Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
File:                     GvvUSIkW-uz94nr2PPmEUblnL_Y.mft (raw, json)
Hash identifier:          0vcjOjbUQaKcJpCDNaNxsFHZVQF5tx2fgZRWe55p4O4=
Subject key identifier:   09:F1:93:11:D4:1A:22:53:71:DE:59:64:9D:8A:C3:BE:1B:2C:17:09
Authority key identifier: 1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
Certificate issuer:       /CN=1afbd4488916faecfde27af63cf98451b9672ff6
Certificate serial:       019FAA505D36787EBF33D60B75E306F8A5A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
Manifest number:          017C
Signing time:             Tue 28 Jul 2026 20:00:21 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:21 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:21 +0000
Files and hashes:         1: 5mT67kFjlP1wkk9g_jI3qMhMAos.roa (hash: TtmKjHns8FuXUxAAkflnuu+59X1NLHR2HU6aq/7SgEY=)
                          2: GvvUSIkW-uz94nr2PPmEUblnL_Y.crl (hash: DYj/29R46ZjPGbN+MWL7ZCt/7mEljsCfytbux7/shd4=)
                          3: LxeehfG4ABL-Mjofqe-m1zgbRF8.roa (hash: G0fIhVP6EAMZqllSYGxKMKH7WM5clIvSUyRbvtMaMHc=)
                          4: vn4vDZF-5c0j4TjRhix9Sixf1Go.roa (hash: G0+YDc5zCnG7j4HfctLv6EO8Kbainf/ccFE5eEkLePw=)
                          5: zfEcWQPqi-VdMvuQ8qSI2Po_taM.roa (hash: jrPqy9eqPGYuqZqd/WHKMilLyac7mNSPcvUdK8y/DAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:5d:36:78:7e:bf:33:d6:0b:75:e3:06:f8:a5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afbd4488916faecfde27af63cf98451b9672ff6
        Validity
            Not Before: Jul 28 20:00:21 2026 GMT
            Not After : Jul 29 20:00:21 2026 GMT
        Subject: CN=09f19311d41a225371de59649d8ac3be1b2c1709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7a:b6:42:c3:b6:94:1c:49:5d:90:08:ab:69:
                    80:dc:e6:f2:73:9b:7f:66:40:f1:e3:13:ad:ec:44:
                    f6:8a:11:f3:6c:7d:2a:bc:88:39:d9:2e:a1:94:3d:
                    96:1f:0e:42:b6:eb:dd:37:5e:04:31:8d:1f:f9:41:
                    52:67:ad:d6:cc:e3:a6:ac:09:19:da:ea:3c:50:2c:
                    7d:92:94:85:8c:0a:01:03:04:27:3b:59:dd:3d:f6:
                    a9:3f:0d:48:2c:bc:03:5a:3e:b5:6a:52:0a:aa:77:
                    1a:25:fb:25:1c:99:c5:32:b0:6e:db:04:59:71:e5:
                    dd:2c:f4:4e:a2:ba:ed:d2:92:54:b2:77:17:30:0a:
                    d8:95:f0:fa:ca:2a:82:ea:79:98:d2:49:f9:65:41:
                    6f:87:c0:93:19:73:28:36:50:9a:d8:95:c5:49:19:
                    f7:c6:cc:4c:e6:d2:e1:e5:c5:9a:53:43:ac:ec:f3:
                    dd:b9:1c:c9:67:63:55:ec:07:c3:ca:90:b9:58:ff:
                    a5:4a:83:eb:e6:be:dc:99:f4:b1:03:9c:77:42:4b:
                    df:3b:3d:ec:d4:d2:22:2f:72:bf:43:2c:a3:ac:0a:
                    21:de:39:d3:2f:74:b2:af:cf:4a:2f:d3:65:32:d1:
                    65:50:a5:2c:83:33:ed:1f:57:00:f7:a4:c5:2c:db:
                    a4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F1:93:11:D4:1A:22:53:71:DE:59:64:9D:8A:C3:BE:1B:2C:17:09
            X509v3 Authority Key Identifier:
                keyid:1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7a:c3:6e:47:2c:05:e1:b1:22:78:08:03:82:cd:9d:39:dc:
         9e:30:2c:11:6d:62:42:1f:21:a6:64:2f:42:70:ae:06:91:2d:
         4b:02:ef:b9:63:5e:61:35:3d:09:c8:14:50:58:48:e0:34:b6:
         d4:85:a3:0c:06:1a:72:c5:3a:18:96:44:a2:90:6d:ce:fe:c3:
         b0:03:c6:04:42:cc:7e:69:16:6e:55:01:dd:48:86:9c:9e:aa:
         9d:65:64:eb:0c:2e:65:d0:69:25:ac:10:f4:e5:34:6c:1c:cf:
         32:9b:d0:3a:1b:1b:c5:c2:61:2d:df:6c:c4:0e:24:ec:e4:19:
         62:cb:8c:ae:51:27:64:fc:ed:d9:88:aa:51:2e:fd:9d:2e:03:
         20:92:ec:67:9d:0f:72:e6:fb:a9:01:f5:71:a9:06:7f:8a:63:
         3e:e9:e2:19:ed:80:7d:f5:2e:49:cf:56:1a:74:80:03:b0:43:
         61:d9:03:12:35:14:2c:17:2c:bd:8f:22:ca:ff:41:ec:d5:e4:
         7a:13:73:36:31:9c:21:29:03:68:0d:03:ea:c4:99:ea:a6:37:
         07:77:bb:c7:ad:e7:fa:0c:41:b6:b9:73:89:52:ef:73:b6:a5:
         3c:73:ff:2b:2a:24:51:64:81:73:b7:b6:c4:0c:5d:d9:71:be:
         c1:2d:1e:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUF02eH6/M9YLdeMG+KWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZmJkNDQ4ODkxNmZhZWNmZGUyN2FmNjNjZjk4NDUxYjk2
NzJmZjYwHhcNMjYwNzI4MjAwMDIxWhcNMjYwNzI5MjAwMDIxWjAzMTEwLwYDVQQD
EygwOWYxOTMxMWQ0MWEyMjUzNzFkZTU5NjQ5ZDhhYzNiZTFiMmMxNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nq2QsO2lBxJXZAIq2mA3Obyc5t/
ZkDx4xOt7ET2ihHzbH0qvIg52S6hlD2WHw5CtuvdN14EMY0f+UFSZ63WzOOmrAkZ
2uo8UCx9kpSFjAoBAwQnO1ndPfapPw1ILLwDWj61alIKqncaJfslHJnFMrBu2wRZ
ceXdLPROorrt0pJUsncXMArYlfD6yiqC6nmY0kn5ZUFvh8CTGXMoNlCa2JXFSRn3
xsxM5tLh5cWaU0Os7PPduRzJZ2NV7AfDypC5WP+lSoPr5r7cmfSxA5x3QkvfOz3s
1NIiL3K/QyyjrAoh3jnTL3Syr89KL9NlMtFlUKUsgzPtH1cA96TFLNukDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnxkxHUGiJTcd5ZZJ2Kw74bLBcJMB8GA1UdIwQY
MBaAFBr71EiJFvrs/eJ69jz5hFG5Zy/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3Z2VVNJa1ctdXo5NG5yMlBQbUVVYmxuTF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lYWE3ODctYTI0OS00ODVmLWI3NTAt
NjcwNjJmYWVmODAyLzEvR3Z2VVNJa1ctdXo5NG5yMlBQbUVVYmxuTF9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lYWE3ODctYTI0OS00ODVmLWI3NTAtNjcwNjJmYWVmODAy
LzEvR3Z2VVNJa1ctdXo5NG5yMlBQbUVVYmxuTF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3rDbkcs
BeGxIngIA4LNnTncnjAsEW1iQh8hpmQvQnCuBpEtSwLvuWNeYTU9CcgUUFhI4DS2
1IWjDAYacsU6GJZEopBtzv7DsAPGBELMfmkWblUB3UiGnJ6qnWVk6wwuZdBpJawQ
9OU0bBzPMpvQOhsbxcJhLd9sxA4k7OQZYsuMrlEnZPzt2YiqUS79nS4DIJLsZ50P
cub7qQH1cakGf4pjPuniGe2AffUuSc9WGnSAA7BDYdkDEjUULBcsvY8iyv9B7NXk
ehNzNjGcISkDaA0D6sSZ6qY3B3e7x63n+gxBtrlziVLvc7alPHP/KyokUWSBc7e2
xAxd2XG+wS0e6g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:07:09 2026 by rpki-client