Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
File:                     GRsamTWNqljnJiXEzp2CnpGO_IY.mft (raw, json)
Hash identifier:          afXBJBCTjR2J1oS64fzrHXcNHnIuxP3n10dWgMUn5VY=
Subject key identifier:   26:01:A0:FF:0D:29:65:96:B3:4B:DC:50:4D:FD:D8:2B:22:BC:34:AB
Authority key identifier: 19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86
Certificate issuer:       /CN=191b1a99358daa58e72625c4ce9d829e918efc86
Certificate serial:       019D9C9A3D7742DB5E6946F2A9C06F62F77D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
Manifest number:          01B8
Signing time:             Fri 17 Apr 2026 18:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:47 +0000
Files and hashes:         1: AlIwiuWjQieywSsyw5heSRNGmSw.roa (hash: h4MIxkZlOYU3Vy7sGgEQPdGyZXemU35nFw7qReQJEwg=)
                          2: GRsamTWNqljnJiXEzp2CnpGO_IY.crl (hash: okk+R5rui56T9VA8yz2HkaVy8xzCX9ive/0NTi6saPM=)
                          3: GxrUhHUvxgB0GiAZ0wFN3Q-w6EU.roa (hash: DAgo4WMqo3pLDUsoNChESltTlxv9QRhL0wN0wC0e+gs=)
                          4: NPPLtydqeRlV2SqgCsZgFx1jLc0.roa (hash: 4vbM/e49hZ5KxAznjysgF0WAFiLvdL1qXyl+41eveFs=)
                          5: mzLCvR2XwN9trvePy6DYDH4SGj8.roa (hash: 2otDoB3rukTHefo5z2hH2i54uian2qbUKeVhc+WhRLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:9a:3d:77:42:db:5e:69:46:f2:a9:c0:6f:62:f7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191b1a99358daa58e72625c4ce9d829e918efc86
        Validity
            Not Before: Apr 17 18:00:47 2026 GMT
            Not After : Apr 18 18:00:47 2026 GMT
        Subject: CN=2601a0ff0d296596b34bdc504dfdd82b22bc34ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a5:21:0e:53:b8:42:4a:9d:d8:14:b7:74:2e:
                    27:95:f2:90:23:ae:9a:6d:09:2f:d3:0b:1b:f4:00:
                    cc:9f:bf:20:35:d5:3e:f1:4f:fb:ab:0d:b5:60:b5:
                    d0:13:38:81:f2:fa:a7:c6:1b:94:a2:5f:ef:f5:10:
                    f1:d8:d5:d7:20:ee:8f:89:7b:31:87:51:fa:ec:87:
                    35:54:d6:8e:9b:9c:f0:c3:ff:b0:b6:42:64:03:50:
                    7a:24:2d:f6:b0:ad:20:6a:7b:c9:1b:cc:d2:2d:c1:
                    b0:30:e1:83:31:dc:cf:7b:c5:44:15:7c:03:0d:42:
                    13:e4:5b:11:bd:5e:c7:c0:39:a5:5e:cf:61:d9:9a:
                    8b:28:fe:6e:ce:42:83:59:d4:2a:c4:b6:8c:b8:29:
                    44:71:6c:a4:00:3b:93:6d:da:17:b1:1c:17:61:2d:
                    ef:24:55:10:fe:24:a6:40:2d:17:67:e4:fa:e1:10:
                    2f:7b:b1:dc:a9:04:b6:77:f9:1e:67:a2:60:c8:eb:
                    6c:4f:53:dd:c4:47:99:9a:df:53:85:f9:e9:50:3d:
                    0e:7e:58:3c:b6:a4:e1:6d:6a:87:58:75:9b:8c:9d:
                    83:59:4d:e7:85:6c:59:61:3a:49:27:4f:bd:04:5a:
                    55:36:c9:33:c2:f5:d6:5e:54:4f:79:c2:a7:85:d4:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:01:A0:FF:0D:29:65:96:B3:4B:DC:50:4D:FD:D8:2B:22:BC:34:AB
            X509v3 Authority Key Identifier:
                keyid:19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8f:1d:16:23:8d:e1:f7:1b:36:e7:25:6a:5b:e8:98:d5:01:
         9b:d7:91:1c:eb:77:8c:9f:d1:60:c7:ec:d8:38:2a:73:5b:c4:
         cf:2a:21:74:55:15:12:fc:36:c8:09:f2:86:16:52:10:b5:b2:
         11:38:06:0a:cd:58:0f:f9:42:77:9e:c3:15:93:fa:1f:ce:e5:
         fe:e2:fe:ab:13:cd:38:5e:51:b5:b9:91:dc:65:dd:bb:bf:00:
         03:3d:e6:64:82:8b:59:65:46:7a:3e:86:ca:89:64:98:40:98:
         d4:a4:d1:c3:ac:f7:9a:3d:f7:2e:9f:75:d2:17:3e:d3:89:81:
         19:8c:9e:ac:9b:2a:dd:a6:11:34:3b:56:da:a8:12:cb:d8:de:
         1a:32:27:6b:b5:81:9a:06:dd:52:bc:88:3b:7c:90:d5:25:fa:
         dc:2d:95:57:d5:7f:39:ae:e0:70:24:f6:5a:14:c6:d6:0f:3a:
         8e:72:f8:31:13:c3:c9:aa:c8:11:b6:fc:2b:16:0a:37:9f:0e:
         fb:dc:90:a9:17:f3:68:d8:7d:a5:ca:71:05:db:5c:65:e3:b2:
         a4:48:c8:54:e4:04:00:bb:90:94:84:84:8c:e7:1f:88:ca:e3:
         61:61:e2:c4:af:5b:86:49:30:54:d6:3d:05:47:fd:73:d9:ea:
         7f:be:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:24 2026 by rpki-client