Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
File:                     GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json)
Hash identifier:          iHOJmnI9hHKxO7KYDE1NTeWvj8iHWyQpFy31q3+enck=
Subject key identifier:   0E:8F:0C:96:A3:55:57:3F:5A:B5:90:6C:3E:79:66:B3:60:1C:B2:05
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       01A0C1E8AFBAE214BEDC0C369016724EE053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
Manifest number:          1BBE
Signing time:             Mon 21 Sep 2026 03:00:46 +0000
Manifest this update:     Mon 21 Sep 2026 03:00:46 +0000
Manifest next update:     Tue 22 Sep 2026 03:00:46 +0000
Files and hashes:         1: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: 5d9WNAaFbSPIoA7iI22GT2gxk0mGNF9wtdqK7tshF3E=)
                          2: UZPdwTIQfWKOnGJwcTjWUkEQf5c.roa (hash: JrK8JTJISVqZqxkS99JHhNEb/sltN6+rvR3A7dFrhWM=)
                          3: fWJsYVgQL5CmKB9LVnueb5k5Zmo.roa (hash: bPkpgWGDJi90Zjbu3ytyLe5FiLyyElxalkB8o9TUe7w=)
                          4: loDNC0l1ads-LBfYI_HWd0Nhilc.roa (hash: pWYuRLdjB0f+a5kMuELmhf9BqV0xwEKHvXeugNlAju8=)
                          5: oW_FIcyEUkX61KE2IHd2ICPcwP4.roa (hash: HBj5S2pG7gcpSo5gnpuf2s0t9RQaygJDmBwJYZXDb5g=)
                          6: wb36lNKAcErzkjLG_Y-kXL6SS2o.roa (hash: ICYJvo7IAMoKoeIt39KnYwtSzq94Y+c7SrUdc6RmYlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:e8:af:ba:e2:14:be:dc:0c:36:90:16:72:4e:e0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: Sep 21 03:00:46 2026 GMT
            Not After : Sep 22 03:00:46 2026 GMT
        Subject: CN=0e8f0c96a355573f5ab5906c3e7966b3601cb205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d3:48:e1:41:96:51:ef:1b:61:5d:7d:7c:d2:
                    bf:d9:1b:09:83:48:58:d5:05:4d:1f:38:13:66:80:
                    82:52:40:3b:ab:cd:a9:1e:38:a7:c2:a3:a3:52:cf:
                    23:6a:53:04:ed:02:cb:79:7d:3b:67:64:3f:1e:2a:
                    67:8a:05:c3:4b:fd:37:19:4b:4d:c5:35:d5:ec:cc:
                    09:5b:38:05:29:c7:80:aa:7a:0d:a2:55:f5:e9:ec:
                    c9:33:63:83:51:c2:92:e7:49:c5:90:7d:34:f0:5a:
                    dd:9f:ee:4d:da:77:cc:80:b4:88:23:ff:4c:c1:82:
                    ef:ff:14:f3:3a:ce:9a:d3:2f:80:1f:3f:4b:be:a2:
                    69:a7:6a:25:86:f3:81:17:fb:b1:76:46:f3:71:5f:
                    51:da:2b:42:28:11:66:aa:20:fb:09:ea:4b:60:c1:
                    a4:1c:7e:aa:b9:2e:4f:55:11:3b:84:85:72:61:5b:
                    dc:25:82:be:9e:7e:f0:25:ef:47:7b:f4:84:23:ea:
                    e8:66:b1:19:04:3a:a8:28:e5:95:8a:0f:e0:c4:8c:
                    a8:92:39:e9:b4:64:5d:17:44:b2:13:a5:1f:75:28:
                    a0:a5:a2:60:65:90:86:d3:a1:7b:38:ea:32:c9:fb:
                    bc:e6:f0:66:f1:9d:11:c6:10:e7:63:07:a6:7f:bc:
                    e0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8F:0C:96:A3:55:57:3F:5A:B5:90:6C:3E:79:66:B3:60:1C:B2:05
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e5:0d:e6:39:fc:e7:f0:fb:6b:1e:6c:09:18:c1:b7:e9:cb:
         14:1e:7a:3c:cf:a9:c7:3a:3f:0d:f4:06:9f:71:77:b8:8c:aa:
         82:33:b3:d7:c1:d0:63:90:36:54:5e:63:b1:9d:a7:21:d1:58:
         6a:a5:f0:7c:07:10:5b:4c:77:ea:c6:b8:27:44:b6:0a:ee:d6:
         4c:66:44:10:2c:cc:73:24:ab:1b:47:4c:eb:85:ba:6b:50:15:
         89:01:d7:33:ae:00:7a:be:9a:f3:27:91:9d:e6:62:6b:0d:da:
         67:6f:3a:af:9f:1d:18:98:7c:f5:7a:a2:36:04:15:d3:e8:0b:
         ee:b3:47:bc:2e:41:41:bd:22:bb:c8:6a:9d:df:31:12:c8:af:
         96:23:83:56:5a:e2:ac:84:00:60:eb:dc:2b:1e:43:ad:f5:9b:
         f3:4a:1a:fb:d6:54:9a:f6:20:70:cb:02:d4:f1:52:2e:8f:69:
         5a:e1:ee:bf:19:e4:f1:88:44:1a:c2:bf:61:72:74:b4:9b:2b:
         ca:b3:62:b2:62:b6:c8:82:88:86:dd:03:de:36:3a:68:06:37:
         e4:3f:df:a4:69:32:8e:45:d2:27:3f:eb:01:f8:0d:26:c2:da:
         4d:a2:28:67:fb:d3:70:68:aa:f9:6c:ee:f9:cc:db:30:23:5f:
         83:4f:67:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:13:33 2026 by rpki-client