Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
File:                     GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json)
Hash identifier:          pbqd3i27HchEc9J4S7S6flO223dOBnPvSSiIkxO2ek8=
Subject key identifier:   9F:BE:EA:B9:74:29:CA:C6:EA:39:5A:56:29:F2:42:76:46:3C:50:27
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       019D9AABECFDC37C5BD3651A27EC8669DF82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
Manifest number:          1A07
Signing time:             Fri 17 Apr 2026 09:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:51 +0000
Files and hashes:         1: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: 4NXGtU6Me1V7J5EVNuwbmRBEJkQJ92wqaxg8stQGw1I=)
                          2: UZPdwTIQfWKOnGJwcTjWUkEQf5c.roa (hash: JrK8JTJISVqZqxkS99JHhNEb/sltN6+rvR3A7dFrhWM=)
                          3: W5dxIwjxvxhDGA4nlvY0Dy6Jtyw.roa (hash: R6zDvp2U9sN66gyg/YphHEmlr7QxU5NjkI99rfcKASQ=)
                          4: fWJsYVgQL5CmKB9LVnueb5k5Zmo.roa (hash: bPkpgWGDJi90Zjbu3ytyLe5FiLyyElxalkB8o9TUe7w=)
                          5: oW_FIcyEUkX61KE2IHd2ICPcwP4.roa (hash: HBj5S2pG7gcpSo5gnpuf2s0t9RQaygJDmBwJYZXDb5g=)
                          6: pHXR9t60WHmfhUshRm93PIZkp-E.roa (hash: GJ4w2UD+KYD4ltidgFcg0mYqerDm0a5iJtcUwTIihek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:ec:fd:c3:7c:5b:d3:65:1a:27:ec:86:69:df:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: Apr 17 09:00:51 2026 GMT
            Not After : Apr 18 09:00:51 2026 GMT
        Subject: CN=9fbeeab97429cac6ea395a5629f24276463c5027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:42:b1:0c:b2:d9:c7:cb:73:32:0d:f4:3e:70:
                    47:db:55:76:c1:84:b9:9c:d2:e9:2d:5a:83:07:f2:
                    7c:f4:13:9f:94:95:7d:8e:5d:4b:a4:b4:06:7e:6b:
                    29:30:43:a9:ea:9d:38:73:0d:b5:0a:37:ed:99:b9:
                    96:1d:22:8d:23:66:bf:bb:0e:95:29:a4:1d:84:30:
                    d1:10:b1:72:ea:cc:81:0e:13:55:87:d8:68:96:d6:
                    39:c8:e3:90:8c:b6:c4:10:a2:e1:75:60:c8:56:1c:
                    6c:dc:44:41:e4:fc:f7:60:89:df:94:71:0d:7f:41:
                    69:fd:aa:b8:5f:62:f2:e8:cd:65:a0:83:c1:4a:1d:
                    58:2f:cb:1d:c6:31:53:8d:7b:70:ea:49:e9:b3:16:
                    9e:3d:7a:41:2b:24:21:81:a3:b2:07:23:d3:aa:1c:
                    b0:08:0e:62:56:30:8a:8a:8b:54:c5:75:64:cb:58:
                    49:e0:b0:4e:64:14:60:84:7c:53:a6:2e:4e:72:74:
                    38:06:de:50:18:bb:2a:f6:a8:b8:0f:8e:d2:66:d6:
                    e7:16:73:3c:44:19:0c:04:31:0e:7f:4a:d4:16:e7:
                    85:fa:fe:34:d2:66:10:40:7c:6f:00:2d:77:1b:c1:
                    6d:13:30:a8:e5:57:f5:ef:02:df:d7:5f:81:b4:5f:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BE:EA:B9:74:29:CA:C6:EA:39:5A:56:29:F2:42:76:46:3C:50:27
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9f:1e:ac:9b:0f:be:b5:a3:68:ce:f4:0c:4a:ae:0e:db:69:
         66:09:d0:25:11:0b:76:94:aa:37:d9:ed:21:25:14:8a:c5:bd:
         dd:d8:6d:3b:80:da:8d:69:e4:78:92:c5:63:3a:0c:ce:82:8b:
         18:67:e1:17:f1:c9:4e:a5:46:7d:73:bf:59:85:b5:3b:42:60:
         60:6a:e6:56:42:8f:76:dc:fd:e0:09:c1:4c:26:af:d0:f8:6b:
         2b:71:54:68:f6:c0:60:40:11:1a:4d:82:9e:d6:18:ac:70:4b:
         1a:33:85:75:0d:f8:a7:8d:61:66:81:49:25:69:e1:dc:a8:ea:
         f4:58:7e:26:4b:75:2b:7f:93:a0:b1:5e:7b:73:aa:21:d5:48:
         65:0b:fe:d3:48:a2:29:2a:27:61:00:58:a9:ed:6e:7f:ce:24:
         05:f6:38:6e:f1:46:9b:6f:e6:46:21:ea:b8:2f:50:4c:9d:1e:
         b0:8e:97:03:cb:bc:15:cd:db:87:18:f8:a3:67:52:59:e0:30:
         13:1e:da:3d:3a:f6:c0:d6:84:bc:93:03:dd:7a:e4:1f:3d:70:
         29:1b:5f:cf:fa:52:d0:66:a3:61:d0:33:2e:e1:2d:ac:01:af:
         36:51:c0:ce:69:da:e5:24:30:81:36:5b:9f:3a:59:92:60:65:
         9b:d3:e2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:00 2026 by rpki-client