Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
File:                     GRsamTWNqljnJiXEzp2CnpGO_IY.mft (raw, json)
Hash identifier:          xwfljrGnFZvkN3aMb2FtlgCRQHOttcbyLqL2SFNFz1I=
Subject key identifier:   59:70:B2:35:94:23:94:65:82:41:0D:5C:3C:F0:77:DA:71:7E:CE:76
Authority key identifier: 19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86
Certificate issuer:       /CN=191b1a99358daa58e72625c4ce9d829e918efc86
Certificate serial:       019FAC3F38C8171DBD2BBB3DD0468CAD878E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
Manifest number:          02CB
Signing time:             Wed 29 Jul 2026 05:00:52 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:52 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:52 +0000
Files and hashes:         1: AvzQimXHm05p82wKX1RRrrvCRQ0.roa (hash: 0aajLu9GYqHeehMPQx1KGbuHBSE8/FQmljIwGRD449M=)
                          2: GRsamTWNqljnJiXEzp2CnpGO_IY.crl (hash: aKD0bMoKeWgLOGJEN64BjKf7wjBcIi8Yc2m0vsbwXdU=)
                          3: NPPLtydqeRlV2SqgCsZgFx1jLc0.roa (hash: 4vbM/e49hZ5KxAznjysgF0WAFiLvdL1qXyl+41eveFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:38:c8:17:1d:bd:2b:bb:3d:d0:46:8c:ad:87:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191b1a99358daa58e72625c4ce9d829e918efc86
        Validity
            Not Before: Jul 29 05:00:52 2026 GMT
            Not After : Jul 30 05:00:52 2026 GMT
        Subject: CN=5970b2359423946582410d5c3cf077da717ece76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:4e:37:eb:f4:a0:2c:e2:99:10:c5:fa:a9:
                    fa:9f:f2:d3:02:88:a7:4f:06:fb:7f:da:fd:84:9d:
                    d1:75:02:9a:e3:b6:11:54:97:f5:97:41:33:80:06:
                    2b:c4:0c:d1:c6:ed:db:c7:c9:e5:4d:dd:c0:c3:64:
                    e9:e4:89:f1:71:0a:8c:50:80:4d:53:54:00:37:5d:
                    f2:0c:11:00:4d:ca:7a:ad:a9:b4:77:fb:95:29:ff:
                    12:47:c2:a4:28:62:a0:bf:f7:c8:82:29:f2:cf:e5:
                    ab:7b:88:0a:b6:0d:4b:c9:8a:22:3e:6c:c3:31:c9:
                    b5:e2:31:01:a7:40:bb:31:6f:8f:19:82:33:a3:69:
                    72:ca:03:82:33:4f:29:71:1e:3f:f7:67:c1:f7:2c:
                    22:0e:cb:16:78:93:b0:4f:d9:70:8b:3c:89:ce:1b:
                    90:b0:ab:ee:ec:ad:0c:73:5b:e0:cb:af:73:3d:d4:
                    ab:7c:b7:53:bd:cf:0b:40:ac:cc:85:11:ee:3e:35:
                    69:9a:de:55:bc:d3:e6:83:b4:dc:01:91:56:bc:2b:
                    dc:a1:87:21:61:4f:05:61:b2:3b:4e:ef:2a:0e:99:
                    da:a9:81:28:38:c2:85:5d:11:59:e5:91:32:c7:f1:
                    a7:ea:6c:f1:67:3b:1f:25:ea:98:79:05:80:58:ec:
                    a6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:70:B2:35:94:23:94:65:82:41:0D:5C:3C:F0:77:DA:71:7E:CE:76
            X509v3 Authority Key Identifier:
                keyid:19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:13:03:ea:01:2c:fe:c6:cd:33:49:36:93:bf:95:9f:61:f4:
         3f:b8:f0:77:ba:ae:6f:8d:d2:58:8e:73:8f:88:5a:f5:be:7b:
         6c:69:a3:d1:42:0a:c7:aa:87:61:40:95:84:60:23:4f:e7:04:
         6d:d7:34:66:fe:9b:eb:f9:fe:a8:cb:20:1a:fc:2a:bc:07:fb:
         02:b3:c6:be:7b:41:2b:3e:85:11:05:0c:7e:56:29:b0:79:7d:
         07:1d:33:0e:87:aa:d9:4e:50:54:81:eb:bf:10:88:38:29:aa:
         b2:23:5a:01:a7:1e:64:7a:ae:5b:25:0e:4d:69:3e:32:92:bb:
         2c:b3:58:1b:cf:56:c4:da:1d:e8:c3:07:9c:66:dd:80:ab:b1:
         8f:e3:0a:b7:f5:ee:51:e9:a6:fc:1d:68:7a:2a:17:5d:a8:2b:
         91:fe:b4:7a:12:ce:8b:6f:cb:f3:41:2e:c7:b8:26:5f:07:c3:
         c9:6d:e0:53:fd:c5:39:7a:f5:cd:97:21:12:70:6a:ce:17:e6:
         2d:cf:03:f4:b7:23:a4:5e:e4:b8:e4:cd:f5:2d:6c:ed:88:29:
         24:c5:0e:7c:40:93:2b:82:20:35:37:de:e5:67:8f:03:e2:3d:
         bf:f0:14:1f:97:00:5a:83:2c:94:02:e1:c1:b4:75:51:99:38:
         72:61:3c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:21:16 2026 by rpki-client