Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
File:                     gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft (raw, json)
Hash identifier:          +mk2iM11HMt/yq5rG8oEUiWvBtR0Q0RVKnyg7ERia+Y=
Subject key identifier:   73:5B:B5:4E:BB:D8:B3:B6:25:DA:A3:29:17:C7:21:02:5C:98:AD:3F
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Certificate issuer:       /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial:       01A0DACD4AF905D3E3ACC693CF16CF4415BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
Manifest number:          122D
Signing time:             Fri 25 Sep 2026 23:01:22 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:22 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:22 +0000
Files and hashes:         1: AOFzHIFEP91V8Omac3aKie9xki8.roa (hash: HMkFQ86ieg8/vv84gq6sItk0FTIJYyGV0fWrEdqsQ4o=)
                          2: COXiBfifc_qmKtRo5iliPytbk6Y.roa (hash: Yk5Ow5nOsEoU8dsAMXQclepMDy3OLtvSY8ZeR+T0oyI=)
                          3: CzK0ougq6DriQml9weFMesSYYgM.roa (hash: tRLuwh0Bv5JNCdg32ICwjGupdf04tX4gLT0oELFtUjQ=)
                          4: gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl (hash: tgOs0DZMx5ANWJBOzJCxHAsEoMFz3falkzr5h7gZDVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:4a:f9:05:d3:e3:ac:c6:93:cf:16:cf:44:15:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
        Validity
            Not Before: Sep 25 23:01:22 2026 GMT
            Not After : Sep 26 23:01:22 2026 GMT
        Subject: CN=735bb54ebbd8b3b625daa32917c721025c98ad3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:21:34:43:ae:e3:5f:dd:6b:c5:a9:e0:48:b6:
                    af:13:b6:b9:00:6b:64:b2:9d:0f:63:2e:f2:40:2c:
                    18:47:66:33:0a:a4:04:20:74:9d:3d:43:7f:15:a8:
                    a3:8a:d2:d9:ef:fd:cc:4c:79:13:ab:4e:55:59:31:
                    e9:ce:68:62:76:3c:1a:f0:04:fb:d7:bc:ca:ba:3a:
                    f3:25:41:0d:f0:dc:d0:32:95:63:2a:1a:3b:16:cc:
                    4b:47:9c:af:43:5a:5a:51:df:8c:c6:94:4e:9e:e9:
                    80:df:f0:bc:94:b6:de:53:5f:bc:1a:3b:95:e5:11:
                    b9:6a:ff:f9:c6:3c:ac:4d:fc:a0:eb:63:6b:9e:49:
                    45:8f:89:3a:59:2a:24:6b:af:c6:d2:e3:f0:47:a6:
                    f9:8d:d2:8b:a8:6a:7b:fd:5b:43:2a:4f:9f:78:71:
                    80:03:6b:78:5a:95:eb:1a:85:53:66:46:e1:87:13:
                    eb:94:9f:a3:df:36:8b:2c:74:8c:b5:36:26:85:50:
                    5e:ac:04:2e:8a:3c:cd:8a:23:18:37:fa:6a:64:40:
                    20:72:60:15:8d:75:fd:ae:f7:c8:f2:cf:ae:fd:8b:
                    40:4a:83:9a:eb:bf:c8:6a:63:e4:da:f0:45:19:71:
                    1d:c0:2e:7f:3d:2f:46:1c:ae:3f:a4:7f:6a:ff:4e:
                    cc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5B:B5:4E:BB:D8:B3:B6:25:DA:A3:29:17:C7:21:02:5C:98:AD:3F
            X509v3 Authority Key Identifier:
                keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ff:fb:c4:7a:4a:52:63:4d:d6:fb:f6:d0:b4:c1:15:1f:e5:
         48:55:13:1b:26:ac:91:ab:52:d6:6b:c0:1e:79:e4:12:53:33:
         9b:51:a6:4d:7e:88:f3:b9:44:6d:9d:c4:f9:f5:88:74:58:79:
         07:40:7a:cc:4e:3f:af:b4:ee:be:3c:91:a1:50:52:ef:84:4c:
         0b:4f:a4:41:9d:12:ab:c8:a7:af:a9:87:87:c6:6c:b6:b0:1d:
         45:4e:96:e1:16:17:43:1f:5e:e3:a9:fd:57:b5:f4:86:bb:ec:
         71:44:5c:a3:61:b7:af:7e:ca:51:c2:8f:32:e1:9b:86:c3:12:
         7c:70:6f:d2:6f:18:35:cd:ca:8e:81:4c:c4:9a:e9:7f:57:c5:
         ec:5d:b2:dd:03:3c:85:60:cb:6e:60:c7:db:e4:a4:1c:1f:5b:
         bf:18:50:8d:6c:8b:86:d9:52:c4:3f:82:11:7e:53:74:eb:8c:
         0f:0f:88:ed:35:d3:18:29:52:73:74:70:0c:eb:ef:d3:93:a4:
         70:ef:10:67:39:b3:0a:9a:bd:01:a2:03:7c:fd:b4:16:bd:d4:
         a9:93:43:1a:df:d8:c7:a0:15:f9:24:b8:a4:6b:e2:e7:69:81:
         66:90:ef:58:4a:6a:46:61:c7:39:85:86:81:fc:1d:34:84:4b:
         7b:ea:3c:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazUr5BdPjrMaTzxbPRBW8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZDdmZTczMTJlZmI0MmJkOGQxZWNkODJhYzc2MTkxZWEy
NmMzNTYwHhcNMjYwOTI1MjMwMTIyWhcNMjYwOTI2MjMwMTIyWjAzMTEwLwYDVQQD
Eyg3MzViYjU0ZWJiZDhiM2I2MjVkYWEzMjkxN2M3MjEwMjVjOThhZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CE0Q67jX91rxangSLavE7a5AGtk
sp0PYy7yQCwYR2YzCqQEIHSdPUN/FaijitLZ7/3MTHkTq05VWTHpzmhidjwa8AT7
17zKujrzJUEN8NzQMpVjKho7FsxLR5yvQ1paUd+MxpROnumA3/C8lLbeU1+8GjuV
5RG5av/5xjysTfyg62NrnklFj4k6WSoka6/G0uPwR6b5jdKLqGp7/VtDKk+feHGA
A2t4WpXrGoVTZkbhhxPrlJ+j3zaLLHSMtTYmhVBerAQuijzNiiMYN/pqZEAgcmAV
jXX9rvfI8s+u/YtASoOa67/IamPk2vBFGXEdwC5/PS9GHK4/pH9q/07MbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNbtU672LO2JdqjKRfHIQJcmK0/MB8GA1UdIwQY
MBaAFILX/nMS77Qr2NHs2CrHYZHqJsNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYt
MzdiMjFiYWIzYjAwLzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYtMzdiMjFiYWIzYjAw
LzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADf/7xHpK
UmNN1vv20LTBFR/lSFUTGyaskatS1mvAHnnkElMzm1GmTX6I87lEbZ3E+fWIdFh5
B0B6zE4/r7TuvjyRoVBS74RMC0+kQZ0Sq8inr6mHh8ZstrAdRU6W4RYXQx9e46n9
V7X0hrvscURco2G3r37KUcKPMuGbhsMSfHBv0m8YNc3KjoFMxJrpf1fF7F2y3QM8
hWDLbmDH2+SkHB9bvxhQjWyLhtlSxD+CEX5TdOuMDw+I7TXTGClSc3RwDOvv05Ok
cO8QZzmzCpq9AaIDfP20Fr3UqZNDGt/Yx6AV+SS4pGvi52mBZpDvWEpqRmHHOYWG
gfwdNIRLe+o8Qg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:23:44 2026 by rpki-client