Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
File:                     GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft (raw, json)
Hash identifier:          Du0W5lTAXICFKSMqyphfue0ADflIqtZnk1mkPgIUDPE=
Subject key identifier:   52:0C:33:EA:B4:92:2B:1D:10:FE:6B:F3:6F:B1:06:CD:00:BF:54:4F
Authority key identifier: 19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C
Certificate issuer:       /CN=1954e32570bbfb9af11c2381e81c797c2f40087c
Certificate serial:       019EC11245EB64CA9E0FB3F742CD088EF5A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
Manifest number:          16F4
Signing time:             Sat 13 Jun 2026 13:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:00 +0000
Files and hashes:         1: 2-D2-rHW0UIzbvcEd6pGsT2RuDs.roa (hash: 84KNwiWzV+MMBwVN2Y5/SzTCA1WubeFW0cIC9K7nDqI=)
                          2: GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl (hash: vsET/CnD7ql1tki5Zd/lU4S+f78n24LES1H6/hft7UQ=)
                          3: e6DifeT6RtDWYOqt7WpZKVdgD4s.roa (hash: i9svsXFfDpE9QAUeELGmU1bul00M5b1EL+ypKkGNAdY=)
                          4: gaNunOTwvUuhFdwzla5IoZWHNQc.roa (hash: /xURODuTkS8gAUgCnYs/+ezO6kcHL3XcZ/PxRnhkINI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:45:eb:64:ca:9e:0f:b3:f7:42:cd:08:8e:f5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1954e32570bbfb9af11c2381e81c797c2f40087c
        Validity
            Not Before: Jun 13 13:01:00 2026 GMT
            Not After : Jun 14 13:01:00 2026 GMT
        Subject: CN=520c33eab4922b1d10fe6bf36fb106cd00bf544f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:ec:af:2c:8f:cb:5c:89:82:58:75:81:b5:
                    d5:8e:9b:1b:02:71:3a:d1:8d:a6:23:34:4a:ee:9c:
                    b7:71:16:62:4a:52:9b:9a:9c:f4:84:93:31:6e:f1:
                    fc:86:d0:9b:57:b8:a4:7f:76:f1:40:e1:18:92:dd:
                    b5:69:37:c1:c1:06:6b:86:78:72:1a:ca:57:e3:5e:
                    e6:4a:96:c1:1d:64:b4:63:19:b4:30:23:b0:44:de:
                    83:23:9a:18:fc:be:51:ad:45:81:01:ed:5b:81:f3:
                    89:20:d2:9a:e4:1f:dd:b8:3a:ef:af:5c:7e:6b:f0:
                    cb:3f:57:85:e2:54:37:3f:1f:6f:95:d7:f2:75:68:
                    c5:e5:e5:56:71:ae:64:93:ac:22:68:49:c1:95:af:
                    3d:0d:82:6a:b6:2a:03:80:f1:e6:29:98:85:24:53:
                    e2:76:3c:e3:85:43:66:95:c0:f3:65:cc:60:47:74:
                    c5:96:51:eb:ec:e2:5a:99:3d:d9:60:fe:a8:12:a5:
                    41:48:0c:52:de:10:c3:25:2a:b0:47:02:10:27:f7:
                    9f:bc:68:e5:d0:9a:4c:07:95:73:2f:27:8b:0a:ba:
                    6c:5a:e1:27:c2:c3:4b:5f:0d:a8:87:73:1c:c1:4a:
                    bf:34:e1:82:f5:ad:ae:e7:0d:8e:6f:64:86:e8:b8:
                    fd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0C:33:EA:B4:92:2B:1D:10:FE:6B:F3:6F:B1:06:CD:00:BF:54:4F
            X509v3 Authority Key Identifier:
                keyid:19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:d9:b8:d5:0e:de:fe:c0:4d:58:be:18:96:e4:d4:03:4a:c3:
         47:27:01:ae:3e:62:6c:61:f6:ae:d5:85:94:65:63:05:3e:0e:
         c6:fe:21:57:58:6c:95:82:55:f6:ba:40:59:61:3d:38:be:df:
         e8:32:4a:0a:4e:d8:12:12:91:b5:a9:73:cd:ae:b8:42:92:9e:
         03:2b:3d:e4:96:e9:6e:18:f3:0f:4e:45:01:bd:af:ed:a0:b5:
         6d:71:0c:47:93:49:87:54:f0:56:1d:7d:12:ed:21:08:04:a9:
         d3:a1:05:d8:32:89:a2:ab:9b:5b:37:76:a3:22:a5:b8:e8:77:
         a7:23:52:ab:77:00:c9:d4:42:1a:48:77:62:88:22:62:89:57:
         ab:aa:b4:db:c2:78:5d:96:eb:95:44:2b:8e:41:6e:a5:cc:d8:
         ce:a1:de:63:cd:ea:68:7c:14:e4:e3:14:ac:8e:70:28:67:f3:
         8d:b5:92:f7:4f:a1:4a:15:8a:a1:3a:24:7b:5c:c1:0e:e8:48:
         14:5f:04:e8:3f:38:15:6c:e4:0f:62:a8:2c:96:f9:6a:91:95:
         8e:3f:eb:ed:fb:0a:f0:82:33:5d:35:55:39:35:16:15:81:87:
         e9:9c:da:25:07:11:0c:27:29:35:e3:02:b6:3e:dd:d2:40:02:
         4f:f2:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:08:12 2026 by rpki-client