:14:00:60:04:2c:f6:35:ba:
         a2:45:fa:1d:c1:f4:4e:6e:96:11:b7:fd:7c:13:9d:3a:de:2f:
         b4:f9:d8:98:2c:e9:1b:15:68:dc:93:f3:3f:21:0e:c8:97:66:
         2c:3b:0f:d0:48:4f:53:e2:0a:9a:f7:99:49:8d:14:7d:2f:9a:
         4f:c7:4e:f2:d3:e4:21:82:18:2e:c7:78:ca:ca:1b:5c:c5:cf:
         15:8c:cc:e6:17:fc:e1:00:6e:bf:e2:f2:95:dd:15:32:fd:86:
         ae:02:31:a1:2d:17:b6:1e:12:11:fb:36:09:69:11:dc:6a:9d:
         08:78:99:a1:c6:ad:b9:d4:7d:92:cd:70:1d:bf:55:54:c1:f7:
         b1:7b:b4:06:39:eb:9e:56:0a:21:be:c2:28:8a:28:9c:a7:02:
         f3:11:aa:a6:01:4b:7e:da:81:7c:aa:4a:3b:df:43:32:f0:a5:
         28:fc:14:b5:92:98:85:99:b0:52:45:1f:73:9e:c1:15:08:84:
         51:d6:a6:4a:f9:38:56:6d:c7:f3:10:13:74:27:65:3d:8f:02:
         e7:25:d0:27:dc:3c:11:c9:aa:80:30:4a:91:f0:62:73:00:fb:
         8e:fe:61:81:61:ac:fa:75:94:1e:7a:1d:01:d4:33:9a:3c:4d:
         87:9b:6b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:04:55 2026 by rpki-client