Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File:                     GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier:          dbtsuyWxvRu7xqSl0y0oay2yhggObSFSbiQUo7ZyBBQ=
Subject key identifier:   26:70:A1:45:92:3D:12:9C:D4:D5:B5:9F:58:AC:72:FF:3A:A6:74:DC
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer:       /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial:       019EC3DC517B256D5275445A36355479B83B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number:          195C
Signing time:             Sun 14 Jun 2026 02:00:56 +0000
Manifest this update:     Sun 14 Jun 2026 02:00:56 +0000
Manifest next update:     Mon 15 Jun 2026 02:00:56 +0000
Files and hashes:         1: EK-BO9njT8D0PUd03822T1Wcn_Y.roa (hash: IVt2nvgD6bQiKsQebz3stonbNyplhQ3WbabmnplyKUM=)
                          2: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: LGbeAlguWXw2cGio5LCvJiTl9Fbh2YmO6w7xi2RuFJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:51:7b:25:6d:52:75:44:5a:36:35:54:79:b8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
        Validity
            Not Before: Jun 14 02:00:56 2026 GMT
            Not After : Jun 15 02:00:56 2026 GMT
        Subject: CN=2670a145923d129cd4d5b59f58ac72ff3aa674dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0c:68:69:68:59:aa:bf:05:c8:3f:f2:d0:3e:
                    3b:e9:7a:7a:2a:63:7f:51:82:36:23:e8:89:04:56:
                    92:60:4b:82:e4:6b:12:6a:7d:a9:fa:7a:e7:39:48:
                    ad:e5:15:ba:7a:54:2f:dd:c7:5a:70:1b:3e:d9:7c:
                    b6:9a:0a:03:dc:43:ce:fa:14:01:d7:65:d2:60:97:
                    65:e9:6d:d5:94:a0:b3:db:eb:d4:52:58:db:77:5e:
                    2b:5b:dd:fd:72:99:3e:b4:bc:25:df:5a:35:2c:db:
                    49:e6:a5:3a:28:6a:61:79:e9:39:7d:e7:31:0f:b5:
                    5f:3a:9e:60:59:fb:b1:4c:38:e0:80:f3:05:e7:98:
                    86:74:5b:86:4c:47:b1:a2:6d:0e:88:d2:62:14:6b:
                    c7:e9:d7:2f:68:c5:04:9b:fb:19:ef:48:3b:3b:78:
                    8e:ba:45:ab:cc:8e:92:66:7f:32:c9:2b:46:fa:32:
                    fe:f6:b9:da:ac:44:39:60:e5:8b:8e:10:86:2f:38:
                    f1:41:9b:49:e8:c7:7d:e2:10:c1:46:5d:4f:53:0d:
                    f1:68:34:69:0c:4e:27:30:7f:42:72:71:4c:08:d0:
                    98:3f:6c:b9:29:82:1b:2c:5c:5b:24:cd:c0:23:4a:
                    03:8c:4c:16:ae:7c:9d:c8:39:88:c9:5a:a8:6a:74:
                    24:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:70:A1:45:92:3D:12:9C:D4:D5:B5:9F:58:AC:72:FF:3A:A6:74:DC
            X509v3 Authority Key Identifier:
                keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2b:32:6f:8d:b4:f6:93:d9:3b:19:54:78:e7:60:67:f9:6d:
         b6:7a:21:ba:ed:50:7e:49:32:8e:0d:22:be:70:ff:56:a3:8b:
         b4:20:d8:64:2c:6d:91:27:2e:4d:43:61:55:1c:e3:f8:72:0d:
         ec:35:ad:82:29:7c:f3:61:1c:08:c5:f7:60:18:22:03:a9:49:
         04:84:fd:f2:c9:35:1b:81:85:4f:87:7b:bb:c6:b9:27:02:ac:
         cb:a6:99:d9:3c:ec:b4:78:5f:9c:0a:88:f4:2f:03:48:a4:e4:
         0f:3d:c4:c5:91:fe:7b:c2:99:71:89:bf:38:a6:2f:30:f9:05:
         43:88:83:4f:e2:7c:9c:e0:4e:1a:a0:f3:c4:b9:c6:f9:73:d2:
         5b:71:98:54:07:52:eb:6a:91:15:d7:5d:6a:08:cc:3e:2d:8d:
         8e:b9:2e:11:1c:4e:71:9d:b1:0b:ea:65:c5:b5:4b:1e:67:42:
         36:51:11:7b:e7:13:7f:2d:1e:cf:ff:b4:bf:88:d7:76:c5:67:
         65:1e:6d:09:3e:8e:88:eb:6b:5f:6c:8d:cb:12:79:b3:fb:2d:
         23:36:3d:3f:a5:45:6a:5d:f4:84:da:53:5f:8e:36:67:5d:17:
         40:39:85:c9:96:bf:d1:24:2a:c7:ec:1b:9a:77:3f:ae:54:75:
         96:a0:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:42 2026 by rpki-client