Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
File:                     GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft (raw, json)
Hash identifier:          oA1f+LUskhk8xeLIfvosn+BOYwAjdyv1jccWO4Kl3eY=
Subject key identifier:   AD:8D:0D:67:76:F2:3E:51:1A:94:B8:6F:50:56:A4:D6:53:B8:16:B3
Authority key identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A
Certificate issuer:       /CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
Certificate serial:       019CAC7E19C145D1F027F959765CF67B77E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
Manifest number:          0663
Signing time:             Mon 02 Mar 2026 03:01:11 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:11 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:11 +0000
Files and hashes:         1: GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl (hash: WhFI5J/Vi9p5S/M2ZbRM1lq8U7ZIFRlYXb6yLBem5xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:19:c1:45:d1:f0:27:f9:59:76:5c:f6:7b:77:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
        Validity
            Not Before: Mar  2 03:01:11 2026 GMT
            Not After : Mar  3 03:01:11 2026 GMT
        Subject: CN=ad8d0d6776f23e511a94b86f5056a4d653b816b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:64:dd:07:a5:23:37:dd:cc:ab:e9:61:d2:
                    17:e3:6c:79:4f:33:a2:1f:ff:45:9a:1a:ce:48:0d:
                    87:33:cf:cc:c5:a5:2a:4e:e2:7c:da:02:58:bf:f4:
                    9c:38:b2:dc:3d:6b:22:88:03:4c:58:9c:bd:6f:49:
                    00:3b:b6:d6:a8:33:ce:f2:b4:6f:8b:58:19:5f:55:
                    f1:83:ba:15:87:05:f1:c6:15:c5:0c:7b:29:d4:f2:
                    84:b8:fe:73:92:02:06:f4:b1:68:ac:27:8d:73:29:
                    d7:22:e2:d4:2a:c9:4a:b0:56:ce:91:cb:a9:b5:eb:
                    0b:c0:9e:2c:5d:d8:58:48:12:41:ee:9d:13:9c:26:
                    3e:4d:dc:2f:d2:9d:da:0c:db:8e:ac:f1:1b:12:1b:
                    ed:49:f7:7d:28:2f:54:39:1b:a1:71:be:05:73:77:
                    ad:9e:33:69:33:d5:1e:da:28:01:6f:b0:da:1e:f6:
                    68:ba:44:f0:69:71:eb:1f:4c:65:2f:3e:30:5f:83:
                    5b:39:f0:e5:1d:cd:21:22:9f:ae:43:8c:1a:71:2e:
                    a4:83:c5:30:d8:af:a7:1e:22:88:bf:76:52:67:2b:
                    bf:0a:4a:d1:e7:7c:8b:03:0a:4b:12:01:c3:0e:6d:
                    19:22:3f:3e:85:b5:65:a5:44:f3:87:0d:e3:69:7f:
                    98:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8D:0D:67:76:F2:3E:51:1A:94:B8:6F:50:56:A4:D6:53:B8:16:B3
            X509v3 Authority Key Identifier:
                keyid:19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:cb:b2:b7:72:c1:29:c8:ad:88:25:7a:53:38:63:5f:ba:01:
         e9:4d:00:44:62:a2:6a:4a:13:44:2d:47:14:96:22:f7:9b:45:
         59:91:ed:07:3b:c1:0a:c1:b3:1e:62:32:95:ad:8a:2b:f0:86:
         ee:0b:b1:53:80:c4:7d:10:4d:48:d1:25:f9:bb:4c:30:5e:32:
         53:9f:ba:80:f7:61:d3:b0:0b:c4:c1:13:ab:7f:03:d1:64:1f:
         1a:d5:e5:4e:86:44:91:39:86:b7:c9:48:34:25:57:5b:88:11:
         46:33:9a:63:e3:da:e8:49:ac:d0:d1:24:56:c4:55:fa:2d:38:
         ef:c3:6c:3a:f8:35:4d:ef:53:07:bc:94:27:f5:62:15:9c:05:
         3e:51:5e:65:cf:02:52:c6:2f:74:f6:1f:f0:d2:60:02:0c:37:
         f3:13:f9:ce:cb:5d:02:3b:fa:22:9f:14:e4:d1:6b:32:d5:bf:
         28:8b:d0:89:39:a4:f4:fa:e1:51:2b:d6:c4:65:03:5b:1e:33:
         c9:76:69:20:df:5a:d4:64:dd:6c:1c:f8:05:40:43:66:a0:de:
         c1:dd:49:e6:33:f2:26:cd:ef:6a:8c:99:df:22:8d:21:96:fa:
         8d:80:a9:7a:bf:fd:e0:20:88:0b:3d:82:e2:a9:64:86:98:e4:
         de:69:87:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:49 2026 by rpki-client