Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
File:                     GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json)
Hash identifier:          rWf9xuY+JuE+JAnLZG15Fn5FF31W800oEDNUFwF4PeY=
Subject key identifier:   7E:7C:E2:A5:64:84:CD:E4:71:74:D3:D8:6E:19:8A:F0:CD:D7:E8:05
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       019CAC7E60AC6AB679881CA40CF5DD6A1546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
Manifest number:          1984
Signing time:             Mon 02 Mar 2026 03:01:29 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:29 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:29 +0000
Files and hashes:         1: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: O3dL25x47V6pNgDMt9z7U5eNVOEa/XkPg7Id13OLxnc=)
                          2: O4IU7iPNzu2A0vwW8vK2sWpcBEY.roa (hash: 5KKl9g7AymUe6yQRBzgksD9k/xpn1hkBb8CCzOtRLBo=)
                          3: UZPdwTIQfWKOnGJwcTjWUkEQf5c.roa (hash: JrK8JTJISVqZqxkS99JHhNEb/sltN6+rvR3A7dFrhWM=)
                          4: dLjnFTlFpfCvylY5VFvGtb6T-ls.roa (hash: GidS3hmJgwPvzs5DcRNU9aa8nAG2UCNhoLYYDw4AaRw=)
                          5: fWJsYVgQL5CmKB9LVnueb5k5Zmo.roa (hash: bPkpgWGDJi90Zjbu3ytyLe5FiLyyElxalkB8o9TUe7w=)
                          6: oW_FIcyEUkX61KE2IHd2ICPcwP4.roa (hash: HBj5S2pG7gcpSo5gnpuf2s0t9RQaygJDmBwJYZXDb5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:60:ac:6a:b6:79:88:1c:a4:0c:f5:dd:6a:15:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: Mar  2 03:01:29 2026 GMT
            Not After : Mar  3 03:01:29 2026 GMT
        Subject: CN=7e7ce2a56484cde47174d3d86e198af0cdd7e805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:01:bb:23:48:c6:ad:65:35:89:54:a1:c5:
                    3c:f6:a3:53:63:51:3a:19:4d:b9:cc:ba:96:d3:8e:
                    f1:de:42:0c:26:32:be:e0:df:34:b0:56:9f:a5:fa:
                    20:c1:95:86:1e:11:e4:ec:ff:fc:df:3d:62:f8:84:
                    35:49:76:c2:49:98:d4:81:d4:6a:80:af:74:67:a1:
                    39:91:f1:aa:a5:11:de:75:47:59:4a:d7:1a:33:c8:
                    1a:69:ca:7c:ac:42:3c:80:16:0a:c5:1e:01:38:a1:
                    1a:0a:ed:d5:89:f0:38:50:76:ef:20:89:45:d6:c1:
                    04:33:45:c6:36:13:1e:9c:39:3a:1f:94:7b:60:8e:
                    a9:8a:da:4c:84:a8:16:46:c7:74:55:a9:39:7b:26:
                    a8:81:19:5f:22:f4:37:99:35:b8:55:5f:95:fb:9b:
                    e6:ab:ef:b2:82:4a:13:06:d4:78:35:f3:23:c4:c8:
                    2b:11:25:31:bb:b2:0c:15:11:41:ff:61:41:6b:95:
                    b0:c5:23:cb:85:f3:b8:f8:e3:30:18:8e:e0:d5:42:
                    6b:b1:19:1f:61:7d:54:3d:a8:37:61:94:2f:0a:91:
                    8f:47:ba:27:cb:51:1e:21:cd:a6:f2:d6:f6:d1:77:
                    a3:8a:87:bd:63:84:6b:d3:d6:23:03:94:ed:81:de:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7C:E2:A5:64:84:CD:E4:71:74:D3:D8:6E:19:8A:F0:CD:D7:E8:05
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4a:ce:b0:f7:e9:20:2f:a7:45:7a:b0:22:0d:3a:dc:bd:b8:
         da:a1:f6:7b:cc:98:38:a1:d4:5c:15:08:a3:67:d6:37:d0:e4:
         00:74:67:72:23:7d:dc:9e:bd:d9:a6:bb:65:84:fe:45:8a:e8:
         23:73:96:fe:45:d7:eb:b2:66:98:be:ab:5b:42:be:f1:a1:15:
         10:f8:10:64:8f:14:87:0b:b7:b0:2c:7a:4f:72:ce:36:bf:c1:
         cc:d6:d8:bb:30:2b:92:89:03:c5:b9:e1:01:4a:a1:d0:ee:ae:
         41:53:7d:40:ca:16:c3:83:a2:af:61:4c:5e:11:fe:b4:6f:63:
         75:0b:f3:da:d7:bc:7a:4e:87:17:2f:fd:8e:60:e6:6d:ad:cc:
         55:f2:9a:36:ab:98:14:05:98:bf:b5:43:f5:aa:28:27:f3:ab:
         74:c7:6e:80:29:b3:1c:79:06:d9:07:90:0b:73:d3:ac:72:53:
         3a:7f:8a:6f:32:a7:09:de:69:ee:eb:b8:45:ef:5d:37:93:ee:
         4c:96:ab:3e:d8:6f:c3:c6:3d:b2:08:fb:56:79:57:2e:9d:4e:
         85:10:37:a0:ad:d8:b5:59:0b:db:a0:19:2c:c1:41:2f:8a:b9:
         44:0c:8a:53:84:8c:a3:be:5e:fa:c4:1b:25:39:8b:44:a9:6a:
         f1:e2:d1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:37 2026 by rpki-client