Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
File:                     GRGmWD3HmkFVGxeutDFNspMRy-s.mft (raw, json)
Hash identifier:          X/jlk4+kpZz6AISWn08JRYdUZ+GEicNWuEqSHQu+ih4=
Subject key identifier:   4D:12:19:4E:C4:1F:51:FB:36:1B:A0:B0:A0:DA:E5:DA:0B:21:B1:95
Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
Certificate issuer:       /CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Certificate serial:       019D98BD4B3D537C844BA8D12246A662111A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
Manifest number:          17D7
Signing time:             Fri 17 Apr 2026 00:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:35 +0000
Files and hashes:         1: GRGmWD3HmkFVGxeutDFNspMRy-s.crl (hash: e24U793Cv0IlkD3dQmK/JRJIR/J0U3m4EX/zbP/Bg60=)
                          2: mjoxYNEhG3VYLKtRDyxP0w8yVhc.roa (hash: H4OpUXUAmBNRCiaGjnMjhLUg7opBHRPBi0K/iMdDRh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:4b:3d:53:7c:84:4b:a8:d1:22:46:a6:62:11:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb
        Validity
            Not Before: Apr 17 00:00:35 2026 GMT
            Not After : Apr 18 00:00:35 2026 GMT
        Subject: CN=4d12194ec41f51fb361ba0b0a0dae5da0b21b195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:5a:ad:5a:db:0e:50:16:88:a7:ad:c2:6a:
                    cb:6c:52:d9:ac:63:80:b0:d6:27:b8:23:a7:93:2f:
                    a3:8d:9c:d1:23:14:b8:14:85:3f:ef:e4:06:c4:6b:
                    17:d3:41:04:5c:60:0a:a7:04:f7:bd:c7:ff:97:3e:
                    f3:73:26:76:c4:a1:b9:67:82:d6:e2:ca:c0:e2:f3:
                    3e:d4:1d:52:9e:05:4f:ed:78:32:ea:f8:f4:4d:f5:
                    71:ea:00:6c:ee:7b:4a:f5:b2:af:e4:67:b0:8e:f0:
                    5e:ab:3e:a4:ce:32:14:ee:1d:85:c8:96:92:cb:6d:
                    a9:40:ab:93:b8:70:72:c9:bf:d9:6f:87:2e:24:f0:
                    ca:ac:e1:d8:cb:f8:bf:58:c1:e4:f8:a1:dd:80:74:
                    29:ba:77:46:5d:ed:ff:88:cc:54:18:ed:f3:ea:15:
                    5e:5b:b6:0f:43:ce:5e:9b:93:22:0b:55:fc:b5:74:
                    4b:81:23:8f:60:cc:ac:d0:d2:c2:1f:0c:cc:93:be:
                    41:91:b8:87:36:94:25:d9:4b:a8:15:81:71:6d:7a:
                    5c:04:4b:1e:ff:f3:1b:b5:2c:fd:f2:e9:e1:79:df:
                    5d:58:1a:c3:42:b1:16:d3:7d:b3:8a:e1:3a:e6:3b:
                    8e:5c:bd:4c:f8:f2:b0:f7:63:7c:6c:c7:56:9a:09:
                    84:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:12:19:4E:C4:1F:51:FB:36:1B:A0:B0:A0:DA:E5:DA:0B:21:B1:95
            X509v3 Authority Key Identifier:
                keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:78:18:d9:95:96:bd:ae:c3:37:b1:cb:1f:04:56:38:36:4b:
         1d:54:b0:ae:66:b4:77:ee:8e:cb:df:fa:44:ce:a8:ef:72:1c:
         4d:0c:8a:fa:f9:b3:28:89:86:3e:cc:6c:6a:c5:b2:59:6a:c2:
         ef:e4:86:15:86:8f:4f:55:00:ed:74:79:40:42:0e:70:bb:8a:
         df:e9:80:c4:53:e3:7c:85:88:85:76:a7:2c:86:6a:eb:5d:02:
         bb:56:76:cb:98:d3:c2:2f:18:6a:93:f6:dc:2e:25:96:65:96:
         dd:17:76:6a:9a:27:de:57:92:13:c0:9f:82:d9:78:f4:fe:65:
         b2:66:3b:26:6d:9c:4c:a7:a2:72:ee:8e:81:a3:ea:2c:cd:a3:
         55:44:34:71:95:33:b8:38:2a:27:01:df:4a:61:9e:44:58:90:
         30:ce:02:29:61:13:50:a6:13:5e:bf:42:d8:d7:f1:5d:36:6c:
         5b:16:1a:5b:a1:10:33:91:b9:49:23:f9:30:d7:32:12:61:66:
         4e:25:61:29:bc:ac:87:43:c0:07:da:f5:17:19:59:9f:69:2a:
         90:2f:cb:cb:5f:c6:35:f1:d6:45:a4:b1:e6:7c:7f:fa:03:8e:
         35:62:a3:25:50:c4:4c:2c:09:1d:1d:13:91:72:ff:99:33:bb:
         3d:bc:be:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvUs9U3yES6jRIkamYhEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MTFhNjU4M2RjNzlhNDE1NTFiMTdhZWI0MzE0ZGIyOTMx
MWNiZWIwHhcNMjYwNDE3MDAwMDM1WhcNMjYwNDE4MDAwMDM1WjAzMTEwLwYDVQQD
Eyg0ZDEyMTk0ZWM0MWY1MWZiMzYxYmEwYjBhMGRhZTVkYTBiMjFiMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhlarVrbDlAWiKetwmrLbFLZrGOA
sNYnuCOnky+jjZzRIxS4FIU/7+QGxGsX00EEXGAKpwT3vcf/lz7zcyZ2xKG5Z4LW
4srA4vM+1B1SngVP7Xgy6vj0TfVx6gBs7ntK9bKv5GewjvBeqz6kzjIU7h2FyJaS
y22pQKuTuHByyb/Zb4cuJPDKrOHYy/i/WMHk+KHdgHQpundGXe3/iMxUGO3z6hVe
W7YPQ85em5MiC1X8tXRLgSOPYMys0NLCHwzMk75BkbiHNpQl2UuoFYFxbXpcBEse
//MbtSz98unhed9dWBrDQrEW032ziuE65juOXL1M+PKw92N8bMdWmgmEhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0SGU7EH1H7NhugsKDa5doLIbGVMB8GA1UdIwQY
MBaAFBkRplg9x5pBVRsXrrQxTbKTEcvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JHbVdEM0hta0ZWR3hldXRERk5zcE1SeS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYjE2ZWItNzdmNS00MDAzLWI5MDMt
MWMzNGFmZDlkNTBkLzEvR1JHbVdEM0hta0ZWR3hldXRERk5zcE1SeS1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lYjE2ZWItNzdmNS00MDAzLWI5MDMtMWMzNGFmZDlkNTBk
LzEvR1JHbVdEM0hta0ZWR3hldXRERk5zcE1SeS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACngY2ZWW
va7DN7HLHwRWODZLHVSwrma0d+6Oy9/6RM6o73IcTQyK+vmzKImGPsxsasWyWWrC
7+SGFYaPT1UA7XR5QEIOcLuK3+mAxFPjfIWIhXanLIZq610Cu1Z2y5jTwi8YapP2
3C4llmWW3Rd2apon3leSE8Cfgtl49P5lsmY7Jm2cTKeicu6OgaPqLM2jVUQ0cZUz
uDgqJwHfSmGeRFiQMM4CKWETUKYTXr9C2NfxXTZsWxYaW6EQM5G5SSP5MNcyEmFm
TiVhKbysh0PAB9r1FxlZn2kqkC/Ly1/GNfHWRaSx5nx/+gOONWKjJVDETCwJHR0T
kXL/mTO7Pby+qA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:07 2026 by rpki-client