Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
File:                     GR4nsp9lok2flCFXFc02cYJanq4.mft (raw, json)
Hash identifier:          1TPKmlfHrguc7cFO7DADqQDy73luCFxCin3zBtTmpiI=
Subject key identifier:   72:56:0D:35:3C:07:87:03:3C:E1:2E:44:29:35:DA:E0:E6:5E:4A:25
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Certificate issuer:       /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial:       01A0C5578D956F5B60C83D7C0969F58A1A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
Manifest number:          1A65
Signing time:             Mon 21 Sep 2026 19:00:44 +0000
Manifest this update:     Mon 21 Sep 2026 19:00:44 +0000
Manifest next update:     Tue 22 Sep 2026 19:00:44 +0000
Files and hashes:         1: GR4nsp9lok2flCFXFc02cYJanq4.crl (hash: +pOkL4UyZ9gTi8SZJgOLgHtmnrRBaUp234kxoN9IRlU=)
                          2: J5Qtt873sF3C37LKAWbfzw4yFDc.roa (hash: JFU1LgYxS8jjniEo7tgFwuxgms5qkAm/du3uO0+Rez0=)
                          3: ffutk4AzDWbO49BVdt4T-zTCdys.roa (hash: 0WTelKBs5m8Bof1HVTgMBViFv6aqh4aKrjX9Je73vRk=)
                          4: i-SzxpjYSl_SJZf9Xw7iXKkYIOQ.roa (hash: 0pIJsCnFNnNGfcQdssGDfxgQRG8K8uUqTLzzq6uJaEA=)
                          5: x1mJQHrOX0aX1G3vkC2kyLyI2c4.roa (hash: +6t9XOehZRcRSvRzHT/6Ko6r/wNy+lvfdCUF86I4Zhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:57:8d:95:6f:5b:60:c8:3d:7c:09:69:f5:8a:1a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
        Validity
            Not Before: Sep 21 19:00:44 2026 GMT
            Not After : Sep 22 19:00:44 2026 GMT
        Subject: CN=72560d353c0787033ce12e442935dae0e65e4a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a6:a4:14:46:ef:90:28:6e:ec:85:a7:41:52:
                    c8:91:f6:43:88:5b:b2:7a:76:31:dd:2c:a3:75:c6:
                    66:a9:2f:62:81:e0:fe:0a:93:35:52:fe:54:3b:71:
                    e9:a7:23:a5:b4:24:31:50:d2:53:4b:85:b6:e8:e3:
                    c4:c5:d0:e8:af:c2:79:dd:44:29:21:f4:cb:84:b8:
                    ab:3d:d9:9e:63:51:2b:4a:aa:75:d4:52:a7:b4:66:
                    2e:cf:62:b0:2c:61:63:7c:ad:b6:ab:f0:07:02:31:
                    a8:63:df:e8:75:2b:2c:7a:66:4a:37:f4:a6:dd:50:
                    7c:ce:d8:51:31:c3:8f:21:90:05:b9:02:f7:c7:07:
                    d9:9b:e9:8e:4f:10:5d:36:99:72:74:39:39:2e:5f:
                    d8:ea:3b:32:0b:af:5b:91:36:1a:6a:89:16:86:0b:
                    1b:91:7f:01:56:fe:30:3d:44:10:aa:66:c9:d2:40:
                    c9:5c:07:70:3b:e0:17:a4:95:26:da:44:ce:85:89:
                    27:27:ec:be:4a:7f:ff:25:29:58:9e:cd:01:71:ae:
                    cc:e2:82:fc:fb:b8:99:02:6a:35:37:9c:70:69:b3:
                    1a:2f:d4:d7:74:65:fb:85:76:70:62:6b:ab:91:10:
                    63:a4:c1:42:9c:f6:d3:4c:26:c5:0e:2d:36:19:6e:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:56:0D:35:3C:07:87:03:3C:E1:2E:44:29:35:DA:E0:E6:5E:4A:25
            X509v3 Authority Key Identifier:
                keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:50:88:45:08:4b:dc:5c:ca:2a:2f:3b:0e:83:c5:71:a6:d4:
         5d:19:5c:e8:ed:98:af:ba:d6:6d:a1:24:19:9a:61:38:3f:75:
         58:bd:06:ce:b6:c0:82:ca:60:28:74:0c:6e:a5:1c:86:4d:3b:
         f4:1b:0d:77:ca:b0:fb:20:e0:06:11:5d:12:06:56:1d:d4:bf:
         b7:c9:cd:14:a4:e0:e5:bc:da:9a:36:84:6c:3a:91:89:7d:25:
         95:c3:9a:14:84:ae:b6:18:1d:60:b8:3a:38:4a:02:46:42:1f:
         61:da:f7:6a:77:9c:71:a7:70:3a:28:a9:fb:06:af:48:16:f4:
         16:57:e9:a8:b1:1d:4b:88:eb:83:82:95:76:7e:5b:15:92:28:
         36:31:84:96:7d:d0:55:7c:2c:80:60:d2:4c:06:ed:15:5d:06:
         e1:79:f0:d9:7f:31:ba:ab:28:bf:cc:bf:9f:34:6a:72:ad:8c:
         df:c6:cc:71:fc:78:5b:3d:cd:08:41:36:97:74:fb:b3:b1:7d:
         1a:8b:bb:2d:33:f9:77:98:0f:a4:58:38:0e:aa:79:9b:f4:c0:
         c6:51:7b:f0:bc:f4:f1:12:1a:51:c5:e2:22:7d:40:a1:3e:30:
         69:60:ec:97:29:7a:1c:4b:2c:b0:e4:50:69:12:e8:a5:15:a0:
         03:40:d0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:58:15 2026 by rpki-client